Privacy Watchdog Urges Changes to Bill C-22

Canada's privacy commissioner asked the Senate to further amend the lawful access bill as its national security committee begins review.

Updated on Nov. 2, 2026 in Cybersecurity

Bold flat-color editorial illustration of a simplified stone government building facade with a single padlock in front of its doorway, set against a pale sky. — Canada's privacy commissioner urged the Senate on Tuesday to make further amendments to Bill C-22, the lawful access bill, as the national security committee begins its review. AI Illustration. Upload story photo >

Live Poll

Should Canada give police faster access to your digital information during investigations?

Canada's privacy commissioner urged the Senate to make further amendments to Bill C-22, the lawful access bill. The Senate national security committee has begun its review of the legislation, which would speed law enforcement and CSIS access to digital information.

Why it matters

The bill would lower the threshold for accessing basic subscriber information and require electronic service providers to adapt their systems to hand information to investigators. Apple says the current amendments do not go far enough to protect its privacy and security features, and the government argues secrecy is needed to avoid tipping off threat actors.

Bill C-22 would reduce the metadata retention period for tech companies to six months from up to one year, down from the current maximum. Ministerial orders would require electronic service providers to build surveillance and monitoring capabilities into their systems, with first-stage review by the intelligence commissioner.

The players

Gary Anandasangaree

Canada's Public Safety Minister, who introduced amendments to Bill C-22 in June 2026.

Apple

The technology company that states the bill's amendments do not go far enough to protect its privacy and security features.

The details

Bill C-22 would allow investigators to obtain digital information more quickly, including names, addresses, phone numbers, email addresses and account numbers. The bill also grants the public safety minister authority to issue confidential ministerial orders to electronic service providers, which would first be reviewed by the intelligence commissioner.

June 2026: Public Safety Minister Gary Anandasangaree brought in amendments and the bill was sent to the Senate.
November 2, 2026: The privacy commissioner testified urging further amendments to Bill C-22.

The Tech Race

Bill C-22 places Canada's lawful access framework at the centre of a debate over how far tech companies must reshape their systems for investigators. Apple's objection signals how major platform providers are positioning against mandatory surveillance capabilities.

If passed, Bill C-22 would let investigators obtain basic subscriber information on a lower legal threshold and shorten how long tech companies must retain metadata to six months. Canadians with online accounts could see their providers' data handling change as those companies adapt their systems.

The takeaway

Bill C-22 shows how lawful access legislation can reshape the privacy protections people rely on in daily digital life. Readers can follow Senate committee hearings to track whether further amendments are adopted.