Ross v. Canada (Privacy Commissioner), 2004 FCA 31 -- text