Mall operator records millions of shoppers without consent

New Canadian privacy regime steps in the right direction, but experts ‘baffled’ and ‘troubled’ by key missing pieces