Canadian Payment Giant Moneris Sold to US Firm Amid Digital Sovereignty Concerns

Two of Canada's largest banks, Royal Bank of Canada and Bank of Montreal, have announced the sale of Moneris Solutions Corp., a significant payment processing company, to the US-based investment firm Francisco Partners for $2 billion. Moneris handles approximately one-third of all payment transactions in Canada, servicing over 325,000 businesses and processing more than five billion transactions annually.

While the banks are set to profit from the sale, with RBC and BMO expecting substantial financial gains, some analysts and privacy advocates are expressing concern. These worries centre on Canada's digital sovereignty, which refers to the nation's ability to control its own digital assets and economy. The sale to a US firm, occurring amidst trade disputes between the two countries, raises questions about potential foreign access to sensitive Canadian consumer data.

Privacy experts, such as Sharon Polsky, president of the Privacy and Access Council of Canada, highlight that the transaction data held by Moneris could potentially be accessed by foreign governments or law enforcement agencies. This could lead to situations where Canadians' purchasing habits are scrutinized, potentially impacting border crossings or other interactions with foreign authorities. Senator Colin Deacon has also voiced concerns about the possibility of US authorities leveraging this data.

Moneris has stated its commitment to continuing its services to Canadian businesses unchanged after the ownership transition. However, privacy advocates argue that Canada's current privacy legislation may not be robust enough to protect its citizens' data if compelled by US law, citing the potential for companies to prioritize foreign legal requirements over Canadian ones.

The Canadian government has introduced Bill C-36, the Protecting Privacy and Consumer Data Act, aiming to update privacy frameworks and require privacy impact assessments for data transfers outside Canada. Despite these efforts, some experts feel the legislation does not sufficiently address national security or data sovereignty concerns. The Moneris sale is subject to regulatory approval and is anticipated to close by early 2027, leaving ongoing debate about the future of Canadian digital data protection.