That’s probably true for the general population, but not so much for our privacy legislation. Certain categories of data, for some provincial governments, absolutely must reside in Canada and can’t be hosted in the US. Among the various reasons is the Patriot Act. Canadian laws specify certain circumstances in which a data breach must be disclosed to the user, and the Patriot Act (via NSLs) can mandate that the breach not be disclosed to the user. Canadian companies hosting their data in the US cannot simultaneously comply with the law in both countries.
