<?xml version="1.0" encoding="UTF-8"?>
<Hansard xml:lang="EN" id="1779648">
	<StartPageNumber>1</StartPageNumber>
	<DocumentTitle>
		<DocumentName>EVIDENCE</DocumentName>
	</DocumentTitle>
	<ExtractedInformation>
		<ExtractedItem Name="InstitutionDebate">Standing Committee on Access to Information, Privacy and Ethics</ExtractedItem>
		<ExtractedItem Name="Number">NUMBER 017</ExtractedItem>
		<ExtractedItem Name="Session">1st SESSION</ExtractedItem>
		<ExtractedItem Name="Parliament">39th PARLIAMENT</ExtractedItem>
		<ExtractedItem Name="Date">Monday, November 20, 2006</ExtractedItem>
		<ExtractedItem Name="DateOtherLang">Le lundi 20 novembre 2006</ExtractedItem>
		<ExtractedItem Name="Institution">Standing Committee on Access to Information, Privacy and Ethics</ExtractedItem>
		<ExtractedItem Name="Country">CANADA</ExtractedItem>
		<ExtractedItem Name="RecordingNote">[Recorded by Electronic Apparatus]</ExtractedItem>
		<ExtractedItem Name="HeaderTitle">EVIDENCE</ExtractedItem>
		<ExtractedItem Name="HeaderDate">November 20, 2006</ExtractedItem>
		<ExtractedItem Name="MetaDocumentCategory">Committee</ExtractedItem>
		<ExtractedItem Name="MetaTitle">Edited Evidence * Table of Contents * Number 017 (Official Version)</ExtractedItem>
		<ExtractedItem Name="MetaTitleEn">Official Report * Table of Contents * Number 017 (Official Version)</ExtractedItem>
		<ExtractedItem Name="MetaTitleFr">Témoignages * Table des matières * Numéro 017 (Version officielle)</ExtractedItem>
		<ExtractedItem Name="MetaNumberNumber">17</ExtractedItem>
		<ExtractedItem Name="MetaDateNumDay">20</ExtractedItem>
		<ExtractedItem Name="MetaDateNumMonth">11</ExtractedItem>
		<ExtractedItem Name="MetaDateNumYear">2006</ExtractedItem>
		<ExtractedItem Name="MetaCreationTime">2006/11/20 15:35:00</ExtractedItem>
		<ExtractedItem Name="MetaInstitution">House of Commons</ExtractedItem>
		<ExtractedItem Name="InstitutionDebateFr">Comité permanent de l'accès à l'information, de la protection des renseignements personnels et de l'éthique</ExtractedItem>
		<ExtractedItem Name="InstitutionDebateEn">Standing Committee on Access to Information, Privacy and Ethics</ExtractedItem>
		<ExtractedItem Name="Acronyme">ETHI</ExtractedItem>
		<ExtractedItem Name="SpeakerTitle">Chair</ExtractedItem>
		<ExtractedItem Name="SpeakerName">Mr. Tom Wappel</ExtractedItem>
		<ExtractedItem Name="ParliamentNumber">39</ExtractedItem>
		<ExtractedItem Name="SessionNumber">1</ExtractedItem>
		<ExtractedItem Name="InCameraNote">PUBLIC PART ONLY - PARTIE PUBLIQUE SEULEMENT</ExtractedItem></ExtractedInformation>
	<HansardBody>
		<OrderOfBusiness><CatchLine></CatchLine><SubjectOfBusiness><SubjectOfBusinessContent><Timestamp Hr="15" Mn="35">(1535)</Timestamp><FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1779651"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair (Mr. Tom Wappel (Scarborough Southwest, Lib.))</Affiliation>: </PersonSpeaking><Content><ParaText id="318700">I'd like to call the meeting to order. We have a quorum for the hearing of evidence.</ParaText><ParaText id="318701">Pursuant to the order of reference of Tuesday, April 25, 2006, and section 29 of the Personal Information Protection and Electronic Documents Act, we're undertaking a statutory review of the act. </ParaText><ParaText id="318702">I want to remind committee members that section 29 contains two subsections. The first subsection states that a committee of the House will review the administration of the first part. The second subsection states that a committee will undertake a review of the provisions and operation of the first part, and provide a report to Parliament that includes a statement of any changes to part 1 or its administration that the committee recommends. So the section provides for a broad-ranging examination of part 1.</ParaText><ParaText id="318703"> I hope the witnesses today will be able to address the historical rationale for our reviewing part 1 but no other parts of the bill.</ParaText><ParaText id="318704">That said, I don't want us to keep repeating the long form of the bill, so I'd like to get us all saying “PIPEDA” the same way. I've heard people say “PIP<I>EDA</I>” and I've heard people say “<I>PIP</I>EDA”. I'm going to ask the members of the department to give us some guidance, and then maybe the committee will be able to agree to pronounce it one way. We'll then encourage all other witnesses to pronounce it the same way, and no one will have to refer to the long form of the act from here on in.</ParaText><ParaText id="318705">With that little opening remark, allow me to welcome our witnesses today.</ParaText><ParaText id="318706">From the Department of Industry we have Michael M. Binder, assistant deputy minister, spectrum, information technologies and telecommunications; Richard Simpson, director general, electronic commerce; Danièle Chatelois, privacy policy analyst, e-commerce policy directorate, electronic commerce; and Alexia Taschereau, senior counsel.</ParaText><ParaText id="318707">Welcome to all the witnesses. </ParaText><ParaText id="318708">Mr. Binder, I believe you're going to make some opening remarks. Please, the floor is yours.</ParaText></Content></Intervention>
					<FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1779667"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder (Assistant Deputy Minister, Spectrum, Information Technologies and Telecommunications, Department of Industry)</Affiliation>: </PersonSpeaking><Content><ParaText id="318709">Thank you, Mr. Chairman. I'm delighted to be here today to discuss this legislation with you.</ParaText>
							<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><ParaText id="318710">You've already asked me probably the afternoon's toughest question. The answer is that we call the bill “<I>PIP</I>EDA”, but I too have heard all kinds of variations. Whether or not you want to adopt our pronunciation is up to you.</ParaText><ParaText id="318711">You may wonder why Industry Canada is responsible for this particular piece of legislation. Let me tell you that we started worrying about the digital economy long ago. We anticipated the creation of databases and electronic commerce, the whole digital economy that goes with the Internet. We thought there should be pretty reasonable and clear rules of engagement in the marketplace in the so-called digital economy, particularly online. That's why we introduced this bill way back, after many years of trying to get consensus on what the provisions of this particular legislation might be. </ParaText><ParaText id="318712">As you know, a lot of people on the outside are very eager to appear in front of you to share with you their advice on how this legislation has been performing, and perhaps to give you their suggestions for improvement; you can always improve things. </ParaText><ParaText id="318713">With your permission, then, I would like to have Richard Simpson take you through a slide deck. I believe you all have copies of this particular deck. It tries to lay out what this act is about and the provisions in it. After that, maybe we can open up the discussion.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779676"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318714">At 22 pages, is it really a “slight” deck? </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779677"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318715">A lot of it is to take away and read. We will go very quickly through it.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779679"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318716">Oh, you don't need to go very quickly. It's been five years, and we've been mandated to study the bill. We know there's great interest in it. We're not trying to rush you by any means, but we want to leave time for questions and for engagement with the committee members. </ParaText><ParaText id="318717">And I notice the deck is on thick paper, so it really isn't that thick. </ParaText><ParaText id="318718">Please do go ahead.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1783498"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318719">Richard.</ParaText></Content></Intervention>
					<FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1779680"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson (Director General, Electronic Commerce, Department of Industry)</Affiliation>: </PersonSpeaking><Content><ParaText id="318720">Thank you and good afternoon.</ParaText><ParaText id="318721">You have received copies of the document that we will refer to as we provide an overview of the legislation.</ParaText>
							<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><ParaText id="318722"> I'll go through the individual slides, as you've suggested, Mr. Chairman, quite briskly. Please stop me if you want to ask a question at a particular point. </ParaText><ParaText id="318723">If you look at the first slide, which shows in graphic format the size of the online marketplace in Canada, the key point is that the protection of personal information is a core element in the legal framework for a global networked economy. </ParaText><ParaText id="318724">The next slide gives you a brief chronology of work that has been under way for a number of years on privacy protection, both here in Canada and internationally. Some of the key dates are 1984, when the Organisation for Economic Co-operation and Development, the OECD, issued guidelines for the protection of privacy and transborder data flows. This is quite important, because it has formed the base for privacy protection laws in several jurisdictions, including Canada and many European countries in the European Union. </ParaText><ParaText id="318725">The second date, 1996, the CSA Model Code for the Protection of Personal Information was released. You'll see in a moment that this is a core component of Canada's national legislation on privacy and the privacy regime in Canada generally.</ParaText><ParaText id="318726">The other dates really take you through the phased implementation of PIPEDA. It initially came into force in January 2001. It was extended to the health sector in 2002, but only came into full force in January 2004. </ParaText><Timestamp Hr="15" Mn="40">(1540)</Timestamp><ParaText id="318727">PIPEDA has two main parts, as slide 4 points out and as you've already pointed out, Mr. Chairman. The first provides the privacy protection obligations under the act. Parts 2 to 5 comprise the section dealing with electronic documents, and this part has a number of provisions that enable more effective use of electronic technologies within the federal government administration. It amends the Canada Evidence Act, the Statutory Instruments Act, and other legislation, and has a number of provisions that allow government departments to make use of e-business and electronic commerce techniques in their day-to-day administration.</ParaText><ParaText id="318728"> Part 1, for privacy, actually sets the rules for the private sector in protecting personal information. If you look at the summary statement of the purpose of part 1 on slide 5, you can see that part 1 establishes these ground rules governing “the collection, use and disclosure of personal information”. You'll hear those words used quite often. The different rules regarding collection, use, and disclosure of personal information are set out quite clearly in the act. </ParaText><ParaText id="318729">The act balances two central considerations that are also contained in that statement of purpose: the need to protect the privacy of individuals and the need of organizations to collect, use, or disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances. This really reflects the business reality that personal information is routinely used by consumers, businesses, and other organizations to conduct trade and commerce, and even more so in an online world.</ParaText><ParaText id="318730">On slide 6 we have tried to outline for you the key features of PIPEDA. First, it applies only to personal information and only to personal information that's used for commercial purposes. This is quite important in terms of defining the area and scope of the legislation. </ParaText><ParaText id="318731">Second, a very important feature is that this is built on a private sector code. It's a self-regulatory initiative, as it were, taken from the Canadian Standards Association. It's built on the CSA Model Code for the Protection of Personal Information, which, as I mentioned, was adopted before the legislation came into force. It's technology-neutral, although it certainly relates a lot to the way in which electronic technologies are now using and manipulating personal information and data generally. It applies to personal information in all formats, electronic and non-electronic. It applies across the economy as a whole; therefore, it has a broad marketplace scope and does not apply just to individual sectors. It's not based on criminal law and enforcement, but is enforced through the Privacy Commissioner of Canada and the Federal Court.</ParaText><ParaText id="318732">There are other key features. Just as important is what PIPEDA does not apply to. It does not apply to non-commercial activities or to non-personal information. There's a lot of data out there in electronic and non-electronic form that is not personal information and is not captured by the legislation. It doesn't cover any government institution that is subject to the federal Privacy Act. That's a different act; it is within the scope of this committee's interest, I know, but it is separate from the rules in PIPEDA. It does not cover employee records in the provincially regulated private sector. And there are a number of other areas that are not captured by the legislation.</ParaText><ParaText id="318733">The essential requirements and obligations under the act, as slide 8 points out, are cited in sections 3 to 5 in the law, but the real obligations are laid out in schedule 1, which, as I mentioned, is the CSA Model Code for the Protection of Personal Information. Subsection 5(3) has a further qualification about the need for a reasonable purpose test. You'll hear about that from many people.</ParaText><ParaText id="318734">The model code, schedule 1 of the act, has 10 basic principles. I won't go through all the details of those for you, but I think probably first among equals on that list is the need for consent. All privacy legislation, not just in Canada but in many other countries, is founded on the principle of consent.</ParaText>
