Full Breakdown
Tech Companies Threaten Exit Over Canada’s Bill C-22 Lawful-Access Proposal
6/9/2026, 10:46:41 PM
Bill C-22’s Core Requirements
The proposed law would obligate “core” telecom and satellite providers to retain specified metadata for up to one year and to build technical capabilities that allow police and the Canadian Security Intelligence Service to retrieve that data. A public-safety minister could issue a ministerial order—approved by the intelligence commissioner, not a judicial warrant—forcing any provider, even non-core ones, to develop the requested capability. The legislation also bars providers from disclosing the existence or content of such orders.
Industry Threats to Exit
During testimony before the House of Commons public-safety committee, Signal’s vice-president of strategy and global affairs Udbhav Tiwari warned the firm would leave Canada rather than compromise user privacy. Executives from Apple, Google and Meta echoed the concern that the bill could compel them to create encryption “backdoors.” VPN operators NordVPN, Windscribe, DuckDuckGo and Tailscale likewise announced they would consider removing or relocating services if the bill remains unchanged.
Companies and Representatives
- Signal – Udbhav Tiwari, VP of strategy & global affairs
- Apple – Erik Neuenchwander, senior director of user privacy & child safety
- Google – Jeanette Patell, director of government affairs & public policy, Canada
- Meta – Rachel Curran, director of public policy, Canada
- NordVPN – corporate account on X (formerly Twitter)
Government Position
Public-Safety Minister Gary Anandasangaree told the committee that the government will amend Bill C-22 to clarify that it does not permit breaching encryption. He affirmed that the one-year metadata-retention period will stay, arguing that a shorter term would hinder investigations, and indicated willingness to refine other provisions.
Opposition and Concerns
Legal scholar Michael Geist described the bill as inserting the government into networks and devices, undermining providers’ ability to guarantee privacy. Companies warn that mandatory capabilities could create systemic vulnerabilities, raise operating costs, and drive revenue out of Canada. Privacy advocates note the lack of judicial oversight and the vague definition of “encryption” as exposing Canadians to mass surveillance.
Data Highlights
- Mandatory metadata retention: up to 12 months.
- Providers such as Signal, Apple and Google assert they do not routinely log IP addresses or location data.
- Geist warned of “major additional costs” for redesigning systems and storing metadata, which could translate into higher consumer prices.
Gaps and Uncertainties
The bill does not define “encryption” nor provide a process for challenging ministerial orders, leaving legal uncertainty. While firms claim they keep no logs, the legislation would compel retention, but the exact scope of required data remains vague. No independent audit of compliance mechanisms has been disclosed.
Verbatim Quotes
- “In its current form, Bill C-22 would convert the everyday tools Canadians rely on into a sprawling, insecure surveillance apparatus,” — Udbhav Tiwari, Signal
- “Effectively, the government through this legislation seeks to insert itself into the networks and devices of various providers,” — Michael Geist, University of Ottawa
- “To prevent this, we will consider all viable options, including limiting or, if necessary, removing our presence from Canadian jurisdiction,” — NordVPN spokesperson, X post
- “As drafted, the bill could require companies like Meta to build or maintain capabilities that break, weaken, or circumvent encryption or other zero-knowledge security architectures, and force providers to install government spyware directly on their systems,” — Rachel Curran, Meta
What’s Next
The minister signaled forthcoming amendments to address encryption concerns while retaining metadata provisions. The Citizen Lab and the Canadian Civil Liberties Association have called for the removal of the metadata-retention and ministerial-order sections. Legislative debate is expected to continue through the summer, with potential revisions shaping the final law.
