70 Prominent Canadians Ask the Empire to Please Behave

Pillar 02 · Legal

Seventy prominent Canadians, including Margaret Atwood, John Ralston Saul, Adrienne Clarkson, the CCLA and the CMA, signed an open letter asking Prime Minister Carney to defend Canada's digital sovereignty. One signatory supplied the line that made the headlines: "Empires once built railways. Now they build algorithms."

Lovely line. Correct diagnosis. And then the letter proposes, as its remedy, that we ask the railway company to build the station on our side of the border. Same trains. Same owner. Same schedule set in another capital. But the station has a maple leaf on it, and apparently that is the win condition.

Credit where due

The numbers are real. Roughly 90% of Canadian internet traffic routes through the US or US-based platforms. Amazon, Microsoft and Google control most of Canada's cloud infrastructure. The letter correctly notes that CUSMA prevents Ottawa from requiring those companies to store Canadians' data north of the border. All true. The signatories have accurately described the cage.

Then July happened

On July 1 the United States declined to renew CUSMA and opened a full renegotiation. Back in March, the USTR's National Trade Estimate, an annual catalogue of other countries' policies that inconvenience American revenue, listed Canada's sovereign computing initiative and digital sovereignty rules as trade barriers. For the first time. Washington is now proposing treaty language on data centres and AI infrastructure that would lock in exactly the constraint the 70 signatories want removed.

So while the letter asks Ottawa to loosen the localization prohibition, the US is at the table proposing to weld it shut. And bear in mind the baseline: CUSMA's Article 19.12 was already the strictest data localization ban in any major trade agreement. The CPTPP at least includes a "legitimate public policy objective" exception. CUSMA has none. The Americans negotiated out the escape hatch in 2018, and they are back in 2026 to check the welds. This is not a team that forgot about data centres. They think about little else.

Now for the part everyone skips

Suppose Canada wins anyway. Suppose our negotiators pull off the miracle, extract a carve-out, and Parliament triumphantly mandates that Canadian data live in Canadian data centres. Ribbon cuttings. Press releases. Sovereignty achieved.

The building is in Montreal. The operator is a US person: Amazon, Microsoft or Google, per the letter's own inventory of who runs Canadian cloud.

The CLOUD Act does not read postal codes. It attaches to the entity, not the geography. A US provider can be compelled to produce data in its possession, custody or control wherever that data physically sits. FISA 702 works the same way. Congratulations: we will have moved the filing cabinet into our living room while the landlord keeps the key. The Montreal address improves the latency and precisely nothing else. I have a name for this: sovereignty theatre. A flag on the server rack, and everyone salutes.

So the letter's remedy fails twice. It is barred by treaty, a treaty the US is currently renegotiating specifically to bar it harder. And in the fantasy scenario where it is not barred, it does not work.

The one demand Washington cannot table

Give the Americans this much: they understand the game. Jurisdiction over data is the asset, which is why data centres are now a treaty item. Nobody burns negotiating capital foreclosing an option their counterparty was never going to use. The USTR is not worried that Canada might pass a residency law. Residency laws are free. The USTR is worried about the thing residency laws pretend to be.

Because the entire treaty fight only matters if compelled disclosure has something to disclose. And that is an architecture question, which no trade lawyer on either side of the border can do anything about.

If data is encrypted client-side with post-quantum cryptography (ML-KEM-1024, because harvest-now-decrypt-later is a collection strategy with a budget line, not a thought experiment), then erasure-coded and sharded across independent jurisdictions using RS(5,2), any two shards recover the data for the owner and no single shard is useful to anyone else. Serve a compelled-disclosure order on any one provider and you receive a fragment of ciphertext below the reconstruction threshold. The provider complies fully, promptly and cheerfully. Full compliance produces nothing. Everyone follows the law. The law comes back empty-handed.

No CUSMA annex can reach that. The NTE cannot list it as a trade barrier, because it is not a measure. It is math, and math has so far declined to attend the negotiations. The US can bargain away Canada's right to mandate localization. It cannot bargain away the properties of a zero-knowledge system, which is precisely why we built Raidr.cloud that way instead of writing letters.

What I would put in the letter instead

The current draft asks the government to consult, assess, update, reconsider and withdraw. Five verbs, zero architecture. A committee could be struck. Perhaps a framework. Here is a shorter list.

1. Stop conceding the premise. Do not spend renegotiation leverage fighting for localization rights that would not deliver sovereignty even if won. Trade them for something with actual value, of which this negotiation has no shortage.

2. Procure for architecture, not addresses. Government procurement should require demonstrable immunity to extraterritorial compelled disclosure: zero-knowledge custody, jurisdictional sharding, verifiable Canadian control. A postal code is not a security control. It is a shipping detail.

3. Fund the threat assessment the letter wants, but have it name the actual threat. The question was never where the data sits. The question is who can be ordered to hand it over, and what they are holding when the order arrives.

Seventy distinguished Canadians noticed the empire. Genuinely, good. The next step is noticing that the empire employs lawyers, the lawyers read the same map, and the only layer they cannot subpoena is the one where the treaty does not apply and the ciphertext does not cooperate.

https://ca.news.yahoo.com/70-leading-canadians-civil-society-191913457.html

Ross Norrie is the Founder and Architect of SkyeConnex. Raidr.cloud is the reference implementation of the argument above.