My suggestion would be that the party privacy policies align with international privacy principles, which are reflected in Canada's federal privacy law, which is PIPEDA. I think the policies of parties should be consistent with PIPEDA principles, which are the same as international principles.
Point two, parties should be legally required to comply with these undertakings, which is not the case under Bill C-76.
Point three, whether or not parties are in compliance should be subject to oversight through a complaint mechanism to an independent third party, likely our office.