Global Affairs Canada issues Notice to Exporters No. 1159 on cloud storage of controlled technology

Global Affairs Canada's Notice to Exporters No. 1159 states that storing controlled technology in the cloud can constitute a transfer under the Export and Import Permits Act, requiring an export permit, where there is a reasonable possibility that a person outside Canada could examine the technology. GAC interprets a transfer as occurring when controlled technology is sent from Canada and stored abroad in a way that creates more than a remote possibility of foreign access, including through decryption keys or access rights. Safeguards consistent with the Canadian Centre for Cyber Security's Guidance on cloud security assessment and authorization will generally mean no permit is required.