The National Security and Intelligence Review Agency, the body that would be expected to oversee the authorities, has raised concerns about whether it has sufficient access to do that job effectively. At the same time, SAAIA stops service providers from telling anyone that a demand was ever made against them. The public does not know, the oversight body cannot fully see, the companies cannot say anything and the person whose data was accessed may never find out.
How does that combination produce real accountability, and who, exactly, is in a position to catch a problem if one comes up?