							<Timestamp Hr="15" Mn="45">(1545)</Timestamp><ParaText id="318735">There's also a number of principles--purpose, limiting collection, limiting use--which really points to the need to define purpose and limit the use of personal information when it is collected. That is sort of a matching set to the requirement for consent.</ParaText><ParaText id="318736"> There's a number of provisions relating to access to ensure the reliability and accuracy of information that is maintained on a person.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779703"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318737">If I may interject, Mr. Chair, it took about 10 years to get consensus of all parties--private sector, consumers, government--to come up with these ten commandments of privacy. I have to tell you this is the core understanding of the big policy issues that are embedded in this particular act.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779708"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318738">Slide 9 points out that the act contains a number of exemptions relating to the consent requirement, which is contained in section 7, and also to the individual's right to access personal information, which is contained in section 9, and the bullet points out what those exceptions are. </ParaText><ParaText id="318739">The responsibilities and powers of the Privacy Commissioner, outlined in slide 10, are consistent with the role of ombudsman that the legislation assigns to the Privacy Commissioner. The Privacy Commissioner does not have the authority to make binding orders. She investigates complaints that are received or acts on her own initiative. She has a number of other powers, including an audit power. She publishes an annual report that comes to Parliament, as you know, since she is an officer of Parliament, and she has a number of responsibilities for both promoting the act, privacy protection, and educating the public. How the Privacy Commissioner's responsibilities are undertaken is a very important element of the legislation.</ParaText><ParaText id="318740">Slide 11 points out that the Federal Court acts as a backstop to the Privacy Commissioner with a number of responsibilities, eventually including the need to deal with an appeal by a complainant or the Privacy Commissioner on a particular finding. It also has some other powers, as you go to slide 12. As issues are taken before the Federal Court, there are some powers that the court can use to take action against organizations in violation of the act. But you can see that the number of points here make it clear that this is aimed at intentional and deliberate behaviour in violation of the law, such things as obstructing a commissioner in an audit or an investigation, rather than a regular exercise of power by the court.</ParaText><ParaText id="318741">In slide 13, PIPEDA also sets out—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779725"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318742">Pardon me for interrupting.</ParaText><ParaText id="318743">Back to slide 12, “the following are offences under PIPEDA”, section 28. You have a bullet point “taking action against an employee who is a whistle-blower.” These little bullet points and big bullet points are your breakdown of what the offences are. Is that right?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779727"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318744">That's correct; they're offences that are specifically contained in the act on which the court can take action.</ParaText></Content></Intervention>
					<Timestamp Hr="15" Mn="50">(1550)</Timestamp><Intervention Type="Debate" ToC="No" ToCText="" id="1780677"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318745">Thank you. </ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780678"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318746">Slide 13 sets out responsibilities for the Governor in Council. Some of these are very important to the functioning of the act. One of these powers is to make regulations to specify investigative bodies. A number of steps have been taken over the last few years to recognize private sector organizations that, by virtue of their responsibilities in legislation or in law, have to investigate and therefore have to both collect and disclose personal information </ParaText><ParaText id="318747">A second regulation power is to specify or define publicly available information. These are measures we can talk about in more detail. They're all contained in the regulations that have been distributed to the committee. You can find in there the operating definitions of publicly available information as well as all our investigative bodies' regulations. </ParaText><ParaText id="318748">The Governor in Council may also, by order, bind agents of the Crown to the act. This was really just a housekeeping measure, Mr. Chairman, in 1998 to ensure that certain crown corporations that were not subject to the Privacy Act would be subject to PIPEDA. This was to make sure there weren't gaps in federal crown corporations' being governed by privacy rules in one domain or the other. </ParaText><ParaText id="318749">The second power is to exempt from the act organizations that are deemed to be subject to substantially similar provincial privacy rules. The policy published in the <I>Canada Gazette</I> in August 2002 on that is also contained in your documentation, I believe. </ParaText><ParaText id="318750">Substantially similar, as we go to slide 14--and this may be worth focusing on for a moment--was a means Parliament put in place for aligning federal and provincial privacy laws around a single set of ground rules for data protection. Those rules would be the CSA model code, and they would apply across the economy as a whole. </ParaText><ParaText id="318751">In paragraph 26(2)(b), you see a power whereby the Governor in Council can exempt organizations that are subject to provincial laws considered “substantially similar”. In this case, the provincial regime for privacy protection would apply within that province, rather than the federal law. </ParaText><ParaText id="318752">The established criteria for “substantially similar” were to incorporate the CSA model code—those 10 principles—to provide for independent and effective oversight, and to restrict the collection, use, and disclosure of personal information to purposes that are appropriate or legitimate. </ParaText><ParaText id="318753">You'll see on the bottom of the slide that four provinces now have substantially similar provincial laws in place, and therefore those provinces have exemptions from PIPEDA: Quebec in 2003; the provinces of Alberta and British Columbia in 2004; and Ontario, in respect to their Health Information Protection Act, in 2005. So four laws have been recognized as substantially similar. </ParaText><ParaText id="318754">Essentially what this does is accommodate provinces that choose to legislate in respect to privacy protection, while allowing the federal law to apply in those provinces that choose not to do so. </ParaText><ParaText id="318755">As I mentioned, the Quebec privacy law was recognized as substantially similar in 2003. The Province of Quebec, however, has given notice of a constitutional challenge to part 1 of PIPEDA, which has to do with the clarification of the federal trade and commerce power in relation to provincial jurisdiction over property and civil rights. Although some documents have been filed, Mr. Chairman, the court still has not heard the constitutional reference. We expect that will occur sometime later in 2007. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779760"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318756">Mr. Simpson, is anybody going to comment on that? That's three years. That's a long time for a reference not to have been decided. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779761"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318757">That's correct.</ParaText><ParaText id="318758">There have been documents filed. The court asked for affidavits to be filed by...I forget what the original date was. Initially the federal affidavit was filed in early 2005, I believe. Or was it earlier? Yes, it was in March 2005. That was then followed by a request for an affidavit from the Government of Quebec, which filed its affidavit in July 2006, and we have filed an affidavit in 2006.</ParaText><ParaText id="318759">You're right to think about the amount of time that has transpired since the original reference. I think that's partly because essentially it's business as usual in the province of Quebec, since their act has been recognized as substantially similar. The provincial privacy commissioner does exercise authority as beforehand within the province. It has been mainly the time it has taken for some of the litigants to put the material together.</ParaText></Content></Intervention>
					<Timestamp Hr="15" Mn="55">(1555)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1779767"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318760">Yes, and we're informed, Mr. Chair, that they've asked for another extension.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1782899"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318761">That's correct.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779771"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318762">Who is “they”, Mr. Binder?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780726"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318763">The Quebec government.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780727"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318764">The Department of Justice.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1779772"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318765">The Department of Justice.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780728"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318766">Is the federal brief all done?</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780729"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318767">Yes, it is.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780731"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318768">So it's not delayed on behalf of the federal government.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780732"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318769">No.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1779773"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318770">All right, thank you.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779776"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318771">We can make our affidavit available to the committee, if you wish. It's quite a good read, I have to say, in terms of the history of privacy legislation in Canada.</ParaText><ParaText id="318772">In the next slide, slide 16—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779778"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318773">I'm sorry, Mr. Simpson. Again, forgive me. You were just in the middle of slide 15, and at the bullet point you say, the decision “will confirm the federal government's ability to exercise its powers over trade and commerce”. Don't you mean that the federal government hopes that the decision will confirm...?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779781"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318774">Really, we meant the word in the sense of clarify the federal government's power in respect to trade and commerce in relation to provincial jurisdiction over property and civil rights.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780751"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318775">If the Quebec government were to disagree with the federal government's affidavit, the whole basis upon which PIPEDA has been designed, based on your second slide, goes down the toilet.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779785"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318776">That's correct.</ParaText><ParaText id="318777">Slide 16 points out, and the committee should be aware, that there have been several modifications to the original law that have occurred since 2001. They're outlined there. Most of these respond to public safety requirements post 9/11, but there is also one revision that relates to the Public Servants Disclosure Protection Act, which will be amended by the Federal Accountability Act, which is now before Parliament, as you know.</ParaText><ParaText id="318778">That takes us to the parliamentary review itself, and if it's helpful, Mr. Chairman, we can share with you and the other committee members some of what we heard during informal consultations that we conducted over the last couple of years as the date for the review approached. These are outlined very briefly in the next couple of slides.</ParaText><ParaText id="318779">Overall, the consultations we undertook confirm that the privacy community basically believes that the act is working quite well. You'll see two quotes there that we picked up during our consultations, from the Information Technology Association of Canada and the Canadian Bankers Association, that confirm that.</ParaText><ParaText id="318780">Some minor amendments were suggested during those consultations, and some issues have been drawn to our attention relating to the state of privacy in Canada, not just to PIPEDA in the strict sense. The capsule summary of those comments is in slide 20, followed by slide 21.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779799"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318781">Mr. Simpson, again, forgive me. Just so that the record is clear, you said—our researcher just whispered in my ear—that the privacy community believes it's working well. Did you mean the privacy community or did you mean the business community, or did you mean both?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779803"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318782">No, we do mean both. Certainly there's very strong support from the business community. As we get to talk about the powers of the Privacy Commissioner, you'll see that in the privacy community, generally speaking, the business community is very supportive of the existing role of the Privacy Commissioner, and you will hear from other members of the privacy community that even though the act is a good basis for protecting privacy in Canada, they have advocated some stronger powers for the Privacy Commissioner. You will hear that discussion, I think, as you call more witnesses.</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="00">(1600)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1779806"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318783"> Most of the input was about improving the act rather than saying what is not working, but there are different opinions as to what the input might look like. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779809"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318784">Absolutely.</ParaText><ParaText id="318785">As I mentioned, if you go to slide 20, one of the key issues is the role and powers of the Privacy Commissioner. You will hear from the commissioner herself quite soon, and she will certainly talk about that.