The Carney government is currently attempting to sell Canadians a mathematical impossibility. It is a performance of high-stakes gaslighting that would be impressive if the stakes weren't the literal privacy of every citizen with a smartphone. The office of the Minister of Public Safety, Gary Anandasangaree, has repeatedly insisted that the provisions of Bill C-22, the Lawful Access Act, 2026, will preserve the integrity of our digital communications. They want us to believe that the state can demand a technical capability to access private encrypted data without creating a systemic vulnerability.
It is the digital equivalent of demanding a door that is perfectly secure against every thief in the world but swings wide open the moment a man with a government badge knocks. In the real world—the one governed by logic and the laws of physics—such a door is simply called "unlocked."
The ultimatum delivered this week by Signal, the gold standard for encrypted messaging, has stripped away the last of the government’s rhetorical cover. Speaking to the Globe and Mail on May 14, 2026, Signal Vice-President of Strategy and Global Affairs Udbhav Tiwari was unequivocal. He stated that the company "would rather pull out of the country than be compelled to compromise on the privacy promises we have made to our users."
This is not the idle posturing of a tech giant protecting its profit margins. Signal is a non-profit organization. It has no shareholders to appease and no user data to sell to advertisers. Its only currency is trust. If it stays in a Canada governed by Bill C-22, it ceases to exist in its current operational form.
The Infrastructure of the Backdoor
To understand why Signal, Apple, and Meta are suddenly in a rare alignment of corporate interests, one has to look at the functional mechanics of Part 2 of the Bill, known formally as the Supporting Authorized Access to Information Act (SAAIA).
Under this statutory framework—specifically the powers outlined in clause 7(1)—the Minister of Public Safety is granted the authority to issue secret ministerial orders to core electronic service providers. These targeted demands can mandate technical modifications to ensure that law enforcement and intelligence agencies can extract digital data. Crucially, these orders are subject only to the review of the Intelligence Commissioner and are designed from the ground up to remain completely confidential. The public will never know they have been issued.
The government’s defense of this sweeping executive overreach relies entirely on a carve-out clause stating these mandated capability changes must not introduce a "systemic vulnerability" into the provider's systems.
But who defines "systemic" in this context? The legislation leaves that definition dangerously vague, subject to future regulatory rewriting that bypasses parliamentary debate. In the government’s view, if a backdoor is only accessible via a specialized ministerial warrant, it is a feature, not a flaw. To a cryptographer, however, a backdoor is a hole in the hull of a submarine. It does not matter if you only intended for the captain to use it; the crushing pressure of the ocean does not care about your legislative intentions.
If the Carney administration succeeds in forcing these modifications, they are not just accessing specific data points. They are fundamentally re-engineering the architecture of the Canadian internet. They are attempting to turn our private devices into informants that report back to the state in secret.
Metadata: The Year-Long Ledger
While the debate over end-to-end encryption dominates the headlines, the Bill’s provisions regarding metadata retention are perhaps more insidious and far-reaching. Bill C-22 mandates that electronic service providers record and retain transmission data—the who, when, where, and how of every communication, including location identifiers—for up to a full year on virtually every Canadian.
The government’s rationale, stated in its strongest form by Public Safety Canada, is that such measures are essential for modernizing investigative tools and keeping pace with sophisticated criminal networks. They argue that in an era of rapid-fire digital crime, a one-year window is a proportionate requirement for maintaining public safety and ensuring law enforcement can act quickly.
If this were truly about targeted investigations into specific, imminent threats, we would see a framework that requires reasonable grounds for the retention of specific individuals' data before it is collected. Instead, Bill C-22 imposes a blanket, a-priori surveillance requirement on the entire population.
The most damning assessment of this overreach came before the committee even heard formal testimony. As legal scholar Michael Geist detailed in a written analysis published on his website on May 5, 2026—prior to his subsequent appearance before the Standing Committee on Public Safety and National Security (SECU) on May 7—the government’s own Charter Statement is conspicuously silent on this massive expansion of metadata collection. The government refuses to defend the most Charter-vulnerable element of its own bill because it knows it cannot.
The data collision here is simple and mathematically undeniable: you cannot logically claim to respect the privacy of the innocent while simultaneously forcing private telecommunications and software companies to maintain a year-long ledger of their every digital movement. If every Canadian is being tracked and catalogued "just in case," the fundamental presumption of innocence hasn't just been eroded—it has been deleted from the operating system of our justice system.
The Diplomatic Fallout
The Carney government points to our Five Eyes partners as the benchmark for this legislation, arguing that Canada is simply catching up to global standards. They claim this is a necessary modernization to align with international intelligence-sharing protocols. But the warnings emanating from south of the border suggest a very different, and much more dangerous, reality.
In a stark letter sent directly to the Public Safety Minister this month, U.S. House Judiciary Chairman Jim Jordan and House Foreign Affairs Chairman Brian Mast issued a severe warning. The two American committee leaders cautioned that Canada's lawful access plans threaten to drastically expand surveillance powers in ways that create significant cross-border risks. They correctly identified that the term "systemic vulnerability" is legally hollow, noting it is ultimately subject to a future regulatory process.
Jordan and Mast warned that American companies operating in Canada would face an impossible choice: either compromise the security of their entire global user base—which inevitably includes millions of U.S. citizens—or risk total exclusion from the Canadian market. They understand what the Prime Minister's Office refuses to admit: providers offering end-to-end encryption services will inevitably face directives to create architectural changes that weaken encryption.
Even our closest intelligence allies recognize that forcing companies to build backdoors for Ottawa introduces structural vulnerabilities that compromise users globally. Representatives Jordan and Mast are telling us, in plain terms, that Bill C-22 is not bringing Canada into alignment; it is creating a continent-wide security risk that undermines the economic interests and data privacy of both nations.
The Cost of the Security Illusion
There is a moral dimension to this legislation that the spreadsheet-wielding technocrats in the PMO seem to have entirely forgotten. Privacy is not a preference or a luxury for the paranoid. It is the prerequisite for a free conscience and a free society. When the state claims the right to sit invisibly in the corner of every private conversation, it is claiming ownership of the public mind.
The security the government is offering is an illusion. By forcing companies like Signal to exit the market, and by threatening the operations of global tech giants who refuse to compromise their encryption standards, the government is not making Canadians safer. They are driving users toward less secure, unverified alternatives or leaving them completely exposed in a digital landscape where the government has intentionally broken the locks on the front door.
The Minister's office insists critics are simply misunderstanding the intent of the legislation. Yet, Apple has stated it will never break encryption for the state. Meta has warned against installing government spyware. Signal says it will leave the country entirely. Chairmen Jordan and Mast warn we are jeopardizing international security. It seems everyone in the world is misunderstanding the Bill except for the people who wrote it.
A secure backdoor is a lie. A privacy-respecting blanket metadata mandate is a glaring contradiction. And a government that tries to tell you otherwise is a government that has lost its moral bearings.
If Bill C-22 passes in its current form, Canada will become a place where the state holds the master key to every server, every message, and every pocket. We are about to find out how many companies are willing to stay in a room that cannot be locked.
The Hammer will be watching.
