Yes, there are a couple of possibilities.
For example, the exemptions could be time-limited. The way the bill is framed now gives unfettered discretion to the carrier to send or not send the information, as they wish, to comply with a foreign jurisdiction's law. It might be better if exemptions were granted in Canada, and they could be time-limited and renewable for sure but with a view to ensuring that we keep some control over what the dangers are and how the situation evolves as we move forward.
Either the bill is time-limited or the exemption itself is time-limited as a way of ensuring that indeed carte blanche is not given to the carriers.
Granted, they probably all want to protect the privacy of their passengers' information, but that's not the way privacy legislation works. It's not the owner of the information who can decide to disclose it to anybody. We tend to want to have a public body that looks at whether it's appropriate or not.