</ParaText><ParaText id="318786">Another issue that has been brought to our attention will be called transporter data flows by some people. It's really the international dimension to the protection of privacy and the need to look at issues surrounding the increasing outsourcing and offshoring of data processing and therefore personal information. But there are a number of technical and definitional issues that have been brought up. The Canadian Bar Association has made a number of suggestions along those lines. </ParaText><ParaText id="318787">Looking at slide 21, continuing with some of the areas that will come to your attention that we have heard about, the employee-employer relationship and personal information having a different dynamic in an employer-employee relationship than it does in the commercial marketplace is certainly one issue that will be raised. There have been calls to remove privacy protection for employee e-mail and fax numbers, and this goes to the definition of personal information and whether or not it's like a telephone number and you need to protect employee e-mail numbers. Isn't it contact information, much as a telephone number is?</ParaText><ParaText id="318788">As for mergers and acquisitions, you'll certainly hear from witnesses regarding the need for flexibility in terms of due diligence relating to mergers and acquisitions. Again, you'll probably hear different views on that. </ParaText><ParaText id="318789">There'll be many suggestions regarding the definition of work product as something distinct from personal information. This is a technical issue that does have some significance in a number of sectors of the economy, and we can talk about that if committee members wish. </ParaText><ParaText id="318790">These are very likely the issues on which you'll hear a lot more from others, starting with the Privacy Commissioner, who has views on some of these issues. As the final word, the bottom line so to speak, the last slide points out some of the commendations or testimonials on the privacy regime in Canada that have received very high grades internationally from the business community, as you'll see in those quotations. Some of you may have seen <I>The Globe and Mail </I> article about two or three weeks ago that reported on a study by Privacy International, which is an international group advocating stronger privacy protection across a number of countries. It ranks Canada and Germany with the best grades for privacy protection in the 30-plus countries they examined. So we do have a good basis on which to work, in our opinion. </ParaText><ParaText id="318791">Thank you.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779833"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318792">Thank you very much. </ParaText><ParaText id="318793">Just for committee members' information, I noticed the last quotation on page 22 is by Ray Protti. Many of you haven't been around as long as I have, but for your information, Ray Protti used to be the head of CSIS. If anybody would know what privacy information is good, it would be the former head of CSIS.</ParaText><ParaText id="318794">We are reviewing this, and before I go to questions, I'm going to ask the department this. You have had five years of talks with stakeholders. You have mentioned some of the issues that have come up. However, you haven't given us any indication of what the department's opinion is as the department in charge of this act in terms of those issues, and whether you particularly, as a department, have any recommendations for our committee. We don't necessarily have to take them, but naturally we would be interested if you do have some recommendations, particularly since you've been dealing with this act for five years with the stakeholders. I don't know if you're ready to tell us about that or if you've even thought about that, but I'd certainly invite you to think about it. If there are areas of the act you are in agreement with stakeholders and suggesters on, it would be appropriate if you told us that the department believes that X, Y, and Z is a reasonable approach based on five years of experience or whatever reasons you have, and that way, we could consider those items as we go through. </ParaText><ParaText id="318795">Has any thought been given to that?</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="05">(1605)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1779847"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318796">Let me say it this way. Five years sounds like a lot of time, but I have to tell you the actual law experience is only very recent. It look a long time to operationalize, for example, what is consent, how do you get consent, etc. The health sector didn't come on board until 2004. So it's only one and a half years, and that was a big carve-out. </ParaText><ParaText id="318797">Last but not least, that's not the way we normally operate. What we look for in this committee is to do this public consultation and provide advice to us, where then we'll take this through our internal processes, and if there is going to be any amendment following up, it has to go through our internal processes, go up to cabinet and legislation.</ParaText><ParaText id="318798"> So I'm not trying to duck the question. I'm just trying to look for your guidance and advice after a formal hearing of inputs into our processes.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779854"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318799">All right.</ParaText><ParaText id="318800">I think my point was that if somebody had come to you and said X, and you fully agree with it and you think it would make sense for the committee to recommend an amendment to that regard, it would make sense to me that you would put that forward. I urge you to consider that. We may have you back later on, after we've heard from some of the witnesses.</ParaText><ParaText id="318801">We'll start with Mr. Dhaliwal.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779863"><PersonSpeaking><Affiliation DbId="99820" Type="47">Mr. Sukh Dhaliwal (Newton—North Delta, Lib.)</Affiliation>: </PersonSpeaking><Content><ParaText id="318802">Thank you, Mr. Chair.</ParaText><ParaText id="318803">Thank you, panel, for coming out and giving us a talk on PIPEDA.</ParaText><ParaText id="318804">You say there are four programs here that already have similar legislation in place, so this does not apply to them, right?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779864"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318805">It does not apply with respect to the collection, use, and disclosure of personal information within those provinces. So the cross-border aspect of data protection still remains within the federal purview. So for example, the Privacy Commissioner in British Columbia has full authority to investigate complaints there and exercise all of his powers in relation to any privacy issues within the province of British Columbia. If it was a complaint about a collection of personal information from a B.C. resident, but it had taken place by an organization in another province, then that would go to the federal Privacy Commissioner and she would exercise her authority.</ParaText><ParaText id="318806">I should mention that there's very close cooperation between the privacy commissioners across the country. All four privacy commissioners in Ontario, Quebec, B.C., and Alberta, but particularly the three that have comprehensive privacy protection laws, collaborate very closely on an operational level with the federal Privacy Commissioner. She will tell you more about how that works. But that's one of the ways in which they ensure that there are no gaps between their respective jurisdictions.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779872"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318807">Mr. Chair, if I may, our original intention was to make sure that the business community doesn't have a patch of different rules across provinces. Business is more and more becoming national and international. In fact, we did emphasize that nowadays if you want to do business in Europe you have to have a piece of legislation that's acceptable to Europeans about protecting personal information. In fact, they went through our bill and they actually deemed it to be acceptable. So you can do cross-sharing of databases and information. They are quite happy with our legislation as is.</ParaText><ParaText id="318808">The same thing goes within a province. We didn't want one business to have onerous requirements in one province that are different from those in another province. That's why we established this national minimum standard, those 10 code provisions to try to put a national standard without imposing the specific on individual provinces in terms of the way they manage their own privacy issues.</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="10">(1610)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1779881"><PersonSpeaking><Affiliation DbId="99820" Type="47">Mr. Sukh Dhaliwal</Affiliation>: </PersonSpeaking><Content><ParaText id="318809"> When we look at today's emerging markets, today's emerging globalization, is the data that we collect also used for research purposes, or is it totally used for commercial activity? From your perspective, how much is it used in the commercial activities and how much is it used in the research activities?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779883"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318810">There's a two-key system here. It has to be personal and it has to be commercial for this act to apply. If it's not commercial, then the act does not apply.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780749"><PersonSpeaking><Affiliation DbId="99820" Type="47">Mr. Sukh Dhaliwal</Affiliation>: </PersonSpeaking><Content><ParaText id="318811">So that means it has to have both personal and commercial together. Or can it be either one?</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780750"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318812">Right. Both.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1779884"><PersonSpeaking><Affiliation DbId="99820" Type="47">Mr. Sukh Dhaliwal</Affiliation>: </PersonSpeaking><Content><ParaText id="318813">You said the latest group to come under this act is the health sector, right? You have the work product there. Could you go to the bottom of page 21 and elaborate on the work product and how it plays into this?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779886"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318814">There was a big debate. We use the example of whether a physician's prescribing patterns are private information for the physician or if they're private for the patients? There's a big debate about that, and presumably the court will determine what the outcome is.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779891"><PersonSpeaking><Affiliation DbId="99820" Type="47">Mr. Sukh Dhaliwal</Affiliation>: </PersonSpeaking><Content><ParaText id="318815">Where do you stand on this, if you take this particular issue? If we look at the health community now, they are collecting the data. That's why I want it to come down to this particular issue here. On one side, it is the agencies that collect the personal information. On the other hand, it is the research and commercial activities based on those data structures that we have. And a third aspect is the physicians. By how much do they differ on this one, from all three perspectives—research, the agencies, and the physicians and their patients?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779896"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318816">To go back, the premise for the legislation is based on the idea that it has to be personal information and it has to be commercial. There are a number of exceptions. Information that's collected for journalistic and artistic purposes, for example, is not captured by the act. It's exempt from the act. There are also a number of exemptions for particular types of research activity, even though scholarly activity is exempt from the act as well, correct?</ParaText><ParaText id="318817">There's a much broader definition of research for most people. Some research may be commercial. For that purpose, there are certain exceptions in the act for what I'll call commercial research purposes.</ParaText><ParaText id="318818">To get back to work product, I think you're right, it's a central issue around some questions in the health sector about the extent to which personal information is either protected individual information or work product information. You'll hear from witnesses that some provinces have looked at defining work product in such a way that it takes it out of the domain of personal information. </ParaText><ParaText id="318819">With respect to PIPEDA, a series of court judgments have defined personal information in such a way that certain types of data—like prescription information, if I'm correct—have been defined as not being personal information. In the federal law, we have not yet defined work product so that this area was exempt from the definition of personal information. Some provinces have. You will hear from some witnesses that there is merit in that approach. Others may have a different view. </ParaText><ParaText id="318820">So that's one approach. In terms of PIPEDA, essentially we in the health sector, at least, have gotten to a similar position due to court interpretations of the law.</ParaText><ParaText id="318821">I don't know if any of my colleagues want to elaborate, but that's how I see it working right now. </ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="15">(1615)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1779909"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318822"> I'm also told that the Privacy Commissioner deemed work product like this not to be personal. </ParaText><ParaText id="318823">We also have a carve-out for purely research data; that is, for pure research that is not in the commercial domain. Again, the act doesn't apply to it.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779913"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318824">Do I understand correctly that for work product like physicians' prescribing patterns, the Privacy Commissioner has ruled that not to be personal information? Is that what you just said?</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780757"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318825">Yes, the Privacy Commissioner reinforced that.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779914"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318826">Does the department agree with that?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779917"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318827">We have no difficulty with that. It's the law.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779920"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318828">There's a difference between having no difficulty with it and agreeing with it. </ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780764"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318829">Again, I'm going to sound like I'm trying to duck the question, but what I'm trying to say is that we are looking for advice on some of these issues. They are difficult issues. There is not necessarily a consensus on how they should be treated, and as you'll find out, there will be a difference of opinion about them. Therefore, at the end of the day, we will look for your advice and take this under your advisement.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779921"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318830">Mr. Chair, just to add thirty seconds to the point, it is part of how PIPEDA works. The definition of personal information was left broad by Parliament, giving the Privacy Commissioner the opportunity to make some of these definitional interpretations in the context of his or her work. That's how it has unfolded. So it is important to know that the act is built around flexibility in terms of how the Privacy Commissioner defines personal information.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779923"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318831">Thank you.</ParaText><ParaText id="318832">Are there any questions from the Bloc? Madam Lavallée?</ParaText></Content></Intervention>
