Industry committee  Just briefly, I haven't been asked questions about it, but I would like the committee to consider that point about the workplace privacy that I raised in my opening remarks, about making what I consider to be a very small yet significant amendment to that relative provision. I do

Industry committee  I don't want to tar all the companies with the same brush. I think we have a lot of organizations in Canada that try to do the right thing. Certainly the big organizations that are Canadian try to be in compliance with legislation and are very concerned. That's why you see them a

Industry committee  Thank you for the question. I think this is the classic situation in which the banks don't have to disclose their own vulnerabilities, but they can, in aggregate form through an organization like the CBA, report all the various attacks that have occurred in a certain time period

Industry committee  I know that the committee asked the commissioner about the resources and received I think a very diplomatic answer in response. I think this is part of the transition that office has to go through, looking back on 15 years of private sector legislation. When I hear that the com

Industry committee  From my perspective, and just sort of blue sky, obviously you need to bolster the resources of the Privacy Commissioner to deal effectively with these issues, just as when Canada's anti-spam legislation was passed and in Canada you needed to bolster the ability of that department

Industry committee  Yes, you gave them the ability to do compliance agreements, which I think is a lot better than what they have right now, which is nothing.

Industry committee  Well, I would argue that you should consider it now. You can decide what you will decide.

Industry committee  Yes.

Industry committee  I would delete it because of the Spencer decision that happened in the summer. I would make it clear that the government wants law enforcement agencies to get judicial authorization when they request information, because that's how I understand the Spencer decision.

Industry committee  Yes.

Industry committee  Right now there is this investigative body model in which the banks, typically, that are concerned about fraud—they've presented in front of you—have these investigative bodies, and then they share information through the investigative bodies. That's how they wrap their heads aro

Industry committee  Correct.

Industry committee  Well, they don't have any Internet service providers, and mostly the concern here is around Internet service providers.

Industry committee  Yes—which this legislation regulates.

Industry committee  I would just like to say briefly that this is an issue that is outside of the bill, because it has to do with how you identify and de-identify data. It gets into technical issues and that is a whole other separate conversation.