OPC, Guidelines for processing personal data across borders: say plainly that foreign authorities may access the data (Office of the Privacy Commissioner of Canada, Guidelines for processing personal data across borders)
A Canadian holder that sends records to a US buyer must tell individuals, in clear language and ideally at collection, that the data may sit in a foreign country and be reachable by its law enforcement and national security authorities.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Organizations need to make it plain to individuals that their information may be processed in a foreign country and that it may be accessible to law enforcement and national security authorities of that jurisdiction. They must do this in clear and understandable language.”
Where it was read
Also read from the same source
- OPC, Guidelines for processing personal data across borders: a transfer for processing is a use, not a disclosure (Office of the Privacy Commissioner of Canada, Guidelines for processing personal data across borders)
- OPC, Guidelines for processing personal data across borders: no ban and no adequacy list, accountability stays with the sender (Office of the Privacy Commissioner of Canada, Guidelines for processing personal data across borders)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide