I generally agree with Mr. Israel. Compliance agreements are a kind of band-aid. What you're really looking for, I think, is order-making power on behalf of the commissioner. It will help with some situations. However, long negotiations with companies may or may not actually have the result that the Privacy Commissioner wants, even with compliance agreements.
On February 19th, 2015. See this statement in context.