The bad guys will just take their model to the country next door and make it available on the Internet.
I understand wanting to have ways of stopping them and punishing them, but it's important not to try to achieve a perfect system or a perfect law that will avoid any risks or criticism. That would slow down innovation, and Canadian businesses adopting these technologies shouldn't continue to lag behind. Basically, we don't want to end up either impeding or requiring very much in some of these areas.
It is possible to place certain obligations on some players with huge economic interests in the country. They can be held accountable. On the other hand, if the goal is to have a framework that actually works, then it's important to ensure that it's not overly general and that it is not applied either too loosely or too broadly, because that would make it difficult for dynamic Canadian organizations to innovate, make rapid decisions and have confidence in the regulatory framework rather than be afraid of it.