I think fundamentally the issue boils down to the lack of clarity around what the provision in PIPEDA 7(3)(c.1) amounts to in practice. In our view the current protection against liability in section 25 is probably sufficient and the best source for directing energies toward clarifying the law would be better interpreting 7(3)(c.1).
On June 10th, 2014. See this statement in context.