Canada Chamber Seeks Split of Cybersecurity Bill C-22

The group argues the legislation threatens economic competitiveness and creates stricter mandates than international standards.

Updated on Oct. 16, 2026 in Cybersecurity

Isometric editorial illustration of uniform server rack arrays in a data center, representing cybersecurity infrastructure policy.
The Canadian Chamber of Commerce is urging the federal government to divide cybersecurity Bill C-22, citing concerns over regulatory mandates and economic competitiveness. AI Illustration. Upload story photo >

Live Poll

Should the government prioritize security surveillance over the competitive interests of domestic businesses?

The Canadian Chamber of Commerce has urged the Prime Minister to divide Bill C-22 into two separate pieces of legislation. The group contends the bill's current mandates for surveillance access and data retention pose risks to business integrity and growth.

Why it matters

Business groups and tech companies warn that the proposed regulations could force firms to relocate outside of Canada. While law enforcement asserts the measures are necessary for national security, critics argue they impose burdens exceeding those in the United States and the European Union.

Bill C-22 mandates that electronic service providers retain customer metadata for up to six months while providing monitoring access to law enforcement. The legislation also requires companies to modify systems to accommodate these new surveillance capabilities.

The players

Canadian Chamber of Commerce

This is a non-profit organization that represents the interests of businesses across Canada.

Gary Anandasangaree

He serves as the Public Safety Minister of Canada.

Apple

This is a multinational technology corporation known for its hardware, software, and services.

Canadian Security Intelligence Service

This is Canada's primary national intelligence agency responsible for investigating threats to national security.

The details

The bill mandates that service providers grant police and the Canadian Security Intelligence Service access to their systems, potentially creating legal liabilities if these intrusions compromise system integrity. Public Safety Minister Gary Anandasangaree introduced amendments stating that companies are not required to decrypt data if they lack the encryption keys, though Apple maintains the bill threatens privacy.

Timeline

  1. This week, the Canadian Chamber of Commerce sent a formal letter to the Prime Minister.

  2. On Thursday, a spokesperson for the Minister issued a statement as Apple renewed its critique of the bill.

  3. The bill is currently proceeding through the Senate.

The Tech Race

This legislation reflects an effort to align Canadian surveillance capabilities with the Five Eyes intelligence sharing partnership. By modernising digital monitoring, the government seeks to match the technical oversight standards of its key international allies.

The proposed bill may influence how Canadian businesses handle user data, potentially changing the privacy standards users experience with local digital services. If companies shift operations abroad to avoid these regulations, it could limit the availability of certain services for Canadian consumers.

The takeaway

The ongoing debate highlights the complex tension between national security requirements and the protection of encryption standards. Businesses and individuals should monitor Senate proceedings to understand how final adjustments to the bill may impact data privacy practices.

What happens next

The bill is scheduled to continue its progression through the Senate, where further debate and potential amendments are expected.

Further reading

For more information on current digital security policies, visit Canada Cybersecurity.

Source note: This article includes information reported by The Globe and Mail.

Live Poll

Should the government prioritize security surveillance over the competitive interests of domestic businesses?