The employer needs to take its responsibilities to its workers and the Canadian public seriously. The point has been made over and over again about these being Canadian citizens, as well as federal public servants. When digital policies are out of date and not respected, we find ourselves with spyware on government devices, and, clearly, enshrined rights are not respected.
The Privacy Act could be updated in all these ways, but there are strong tools in place right now with no enforcement mechanisms and no consequences for their breach.