I'll try to be brief.
What happened in Alberta is still under investigation, so I won't comment on that.
What I can say to the committee is that, under the current act, there are strict limits as to who can obtain the list and how it can be used. Only registered and eligible parties, candidates and parliamentarians can obtain the list. Plus, it can only be used to communicate with voters.
Essentially, anyone who knowingly uses personal information from a voter list for any other purpose is in violation of the act and can be fined up to $10,000 or face one year in prison. Of course, the commissioner can, on their own initiative, or in response to a complaint from a member of the public, investigate any potential violation or failure to comply with the act.
Right now, the act covers this kind of situation. Even if the measures found in the bill don't apply specifically to this issue, they still strengthen the protection of personal information.