Data disclosure requirements
12. Are there any local laws that would require a cloud service provider to disclose the data it hosts to any third parties in any circumstances (including regulatory or law enforcement authorities)?

Yes. While there are no laws that impose disclosure requirements on cloud service providers specifically, various Canadian law enforcement agencies and/or regulators may have the statutory right to subpoena or otherwise require the production of data and/or records in certain limited circumstances, under the applicable laws.