I have one last question to ask, Mr. Chair.
One case concerning data management subcontracting was reported. The Privacy Commissioner investigated a matter involving Shred-it, a company that stores data, presumably in paper format. There's a large volume of paper documents at the Canada Revenue Agency, because it retains certain information for dozens of years.
Do you take additional measures in the case of a subcontractor or a private company that manages Canadian taxpayer data? Who don't you look after this internally? Why isn't it managed by your department? Why subcontract when the department could do it directly?