Brifing

Tech Firms Challenge Canada's Surveillance Bill C-22

Companies warn proposed law could harm trust and competitiveness in Canada's tech sector.

BetaKit2 min

1Industry Coalition Forms

A group of Canadian and European tech companies, including Tailscale and Windscribe, sent an open letter to Canadian ministers expressing concerns about Bill C-22. They argue the legislation would undermine trust in Canada's tech industry and weaken its global competitiveness. The signatories represent diverse sectors from VPN services to logistics and cybersecurity.

2CEO Statements

Tailscale CEO Avery Pennarun stated Canada must balance investigative needs with system security, avoiding measures that make infrastructure vulnerable. Windscribe CEO Yegor Sak called the bill potentially 'untenable' for tech operations in Canada. Both executives emphasize how compliance could damage their companies' international standing and user trust.

3Proposed Law's Scope

Bill C-22 would grant law enforcement and CSIS expanded access to digital information from service providers with Canadian subscribers, regardless of the company's origin. This includes powers to compel data disclosure that companies argue would force them to compromise security promises made to users worldwide.

4Threatened Withdrawals

VPN provider Windscribe and secure messaging platform Signal have threatened to withdraw operations from Canada if required to comply with the bill as written. Tailscale indicated it might restructure to distance international operations from Canadian jurisdiction, reflecting the business impact of the proposed legislation.

5Civil Liberties Concerns

Canadian civil liberties groups joined tech companies in opposing the bill, warning it grants police unprecedented surveillance powers. They argue the legislation lacks sufficient oversight mechanisms to prevent abuse while creating backdoors that could be exploited by malicious actors beyond law enforcement.

6Partial Amendments Made

The government reduced mandatory metadata retention from one year to six months in response to initial criticism. However, signatories argue these changes don't address core issues about compelled access to encrypted systems or the bill's extraterritorial implications for global service providers.

7Legislative Context

Bill C-22 advances separately from Canada's privacy law update (C-36), which remains in early stages. The surveillance bill has progressed further through Parliament, now under Senate review, creating urgency for opponents who see it as potentially passing before adequate privacy safeguards are established.

8Global Implications

The debate reflects tensions between national security and digital rights, with Canada's approach potentially influencing other democracies. Companies warn the bill could set a precedent that encourages similar laws elsewhere, creating compliance burdens for firms operating across multiple jurisdictions with conflicting requirements.

Original article: BetaKit — Tech Firms Challenge Canada's Surveillance Bill C-22