Information & Ethics committee  There's a little bit of pushiness in principle 4.3.3 of the act that says it has to be for a legitimate and explicitly mentioned purposes, but we think that gives too much wiggle room, and we would prefer to have it amended so that it has to be information only requested for prov

Information & Ethics committee  It's not that clear, but there is a principle that says you have to take physical, organizational, and technological measures that are appropriate to the sensitivity of the information.

Information & Ethics committee  Yes. And if you're a large bank, you have to do encryption and have security personnel, and I think the Privacy Commissioner recognizes that.

Information & Ethics committee  There's a level.

Information & Ethics committee  It's a big part of the solution, but it is only part. We can see, just from the cases we've had in the last three years, that one part of the solution is convincing businesses to change certain business practices that have been found to be privacy-invasive and that they're not ch

Information & Ethics committee  We haven't thought about it in detail, but take, for example, the very garden variety company that didn't respond to my request for what information they held on me or didn't respond within thirty or sixty days or whatever it is under the act. Those are the sorts of things that w

Information & Ethics committee  Judicial review.

Information & Ethics committee  I don't think we know at the moment.

Information & Ethics committee  We'd love to know too.

Information & Ethics committee  It seems out of the blue to me, and we think it would be an incentive for people to do better security, because they then have this requirement.

Information & Ethics committee  At the moment, the act is set up to wait for people to complain. There have been quite a number of complaints. The Privacy Commissioner probably has figures in the annual report. It's not perfect in the sense that if no one complains you don't find out it's true.

Information & Ethics committee  It is.

Information & Ethics committee  We're suggesting the provincial model in B.C., Alberta, and Quebec be followed, whereby the commissioner himself or herself has that power rather than a separate tribunal, which we think would be awfully cumbersome.

Information & Ethics committee  For a tribunal?

Information & Ethics committee  And we're not quite sure of the reasons.