The law as it currently stands has
weak annual reporting requirements from government agencies, does not provide much protection to Canadians from abusive treatment by foreign states, does not give the Privacy Commissioner order - making power, does not provide redress in
cases involving harm, does not prevent over-collection of
personal information, does not protect against surveillance where the data is not recorded, and does not feature security breach disclosure requirements.