Tech giants Apple and Google have urged Canadian lawmakers to amend Bill C-22, an online safety proposal currently under debate in the House of Commons, as reported by Reuters. The companies are seeking to include judicial oversight and stronger protections for encryption.
Background of Bill C-22
The bill, modelled on similar measures in Britain and Australia, aims to provide law enforcement with earlier access to encrypted data to investigate security threats. While it does not explicitly mandate breaking encryption, Apple, Google, and Meta have warned that it could pave the way for secret orders requiring backdoors in devices and services.
Google's Concerns
Jeanette Patell, Google’s director for government affairs in Canada, told lawmakers: “Secret orders are out of step with other democratic countries and would severely restrict companies’ ability to be transparent with users about how their data is protected.”
Apple's Stance
According to the Reuters report, Apple’s senior director for user privacy, Erik Neuenschwander, was asked whether the company would leave Canada if forced to build backdoors. He declined to speculate but emphasized Apple’s hope for “positive amendments” through ongoing dialogue. Apple previously withdrew encrypted cloud backup features in the UK after receiving a secret order there.
Canadian Authorities' Perspective
Canadian authorities argue that the bill would enable them to act more quickly against threats. However, critics say it risks undermining trust in encryption, a cornerstone of digital privacy. Global investors and governments are closely watching Canada’s debate, as it reflects broader tensions between national security priorities and consumer privacy protections.
What Bill C-22 Actually Does—and Why It's Causing Alarm
The bill has two distinct parts. Part 1 deals with modernizing how police can access subscriber information—basically, whether a telecom like Bell or Rogers provides service to a specific person. That part has drawn relatively little criticism. It's Part 2 where things get complicated.
Part 2: The Supporting Authorized Access to Information Act
Part 2 creates a new law called the Supporting Authorized Access to Information Act. Under this framework, electronic service providers—a term so broad it could apply to almost any internet-based business operating in Canada—can be ordered to build technical capabilities that let law enforcement and Canada's spy agency, CSIS, access data quickly and consistently.
The orders can be issued secretly by the Minister of Public Safety, with approval from the Intelligence Commissioner. There's also a provision allowing the government to require companies to retain certain metadata—including device location data—for up to one year. That means your phone could effectively become a government-accessible tracking device, even if you've done nothing wrong.
Canada Isn't the First Country to Try This—and Others Have Backed Down
This debate has played out before. In early 2025, the UK government secretly ordered Apple to hand over global access to encrypted iCloud data. Apple refused, pulled its Advanced Data Protection feature from the UK market entirely, and the British government eventually dropped the demand after the US raised concerns it could violate a cloud data treaty, Reuters reported.
Meta also noted in its testimony that France and Sweden abandoned similar proposals, and the EU has since guaranteed robust encryption protections in its online safety legislation.
Public Safety Canada maintains the law won't require companies to create systemic vulnerabilities and that tech firms have a "vested interest in keeping their systems secure." But for Apple, Meta, and privacy advocates like the Canadian Constitution Foundation, the concern isn't what the bill says today—it's what its broad, loosely defined powers could be used to demand tomorrow.
The bill is still being debated. Its final shape is far from settled.
