An American private equity firm is set to acquire Moneris, a major payment processing company in Canada that handles about one-third of the country’s payment transactions. The Royal Bank of Canada and Bank of Montreal have agreed to sell Moneris to Francisco Partners for $2 billion, a move that has seen a positive response from investors, with shares of both banks rising following the announcement. RBC stands to gain approximately $475 million from the sale after taxes, while BMO expects to pocket around $600 million.
However, concerns have been raised by industry analysts regarding the potential impact on Canada’s digital sovereignty in light of the ongoing trade disputes with the U.S.
Implications on Digital Sovereignty
Digital sovereignty relates to a country’s ability to maintain control over its digital assets. In September, AI Minister Evan Solomon emphasized the need for Canada to establish a sovereign digital economy that is independent and free from external influence.
Several experts and academics penned an open letter urging Prime Minister Mark Carney to safeguard Canada’s digital sovereignty and shield the nation from external pressures, particularly in light of the Moneris deal.
Sharon Polsky, President of the Privacy and Access Council of Canada, echoed these concerns and emphasized the potential risks associated with Canadian data being accessible to foreign entities, including law enforcement agencies.
Moneris, which serves over 325,000 commerce points and processes more than five billion transactions annually, is extensively used by businesses across Canada.
There are apprehensions that the acquisition could lead to Canadians’ data being exposed to foreign governments and law enforcement authorities, raising privacy and security concerns.
Utilization of Transaction Data
The timing of the deal amid trade tensions between Canada and the U.S. has further fueled fears of potential exploitation of transaction data for trade negotiation leverage. Experts caution that sensitive data from millions of Canadian transactions could be utilized in trade discussions, posing a significant risk to privacy and national interests.
Independent Canadian Senator Colin Deacon expressed concerns over the potential misuse of Canadians’ data by the U.S. government, highlighting the need for stringent safeguards to protect sensitive information.
Both BMO and RBC have refrained from providing detailed comments on the deal beyond their initial press releases, emphasizing a commitment to continuing services for Canadian businesses under the new ownership.
Legislation and Privacy Protection
Privacy advocates stress the inadequacy of current laws in safeguarding digital privacy in Canada, underscoring the urgent need for robust regulatory frameworks to protect citizens’ data.
Proposed legislation, such as Bill C-36, aims to enhance privacy protections and establish privacy as a fundamental right. The bill mandates companies to conduct privacy impact assessments before transferring personal data outside Canada, aiming to strengthen data protection measures.
Despite efforts to update privacy laws, critics argue that current initiatives fall short in addressing critical issues related to data security and sovereignty. Bill C-36 represents the government’s latest attempt to modernize privacy regulations but faces challenges in becoming law.
The completion of the Moneris sale is subject to regulatory approvals, including clearance under the Competition Act, and is anticipated to conclude by the end of the banks’ fiscal first quarter in 2027, underscoring the need for comprehensive data protection measures and regulatory oversight in the digital age.
Canada’s journey towards bolstering its digital sovereignty and enhancing privacy protections remains ongoing, with stakeholders emphasizing the importance of robust legislation and proactive measures to safeguard citizens’ data and uphold national security interests.
