I'm sure you understand that the witnesses will come out. We've already talked to you. We'll have the Privacy Commissioner on Thursday. We'll certainly be asking for that. I was asking if you supported it. I'm happy to hear that you have. Certainly, as was mentioned by my colleague, we'll have a lot of different witnesses come out. I just wanted to hear where you thought it would be. Certainly, it's nice to hear that you think it's going to be in certain other places.
I'm going to follow up from my colleague as well on legitimate interests. Right now, as we've heard, it's too broad. We've talked about how it's far too broad. We want to look at it perhaps more in line with the GDPR, which defines legitimate interests in article 6(1)(f) as one of the lawful bases for processing personal data. According to the GDPR, legitimate interests means that a data controller, the entity processing the data, can process personal data without the explicit consent of the data subject, the individual to whom the data pertains.
In other words, they really define it a little more clearly. They even have what's called a “legitimate interests assessment”, or an LIA. We've talked about the privacy impact assessment in our version, but we haven't really looked at an LIA.
Would you support amendments that look to define “legitimate interests” more clearly and more in line with the GDPR?