The Senate chamber where Bill C-22 will be voted on, a potential turning point for digital privacy in Canada.
CANADA'S SENATE FACES BILL C-22, A SURVEILLANCE POWER PLAY
*Canada’s Senate is about to vote on Bill C-22, the Lawful Access Act, which would broaden state surveillance across digital services. Civil‑rights groups warn the bill threatens encryption, forces data retention, and could hand Canadian data to U.S. police without court oversight.*
Canada’s Senate is about to vote on Bill C-22, the Lawful Access Act, after the House of Commons cleared it. The legislation would expand state surveillance powers across digital services, from telecoms to messaging apps. Critics warn the bill threatens the encryption that protects everyday communications. The bill authorises the Minister of Public Safety to compel companies to embed a backdoor for law‑enforcement use, provided it does not create a “systemic insecurity.” It also forces providers to retain metadata for up to a year, creating a detailed map of who talks to whom, where they travel, and which platforms they use, even for users not under investigation. Civil‑rights groups CCLA and Citizen Lab have released an analysis calling for the removal of Part 2, the core surveillance and data‑retention provisions. They warn the measure could also open the door to unchecked data sharing with U.S. authorities under a pending cross‑border agreement. The window to stop the bill is closing.
What does Bill C-22 actually mandate?
Bill C-22, dubbed the Lawful Access Act, has already passed the House of Commons and now sits before the Senate. It grants the government authority to compel digital service providers—including telecom carriers, messaging platforms and other online services—to assist in surveillance operations. The law permits the Minister of Public Safety to order the creation of a backdoor into these services, with the caveat that it must not cause a “systemic insecurity.” Additionally, the bill mandates that providers retain user metadata for up to one year, capturing details of communications, locations and service usage regardless of any criminal suspicion.
Why is the backdoor clause a security risk?
A mandated backdoor undermines the cryptographic guarantees that protect data in transit. By forcing companies to embed a law‑enforcement access point, the bill creates a single point of failure that can be exploited by malicious actors. The “systemic insecurity” exemption does not prevent the introduction of vulnerabilities; it merely shifts the risk from the state to the public. Researchers at CCLA and Citizen Lab argue that such a requirement weakens the encryption relied upon by millions of Canadians, exposing personal and business communications to potential interception.
How does the bill expand cross‑border data sharing?
Bill C-22 includes provisions that could broaden the flow of Canadian personal data to foreign law‑enforcement agencies, notably the United States. Canada is negotiating a cross‑border data‑sharing agreement that would let American police obtain information on Canadian internet users without any Canadian court oversight. If enacted, the bill would legitimize that exchange, bypassing existing privacy safeguards. Critics note that this arrangement conflicts with constitutional privacy protections and could set a precedent for other jurisdictions to demand similar access, eroding Canada’s digital sovereignty.
What can Canadians do right now?
The Canadian Civil Liberties Association has launched a petition demanding the withdrawal of Part 2 of Bill C-22. The petition, hosted on the CCLA website, is governed by its privacy policy. The organization urges every Canadian to sign and to contact their senators, urging them to reject the legislation. With the Senate debate imminent, public pressure could sway undecided lawmakers. The EFF’s Deeplinks post emphasizes that the deadline to act is fast approaching, and that failure to stop the bill would cement a new era of state surveillance across the country.
Frequently asked questions
What is Bill C-22?
Bill C-22, also called the Lawful Access Act, is legislation that has passed the House of Commons and is now before the Canadian Senate. It gives the government authority to compel digital service providers to assist in surveillance, mandates a backdoor for law enforcement, and requires metadata retention for up to a year.
How does Bill C-22 affect encryption?
The bill allows the Minister of Public Safety to order companies to create a backdoor into their services, provided it does not cause a “systemic insecurity.” This requirement weakens the encryption that protects communications, creating a vulnerability that can be exploited.
How can Canadians oppose Bill C-22?
The Canadian Civil Liberties Association is running a petition urging the withdrawal of Part 2 of the bill. Canadians can sign the petition on the CCLA website and contact their senators to demand that the Senate reject the legislation.
If the Senate approves Bill C-22, Canada will codify a surveillance framework that erodes encryption, forces data retention, and opens Canadian data to foreign police without judicial review. The legislation would mark a decisive shift toward state‑driven monitoring, contradicting the privacy guarantees enshrined in the constitution. Opposition from civil‑rights groups and concerned senators shows the bill is not unchallenged, but the window to reverse it is narrowing. Canadians must act now, or the country will inherit a law that normalizes pervasive digital spying.
Sources: https://www.eff.org/deeplinks/2026/10/canadians-are-running-out-time-oppose-dangerous-c-22-surveillance-bill