Industry committee  Mr. Perkins, I would note that Bill C-11 was contemplated by a previous Privacy Commissioner.

Industry committee  Yes, I am.

Industry committee  I'll turn to Mr. Chhabra to talk about the California consideration.

Industry committee  I'll turn to Mr. Chhabra, but I'll note that one of the fundamental aspects we've tried to draw out over the course of the discussion today is the importance of some sort of context-specific interpretation tool at the outset of the list. It's something that would read like, “due

Industry committee  As noted, the GDPR does not include financial data as sensitive information.

Industry committee  Mr. Chhabra may be able to speak to the specific formulation of the California law.

Industry committee  Our previous point was about the processing of that information. I don't know the formulation of the California law well enough to know whether it also includes an obligation for express consent and whether disclosures are wrapped up in that.

Industry committee  He notes the importance of context and he notes an indicative list.

Industry committee  I think there's a lot of financial data that many of us would be uncomfortable seeing shared outside of those we know, but context does matter. I could ask you if you're you okay with me knowing how much you have left on your mortgage or how much your monthly mortgage payment is.

Industry committee  I think that's fair.

Industry committee  The business processes that I understand are currently in operation in the financial services sector have multiple players within them requiring multiple disclosures per transaction, and if each one of those disclosures is subject to express consent, that would be a very differen

Industry committee  I'll start. Then my colleagues will likely want to weigh in. As noted, because financial data will now be deemed sensitive information, consumer-directed financing, as it's understood, will rely on the data portability obligations that are found within later sections of the CPPA

Industry committee  That's right. The overall structure of the consumer privacy protection act makes significant improvements to the existing Personal Information Protection and Electronic Documents Act in the treatment of both personal information generally and sensitive information. Some of what w

Industry committee  I'll turn to the team. They can point to some sections that deal with the treatment of personal information and the important guardrails around it.

Industry committee  The commissioner indicated in previous fora that he believes it's important that we have a definition of “sensitive”, that it list the categories that are likely to be sensitive and that it include context for collection, use or disclosure to allow for context to be laid out thro