It has to be made available on the Internet site. It also has to be submitted to Elections Canada. In what needs to be there, there are some requirements of how and what information they collect, how the party is endeavouring to protect personal information. A statement is also required around training measures that will take place as well as approaches to things including cookies. In addition, there is a requirement to have a name and contact information of a person to whom you can address privacy concerns. If I'm a Canadian, I can find out who I can talk to.
On May 28th, 2018. See this statement in context.