Canada’s Bill C-22 Targets Encrypted Services
Coverage from TechRadar, The Record, and others
Articles
19
Active Days
127
The Topic

Canada’s Bill C-22 would revise lawful-access rules while allowing regulations that could require certain communications providers to support access capabilities and retain categories of metadata for up to one year. The government says the proposal excludes communication content and browsing history and adds oversight, while technology companies, privacy advocates, and some U.S. policymakers warn that retention and technical-assistance requirements could weaken security, expose sensitive location patterns, and affect services operating across borders. The legislation remains contested as it advances through Parliament.
First Article: 03/13/26
Latest Article: 07/17/26
Summary
- Bill C-22 would permit regulations requiring designated core providers to retain categories of metadata for up to one year.
- The proposal excludes communication content, web-browsing history, and social-media activity from the described retention authority.
- The bill narrows some warrantless subscriber-information demands by introducing judicially reviewed production orders, but separate surveillance-capability provisions remain contentious.
- VPN providers, encrypted messaging services, Apple, and Google are seeking clearer encryption protections and metadata definitions; Signal and Windscribe have raised the possibility of leaving Canada.
- Critics argue that retained transmission and location data could reveal communications patterns and reconstruct movements even without storing message content.
- The legislation could affect foreign technology companies and cross-border data flows, prompting concern in the United States and among digital-rights researchers.
- Canada’s parallel push for sovereign AI and stronger data protections reflects broader concern about dependence on foreign platforms and infrastructure.
History
The story has shifted from general warnings about Bill C-22 to a more specific parliamentary status update, with the House reportedly passing it and Senate approval still pending. The current version also clarifies the bill’s narrower exclusions and adds a broader sovereignty/data-protection framing.
The story is now framed more explicitly as a cross-border issue, with U.S. officials and lawmakers joining the opposition to Bill C-22. The updated version also sharpens the list of major corporate critics and adds the claim that the bill’s metadata rules could create economic and competitiveness costs.
