MT, will you be inspecting/verifying CoinLab's security measures?
... and complicance with Canadian laws and regulations?
How are they obliged to comply with Canadian laws and regulations if they're not operating in Canada? Australia has some of the world's toughest privacy laws, but I can assure you that they aren't extra-territorial and a company not operating in Australia can't be forced to comply with them.
No Australia has very week privacy laws the HCA has ruled their is no tort of right of privacy, the fed legislation says the fed govt can collect information about you and give out information about you as long as you are aware or should have been aware this was going on. The have only privacy principles that are adhered to ad hoc. State legislation in nsw at least is a bit better to the extent
but by and large useless and un-enforcable