Yes.
I wouldn't necessarily read too much into that decision. It dealt not with the Privacy Act, interestingly, but with the Access to Information Act. What the court was asked to look at was whether a third party, under the Access to Information Act, could use the personal information exemption of the access act when it wanted to prevent the government from disclosing information to an access requester. So the analysis had nothing, really, to do with the Privacy Act itself. It had more to do with the inner workings of the access act.
Now, in the course of its analysis, the court noted that the Privacy Commissioner's ability to provide some relief to the third party in such a case was rather limited. That was part of its reasoning for concluding that the third party could raise the personal information exemption in the access act context, but they certainly wouldn't say in the Supreme Court that they think the powers of the Privacy Commissioner are not sufficient.