'This is a very alarming situation': There's no guarantee that Canadian regulations can permanently safeguard customer data after the American company's bankruptcy sale