OPC, Guidelines for processing personal data across borders: no ban and no adequacy list, accountability stays with the sender (Office of the Privacy Commissioner of Canada, Guidelines for processing personal data across borders)
Canada has no list of approved countries and does not ban sending personal information to the US. The sending organization stays accountable for the data in the recipient's hands, and PIPEDA applies to the cross-border step even for organizations in provinces with their own law.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“However, organizations not governed by PIPEDA for commercial activities within a province need to be aware that PIPEDA applies to transborder transfers. ... PIPEDA does not prohibit organizations in Canada from transferring personal information to an organization in another jurisdiction for processing. ... The transferring organization is accountable for the information in the hands of the organization to which it has been transferred.”
Where it was read
Also read from the same source
- OPC, Guidelines for processing personal data across borders: a transfer for processing is a use, not a disclosure (Office of the Privacy Commissioner of Canada, Guidelines for processing personal data across borders)
- OPC, Guidelines for processing personal data across borders: say plainly that foreign authorities may access the data (Office of the Privacy Commissioner of Canada, Guidelines for processing personal data across borders)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 2 guides