Yes, that has to be done. Giving a time limit for mandatory removal is a very good idea. In many cases, companies do not respond, especially if they aren't Canadian. We have seen that in the case of removal requests relating to complaints made through the Canadian Centre for Child Protection website, replies are not always received. So setting a time limit is important, but I think it is also important to impose fines to penalize service providers that do not comply with the time limit.
As to the removal of online images, the international policing community feeds information into a database. Each file has a digital footprint similar to a digital fingerprint. So there is a database that receives information from the international policing community, and that database is made available to the National Centre Against Child Exploitation in Ottawa, as well as the Canadian Centre for Child Protection. They use the database and other technologies and use bots to search websites and identify images of child pornography.
Those organizations offer free tools to companies. Requiring Canadian companies to use the tools of the Canadian Centre for Child Protection would therefore be a very good idea, in my humble opinion, because it would help remove content already stored on servers and stop things from being added that are already on the servers. That would block the material at the source. It would not be perfect because there are always images circulating and there will always be producers, but at least it would remove a good chunk of the material.
There are a number of other sites available to victims to have images removed, but unfortunately there is no monitoring of the effectiveness of those sites.