said by The Mongoose:
This is often why companies go beyond what is legally required of them...failure to do so often leads to extremely unwelcome changes in the law.
In my opinion, having a law spell out the requirements is better because:
a) companies like Teksavvy no longer need to concern themselves with walking a privacy-accountability tightrope. They can just follow the requirements of the law to the letter and be done with it.
b) all ISPs will be on the same playing field with regards to a)
c) the public will (should) have an opportunity to have a say in what the appropriate balance is.
I don't think the threat of a law being formed should deter ISPs from implementing a reasonable policy. Worst case, if we end up with an extreme law (like you say), Canadians will be marched that much closer to losing their tolerance with the powers that be and to taking back their country.
It's Teksavvy's prerogative in this case, of course.