You could do what British Columbia and Nova Scotia have done, which is enact legislation that in fact prohibits certain information sharing outside Canada. They've actually attempted to put restrictions at the front end. It's not always tremendously effective. What you may have is businesses relocating outside your jurisdiction because of some of those limitations in provinces like B.C. and Nova Scotia.
I'd say—I would just be repeating what I suggested earlier—that it's a question of putting in force the strongest and most effective information sharing agreement you can and ensuring that you have a high level of co-operation between international data protection authorities.
I guess the governments need to monitor that information. Privacy commissioners need to monitor those agreements and whether or not they are being complied with in practice.