ishtygashev / Depositphotos.com
OTTAWA — Several privacy-focused technology companies say they may leave the Canadian market if proposed federal legislation requiring the retention of user metadata becomes law, as opposition parties call for further scrutiny of parts of the bill.
Bill C-22 would require internet service providers, messaging platforms, email providers and other digital services to retain certain user metadata for up to one year and provide lawful access to that information for criminal investigations.
Signal, DuckDuckGo and NordVPN have all warned they could withdraw services from Canada rather than comply with the proposed requirements. Technology giants including Google, Meta and Apple have also raised concerns about the legislation’s impact on privacy and encryption.
Public Safety Minister Gary Anandasangaree has said the government intends to amend the bill so providers would not be required to break encryption. However, metadata retention requirements would remain in place.
Conservative public safety critic Frank Caputo said his party is prepared to support portions of the legislation aimed at providing law enforcement with additional investigative tools but believes other sections require more study.
Caputo said provisions dealing with encryption, metadata collection, government powers and ministerial authority raise concerns about privacy, civil liberties and oversight.
He also argued proposed rules governing the storage of personal data are too broad and give the federal government excessive authority without sufficient safeguards.
Supporters of the legislation say the measures would help police investigate serious crimes, while critics contend mandatory metadata retention could create new privacy and cybersecurity risks.
The bill remains under review in Parliament
Comments