The Electronic Frontier Foundation reported on October 22, 2026, that Canada's Parliament is debating Bill C-22, a legislation that would expand government surveillance powers and impact digital privacy.
Surveillance and Encryption Concerns
According to the Electronic Frontier Foundation, Bill C-22 gives the government new powers to force digital services, including telecom companies and messaging apps, to assist with government surveillance. The organization stated that the legislation allows Canada's Minister of Public Safety to order companies to create backdoors for law enforcement as long as it does not lead to a systemic insecurity.
The EFF warned that this is a clear recipe for weakening encryption. Additionally, the bill mandates that services retain metadata for up to a year, revealing communication patterns, travel locations, and service usage for individuals not suspected of any crime.
Constitutional Analysis and Data Sharing
Researchers at the Canadian Civil Liberties Association and Citizen Lab published a detailed analysis outlining serious constitutional and cybersecurity problems with Bill C-22. The analysis calls for the complete withdrawal of Part 2 of the bill, which establishes the surveillance and data retention regime.
The EFF noted that the legislation could also expand the sharing of personal data with foreign law enforcement, including the United States. Canada has been negotiating a cross-border data-sharing agreement with the U.S. that would permit American police to obtain information about Canadian internet users without Canadian court oversight.
What to do
- Read and sign the Canadian Civil Liberties Association petition opposing Bill C-22.
Key facts and where they come from
- Bill C-22 has passed the House of Commons and is currently before the Canadian Senate.
has already passed the House of Commons, and is now before the Canadian Senate.
- The bill allows the Minister of Public Safety to order companies to create law enforcement backdoors.
allows Canada’s Minister of Public Safety to order companies to create a backdoor to their services for law enforcement
- Digital services are required to retain user metadata for up to a year.
requires services to retain metadata for up to a year
- CCLA and Citizen Lab published an analysis calling for the total withdrawal of Part 2 of Bill C-22.
calls for entirely withdrawing Part 2 of Bill C-22, the section that establishes the surveillance and data retention regime.
