One of the most important things is the enforcement mechanism. You mentioned teeth, and that needs to be in place. It needs to be spelled out very clearly how to identify the infractions. That requires appointing watchdogs and making sure that they have the resources to monitor the industry to the level that it will require to make this implementation effective.
After having the systems in place to observe and catch the infringement, then there needs to be something in place for remedies to the infringements. What do we do with companies that are not following these guidelines? That needs to be spelled out very clearly.
I think that institutional involvement will need to happen. There should be collaboration between the institution that is set up to monitor the act and the companies that are required to comply with it, so when an infringement is observed, the institution can work with the company to make effective remedies. Having as much of that spelled out beforehand will streamline the work and make that more efficient.
Following those two mechanisms, what do you do with recalcitrant companies that just don't want to comply? That's when the enforcement needs to bring out the hammer and maybe have some punitive measures that are designed to convey the message that non-compliance is not an option. Though again, I think that should be a little farther down the ladder. We should be working proactively to implement as many of these changes beforehand. If it's not beforehand, when we do catch them, we should look at more amicable ways of resolving the situation.