					<FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1779924"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée (Saint-Bruno—Saint-Hubert, BQ)</Affiliation>: </PersonSpeaking><Content><ParaText id="318833">Yes, of course. First of all, I'd like some information because there are several things I don't understand. I must admit that I'm new to the committee.</ParaText><ParaText id="318834">What exactly do you mean by personal information for artistic purposes?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779932"><PersonSpeaking><Affiliation DbId="104929" Type="28">Ms. Alexia Taschereau (Senior Counsel, Industry Canada, Department of Justice)</Affiliation>: </PersonSpeaking><Content><ParaText id="318835">In some cases, that could refer to lists of names and addresses for Christmas cards or invitations.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779934"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318836">Invitations to exhibits, for example?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779935"><PersonSpeaking><Affiliation DbId="104929" Type="28">Ms. Alexia Taschereau</Affiliation>: </PersonSpeaking><Content><ParaText id="318837">Exactly.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779936"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318838">What exactly do you mean by ”work product”?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779938"><PersonSpeaking><Affiliation DbId="104929" Type="28">Ms. Alexia Taschereau</Affiliation>: </PersonSpeaking><Content><ParaText id="318839">I can give you an example as provided by the courts, namely prescriptions written by physicians.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779941"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318840">So then, a work product could be a prescription or a report, for example.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779943"><PersonSpeaking><Affiliation DbId="104929" Type="28">Ms. Alexia Taschereau</Affiliation>: </PersonSpeaking><Content><ParaText id="318841">Yes.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779946"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318842">Aside from prescriptions, what else might fall into this category?</ParaText><ParaText id="318843"><B>Ms. Alexia Taschereau:</B>  A report written by a person or employee as part of his work is considered a product.</ParaText><ParaText id="318844"><B>Mrs. Carole Lavallée:</B> I see.</ParaText><ParaText id="318845">I'm surprised that you've examined the whole question of prescriptions, since the health care field normally comes under provincial jurisdiction, or under Quebec jurisdiction. I don't understand why you've looked into this. Perhaps I'm missing something.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780371"><PersonSpeaking><Affiliation DbId="104929" Type="28">Ms. Alexia Taschereau</Affiliation>: </PersonSpeaking><Content><ParaText id="318846">We mentioned prescriptions because they were identified by the courts as a work product. That example comes to mind. It's one area in which jurisdiction is shared. The act covers personal information regarding the health sector.</ParaText><ParaText id="318847"><B>Mrs. Carole Lavallée</B>: Yes, but nevertheless, the health sector comes under Quebec and provincial jurisdiction. You state somewhere that areas under provincial jurisdiction are excluded. Therefore, I don't understand you concern about prescriptions.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" id="1779948"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318848">When data is forwarded to another hospital, for example, a hospital in Ontario—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779949"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318849">In another province.</ParaText><ParaText id="318850"><B>Mr. Michael Binder:</B> That's right.</ParaText><ParaText id="318851"><B>Mrs. Carole Lavallée:</B>  Now that you've enlightened me, I have a question about the international implications of this legislation. You mentioned an organization called Privacy International which, if I understood you correctly, did a study of all international personal information protection legislation. You mentioned that this organization had reviewed legislation in 30 countries.</ParaText><ParaText id="318852">Have you contacted other countries with legislation similar to ours? Have you drawn comparisons? Can you tell us which important areas are covered by our legislation and which are not? What about other countries? You mentioned Canada and Germany, but I didn't quite understand if we were in the top percentile, as we say in Quebec when referring to education. Does our legislation compare well to that of other countries? What improvements would be warranted?</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="20">(1620)</Timestamp><Intervention Type="Interjection" ToC="No" id="1779956" ToCText=""><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318853">We have an agreement with the Europeans. An international standard has been set based on OECD-approved guidelines. This standard provides us with a level of privacy protection comparable to that of European countries.</ParaText><ParaText id="318854">I'm not familiar with all of the studies that have been carried out, such as the one done by Privacy International. According to that study, we currently measure up very well to other countries.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779959"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318855">We rank in the top percentile.</ParaText><ParaText id="318856">In the comparative studies that you have seen - perhaps you haven't done one yourself -- did you identify areas in which some improvements could be made?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779964"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318857">Not really, because the standards that we have adopted are based on the CSA Model Code and they are the same as the ones adopted by European countries. We are almost at the same level.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779966"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318858">Nevertheless, are there any components that could be improved upon?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779967"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318859">Comparisons are always being drawn between ourselves, the Europeans and the Americans. The latter take a different approach to privacy protection. They have passed legislation for each sector, whether the financial sector or the health sector. Their approach is completely different. We feel that ours is the best method, because the economy as a whole is treated the same way. It's interesting, because Mr. Gates, for example—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779970"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318860">Are you talking about Bill Gates?</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780450"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318861">Yes. The time has come for the United States to adopt an approach similar to ours, that is to pass legislation that applies to all sectors of the economy.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780459"><PersonSpeaking><Affiliation DbId="101397" Type="2">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="318862">I see. Thank you very much.</ParaText></Content></Intervention>
					<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1779971"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318863">
								<Affiliation DbId="101605" Type="47">Mr. Martin</Affiliation>.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779972"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin (Winnipeg Centre, NDP)</Affiliation>: </PersonSpeaking><Content><ParaText id="318864">Thank you, Mr. Chair.</ParaText><ParaText id="318865">Thank you, witnesses.</ParaText><ParaText id="318866">I've been looking over the excellent research done by Nancy Holmes, our research staff member. I wasn't going to ask any questions, but I became alarmed about some things later on in her research paper, at some of the things that she has recommended we ask you for your input on. </ParaText><ParaText id="318867">One is dealing with the duty to notify people in the event of a breach, especially in light of high-profile privacy breaches in data companies in the United States, etc. State laws are being enacted now such that in the event of a breach, there would be an obligation to inform the person that their personal information has been compromised in this way. This is interesting to me, because somebody came to me recently and said that Visa has three million breaches per year in Canada alone, and they don't inform Visa card clients that their personal information has been compromised. This is an alarming thing. </ParaText><ParaText id="318868">Would you recommend, in this first statutory review, that PIPEDA be amended to require that kind of duty to notify individuals in the event of a breach?</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="25">(1625)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1779979"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318869">If I may, we've heard a lot about that particular topic. There are those who are absolutely recommending strongly—and you will hear them in front of you—that the Privacy Commissioner name names. They may also make the suggestion to amend this legislation to force the disclosure of breaches of privacy. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779982"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin</Affiliation>: </PersonSpeaking><Content><ParaText id="318870">Not just the organizations that breach privacy; for instance, if it is Visa, then Visa would be obliged to tell me, if my card had been compromised, even if they fixed it and it didn't cost me anything. </ParaText><ParaText id="318871">Are we talking about the same thing?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779990"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318872">That's correct. That's the recommendation you'll hear a lot about. In fact, I think the Privacy Commissioner will be here, so you can ask her. She is deemed to have no power right now in the legislation to actually name names, so to speak, and to force the particular issue. This would probably require a legislative amendment.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1779996"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318873">Not to take any time away from you, sir, but Mr. Binder, I want you to listen carefully. Mr. Martin asked the question. He asked for your recommendation about whether there should be any amendments to the act. He didn't ask about what kind of evidence we were about to hear, or from whom we were going to hear it. You seem to think it quite natural that the Privacy Commissioner is going to give us her recommendations about how she thinks the act should be amended. I think it's fair to say we think it quite natural that the department should give us recommendations about the things they agree should be recommended. It isn't just me; you've just heard it from Mr. Martin.</ParaText><ParaText id="318874">Mr. Martin, that takes no time from you. Go ahead.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780001"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin</Affiliation>: </PersonSpeaking><Content><ParaText id="318875">Thank you. That actually helps.</ParaText><ParaText id="318876">Further to that, if you could respond to the chair's input, I was wondering what it would look like if we embraced this as something we should do to PIPEDA. The question put here by our researcher is, would non-notification be a breach that you could file a complaint to the Privacy Commissioner about—for instance, if my Visa had been compromised, even if the company fixed it and it didn't cost me a penny, but they didn't inform me. Do you think that is something I should be able to complain to the Privacy Commissioner about, either as a class action or as an individual?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780009"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318877"> I can jump in. </ParaText><ParaText id="318878">You probably can complain right now to the Privacy Commissioner if you have reason to believe your personal information was somehow accessed by someone without your knowledge or consent, even if it was purely accidental or an act of someone with deliberate intention to subvert an information system. The reason you can do it is due to the ten principles of the CSA code, which the Privacy Commissioner is responsible for enforcing and companies and organizations are responsible for administering. It requires organizations to take proper security, proper steps to secure the personal information that is in their hands. Negligence, or an inability to protect that information, is really no justification or excuse for not complying with the act. </ParaText><ParaText id="318879">The issue you're raising is one that I think the committee is going to hear about from other people. It has risen in the United States, as your researcher has pointed out. There are a number of states in the U.S. that have adopted duties to notify, or breach notifications. There are various terms for it, I think quite a few—over 30. They have different approaches. One of the difficulties is that it is state by state, and therefore quite fragmented, across the U.S. </ParaText><ParaText id="318880">That's an issue that has come up in our consultations and that I think will come up before the committee. But it's not black and white that there is nothing there versus a duty to notify. In fact, there are a number of obligations under PIPEDA that organizations should comply with. In your case, to take that example, you would be able to go to the Privacy Commissioner. The difference is, as Michael Binder pointed out, that there is no obligation to notify everybody in a public way, which is what most of the laws in the U.S. do require.