The Premier Answered a Question Nobody Asked

Pillar 02 · Legal

While writing about Doug Ford's new Data Centre Playbook, I remembered something from the spring.

April 30. Jim Balsillie is in front of the House industry committee. He is asked about Cohere contracting CoreWeave, a US company, to operate a new data centre in Ontario. Funded with $240 million from the Canadian Sovereign AI Compute Strategy. His verdict: an own goal of the most severe proportions.

The reason he gave matters more than the verdict. The facility is in Ontario. The operator is American. So the data inside it is reachable under the US CLOUD Act. The building is here. The jurisdiction is not.

Fast forward to last week. The Premier stands in front of the Guelph Data Centre and announces a provincial playbook that will, in his words, ensure Canadians' data remains in Canada. Today in Ottawa he sharpened it. Build data centres here or watch our data end up in the hands of President Trump, who would cut us off in three seconds.

I actually agree with the second sentence. Which is why the first one bothers me.

Read the playbook

The Data Centre Playbook is an electricity policy. A good one, possibly. It governs grid connection. It requires facilities over one megawatt to pay a premium rate. It encourages closed-loop cooling. It addresses water, noise, and local economic benefit. It gives the province final say over which projects connect to the grid.

Megawatts. Water. Noise. Approvals.

Now search the framework for the words that would actually keep Canadian data out of foreign hands. Operator jurisdiction. Corporate domicile. Key custody. Legal control. Compelled disclosure.

They are not there. The playbook regulates where the servers sit and how much power they draw. It says nothing about who controls them.

Location is not jurisdiction

Here is the mechanism, because the mechanism is the whole story.

The CLOUD Act does not care about geography. It compels any provider subject to US jurisdiction to produce data in its possession, custody, or control, regardless of where that data is stored. A hyperscaler region in Toronto. A CoreWeave facility in Cambridge. A colocation cage in Barrie with an American operator holding the keys. All equally reachable. The warrant does not need a passport.

This is not a fringe reading. It is the reading Microsoft's own executives have given under oath. It is the reason Balsillie called the CoreWeave contract an own goal. The federal government spent sovereignty money and bought residency. Residency is where the data sleeps. Sovereignty is who can be forced to hand it over.

So when the Premier says building data centres in Ontario keeps Canadians' data away from Washington, he is answering a question nobody asked. Nobody doubts we can pour the concrete here. The question is who holds legal control of what runs inside. If the answer is a US-domiciled operator, we have built Trump a very convenient local branch office. With closed-loop cooling.

The tell

Ontario already has roughly 100 AI data centres. Ask how many are operated by entities outside the reach of US compelled disclosure. Ask how many of the projects this playbook will approve over the next five years will be.

The province projects $122 billion in economic growth from this framework by 2035. Some of that will be real. But Balsillie made a second point in the spring that applies here. The intangible economy is a rentier economy. Somebody is the landlord and somebody is the tenant. A data centre where the land is ours, the power is ours, the water is ours, and the operator, the software, the keys, and the margin belong to someone else has a name. It is called being the tenant on your own property. We collect the hydro bill and call it sovereignty.

What the playbook should have said

One clause. That is all it would take to make the Premier's sentence true.

Facilities claiming to host Canadian government, health, or critical infrastructure data must demonstrate that no foreign legal process can compel disclosure. Not by policy. Not by contract. By mechanism. Keys held by entities outside foreign jurisdiction. Data fragmented so that no single compellable party possesses a usable whole. Control structures that make the CLOUD Act request land on someone who cannot comply because compliance is mathematically impossible.

That is a sovereignty requirement. Everything else is a zoning bylaw with a flag on it.

Balsillie graded the federal government's year on AI as did not attend. The province at least showed up. But it walked into the wrong exam. The playbook answers the energy question, which is real, and claims credit for the sovereignty question, which it never opens.

The spring testimony is still sitting there in the committee record. It cost nothing to read. It named the exact failure mode this playbook now repeats at provincial scale. We keep discovering that the building is not the point. The keys are the point. They have always been the point.

Bias Declaration: I founded SkyeConnex, a Canadian company whose entire premise is that data sovereignty is a property of key custody and jurisdictional structure, not of geography. I am financially motivated to believe the playbook is insufficient.