of EU–Canada trade in goods and services
2025European Commission, EU–Canada tradeHome / Jurisdictions / Canada
Country file
Canada
Canada maintains a substantial services relationship with the Union. CETA, data adequacy and cyber assurance must nonetheless remain three distinct readings.
Relationship with the European Union
CETA applied provisionally
CETA notably facilitates trade in services. It does not constitute a general recognition of a supplier's cyber controls.
Sources reviewed on 1 November 2026
of goods and services trade since 2016
2016–2025European Commission, EU–Canada tradeof EU–Canada services trade
2025European Commission, EU–Canada trade01
Economy and sectors
25.5%
of finance and insurance firms report having been affected by an incident
2023Survey of Canadian businesses
Statistics Canada, incidents by sector24.7%
in information and cultural industries
2023Same investigation and same definition
Statistics Canada, incidents by sector21.1%
in professional, scientific and technical services
2023Same investigation and same definition
Statistics Canada, incidents by sectorNo country regime
European Union restrictive measures targeting the country
EU Sanctions Map, as at 26 September 2026No EU restrictive measures regime targets this country. Thematic regimes — terrorism, human rights, cyberattacks, chemical weapons — nonetheless target individuals of any nationality: screening against the consolidated list applies here as elsewhere.
EU Sanctions Map — European Commission02
Incidents, fraud and impersonation
16%
of Canadian businesses report having been affected by a cyber incident
2023Business survey; declining since 2019
Statistics Canada, business cybercrime50%
of affected companies cite scams and fraud among the methods encountered
2023Base: affected organisations
Statistics Canada, business cybercrime$704m revenue
of fraud losses reported to the Anti-Fraud Centre
2025Over 112,000 reports; under-reporting possible
Canadian Anti-Fraud Centre, 2025 report03
Points to check within your organisation
Data adequacy
Verify that the organisation and processing fall within the covered commercial scope; adequacy does not validate any cyber control.
Financial and technology clients
For sectors more exposed in the survey, prepare more detailed evidence on access, incidents, continuity and critical suppliers.
Fraud and impersonation
Separate systems security from validation of sensitive requests: sender identity, bank details, new payees and access.
Developments to be aware of
The topics that may change your answers
EU restrictive measures
No EU restrictive measures regime targets this country. Thematic regimes — terrorism, human rights, cyberattacks, chemical weapons — nonetheless target individuals of any nationality: screening against the consolidated list applies here as elsewhere.
CETA and trade in services
The agreement facilitates the business relationship without creating equivalence of controls.
Adequacy decision
Coverage applies to certain business organisations and must be verified for the actual flow.
Sector-specific cyber threats
The gaps between finance, information and other sectors help prioritise evidence without scoring the company.
Reported fraud
Reported losses measure the reports received, not the full extent of fraud suffered.
The adequacy decision can simplify certain flows but does not replace either the security file or the contractual commitments. Sector data is used to prioritise the review, particularly for financial and technology clients.
Official sources
- European Commission, EU–Canada trade
- Statistics Canada, business cybercrime
- Statistics Canada, incidents by sector
- Canadian Anti-Fraud Centre, 2025 report
- Canadian Centre for Cyber Security, 2025–2026 assessment
- Adequacy decisions — European Commission
- EU Sanctions Map — European Commission
- EU Consolidated Financial Sanctions List — European Commission
Confidential exchange
Describe your European relationship and the request received.
The Canada file positions a country and its relationship with the Union. What remains is to examine what your client expects of you, what your contract provides for, and what your evidence can establish today.