Last Update: 04/05/2026 at 2:50 PM EST
Canada Tightens Lawful Access Rules
Coverage from Michael Geist, Reclaim The Net, and others
Articles
5
Latest Article
03/24
Active Days
12
Executive Summary
Bill C-22 narrows warrantless subscriber data demands but expands metadata retention and provider surveillance duties, raising privacy and security concerns
- Bill C-22 replaces broader warrantless demands with telecom-only service confirmation
- Subscriber information beyond service confirmation requires judicially approved production orders
- Core providers may be ordered to retain metadata for up to one year
- Retained metadata can include transmission data, device identifiers, and location data
- The bill excludes content, web browsing history, and social media activity from retention
- Providers may face secret orders to help assess or test access capabilities
- Critics say the scheme increases surveillance risk and may weaken network security
Quick Facts
- What: Bill C-22 narrows access rules and expands metadata retention
- Where: Across Canadian communications networks and provider systems
- Why: To modernize digital investigations while enabling lawful access to data
- Who: Canadian government, telecom and electronic service providers, police
- When: Introduced in March 2026 after Bill C-2 backlash

