Obviously, what we're hoping for with the construct of “generally accepted best practices” is that we set a very high standard that requires corporations to continue to evolve the process and to ensure that they're using those best possible techniques.
If there's an obligation in Quebec to do so but not in other places, we run the risk that some organizations may not be seeking out those best techniques, and then we'll have differential privacy, depending on which law you're conforming to.