Standards, with respect to privacy and security issues, are the domain of the Treasury Board, which makes the rules. Our role is as a commentator: we file complaints, we conduct audits. From time to time, we state that there are problems in the management of personal information, but it is up to the departments and agencies to protect and manage their personal information.
On February 23rd, 2009. See this statement in context.