Industry committee  Thank you for your question. The short answer is yes. That is actually a new right that has been provided for in the consumer privacy protection act. It's very much in line with the EU's GDPR.

Industry committee  Yes. Bill C‑27 also establishes a private right of action. Obviously, regulatory recourse is available, going through the commissioner and so forth, but there are ways to initiate legal action against private organizations.

Industry committee  Thank you for your question. In terms of the privacy impact assessments, the act, as Mark said, does incorporate a lot of the considerations. When they are developing privacy management programs, all Canadian companies have to develop privacy management programs where they have to consider the sensitivity of the information, whether there are better ways to collect it, minimization rules and things like that, which are principles that a privacy impact assessment would also include.