More can always be done. Whether it happens through this process or through another is another good question. One of the things we've been working on as an organization, alongside many other civil society organizations and privacy experts, is reforms to privacy laws themselves. For example, with PIPEDA we have a lack of enforcement ability. Let's say there is a corporation or company that is not obeying those privacy laws; the Privacy Commissioner lacks the ability to issue fines or force compliance with them.
We could be looking at many other ways to give more teeth to our laws in order to prevent third party or foreign influence.