Do you know where your data is? Most Canadian business leaders can’t answer that question — and their boards are about to start asking.

In the premiere episode of AI, Unpacked, host Rick Byrne (Director of Systems Engineering, Veeam Canada) sits down with Derran Guinan, Veeam’s Field CTO for the Americas, to unpack why nobody actually knows where their data lives, why “it’s in Canada” might not mean what you think, and the one thing about data residency almost no one gets right.

In this episode:

• Why breach victims sometimes aren’t notified for two to three years — and what that reveals about most organizations
• The “easement” hiding in your data estate: data residency vs. data sovereignty, and the US CLOUD Act
• Canada’s new rules — Bill C-8 and the proposed PIPEDA replacement — and the question both start with
• A free, this-week action: three vendors, one afternoon with your legal team

Guest: Derran Guinan, Veeam’s Field CTO for the Americas

AI, Unpacked delivers clear answers on AI for Canada’s business leaders. Follow on Spotify and YouTube — search AI, Unpacked.

Show Notes & Resources

• PIPEDA — Personal Information Protection and Electronic Documents Act (Canada, 2000)
• Bill C-8 — An Act respecting cyber security, enacting the Critical Cyber Systems Protection Act (Royal Assent June 2026)
• Bill C-36 — the Protecting Privacy and Consumer Data Act, the proposed replacement for PIPEDA (tabled June 2026)
• US CLOUD Act — Clarifying Lawful Overseas Use of Data Act
• Veeam — the Data and AI Trust Company: veeam.com