Information & Ethics committee  Again, I can't speak to that. You'd have to ask the Treasury Board officials.

Information & Ethics committee  I think you need to mandate the reporting of this information. It's not happening, otherwise. Whether it's private sector or public sector, in order to know what's going on, it needs to be mandated. One of the things we've been considering for the private sector is a requirement to notify individuals of the fact that their data are being shared with a foreign entity.

Information & Ethics committee  That's my understanding. We have had real difficulty trying to find out just how many arrangements there are and what they are.

Information & Ethics committee  Absolutely.

Information & Ethics committee  Thank you, Mr. Chair. Bonjour, honourable members, and thank you for the invitation to appear. I'm pleased to hear that it is the intention of this committee to undertake a full and thorough review of the Privacy Act. That was to be my first and main submission today, that you should not leave this matter at just a few quick fixes that you're able to get in before the summer break.

Information & Ethics committee  It would be a national identity theft victim assistance bureau.

Information & Ethics committee  Industry Canada oversaw that and put a lot of effort into it.

Information & Ethics committee  I'm talking about an exercise similar to what occurred with the task force on spam.

Information & Ethics committee  Some of the work the Consumer Measures Committee has done since this report is consistent with our recommendations, such as creating a standard affidavit for victims.

Information & Ethics committee  I can't remember the amount. It was between $25,000 and $40,000.

Information & Ethics committee  The recommendation for the task force is just designed to try to bring everything together under one umbrella and to make sure it all gets dealt with. I think there are a number of initiatives and legislative amendments and policy reforms that clearly can be made. I was asked what would be the most important one.

Information & Ethics committee  Yes. This is to make it easier for victims. Right now, victims have to deal with many different institutions, and each institution has its own forms and requirements for authentication and proof that there was in fact fraudulent use of their information. It's an incredible nightmare and a huge task for the poor souls.

Information & Ethics committee  Yes, that's part of the problem. They are treated as suspects.

Information & Ethics committee  Yes, but we're also talking about making things easier for victims. There are ways that this can be done.

Information & Ethics committee  If it's a federally regulated institution, the matter falls under PIPEDA, as opposed to the Quebec law.