There's a lot in your question.
In general terms, in order to have effective protection for human rights and privacy, you need two things: oversight and review.
Oversight by Parliament will be debated according to what we see in the mandate letter. That would be an improvement over the current system.
It is also necessary that there be what I will refer to as administrative review. The review would be conducted by bodies such as SIRC, the commissioner for the Communications Security Establishment, etc. You need oversight and review, both parliamentary and administrative. This is one set of protections.
It's also necessary to have clear, substantive, legal rules as to how national security or law enforcement is to collect information. For instance, there was a question about when warrantless access is permissible by law. Normally warrants are required, except for very defined circumstances. I think you need both oversight and review, parliamentary and administrative, but it is equally important to have substantive legal rules that create the right balance between security and human rights.