Last Update: 04/05/2026 at 2:50 PM EST

Canada Tightens Lawful Access Rules

Coverage from Michael Geist, Reclaim The Net, and others

Articles

5

Latest Article

03/24

Active Days

12

Executive Summary

Bill C-22 narrows warrantless subscriber data demands but expands metadata retention and provider surveillance duties, raising privacy and security concerns

  • Bill C-22 replaces broader warrantless demands with telecom-only service confirmation
  • Subscriber information beyond service confirmation requires judicially approved production orders
  • Core providers may be ordered to retain metadata for up to one year
  • Retained metadata can include transmission data, device identifiers, and location data
  • The bill excludes content, web browsing history, and social media activity from retention
  • Providers may face secret orders to help assess or test access capabilities
  • Critics say the scheme increases surveillance risk and may weaken network security

Quick Facts

  • What: Bill C-22 narrows access rules and expands metadata retention
  • Where: Across Canadian communications networks and provider systems
  • Why: To modernize digital investigations while enabling lawful access to data
  • Who: Canadian government, telecom and electronic service providers, police
  • When: Introduced in March 2026 after Bill C-2 backlash

Coverage Timeline: 12 Days

2Mar 13 '261Mar 171Mar 191Mar 24 '26

Featured Article

Reclaim The Net / Ken Macon 03-13-2026
Canada's Liberal government introduces Bill C-22 in 2026 to compel providers in Canada to retain metadata for one year for law enforcement access.

Additional Articles

⭐⭐⭐⭐⭐⭐⭐⭐

Michael Geist / Michael Geist 03-13-2026
Canada's government introduced Bill C-22, the Lawful Access Act, yesterday to limit warrantless subscriber data demands while expanding surveillance capabilities within Canadian networks.
Michael Geist / Michael Geist 03-17-2026
Canadian government proposes metadata retention for core providers to store transmission data including location for up to one year in Canada.

⭐⭐⭐

Reclaim The Net / Christina Maas 03-24-2026
Gary Anandasangaree defended Canada's Bill C-22, which mandates one-year electronic service provider metadata retention for police and CSIS access.

⭐️⭐️

UL Lawyers 03-19-2026
On March 19, 2026, Toronto officials unveiled Bill C-22 updates requiring judicial authorization for subscriber information access and potentially up to one-year metadata retention by telecom providers.