There are no formal international rules on these questions. All institutions, public and private, have an interest. To the extent that there's legislation in these countries and in the countries you have mentioned, there are legal requirements to protect information. It's a question of the legal regime that's in place. In the U.S. there are provisions that require institutions to protect information properly.
It certainly could be part of an agreement between Canada and another state to ensure that once the data is sent to the other state, it is properly safeguarded. It's a question of either national laws or potentially the content of an agreement reached between Canada and another state.