</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="30">(1630)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780027"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318881">You have one minute.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780028"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin</Affiliation>: </PersonSpeaking><Content><ParaText id="318882"> Very quickly, another serious concern raised by our researchers has to do with the effect of the Public Safety Act when it was passed into law and the necessary amendments to PIPEDA. It's a real concern that you could have the state getting the private sector to collect personal information for the sole purpose of telling government what that information is--in other words, contracting that out. </ParaText><ParaText id="318883">In what context does this come up? I guess one of the contexts--to preface that, even though there's not much time--is that in the province of Manitoba they contracted out health information to Manitoba Data Services Inc.. They did it so well that it became interesting to an American company, so an American firm bought it because it had a guaranteed anchor tenant. So now my personal health records are held in Dallas, Texas, by some company.... I have no idea how many times it's been flipped from owner to owner to owner, and I don't know what they're doing with that information.</ParaText><ParaText id="318884">Maybe I can change the angle of my question. Is there any way for the duty to follow the money, as it were, out of the country in the same way as we do with child sex laws or mining laws--Canadian activity operating outside the borders? Can anybody help me with my personal private information that's being held in Dallas by a private company?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780041"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318885">The way PIPEDA works now under an accountability arrangement, as they call it, is that the Privacy Commissioner will investigate that situation from the point of view of the Canadian organization that first allowed your information to leave the country. So what—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780044"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin</Affiliation>: </PersonSpeaking><Content><ParaText id="318886">So there's still some obligation on the part of the government who sold it to the private firm? No. The private firm that sold it to the Americans would still have an obligation to me?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780048"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318887">The organization that provided your personal information—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780052"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin</Affiliation>: </PersonSpeaking><Content><ParaText id="318888">Manitoba Data Services, I think it is. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780053"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318889">Well, if you're talking about Manitoba Data Services, that's a little more difficult as an example because that's governed by a provincial privacy act. If we can take a private sector organization, though, that would have personal information that it collected from you, with your consent, for a particular purpose, the obligation on that organization, no matter how it decides to process that information and use it in the conduct of its business, which you have consented that it could do, is to protect that information in contractual form with any other organization that has access to it. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780055"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin</Affiliation>: </PersonSpeaking><Content><ParaText id="318890">So it does follow—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780058"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318891">Mr. Martin, your time is up. I can't allow you to interrupt again. </ParaText><ParaText id="318892">Just finish off your answer, Mr. Simpson, and we'll go to the next questioner.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780059"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318893">It's an obligation that is transferred from the Canadian organization that is following PIPEDA and the principles under PIPEDA to make sure that a third party, no matter where that third party is located, must, by contract and therefore by law, respect the same principles as are in PIPEDA. So it's by extension.</ParaText><ParaText id="318894">The Privacy Commissioner will outline the same approach for you when she appears, I think, but she may have issues to discuss with you in terms of whether that covers all situations and how effectively it covers it in relation to a situation of public safety, for example.</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="35">(1635)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780175"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318895">Thank you.</ParaText><ParaText id="318896">The last questioner from the first round is Mr. Tilson. Then we'll go to Mr. Peterson, followed by Mr. Stanton on round two.</ParaText><ParaText id="318897">Mr. Tilson.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780177"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson (Dufferin—Caledon, CPC)</Affiliation>: </PersonSpeaking><Content><ParaText id="318898">Thank you, Mr. Chairman.</ParaText><ParaText id="318899">I'm going to pursue the same line of questioning as the chairman and Mr. Martin. </ParaText><ParaText id="318900">We're actually looking to you for advice. You say you're looking to us for advice; we're looking to you for advice. You've indicated you've had meetings with stakeholders, and I assume you've had some discussions with the Privacy Commissioner.</ParaText><ParaText id="318901"> I'd be interested in getting a list of the proposed or recommended amendments or suggested amendments that you would recommend the committee in turn recommend to Parliament as to where we should go with this, as opposed to our giving it to you. I think it's the other way around. We're charged with reviewing this matter and making recommendations to Parliament and we need your advice.</ParaText><ParaText id="318902">So I'm going to ask you--I can't believe you haven't sat down and said yes, we should have the following proposed amendments--will you give us that list?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780189"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318903">I hate to repeat myself, but you have to ask the minister to do this, because it's only the minister who can actually propose amendments and changes after the internal due process. </ParaText><ParaText id="318904">I'm not authorized to give you what I personally think is the amendment here.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780192"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318905">All right. </ParaText><ParaText id="318906">Under Bill <Document DbId="2158135" Type="3">C-2</Document>, the proposed accountability legislation, VIA Rail, CBC, and a third one—which I can't remember—were moved to the Privacy Act, and it's not covered by PIPEDA. The Privacy Commissioner has indicated that she is concerned about this, and there will be lesser protection under the Privacy Act as opposed to PIPEDA. </ParaText><ParaText id="318907">Could you please comment?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780195"><PersonSpeaking><Affiliation DbId="104928" Type="28">Mrs. Danièle Chatelois (Privacy Policy Analyst, E-Commerce Policy Directorate, Electronic Commerce Branch, Department of Industry)</Affiliation>: </PersonSpeaking><Content><ParaText id="318908">From what we understand, this proposal was removed from the last version of Bill <Document DbId="2158135" Type="3">C-2</Document>, and now only the Enterprise Cape Breton Corporation is scheduled to be moved over to the Privacy Act. </ParaText><ParaText id="318909">This was originally done by an order in council on August 31, in which the Enterprise Cape Breton Corporation was removed from PIPEDA. It had originally been brought under the act by an order in council at the end of 2000. It was removed by an order in council in August 2005 and brought under a schedule to the Privacy Act at the same time. </ParaText><ParaText id="318910">Now, as we understand it, Bill C-2 is only proposing to formalize this in law for the Enterprise Cape Breton Corporation. We understand—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780197"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318911">What I've just told you isn't correct. Is that what you're telling me?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780198"><PersonSpeaking><Affiliation DbId="104928" Type="28">Mrs. Danièle Chatelois</Affiliation>: </PersonSpeaking><Content><ParaText id="318912">I don't want to appear—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780199"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318913">I don't mind. I'm wrong a lot of times, so don't mind telling me I'm wrong.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780200"><PersonSpeaking><Affiliation DbId="104928" Type="28">Mrs. Danièle Chatelois</Affiliation>: </PersonSpeaking><Content><ParaText id="318914">I want to tell you about a verification at council that I did with different versions of that bill. From what we understand, the version that went to first reading had those organizations in there. Upon reading the version that went to the Senate, we didn't see them anymore.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780203"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318915">Okay.</ParaText><ParaText id="318916">I have a question with respect to the estimates. We went through the commissioner's estimates last week, or recently, and we heard that they're spending $1 million on consultants in six months. Does the Office of the Privacy Commissioner have sufficient resources to handle what it's supposed to do?</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="40">(1640)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780208"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318917">Insofar as this—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780209"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318918">No, Mr. Chairman, leave me alone on this. </ParaText><ParaText id="318919"><B>Some hon. members:</B> Oh, oh!</ParaText><ParaText id="318920"><B>Mr. David Tilson:</B> If I'm going to get into trouble, I don't need you to help me.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780210"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318921">As a good bureaucrat will tell you, there's never enough money. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780212"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318922">I assumed you would give me that answer, but we're spending a lot of money on consultants, so I assume from that.... I don't know what I should assume from that.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780214"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318923">You will have to ask her. We're not in a position to—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780215"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318924">Yes, okay.</ParaText><ParaText id="318925">The Office of the Privacy Commissioner is making a number of investigations and audits. Should the Office of the Privacy Commissioner be quasi-judicial?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780220"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318926">Maybe I don't understand the terminology. I thought it was quasi-judicial now. They have some legal powers or authorities—maybe in certain minds not enough.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780223"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318927">Do they have adequate authority?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780224"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318928">You're going to hear some people say yes and some people say no.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780226"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318929">What do you think?</ParaText><ParaText id="318930"><B>Some hon. members:</B> Oh, oh!</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780227"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318931">I would have to ask my minister about this.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780228"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318932">Okay. </ParaText><ParaText id="318933">Can you tell me what the relationship between your office and the Office of the Privacy Commissioner is? Is it is a good relationship?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780232"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318934">We are the policy people, if you like, in overseeing the order in council, the provisions, and the act's ability to create regulations—for example, to deem substantially similar pieces of legislation in the provinces, to deem investigative bodies. We deal with a lot of regulatory issues. </ParaText><ParaText id="318935">The actual administration of the act is run by the Office of the Privacy Commissioner.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780241"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318936">We work very closely with the Office of the Privacy Commissioner in a number of areas, including the Governor in Council's responsibilities that were just mentioned. </ParaText><ParaText id="318937">If you look at the policies for considering laws as substantially similar, the Office of the Privacy Commissioner has a specific role in terms of her point of view on those issues, as well as on investigative bodies. So there is a relationship, both informal and formal, to the extent that these are incorporated in policy guidelines. </ParaText><ParaText id="318938">We also work very closely with her on international issues. As I mentioned before, the OECD is very active in this area, and it continues to be very active. It's one of those bodies--to get back to the question raised by Madame Lavallée--where it's not so much that new norms are being established for privacy protection, but that areas of cooperation for cross-border enforcement of privacy laws and some of these international issues are being addressed. The Privacy Commissioner has actually been active with the OECD, working with us to look at some of these issues on an international basis. