The policy respecting the disclosure of information and confidentiality is quite clear. Again, I don't think we need to adopt more rules. However, we need to ensure compliance with the rules already in place. The various departments have a responsibility to adopt the necessary measures to ensure confidentiality and to see to it that their staff comply with departmental policies.
The government has assured me that it will investigate the leaks. It's now up to the government to take action.