Canadian law will apply to a matter if it impacts Canadian users. For privacy law in Canada to apply, it's not necessary for an organization to have offices in Canada, or for it to have generated in Canada. The courts have recognized that if there's a real and substantial connection to Canada, and if Canadian users can be impacted by this, we have jurisdiction.
As to how we investigate those things, if the organization doesn't have anyone in Canada, we would reach out to the organization in another country.