Canada’s Parliament is currently debating Bill C-22, a legislative proposal known as the Lawful Access Act. The bill has successfully passed the House of Commons and is now under consideration by the Canadian Senate. According to the Electronic Frontier Foundation (EFF), the legislation seeks to grant the government expanded authority to compel digital service providers—such as telecommunications companies and messaging applications—to assist in government surveillance operations.

A stylized illustration of a police officer and surveillance cameras looming over a city street grid with cars identified by license plates.
The bill's proposed surveillance powers have sparked concerns regarding the erosion of digital privacy and the expansion of government monitoring capabilities.www.eff.org

This image illustrates the broader implications of the expanded government authority to compel digital service providers to assist in surveillance operations.

A central mechanism of the bill involves the Minister of Public Safety's power to order companies to create 'backdoors' into their services for law enforcement purposes. The legislation specifies that these backdoors can be mandated as long as they do not result in a "systemic insecurity." Critics, including the Canadian Civil Liberties Association (CCLA) and Citizen Lab, argue that such requirements inherently weaken the encryption protocols that protect user privacy. Additionally, the bill would require services to retain metadata for up to one year, capturing details about who individuals communicate with, their locations, and the services they utilize, even for users not suspected of any crime.

Beyond domestic surveillance, Bill C-22 may facilitate the sharing of personal data with foreign law enforcement agencies, including those in the United States. This is linked to ongoing negotiations for a cross-border data-sharing agreement that could allow American police to access information on Canadian internet users without Canadian court oversight. While some Canadian senators have expressed concerns regarding the bill's compatibility with constitutional privacy protections, the CCLA and Citizen Lab have called for the complete withdrawal of Part 2 of the bill, which establishes the primary surveillance and data retention regime. The legislation remains a point of contention as it moves through the legislative process toward potential enactment.