Canada is constructing what legal expert Michael Geist calls a “giant surveillance map” of every citizen. The proposed Bill C-22 mandates telecommunications companies to retain metadata - records of who you contact, when, and where - for up to a year for the entire population.
Geist argues this creates a permanent, searchable database, shifting surveillance from targeting suspects to monitoring everyone. Law enforcement claims the year-long retention is needed for developing investigations, but Geist notes they have provided no specific use case justifying such a sweeping, prolonged mandate.
“It turns the entire population into a permanent, searchable database.”
- Michael Geist, BTC Sessions
The legislation’s push for “lawful access” to encrypted data may trigger an exodus of privacy-focused technology. Signal has signaled it cannot comply with technical requirements that contradict its privacy model, and Apple has withdrawn features in other jurisdictions over similar policies.
This creates a security dilemma: weakening encryption to catch amateurs leaves the general public vulnerable, while sophisticated criminals simply switch to non-custodial tools. Geist also highlights a sharp economic tension, as Canada tries to attract AI investment while passing laws hostile to tech companies.
A related Digital Safety Bill proposes banning social media for those under 16. Geist characterizes this as a “moral panic” band-aid that, in practice, would require every adult user to upload government ID or facial scans to verify age, funneling more sensitive data to platforms.
The bill’s scope exceeds what some Five Eyes partners like the United States have implemented, contrary to government claims of alignment. Geist expects it to pass due to the majority government but notes constituent pressure could lead to amendments before a fall Senate review.
