Why Washington Is Paying Attention to Canada’s New Security Bill

Canada’s proposed lawful access legislation is drawing growing scrutiny from the United States, adding another layer of tension to an already delicate Canada-U.S. technology and trade relationship.

Bill C-22, introduced by the Liberal government, would expand the ability of police and intelligence agencies to access digital information during investigations. While Ottawa argues the legislation is necessary to combat serious crimes and modernize investigative tools, critics in both Canada and the U.S. warn it could weaken digital privacy and cybersecurity protections.

The debate has now expanded beyond Canadian borders, with major American technology firms and influential U.S. lawmakers publicly raising concerns about the bill’s potential impact on encryption, data security and cross-border privacy rights.

U.S. Lawmakers Raise Concerns Over Privacy and Security

Late last week, two senior Republican members of the U.S. Congress sent a letter to Public Safety Minister Gary Anandasangaree urging Ottawa to reconsider aspects of the legislation.

The letter was signed by Jim Jordan, chair of the U.S. House Judiciary Committee, and Brian Mast, who oversees the House Foreign Affairs Committee.

The lawmakers argued that the legislation could significantly broaden Canada’s surveillance powers and create risks for American citizens whose data may pass through Canadian systems.

According to the letter, U.S.-based companies operating in Canada could face pressure to alter their encryption systems or risk losing access to the Canadian market. The congressmen warned that either scenario could undermine trust in American technology companies and create wider economic and national security concerns.

What Bill C-22 Would Change

At the centre of the controversy is Part 2 of Bill C-22, which would require telecommunications providers, internet companies and social media platforms to ensure their systems can support lawful access requests from police and the Canadian Security Intelligence Service, or CSIS, when investigators obtain judicial authorization.

The legislation would also require core service providers to retain metadata for up to one year.

Supporters of the bill say the measures are essential for investigating crimes that increasingly rely on digital evidence. Critics, however, argue the proposal could create vulnerabilities that hackers or hostile foreign actors might exploit.

Critics Warn of Expanded Surveillance

Michael Geist, the University of Ottawa’s Canada Research Chair in internet and e-commerce law, has become one of the bill’s most prominent critics.

Geist argues that mandatory metadata retention could allow governments to build detailed records of Canadians’ online activities and communications.

He also warns that forcing companies to redesign systems for easier access could effectively create “back doors” that weaken overall cybersecurity protections for users in both Canada and the United States.

The issue has resonated south of the border because many of the companies affected — including major cloud, messaging and social media platforms — are American-owned and handle data for millions of U.S. users.

Tech Industry Pushback Intensifies

The controversy follows earlier disputes between Ottawa and large U.S. technology companies over measures such as Canada’s digital services tax and the Online Streaming Act.

Last year, the federal government abandoned its proposed digital services tax after pressure linked to broader trade discussions with the United States. The tax would have applied to major firms including Amazon, Google, Meta and Apple.

Now, Bill C-22 risks becoming another point of friction.

Encrypted messaging platform Signal has reportedly indicated it could leave the Canadian market if forced to comply with the legislation.

Meanwhile, Apple has suggested it may withdraw some privacy-related services if the bill proceeds unchanged. The company previously removed its Advanced Data Protection feature in the United Kingdom after British authorities sought broader access to encrypted user data.

Meta Calls for Clarification

Meta — the parent company of Facebook, Instagram and WhatsApp — has also publicly criticized the bill.

Rachel Curran, Meta’s director of public policy in Canada, said the company hopes Ottawa will amend the legislation to make clear that encryption protections will not be weakened.

Curran noted that similar disputes over encryption have already caused tensions between Washington and London, particularly after U.S. intelligence officials criticized British efforts to access encrypted data.

Police and Child Protection Groups Support the Bill

Law enforcement officials across Canada say the legislation is necessary to help investigators access court-authorized digital evidence tied to serious crimes.

Ontario Provincial Police Commissioner Thomas Carrique, who also serves as president of the Canadian Association of Chiefs of Police, said investigators frequently face obstacles when seeking access to digital evidence during criminal probes.

Carrique argued that online crimes such as human trafficking, child exploitation, extortion and organized violence increasingly depend on electronic communications and digital records.

He questioned whether opposition from some technology companies is driven primarily by privacy concerns or by the costs associated with compliance.

Child Protection Advocates Want Faster Action

The Winnipeg-based Canadian Centre for Child Protection is also urging Ottawa to move ahead with the legislation.

The organization says its technology has generated more than 141 million takedown notices involving child sexual abuse material since 2017.

Monique St. Germain, the centre’s general counsel, pointed to Statistics Canada data showing that many online child sexual offences never lead to charges.

She said Canada should be able to enact laws it believes are necessary to protect citizens, even if the measures generate political friction with the United States.

Ottawa Defends the Legislation

Facing mounting criticism, the federal government has intensified efforts to defend the bill publicly.

Minister Anandasangaree has repeatedly stated that Bill C-22 does not require companies to break encryption or introduce systemic vulnerabilities into their systems.

The government has also argued that other Five Eyes intelligence partners — including the United States, the United Kingdom, Australia and New Zealand — already operate lawful access frameworks.

During a recent news conference, Anandasangaree accused large technology companies of mischaracterizing the legislation and said Ottawa needs to better explain the safeguards included in the bill.

A Growing Canada-U.S. Technology Flashpoint

As debate over digital privacy, encryption and public safety continues, Bill C-22 is increasingly emerging as more than a domestic policy issue.

The legislation now sits at the intersection of cybersecurity, law enforcement, trade and international diplomacy — areas where Canada and the United States remain deeply interconnected.

Whether Ottawa ultimately amends the bill or presses ahead unchanged, the dispute highlights the growing geopolitical significance of digital regulation and the challenge governments face in balancing privacy rights with modern policing needs.