The Canadian government plans to adjust its contentious lawful access legislation to address concerns raised by critics who argue the bill could compromise cybersecurity. Public Safety Minister Gary Anandasangaree, the sponsor of Bill C-22, announced that he intends to introduce amendments to enhance encryption protection and clarify the metadata requirements for tech and telecommunication companies. Despite these changes, Anandasangaree underscored the importance of enacting the bill.
Bill C-22 aims to assist law enforcement and the Canadian Security Intelligence Service (CSIS) in accessing digital information for investigations, a long-standing request from the security community. However, the latter part of the bill has drawn sharp criticism for mandating unspecified “electronic service providers” to modify their systems to enable the transmission of information to authorities with a warrant. Additionally, core providers would be required to retain metadata, such as sender and recipient information, for up to one year.
The legislation grants the Minister of Public Safety the authority to issue ministerial orders to providers, including data retrieval and device tracing, subject to approval by the intelligence commissioner. While providers can challenge government directives, they are prohibited from disclosing order details. Major tech companies, the federal privacy commissioner, and U.S. lawmakers have expressed apprehension that the bill’s requirements could weaken encryption, a crucial tool for safeguarding communications and sensitive data.
Anandasangaree confirmed that proposed amendments, due Wednesday night, will focus on clarifying encryption standards and aligning metadata regulations with U.S. legislation. Conservative Leader Pierre Poilievre expressed skepticism about the amendments, accusing the Liberal government of fostering a “surveillance state” rather than prioritizing public safety. Despite opposition from the NDP and Green Party leaders, the Liberals possess a majority to pass the bill without cross-party support.
Critics, including tech giants like Apple and Google, have raised concerns about the bill’s potential impact on privacy and encryption. Anandasangaree challenged the credibility of these companies’ privacy commitments, emphasizing the need for accountability in the tech industry. Law enforcement agencies, including police and CSIS, have stressed the urgency of updating legislation to address evolving technology threats that jeopardize public safety.
Acknowledging past shortcomings in updating lawful access laws, Bill C-22 represents the government’s latest effort to modernize the regulatory framework. Previous attempts, such as the Harper government’s 2012 reform, faced significant backlash and ultimately failed. The Canadian government’s persistence in addressing lawful access challenges underscores the complex balance between security needs and privacy concerns.