You raise an important point. When you're a hammer, everything looks like a nail. When you're a law professor, everything looks like a legal issue to address.
Respectfully, the ownership of the company does not determine, at the end of the day, the sovereignty of the data. That was the point I was trying to get at. Whether it's CoreWeave or the Canadian company you referenced, the reality is that as long as the company has some connections to a foreign country—let's say the United States—Canadian data protection laws and Canadian privacy laws are insufficient to guarantee that Canadian privacy law will apply.
I'm grateful to see the Canadian alternatives we see from some of the large telecom companies on sovereign AI—from the Bells and Teluses of the world. They can't guarantee sovereignty over data unless Parliament acts by developing strong privacy laws that better guarantee the protection of our privacy.