Overview
- Signal, which warned Thursday it would leave rather than weaken end‑to‑end encryption, says Bill C‑22 would force changes that undermine user privacy.
- Windscribe, a Toronto VPN with more than 100 million registered users, said Friday it is preparing to move its headquarters because mandatory logging would break its no‑logs promise, and NordVPN said it would consider pulling service rather than keep user records.
- Bill C‑22 would require designated “core providers” to modify systems for lawful access and keep metadata for up to a year, a scope that could reveal who people contact and where they are and create tempting troves for hackers.
- Apple and Meta have opposed the draft, with Meta warning the language could require capabilities that bypass encryption or install outside surveillance tools on company systems.
- The government says the proposal is encryption‑neutral and bars orders that create systemic vulnerabilities, and it remains under review by the House public safety committee with key terms, including who counts as a core provider, still to be set in regulation.