With Bill C-36, Ottawa is overhauling privacy laws — and employers are being urged to prepare