It's an obligation that is transferred from the Canadian organization that is following PIPEDA and the principles under PIPEDA to make sure that a third party, no matter where that third party is located, must, by contract and therefore by law, respect the same principles as are in PIPEDA. So it's by extension.
The Privacy Commissioner will outline the same approach for you when she appears, I think, but she may have issues to discuss with you in terms of whether that covers all situations and how effectively it covers it in relation to a situation of public safety, for example.