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780261"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318939">Okay.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780262"><PersonSpeaking><Affiliation DbId="102851" Type="40">Mr. David Tilson</Affiliation>: </PersonSpeaking><Content><ParaText id="318940">All seven minutes have gone by?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780263"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318941">Eight minutes, actually. </ParaText><ParaText id="318942">This is a heads-up, ladies and gentlemen. We will be calling the minister, and we would ask you to get working on what he's going to say here. We will be asking what specific amendments, if any, he wants us to consider. And if he says none, we'll be asking his opinion of amendments that have been suggested by others. </ParaText><ParaText id="318943">We're now going to Mr. Peterson. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780266"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson (Willowdale, Lib.)</Affiliation>: </PersonSpeaking><Content><ParaText id="318944">Thank you. </ParaText><ParaText id="318945">Have you heard from any parties that the Privacy Commissioner should not have order-making power?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780270"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318946">Yes, we have. As we mentioned earlier, there are really two points of view on the question of order-making powers or the Privacy Commissioner as a quasi-judicial body. </ParaText><ParaText id="318947">By the way, I'm sure you'll hear from the Privacy Commissioner herself on this issue. I think that should be the first point of contact about whether the powers are—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780272"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318948">So there are two sides to this issue. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780273"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318949">Yes, there are. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780274"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318950">Okay. </ParaText><ParaText id="318951">Now, if PIPEDA is working so well, I can't figure out why we have four provinces that passed similar legislation after ours. Is this not overlap and duplication of the worst order?</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="45">(1645)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780275"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318952">Actually, the provincial legislation creates a comprehensive standard for protecting privacy across private and public sectors in those provinces. It really strengthens privacy protection in a way that either the federal law on its own or individual provincial laws could not do. Therefore, that was something—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780277"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318953">If PIPEDA is protecting private sector information, why did the provinces have to step in and do it as well?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780278"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318954">PIPEDA would not protect all elements of personal information. There are elements that are outside of the federal government's constitutional authority under trade and commerce—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780282"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318955">Such as a provincially owned agency or a provincial government or department. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780283"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318956">Yes, such as the health sector. There are a number of areas. Any area where information is not defined as commercial cannot be captured by PIPEDA. Therefore, there are areas that—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780285"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318957">Why do provincial laws cover commercial information, then?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780287"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318958">There is no duplication; it's either one or the other. The moment they pass their law, we are out of it. </ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780898"><PersonSpeaking><Affiliation DbId="99821" Type="2">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318959">I know that. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780289"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318960">Some of them wanted a more comprehensive approach to what's happening in their own jurisdiction. Some provinces have decided to go with PIPEDA, and so far they have no intention of passing a provincially based law. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780290"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318961">There would be holes in their structure, then, for government operations, I suppose. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780291"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318962">There could be, and I guess they'll cross that bridge when they come to it. Right now, they're quite happy to not enact it. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780293"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318963">What's happening in the U.S.? Does every state have a law similar to this, but there's no federal law? Is that the situation? </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780294"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318964">There's no law like PIPEDA that's economy-wide, independent of various sectors. There you have health privacy, financial privacy, and those kinds of bills. I think there's also—</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780806"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318965">They're national?</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780812"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318966">They're national, yes. But then I think there's some provision in various states. So you're really talking about complexity. It's very complicated there.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780297"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318967">It's also complex for foreigners doing business in Canada, with provincial and federal laws to comply with.</ParaText><ParaText id="318968">Mr. Chairman, I'd just like to get a sense of how many witnesses.... Have a lot of people applied? How many?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780299"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318969">Mr. Clerk.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" id="1780300" ToCText=""><PersonSpeaking><Affiliation DbId="81551" Type="27">The Clerk of the Committee (Mr. Richard Rumas)</Affiliation>: </PersonSpeaking><Content><ParaText id="318970">Approximately twenty, and that includes individuals and groups.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780877"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318971">That's a fairly high number for this committee.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780301"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318972">It surprised me--on this act. I'd never even heard of it.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780302"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="318973">We would welcome your giving us the names of some witnesses we perhaps should call before us. That would be very helpful to our committee.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780303"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318974">We have a list. We can make that available to the clerk.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780304"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318975">Is that it, Mr. Peterson? </ParaText><ParaText id="318976">Mr. Stanton.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780305"><PersonSpeaking><Affiliation DbId="101503" Type="47">Mr. Bruce Stanton (Simcoe North, CPC)</Affiliation>: </PersonSpeaking><Content><ParaText id="318977">Thank you, Mr. Chairman, and thank you to our witnesses here this afternoon.</ParaText><ParaText id="318978">I have only five minutes, so I'll try to get through this as quickly as I can. </ParaText><ParaText id="318979">I have a question from some earlier comments that were exchanged on this notion of the work product. You mentioned the release of personal information as it relates to medical information for.... Just to clarify, you didn't mean of patients, I assume, but of people involved in the professional activities. Could you clarify what you meant by that? Prescription information, I think, is what you talked about. </ParaText><ParaText id="318980">You were not talking about prescription information or identifying the individual who is prescribed a certain pharmaceutical. That information is clearly in the personal realm, is it not?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780314"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318981">That's correct. This was more the personal element to that. On one side of this argument was the doctor making the prescription, and his name was there. As I understand it, the key issue was whether that was personal information and should be protected or whether it was a work product, because this is in his capacity as a physician.</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="50">(1650)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780317"><PersonSpeaking><Affiliation DbId="101503" Type="47">Mr. Bruce Stanton</Affiliation>: </PersonSpeaking><Content><ParaText id="318982">I appreciate that clarification. </ParaText><ParaText id="318983">To go to another completely different area, from another committee that I'm working on in regards to the Internet, there is just dreadful use of the Internet in the realm of crime--in this case, the issue of sexual exploitation and human trafficking. The Internet is being used for these scurrilous purposes. I note that under section 7 there are exemptions and consent for issues relating to crime, fraud investigation, law enforcement, security, and so on. </ParaText><ParaText id="318984">Are there any aspects of PIPEDA that are not working with respect to giving the law enforcement community the access it needs to investigations, prosecutions? I assume there would typically have to be subpoenas or warrants provided before law enforcement could get access, for example, to the names and contact information of certain Internet subscribers. Are there any issues around that, or should there be some improvement of PIPEDA as it relates to allowing law enforcement to do its job?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780324"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318985">We have a specific carve-out for investigation purposes and crime fighting. Quite honestly, we have not had any complaints. Anytime there was a deficiency, it was amended. There was an anti-terrorism kind of provision that was passed.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780327"><PersonSpeaking><Affiliation DbId="101503" Type="47">Mr. Bruce Stanton</Affiliation>: </PersonSpeaking><Content><ParaText id="318986">That would certainly be important to know, because all of those names and addresses, of course, are kept in the commercial, private companies...in this case, Internet security providers.</ParaText><ParaText id="318987">Finally, in the area relating to the powers of the Privacy Commissioner herself, as you went through the deck you mentioned there were penalties, remedies, fines that could come into place. I assume that's only through the Federal Court, so her only means to enforce the act is through the courts. I was trying to think of some other examples where there might be other forms or powers brought to the table. Presumably in other departments there are regulations, there are enforcement officers and that sort of thing, people who work in the field, who can apply regulations. </ParaText><ParaText id="318988">But I'm wondering where we could possibly see some greater ability on the part of the Privacy Commissioner to get results in the field, other than having to resort to the Federal Court. Are there some other examples where an office like this might have better means to do that?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780338"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318989">There are quasi-judicial bodies with different powers, like AMPs--administrative monetary penalties, I think they're called, which can actually impose penalties, severe penalties, directly. You would have to have a legislative change to do that.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780340"><PersonSpeaking><Affiliation DbId="101503" Type="47">Mr. Bruce Stanton</Affiliation>: </PersonSpeaking><Content><ParaText id="318990">Is that the sort of tool that could in fact be incorporated under PIPEDA, then?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780341"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="318991">Not right now. You would have to amend the act to actually provide it with that particular power. There are going to be some advocates who come in front of you and suggest strongly that this should be done.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780342"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318992">So there would be a fundamental change to how the act operates, because it does operate now under the ombudsman model, with the Federal Court being the instrument the Privacy Commissioner uses to go after, as I said before, very deliberate and intentional violations of the act. So it's very much the order-making or oversight and redress issue that we talked about earlier. </ParaText><ParaText id="318993">The one issue that will come up under a scenario of order-making powers is whether you still need to set up some kind of independent body that would actually apply the penalties. For example, the Canadian Human Rights Commission has a tribunal. The Competition Bureau has a tribunal. So you ensure that the investigative body does not have the right to be both judge and jury. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780348"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318994">Thank you.</ParaText><ParaText id="318995">I have just one question to follow up on Mr. Stanton's. We recently had a case in southern Ontario, in St. Thomas specifically, where the father was alleged to be abusing his child online. The police were trying to prevent that crime from continuing, so they called the server to ask for the name and address of the person. I gather that there was some reluctance by the server to give up that information. Would the reluctance by the server have been under PIPEDA--by the way, Mr. Simpson, I prefer that pronunciation, so I'll go with you--or would the alleged concern of the provider have been under the Privacy Act? Which of those two would it have been?</ParaText></Content></Intervention>
