I think privacy protections for voters are important. It is fair for political parties, though, to say that they need some mechanism to weed out frivolous or vexatious demands that are simply there to take up all the political parties' resources. You can imagine another political party sending out a bunch of people to request their personal information every day, right? That's not too fanciful a scenario.
Most other entities in Canadian society that have significant amounts of data do comply with the privacy rules. It's a good question in terms of how exactly to design them. I think it's fair to weed out the frivolous ones, but I think it can still be done for political parties.