I have just one.
Mr. Paulson, you suggested earlier that you didn't support recommendation ten because you couldn't foresee or envision every instance when there might be a need to share information with a friendly nation. I heard from you--and also Mr. O'Brian--that many of the agreements you have with these other nations are in writing; some of them are not. Some of them have caveats that would prevent the information you share with the other nation from being shared with a third party; some of them don't. As I read it, recommendation ten from the Privacy Commissioner is just asking for consistency--that all the agreements be in writing, and that all these countries have these third-party caveats.
Considering that some of them already have them, would it not be reasonable to expect every agreement to be in writing and every country to have a caveat to prevent them from sharing the information?