Canada urged to protect data privacy in NAFTA

OTTAWA Concern is growing that federal negotiators aren’t doing enough to protect the personal information of Canadians from prying U.S. interests at the North American Free Trade Agreement negotiations.

Information technology companies and other digital economy insiders say federal negotiators appeared unprepared during this week’s third round of talks to counter an American proposal that would forbid the storage of sensitive data in computing facilities on Canadian soil.

Some warned that Canada appeared soft on the issue and might concede to the American demands in the interest of horse-trading — to potentially win concessions on higher-profile areas of contention, such as autos and agriculture.

They say giving in to American demands to open up a freer flow of cross-border data would not only undermine domestic privacy rights, but hamstring the ability of emerging Canadian companies to compete in the growing digital economy.

At issue is so-called “data localization,” which would allow the government to protect the sensitive personal information of Canadians — especially health and financial records — from unwanted American intrusion, by storing it in Canada.

A senior federal official, who would only speak on the condition they not be identified, said the government would stand up for Canadians’ data and privacy rights at the bargaining table.

Widespread global concern has been stoked by fears of U.S. surveillance on private citizens, and requirements under the post 9-11 Patriot Act that gives American law enforcement access to data stored in U.S. facilities. Big companies such as Amazon and Microsoft have built servers in Canada to address privacy concerns.

Sources say U.S. negotiators proposed NAFTA terms that banned data localization, lifting language directly from the failed Trans-Pacific Partnership.

The U.S. position contrasts with British Columbia and Nova Scotia laws that require local data storage and appears to conflict with federal policy, which says “sensitive or protected data under government control will be stored on servers that reside in Canada.”

Canada lacks an overall strategy on the data and should not give in to American demands until it develops one, said Keith Millar, senior vice-president of Ottawa-based technology firm Pythian.

“Data localization seems not to be negotiated as aggressively as agriculture or auto,” said Millar.

“Until Canada gets a national strategy together, we should keep it out of NAFTA.”

Morgan Elliot, vice-president of Mississauga-based SOTI Inc., said data “is the new gold” of the 21st century economy and giving up access to it in NAFTA could have “catastrophic” consequences for the competitiveness of Canadian companies in the future.