					<Timestamp Hr="16" Mn="55">(1655)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780352"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="318996">In some cases there is an issue around what constitutes lawful authority. As we said earlier, the act is pretty clear that if you have lawful authority for that information as part of an investigation of criminal activity, national security, or whatever, those requirements are above the protection of personal information. In operational terms, there's sometimes a question about what is lawful authority. Is it a warrant? In some cases on the Internet, when you're moving very quickly, law enforcement cannot produce a paper warrant. Sometimes they're contacting you electronically.</ParaText><ParaText id="318997"> So these are the kinds of issues I think you would hear about if you talked to both privacy advocates and to the law enforcement community in terms of an operational requirement. How do you define lawful authority in a way that ensures that the balance is struck?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780361"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="318998">Thank you very much.</ParaText><ParaText id="318999"><I>Monsieur Laforest, s'il vous plaît, cinq minutes.</I></ParaText></Content></Intervention>
					<FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1780362"><PersonSpeaking><Affiliation DbId="101398" Type="47">Mr. Jean-Yves Laforest (Saint-Maurice—Champlain, BQ)</Affiliation>: </PersonSpeaking><Content><ParaText id="319000">Thank you, Mr. Chairman. I have two questions for the witnesses.</ParaText><ParaText id="319001">Mr. Simpson, you tabled a document in which you refer, among other things, to the Quebec constitutional reference. You note the following on page 15:<Quote><QuotePara Align="Left">As “substantially similar” to PIPEDA, the Quebec privacy law continues to apply within the province.</QuotePara></Quote></ParaText><ParaText id="319002">Are you saying that if the Quebec law were not substantially similar, it could not continue to apply within Quebec?</ParaText><ParaText id="319003">My second question pertains to the next paragraph in which you say this:<Quote><QuotePara Align="Left">Decision will confirm the federal government's ability to exercise its powers over trade and commerce [...]</QuotePara></Quote></ParaText><ParaText id="319004">Are we to assume from this that a decision will be forthcoming and if so, that a responsible official in Quebec would say that the decision handed down supercedes the federal government's authority in this area? I realize that a decision may not necessarily say this, but isn't there an assumption here that there will be some sort of decision, even though one has not already been handed down?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780376"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="319005">We've just discussed that point. You are correct. The expression “will confirm” is significant. It will clarify the situation.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780378"><PersonSpeaking><Affiliation DbId="101398" Type="47">Mr. Jean-Yves Laforest</Affiliation>: </PersonSpeaking><Content><ParaText id="319006">I would have preferred to see “will confirm the limits”. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780379"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="319007">Or “will clarify”.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780380"><PersonSpeaking><Affiliation DbId="101398" Type="47">Mr. Jean-Yves Laforest</Affiliation>: </PersonSpeaking><Content><ParaText id="319008">The document says that the Quebec law is “substantially similar” to PIPEDA. Does that mean that if the law was not substantially similar, it could not continue to apply?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780384"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="319009">That question has to do with the federal act. If a provincial law was not considered</ParaText>
							<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><ParaText Continuation="True" id="319010">substantially similar,</ParaText>
							<FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><ParaText id="319011">the federal act would continue to apply within the province and organizations would not be excluded from the federal act's application. If I can continue in the other language, I would say that</ParaText>
							<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><ParaText Continuation="True" id="319012">it's more a question of the federal law and whether it would exempt organizations, rather than whether the provincial law would continue to apply. It would continue to apply regardless.</ParaText></Content></Intervention>
					<Timestamp Hr="17" Mn="00">(1700)</Timestamp><FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1780394"><PersonSpeaking><Affiliation DbId="101398" Type="47">Mr. Jean-Yves Laforest</Affiliation>: </PersonSpeaking><Content><ParaText id="319013">Is this not confirmation of an infringement on constitutional jurisdiction?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780396"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="319014">No. We're dealing with a hypothetical situation. This law was drafted using the Quebec model for inspiration. The policies and ideas are derived from the Quebec act. Quebec was the first province to adopt similar legislation. If Quebec wanted to amend its legislation and remove, for instance, the provisions respecting consent, then we would object because personal information on Canadians must be protected by law. In this instance, they will be protected by two separate laws.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780406"><PersonSpeaking><Affiliation DbId="101398" Type="47">Mr. Jean-Yves Laforest</Affiliation>: </PersonSpeaking><Content><ParaText id="319015">Ms. Lavallée has a short question.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780407"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="319016">Mention was made earlier of the report by Privacy International. I assume that you've read it and that you have a copy of it in your possession. Could you possibly forward it to us?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780410"><PersonSpeaking><Affiliation DbId="104928" Type="28">Mrs. Danièle Chatelois</Affiliation>: </PersonSpeaking><Content><ParaText id="319017">Yes. A table and a summary are available and we can send them to you.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780411"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="319018">Thank you.</ParaText></Content></Intervention>
					<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1780417"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319019">Thank you very much.</ParaText>
							<ParaText id="319020">Mr. Wallace.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780418"><PersonSpeaking><Affiliation DbId="101505" Type="47">Mr. Mike Wallace (Burlington, CPC)</Affiliation>: </PersonSpeaking><Content><ParaText id="319021">Thank you, Mr. Chairman. </ParaText><ParaText id="319022">Thank you for being here late in the afternoon.</ParaText><ParaText id="319023">I want to know what Bruce Stanton is hiding. I want to know what his prescription is.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780895"><PersonSpeaking><Affiliation DbId="101503" Type="2">Mr. Bruce Stanton</Affiliation>: </PersonSpeaking><Content><ParaText id="319024">I'm not telling you.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780897"><PersonSpeaking><Affiliation DbId="101505" Type="2">Mr. Mike Wallace</Affiliation>: </PersonSpeaking><Content><ParaText id="319025"> I agree with the chairman and my colleague. Maybe it's because of my previous experience as a municipal councillor, but my expectation was that staff, which I consider you to be, would give us recommendations on areas that we know nothing about--unless you're involved with it, you don't know a lot about it--but obviously that's not the case.</ParaText><ParaText id="319026">My question is for future reference. Since this is a required review, not something that somebody here on the committee is interested in doing.... I wouldn't say it's that political, since you had consensus to make it happen. Would we have been better off to have the minister here first--since it sounds like you work for the minister--and pose the questions we need answers to from the ministry, or should we have had permission from the minister to allow you to provide us with recommendations? </ParaText><ParaText id="319027">I'm new here, so this is all new to me. I'm interested in your comments, if you can still talk about it, on what a better process for us would have been.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780427"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="319028">We may have misunderstood the requirement, but we were told very specifically that we were called here to provide an overview of the bill. It's like PIPEDA 101.</ParaText><ParaText id="319029"> If you had asked for a recommendation, we would have reacted by either seeking authority to give you a recommendation, or by telling you we could not do it and seeking your guidance on inviting the minister. But this was to be a purely academic overview of the meaning of the act, its provisions, etc.</ParaText><ParaText id="319030">We took notes. If you want, we can go back and see what we can tell you about our personal views, and then get back to you on this.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780433"><PersonSpeaking><Affiliation DbId="101505" Type="47">Mr. Mike Wallace</Affiliation>: </PersonSpeaking><Content><ParaText id="319031">I appreciate that, because we haven't had the commissioner here yet on this particular topic. But in a July 2006 report, she says, “It is not the role of this Office to draft proposed amendments to PIPEDA.” So if we're not getting it from her and we're not getting it from you, I'm not sure, other than stakeholders, who we'd get it from, in terms of some direction. It's just my past experience.</ParaText><ParaText id="319032">In the deck you've provided here, you have suggested a number of what you have defined as minor amendments. These are the areas that you think we will get minor amendments in. Is that an accurate statement?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780441"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="319033">Yes, we believe that the support witnesses you have on your list will probably propose some of those amendments. So we'll give you a heads-up. That's our understanding of what's coming in front of you.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780444"><PersonSpeaking><Affiliation DbId="101505" Type="47">Mr. Mike Wallace</Affiliation>: </PersonSpeaking><Content><ParaText id="319034">Okay. So we can focus our attention on those areas, and then that would be accurate.</ParaText><ParaText id="319035">I have a question for you, if I still have some time. Is it possible to get a review of the strengths of PIPEDA? I think there are four provinces that have their own privacy information system. I didn't see in here which one's stronger, what we like, and what we don't like in other ones. Are there things we should be adopting that the provinces adopted? Or should we be getting out of the way of the provinces? I'm not sure where we're headed with that.</ParaText><ParaText id="319036">For example, I had consultants in to see me about the definition in the British Columbia model. Is it a better definition or not? How do we find that out from you guys? Do you have opinions on those things?</ParaText></Content></Intervention>
					<Timestamp Hr="17" Mn="05">(1705)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780451"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="319037">We certainly can provide some indication of where provincial privacy acts--except for Quebec's, of course, which came after the federal law--have addressed some issues, like the work product issue, in interesting ways, which you might want to look at, based on what you hear from other witnesses. We're also suggesting, in response to your request for people who should be called before the committee, that provincial privacy commissioners are excellent people to discuss not just the application of their legislation, but also privacy protection in general and the way in which the regime for privacy protection works in Canada generally. </ParaText><ParaText id="319038">So I think in both ways we can provide some help ourselves in terms of some of those areas. But I think you'd best get it from the horse's mouth, so to speak. If provincial privacy commissioners are going to appear before the committee, then they'll give you an excellent review of how elements of their legislation are substantially similar to the federal law, and areas where they have a couple of ideas that you might want to consider.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780460"><PersonSpeaking><Affiliation DbId="101505" Type="47">Mr. Mike Wallace</Affiliation>: </PersonSpeaking><Content><ParaText id="319039">I appreciate that.</ParaText><ParaText id="319040">Those are my questions, Mr. Chairman.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780461"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319041">Just for the committee's information, all of the privacy commissioners were invited to appear. Three declined, and the British Columbia commissioner will be here.</ParaText><ParaText id="319042">Mr. Martin, do you have any questions?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780463"><PersonSpeaking><Affiliation DbId="102935" Type="40">Mr. Pat Martin</Affiliation>: </PersonSpeaking><Content><ParaText id="319043">No, thank you.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780959"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319044">Madam Jennings.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" id="1780464" ToCText="Mrs. Jennings"><PersonSpeaking><Affiliation DbId="78353" Type="2">Hon. Marlene Jennings (Notre-Dame-de-Grâce—Lachine, Lib.)</Affiliation>: </PersonSpeaking><Content><ParaText id="319045">
