Customers interested in our eSchoolMall hosted solution expressed concerned about having the data stored on USA server. We had our lawyer review the Canadian privacy laws re the data that eSchoolMall would store.  His finding was that personal contact information (ex: home address) is covered by privacy laws and thus must reside on a Canadian server.  District contact information is published, and usually available via the web so this information is not covered by privacy laws.   In adddion, District transactional data is not covered by privacy laws and thus both can reside on a USA server.    ESchoolMall stores only district transactional and district contact information so customers will violate no privacy laws if they choose to implement this solution.
We still ask our 3^rd party providers to respect and treat all data as private so our lawyer developed a letter of intent which we have the customer and eSchoolMall sign.