As part of the study on Bill C‑11 which preceded Bill C‑27, we made recommendations, which we reiterated in the report on Bill C‑27 provided to the committee.
One of them was to include in the Personal Information Protection and Electronic Documents Act more specific rules on transfers of personal information outside the country.
At the moment, the act is quite general on the issue. It states that we must, by contract or otherwise, provide protection equivalent to that provided by Canada.
However, other countries in Europe have more rigorous protection regimes where there is talk of alignment. Those countries assess the other country's legal system and determine whether privacy is sufficiently protected. There may also be model provisions, among other things.
That said, the regime could be stricter, which would lead to greater protection.