[tonglil]

"Heck, even Canada now has a law that makes using Dropbox illegal if you are working with personal data (at least until Dropbox starts storing that data in Canada, or that’s what I was told). It’s called PEPIDA."

It's actually called PIPEDA, not PEPIDA.

Also, where is the source? I have done a good share of readings in this topic as part of my research in a Canadian university (< 4 months ago) and could not find the "illegal"-ness of such actions.

Currently, the act essentially outlines consent and putting the knowledge and power to update/remove private information with the users, and does not outline what services or actions are illegal.

It is important for people care about privacy, but it is not cool to post un-sourced opinions as facts, as people often mis-cite them as fact and propagate false info.

Here is the act, and a summary of responsibilities: https://www.priv.gc.ca/resource/fs-fi/02_05_d_16_e.asp