We're talking about exchanges of information between private organizations. The act covers the exchange and use of information in the context of private sector organizations. We're not talking about exchanges involving the Canadian government. An organization that would like to enter a client's information in a server located in the United States would have an obligation to inform that client of the fact, under PIPEDA and a confidentiality policy, and to inform that person that his or her information could be subject to the laws of that country.
On October 22nd, 2009. See this statement in context.