The Office of the Privacy Commissioner is the proper place to do this. In a lot of cases, and in the case of Treasury Board directives, deputy ministers are left with their own discrepancy and their own decision-making powers, when it's convenient for the employer, and then it's—
On February 15th, 2024. See this statement in context.