Overview
- Bill C-22 would require Canadian electronic service providers to modify systems to enable police and CSIS access and would let the Public Safety Minister issue secret orders that could compel compliance.
- The government says it will accept narrow amendments to protect encryption but insists on retaining a rule to force providers to keep metadata for up to one year.
- Signal told MPs on Tuesday that it would withdraw from Canada rather than re-engineer its app to comply and pressed for prior judicial authorization, independent technical review, and a ban on degrading encryption.
- A confidential Murray Rankin report urged clarifying the National Security and Intelligence Review Agency’s role in timely reviews but the recommendation was not adopted and NSIRA’s chair has warned the bill needs direct visibility into use of powers.
- Witnesses and civil groups have warned of constitutional and cybersecurity risks, committee members say study is rushed with untranslated briefs and dozens of amendments, and experts warn the law could prompt legal challenges and commercial pullouts that affect users.