May 14, 2021 – Ottawa – Are you a business that provides cloud services, or a registrant in the Government of Canada’s Controlled Goods Program (CGP) that uses cloud services to store data?
Here is some important information regarding cloud services for controlled goods data:
Cloud service providers:
- To provide storage for controlled goods data, cloud service providers must be registered in the Controlled Goods Program, regardless of the technique or level of encryption used.
Individuals and organizations registered in the Controlled Goods Program:
- Cloud servers within Canada: Registrants are responsible for verifying that the service provider holds a valid Controlled Goods Program registration.
- Cloud servers outside of Canada: Registrants should liaise with Global Affairs Canada for all matters related to export controls.
- The transfer and/or storage of controlled goods data with cloud service providers that do not hold a valid Controlled Goods Program registration is an offence under Sections 37 and 44 of the Defence Production Act.
For full details on this requirement, please see our Communiqué.
If you have any questions regarding this registration requirement, please contact the contact the Controlled Goods Program.
For more information or questions about controlled goods
Learn more about controlled goods, how they are regulated and what this means for you or your organization, on the What are controlled goods page.
Stay informed about tenders, website updates and procurement news by subscribing to the: