Number nine is simply to add an ongoing five-year review. Again, that's in PIPEDA. In an area of privacy that is now so highly technologically dependent, I would think the least we should do is review it every five years.
Finally, number ten is the issue that was already discussed here--that is, enshrining the existing Treasury Board guidelines, which are not in the Privacy Act. These guidelines date from about two or three years ago.