								<I>Merci beaucoup, monsieur le président. </I>Thank you very much.</ParaText><ParaText id="319046"> I'm not a regular member of this committee but I've been watching out for the review of PIPEDA since it first came into legislation, because when it was first tabled by the previous government, it was brought before the industry committee and I was a regular member of the industry committee. I'm quite proud of the fact that some of the amendments that were brought at that point and actually became legislation came from the Liberal side, and some of them, in particular, from me--the whistle-blowing protections, for instance, strengthening the actual protections and powers and authority of the commissioner. </ParaText><ParaText id="319047">There were two issues that were major at the time the industry committee reviewed this legislation at second reading and actually brought amendments. One was the actual privacy protection for personal information or information generated through the exercise of individual professional responsibilities, what we now call work product information. There was a real concern on the part of many of the stakeholders that the definition that we had in PIPEDA was not sufficient and that in fact it would end up being an impediment.</ParaText><ParaText id="319048"> Following the coming into force of this legislation, because the government basically convinced the members of the committee at that time, no, no, it's fine, work product won't be a problem; the definition, even if it's not there...everybody understands that there isn't that privacy protection for work product information and therefore the current definition will not be an impediment. In fact, that's not the case. There have been cases that have gone to the courts. And the previous commissioner has actually had to issue an interpreted ruling, which has been and can be challenged before the courts. </ParaText><ParaText id="319049">So I think that the issue of looking at that specific definition and making a distinction between personal information and work product information and removing the privacy protection for work product information is very important. I'm really heartened by the fact that members of this committee are asking these questions, and I assume from this deck that the consultations you have had with stakeholders has raised that. And if your minister gives you permission, you will be able to come forward with recommendations or, through the minister, recommendations on that specific thing. Am I correct?</ParaText><ParaText Interjection="e1" id="319050"><Affiliation DbId="104927" Type="73">Mr. Richard Simpson: </Affiliation> Always! You are correct.</ParaText><ParaText id="319051"><Affiliation DbId="78353">Hon. Marlene Jennings: </Affiliation> Well, put it this way: I'm going to attend as many of these meetings as I can, even if I have to strong-arm some of my Liberal members not to come so I can legally replace them. And I'm going to try to convince them that if the government doesn't come forth with an amendment, they should come forth with a specific amendment to make that distinction.</ParaText><ParaText id="319052">The second issue I had concern with at that time was the issue of consent, providing consent, express consent, implied consent, to companies that actually collect information and then may share it with their divisions or with third parties that they have contracts with, or whatever. I'm aware of a study that was recently done by the institute over at the University of Ottawa on the whole issue of consent, and my hair went straight when I saw the results. </ParaText><ParaText id="319053">There's a real problem on the definition of consent, what's express consent, what's implied consent, what kind of consent is required in order to share that information with third parties, what kind of information is actually being shared. There's a real problem there. And not all companies, apparently, have put into place an actual protocol. For those that have, that protocol may not be easily accessible by the consumer who's being asked to sign away their personal information. So I'm assuming that's another issue that you have consulted on with stakeholders, and that you have a clear vision of recommendations you'll be bringing to the <Affiliation DbId="78758" Type="4">minister</Affiliation>. I'm assuming you'll be recommending to the minister that he either come prepared to answer that or that he release you from your confidentiality and allow you to answer directly to this committee. </ParaText><ParaText id="319054">Am I right about that?</ParaText></Content></Intervention>
					<Timestamp Hr="17" Mn="10">(1710)</Timestamp><Intervention Type="Interjection" ToC="No" ToCText="" id="1780494"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="319055">We know about the study that you mentioned, and yes, if I had enough hair, mine would stand up on end also. It is discouraging to hear the results of the poll like that, or the study. </ParaText><ParaText id="319056">What it points to, though, is not only the definition of consent, because that's certainly part of it, but it's also a question of how aware organizations are of their responsibilities under the legislation, whether it's provincial or federal, and that's something we need to address. I'm sure the Privacy Commissioner, because she has done it, she has addressed it in her annual report to Parliament, would want to talk to you about the educational component.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780495"><PersonSpeaking><Affiliation DbId="78353" Type="2">Hon. Marlene Jennings</Affiliation>: </PersonSpeaking><Content><ParaText id="319057">Thank you.</ParaText><ParaText id="319058">Chair, do I have any more time? I've been trying to talk fast—</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780496"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319059">No, I'm afraid you're out of time, but it was well worth the five minutes. We do welcome your participation, Ms. Jennings, particularly since you were on the original committee. It's very helpful.</ParaText><ParaText id="319060">I don't have a formal list. Would someone from the Conservative side like to put up a hand? No?</ParaText><ParaText id="319061">Then we'll go to Madame Lavallée.</ParaText></Content></Intervention>
					<FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1780505"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="319062">Mention was made of the Quebec law and of the federal act. I'd like to know the current situation in Quebec. As a rule, Quebec law applies in Quebec, but in the case of businesses and organizations under federal jurisdiction, in particular banks, does the federal act apply?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780513"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="319063">Yes, it does.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780514"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="319064">That's how it works?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780515"><PersonSpeaking><Affiliation DbId="104927" Type="28">Mr. Richard Simpson</Affiliation>: </PersonSpeaking><Content><ParaText id="319065">Yes, the federal act applies to banks, broadcasters, and so forth.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780517"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="319066">To telecommunications, ports, airports and so on. We're talking about the usual list of operations.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780518"><PersonSpeaking><Affiliation DbId="104929" Type="28">Ms. Alexia Taschereau</Affiliation>: </PersonSpeaking><Content><ParaText id="319067">That's right.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780519"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="319068">They are covered under the federal act.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780520"><PersonSpeaking><Affiliation DbId="104929" Type="28">Ms. Alexia Taschereau</Affiliation>: </PersonSpeaking><Content><ParaText id="319069">Yes.</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1780725"><PersonSpeaking><Affiliation DbId="101397" Type="47">Mrs. Carole Lavallée</Affiliation>: </PersonSpeaking><Content><ParaText id="319070">Thank you. I have nothing further.</ParaText></Content></Intervention>
					<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><Intervention Type="Interjection" ToC="No" ToCText="" id="1780521"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319071">Mr. Peterson.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780522"><PersonSpeaking><Affiliation DbId="99821" Type="47">Hon. Jim Peterson</Affiliation>: </PersonSpeaking><Content><ParaText id="319072">I would like to turn the rest of my 20 minutes over to Ms. Jennings, please.</ParaText><ParaText id="319073"><B>Voices:</B> Oh, oh!</ParaText></Content></Intervention>
					<Intervention Type="Debate" ToC="No" ToCText="" id="1783742"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319074">Ms. Jennings.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780523"><PersonSpeaking><Affiliation DbId="78353" Type="2">Hon. Marlene Jennings</Affiliation>: </PersonSpeaking><Content><ParaText id="319075">I love my job.</ParaText><ParaText id="319076">With regard to the points raised by Madame Lavallée and Monsieur Laforest, this was a major piece of contention before the industry committee at second reading. It was quite interesting, because all of the constitutional experts came in and explained very clearly that under the Canadian Constitution you have areas that are exclusively federal jurisdiction, you have other areas that are exclusively provincial jurisdiction, and then you have areas that overlap, where both authorities, both levels of government, have constitutional authority to legislate. Where they bump up against each other, or if they do, the federal government may have to withdraw.</ParaText><ParaText id="319077">In this particular case, they made it clear that if no provincial law was regulating the protection of personal information in e-documents for the companies and organizations regulated provincially within the territory of a province, then the federal government's PIPEDA could apply there. However, even where there was provincial legislation, as soon as the information took part in a commercial transaction that crossed provincial borders or went outside our country borders, then it was the federal government that had clear and exclusive jurisdiction.</ParaText><ParaText id="319078">I'm amazed that five years later this same bogus argument is being brought up by my esteemed colleagues--who I respect very much, but I had the same argument with Madame Lalonde on the industry committee. The constitutional experts, including those from Quebec, said very clearly that if I buy something at a company in Quebec and I'm a resident of Quebec, and that company sends my information because its supplier is in B.C. or in the United States, Quebec law doesn't protect me. As soon as my information crosses the border, it would be in la-la land, and they could do anything they wanted. That was why there was a necessity for federal legislation. </ParaText><ParaText id="319079">As was stated, this legislation was modelled in large part on the model that already existed in Quebec. It was kind of like what we tried to do with </ParaText>
							<Timestamp Hr="17" Mn="15">(1715)</Timestamp><FloorLanguage language="FR">[<I>Translation</I>]</FloorLanguage><ParaText id="319080">the national day care program. A program was already in place in Quebec. It took some time to convince provincial governments to sign on, but ultimately agreements were concluded. These were patterned on the Quebec model. PIPEDA took its inspiration from the Quebec model, but is designed to protect the sectors and areas not covered under the Quebec law.</ParaText>
							<FloorLanguage language="EN">[<I>English</I>]</FloorLanguage><ParaText id="319081">Let me take my breath here. </ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780552"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319082">Yes, that was a three-minute speech. Do you have a question, Marlene?</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780553"><PersonSpeaking><Affiliation DbId="78353" Type="2">Hon. Marlene Jennings</Affiliation>: </PersonSpeaking><Content><ParaText id="319083">Amazingly, I do.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780554"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319084">Because you could do it another time, too.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780555"><PersonSpeaking><Affiliation DbId="78353" Type="2">Hon. Marlene Jennings</Affiliation>: </PersonSpeaking><Content><ParaText id="319085"><I>Non, merci.</I></ParaText><ParaText id="319086">On the question of mergers and acquisitions, I see there have been requests for amendments to the consent requirements. Could you give us a little bit of information on what are these requests? </ParaText><ParaText id="319087">You're not giving a recommendation, so I'm assuming you don't have to go to your minister. It's simply sharing with us requests that you're aware of for amendments to PIPEDA on the consent requirements dealing with mergers and acquisitions.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780558"><PersonSpeaking><Affiliation DbId="12496" Type="28">Mr. Michael Binder</Affiliation>: </PersonSpeaking><Content><ParaText id="319088">The way I understand it, when you do a merger or an acquisition, you need to have some data and information about officers, about the business they're in, and so on, and some of this information needs to be—the argument goes—“access without consent”, because otherwise they'd become aware of what's going on. So there are those kinds of issues here. Again, you're going to hear the other side of the argument, that it's because of this personal information that you don't want to share those arguments.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780561"><PersonSpeaking><Affiliation DbId="78353" Type="2">Hon. Marlene Jennings</Affiliation>: </PersonSpeaking><Content><ParaText id="319089">Okay, thank you.</ParaText><ParaText id="319090">I'm done for today.</ParaText></Content></Intervention>
					<Intervention Type="Interjection" ToC="No" ToCText="" id="1780562"><PersonSpeaking><Affiliation DbId="102850" Type="35">The Chair</Affiliation>: </PersonSpeaking><Content><ParaText id="319091">I think we all are.</ParaText><ParaText id="319092">Colleagues, I'd like to go in camera briefly, in a minute, after I thank the witnesses.</ParaText><ParaText id="319093">You were right, Mr. Binder, we did ask you for a PIPEDA 101. That's absolutely correct. But as part of that consideration, because we're mandated to review the entire act, I guess we just assumed that the department, as a result of its consultations, might have some recommendations for us. So we're not looking to criticize you; we're now giving you some guidance as to what we're looking for, and specifically now what we're looking for from your minister. But you're absolutely correct that we did want a 101 course, because only one of us was on that committee when it was first passed. So we did want to get some background and contextual ideas on it.</ParaText><ParaText id="319094">Thank you so much for coming and for answering our questions. No doubt we'll see you again with your minister. </ParaText><ParaText id="319095">I'll suspend the meeting for two minutes.</ParaText><ParaText id="319096">[<I>Proceedings continue in camera</I>]</ParaText></Content></Intervention>
				</SubjectOfBusinessContent></SubjectOfBusiness></OrderOfBusiness></HansardBody></Hansard>
