Pillar 02 · Legal

On Tuesday night the U.S. Trade Representative congratulated his own president on a deal with Canada. The post listed what the deal contains. Market access for American goods. Economic security commitments. And a phrase nobody in Ottawa has defined: "digital trade alignment."

The Prime Minister's statement said substantial progress had been made and important work remained. No mention of digital anything.

So one side named the concession and the other side didn't. That's usually how you tell who made it.

What the words mean

"Alignment" is not harmonization. It is not mutual recognition. It is not interoperability. Trade lawyer Barry Appleton made this point to The Logic: those are different terms of art, Greer didn't use any of them, and the template for what he did say already exists in an agreement Canada has signed.

That agreement is CUSMA. Chapter 19 already prohibits Canada from restricting cross-border data flows and from requiring companies to use or locate computing facilities in Canada as a condition of doing business. Two exceptions matter. The chapter doesn't apply to government procurement. And it doesn't apply to information held by or on behalf of a government.

If alignment means anything beyond what CUSMA already says, it means narrowing those exceptions. Michael Geist laid out the mechanism: the 2026 U.S. National Trade Estimate report flagged Shared Services Canada's sovereign cloud proposal as a trade barrier. Commitments on localization could constrain that proposal, Alberta's Sovereign Compute Environment (which excludes CLOUD Act providers), and any localization condition a future privacy law might contain.

Read that again. The U.S. government filed a formal objection to Canada's government buying Canadian cloud. Then its trade representative announced the deal includes digital alignment. You don't need a law degree to connect those.

The pattern

This isn't new. It's the third item on the list.

The Digital Services Tax was rescinded in June 2025, days after trade talks were suspended over it. The Online Streaming Act's mandated contributions are being killed. Vass Bednar of the Canadian SHIELD Institute told CBC the Online News Act is next, and that Big Tech submissions to USTR have specifically asked that Canada be prevented from mandating data residency.

Andrew Clement of Canadians for Digital Sovereignty put it more economically: alignment on digital trade is "the polite word for adopting rules written for American platforms."

Each concession was sold as the price of getting the deal done. Each deal then produced a new deadline and a new list. The DST bought a July 2025 target. The target moved. We are now in August 2026 watching a three-day pause.

What this does to sovereignty

Canada's digital sovereignty conversation has run on one assumption: that Ottawa or a province could, if it chose, require that Canadian data be held by Canadian-controlled infrastructure. Every provincial playbook, every federal sovereign cloud RFI, every "made in Canada AI" announcement rested on that assumption.

If the deal text narrows the CUSMA procurement and government-data carve-outs, the assumption is gone. Not weakened. Gone. A trade commitment is enforceable. A minister's preference is not.

And the CLOUD Act does not care about any of this. A U.S. provider served with a U.S. order must produce data it can access, regardless of where the server sits or what the Canadian contract says. That was true before Tuesday. What changed is that Canada may have just agreed not to do anything about it through procurement or legislation.

What's left

Here is the mechanism nobody in the trade coverage has mentioned.

A trade agreement constrains governments. It does not constrain what a customer does with their own encryption keys.

CUSMA cannot require a Canadian hospital, bank, or department to hand a hyperscaler the means to read its data. It can only prevent the government from requiring that the hyperscaler be Canadian. Those are different things. The first is custody. The second is residency. We have spent five years conflating them, and the trade deal is about to make the distinction expensive.

If the provider holds the keys, the CLOUD Act reaches the plaintext. If the customer holds the keys, the CLOUD Act reaches ciphertext. No trade chapter changes that arithmetic. It is the only sovereignty instrument left that Washington cannot negotiate away, because it was never Ottawa's to give.

Sovereignty by statute just got traded for a tariff pause. Sovereignty by architecture is still available. It always was. It was simply easier to wait for a mandate.

What to read when the text drops

Three things.

First, whether Article 19.2's exclusions for government procurement and government-held information survive intact.

Second, whether any new language touches encryption, key escrow, or source code disclosure beyond current 19.16.

Third, whether provincial procurement is captured. Alberta and Ontario have both been building sovereign compute policy on the assumption that it isn't.

If all three hold, the alarm is premature. If any one fails, the sovereign cloud strategy of every government in this country needs rewriting by Monday.

Appleton's point stands either way. We are not waiting to find out whether Canada gave something on digital. Greer already said so. We are waiting to find out how much, and we've been asked to wait until after the signature.

Bias Declaration: I run a company whose entire premise is that the customer, not the provider, should hold the keys. A trade deal that forecloses mandated residency is bad for the country and, uncomfortably, clarifying for my business. I would have preferred the country.


Geist on what alignment could mean: https://www.michaelgeist.ca/2026/08/digital-trade-alignment-what-may-be-in-play-in-the-canada-u-s-trade-deal/

Appleton in The Logic: https://thelogic.co/news/carney-trump-tariff-pause/

CUSMA Chapter 19: https://ustr.gov/sites/default/files/files/Press/fs/USMCA/USMCA-Digital_Trade.pdf