The Canadian government is prioritizing the dismantling of online privacy over addressing online crimes such as extortion and child sexual abuse, according to a recent critique. The proposed legislation, Bill C-22, also known as the Act Respecting Lawful Access, is currently under review in the House of Commons committee stage.
What Bill C-22 Proposes
The bill aims to require all service providers to build a government-accessible backdoor into encrypted communications, allowing the federal minister of public safety to access private conversations without a court order. The approval would come from the federal information commissioner, who is not independent from the government. Critics argue that this approach ignores the risks of organized crime infiltrating police and the impossibility of securing a government backdoor from cybercriminals.
Data Retention and Secret Orders
The bill also mandates that service providers retain users' data, including chats, browsing history, and location data, for one year. Additionally, the public safety minister can order secret data access without notifying the target, with limited court oversight, to avoid alerting criminals like sex traffickers or extortionists.
Concerns About Ministerial Oversight
Current Public Safety Minister Gary Anandasangaree, who previously recused himself from files involving Tamil terror organizations due to potential conflicts of interest, would have broad access to Canadians' online footprints. This raises concerns about privacy and potential misuse.
Impact on Crime and Businesses
Ironically, the bill could make it easier for criminals to extract sensitive data, such as nude photos, and expose confidential informants. This could deter cooperation with law enforcement. Moreover, major tech companies like Signal have threatened to leave Canada if the bill passes, citing the requirement to enable surveillance capabilities. VPN providers such as Windscribe and NordVPN have also indicated they would relocate.
In response, a spokesman for Anandasangaree claimed the government is not mandating surveillance capabilities, but the bill grants new powers to compel service providers to participate in surveillance activities.
