Sure.
Number one is to make access a constitutional right, and not just a statutory privilege to be tampered with.
Two is to make access a fully documented proactive disclosure service, with a designated public authority and a responsible minister. The Bill C-2 clause on access services is just too weak and double-faced.
Three is to outlaw practices such as systemic amber lighting in systems and profiling, and spell out obligations of access integrity officers; do away with access officials having dual roles, such as contributing to amber tracking and working on security-classified department records; and ensure that those processing, reviewing, and deciding on access requests are identifiable.
Four, add as a ground for appeal the secrecy practices of tracking and profiling access users.
Five, give the Information Commissioner binding order powers, including the power to review agencies engaged in tracking and profiling access users.
Six, make tracking and profiling access users an offence subject to penalties and jail terms, and substantially reduce existing exemptions and any catch-all blanket exemptions, and prevent delays that go hand-in-hand with watching and tracking access users.
Finally, amend the Privacy Act to tighten up which third parties have access to personal information, and provide better privacy protection and make use and disclosure codes subject to independent review.