We already knew this:
http://yro.slashdot.org/story/12/01/26/0432230/foreign-data-unsafe-from-us-patriot-act-says-american-law-firmThis needs to be dealt with Federally in Canada.
One of the comments:
http://yro.slashdot.org/comments.pl?sid=2639369&cid=38827533
> They are free to ignore the demands, true.
>
> The article, however, spoke of the conflict of IT companies that had
> interests in the U.S., who may be forced to obey
> U.S. law. Specifically, the story is about the privacy commissioner of
> my province (Alberta) recommending that our government only use
> companies with no U.S. connections to guarantee the privacy of the
> data.
>
> That means no American companies, no outsourcing to the U.S., and no
> data storage in the United States. The U.S. are international lepers
> in the privacy world and should be avoided at all costs.
The follow-up comment (
http://yro.slashdot.org/comments.pl?sid=2639369&cid=38827695 ) shows
how this does not really protect anyone: the executives of such
companies can be arrested on entering (or passing through) the U.S. if
their companies refuse to turn over data. Canadian law should
explicitly forbid extradition in such cases of extra-territoriality.
-Glen Newton
http://zzzoot.blogspot.com/-