How are they obliged to comply with Canadian laws and regulations if they're not operating in Canada?  Australia has some of the world's toughest privacy laws, but I can assure you that they aren't extra-territorial and a company not operating in Australia can't be forced to comply with them.