In the absence of any other framework, you already make sure that you identify the wrongdoing to the extent that you can and you consult a number of people about it. You already have a mechanism that allows you to establish responsibility.
What else would you have to add in order for you to be able to comply with Bill C-300?