It's a made-in-Canada solution. The made-in-Canada solution is a directive issued by the minister containing these provisions but no one knows what's in it except the minister and CSEC, and perhaps the commissioner.
How can we have confidence if we don't even know the contents of the directive and what measures are in place to ensure the privacy and protection of Canadians?