Industry committee  Thank you for that question. I think to answer the question it helps to look fundamentally at what cloud computing is. It's basically a way to offer a flexible, elastic service on a utility basis. It's a standardized service provided to many customers. Those customers are demand

Industry committee  I'll speak to that. The Ontario government has not mandated that the data be in Canada. Rather, it looks to a due diligence process around the quality of the service providers and holds them to account to ensure adequate control and security for the protection of the data.

Industry committee  I would agree with those comments. I think we have the legal framework in place in Canada to move forward, to allocate responsibilities, and to motivate good practices. As well, we have reputable vendors able to respond to customers' needs and to address these responsibilities.

Industry committee  I would suggest the barrier isn't a legal barrier. It isn't in the nature of security systems. It isn't in the nature of our privacy regime. It's in the less enthusiastic or risk-averse nature of many of our companies that tend not to want to be the first to try something new, bu

Industry committee  Yes. Typically, cloud service providers seek to meet international standards of security and privacy compliance that apply to the legal regime in which they operate. Those would address issues such as in-transit encryption of communications to and from the data centre and the enc

Industry committee  Thank you. I was just going to add a comment that for SMEs particularly, they usually don't have a lot of IT infrastructure or IT security staff. They have a very lean small team. The advantage for them in using cloud service providers is that they get the benefits of huge scale

Industry committee  Thank you very much for the opportunity. In Canada we have a robust legal framework that provides through our private sector privacy laws for the customers who use cloud services to undertake certain privacy and security obligations for the individuals whose personal informatio