The Personal Information Protection and Electronic Documents Act (the Act) does not prohibit organizations from outsourcing their operations across international borders.
via priv.gc.ca
I've heard this a ton of times working for clients in Calgary, but this Case Summary would seem to indicate that's incorrect.