Yes. Bill C‑27 also establishes a private right of action.
Obviously, regulatory recourse is available, going through the commissioner and so forth, but there are ways to initiate legal action against private organizations.
On October 17th, 2023. See this statement in context.