What Canadian laws or regulations exist for transmitting personal or
financial data to a U.S.-based company? i.e. What guidelines exist for
a U.S. company physically hosting the membership data of a Canadian
institution (such as name/address etc..) and transacting financial
requests (i.e. credit card purchases/donations) on a server located in
the United States?  Links to articles or specific laws would be
appreciated.

---

Clarification of Question by intheory-ga on 04 Apr 2006 06:37 PDT

nelson-ga: I do not believe that is entirely correct--however if you
have a source you can provide I'd appreciate it. If there is a law
forbidding the transmission of personal data electronically across the
border from Canada to the U.S., and if all of my company's servers are
in the U.S., that law certainly does apply.  Furthermore, if that is
the case and my company locates servers in Canada, there are other
laws that will apply to that business transaction, etc...  Since I
don't know the specific laws that's what I'm looking for.

If the U.S. company has no Canadian presence, Canadian law does not apply.