Personally, I would say that's insufficient. It allows them to. It doesn't force them to. Legislation needs the requirement, not just the independent judgment of the agencies to decide what they will or they won't.
On February 15th, 2018. See this statement in context.