I agree with my colleagues. This is a power that encourages compliance. If a business doesn't wish to comply, it knows that, at the end of the day, it can be ordered to take the necessary steps to comply. I think it creates an incentive for businesses to comply, and it makes it easier for authorities to do that monitoring.
Our powers are quite broad. In Quebec, we can order any measure to ensure compliance. We can ask a party to destroy personal information or to stop a practice. This power is an important lever to dissuade businesses from taking the path of non-compliance and encourage their compliance.