Bohaker & Dirks (2015). Privacy Impact Assessments and Microsoft & Google Vendor Contracts: Examining Canadian University eCommunications Outsourcing decisions.

“To give just one representative example, here is the short explanation given on the University of Manitoba’s ‘Frequently Asked Questions page about their Office 365 email deployment. The question: ‘is my email subject to US government laws? The answer: ‘Yes. However, the move to Office 365 results in no appreciable difference to what currently exists with our email. US and Canadian laws regarding email are very similar in nature.63. In making such claims, we noticed that the authors of PIAs and University ‘FAQ’ documents were drawing on conclusions also reached by some privacy commissioners and asserted by some privacy experts and product vendors. As we have found in our research, this argument is deeply flawed.64 Canadian jurisdiction offers significantly better privacy protection to Canadians and residents than US jurisdiction does, for example.” (p 19)

See this page at