That's an important distinction. The idea of whether this is going to make a whole lot of work that's going to tax parties in ways that are unfair is important. At a minimum, what I have suggested as necessary would be the top level.... It would be saying that as a party this is the data we're collecting and these are the sources, so we're collecting information about who you say you're going to vote for if you offer it up, and we're collecting information about what your phone number is, and this is how we're going to get it. You're listing that out.
Then, in terms of having a mechanism for people to go and check what that is and correct information that's wrong, I think that becomes a bigger question, where we start to get into things like whether we want to take the GDPR approach. Is that what Canada should be working towards? I haven't been an expert on GDPR, so I can't really speak to the specific implementation of that, but from the perspective of a political party personal data privacy statement, I think having a minimum statement that “this is the data we're trying to collect about you and this is how we're going to get it” is important.