@cwebber In my email to my MP, I looked up his longstanding email address on haveibeenpwned.com, listed all the times the companies entrusted with his data had failed to keep it confidential, and all his data that had been breached - then argued how much worse those breaches would have been if C-22 had been in effect and the companies had been required to retain even more data.