# Canada's Proposed Surveillance Bill Threatens Global Encryption, Prompts Tech Exodus Warnings Canada is the latest nation to spark alarm among digital rights advocates and tech companies with proposed legislation that could fundamentally alter the landscape of encrypted services. Bill C-22, currently under review, suggests changes that critics argue would effectively mandate backdoors and increase data retention requirements for privacy-focused platforms. ## Tech Giants Threaten Exit Over Bill C-22 The implications of **Bill C-22** are significant, leading several prominent tech entities to issue stern warnings. **Psiphon VPN**, a Canadian anti-censorship company crucial for millions of Iranians navigating internet shutdowns, has stated it will exit the country if the bill passes. They are not alone. Encrypted messaging app **Signal** has also declared its intent to leave the Canadian market, citing that the legislation would necessitate unacceptable modifications to its open-source projects. Tech giants **Apple** and **Meta** have voiced criticisms, while **DuckDuckGo** has indicated it would consider pulling its services. This collective resistance highlights a growing global concern about government attempts to weaken encryption. ## The Persistent Push for Encryption Backdoors Policymakers in democratic nations are increasingly proposing legislation aimed at expanding law enforcement and intelligence agencies' access to citizens' data. Despite consistent warnings from cryptographers and security engineers that secure backdoors are a cryptographic impossibility, the idea continues to resurface. "There have always been some officials within certain agencies that tend to view technology as a crime scene in and of itself, and it becomes a myopic point of fixation where access is desired," explains Kate Robertson, a senior research associate at the **University of Toronto's Citizen Lab**. She emphasizes that such a narrow focus overlooks the critical role technology plays as a secure operating platform for essential services, from hospitals and banks to national security agencies themselves. ## A Global Trend Towards Weakening Encryption Canada's Bill C-22 is part of a broader international trend. The **UK** and **Australia** have already introduced sweeping surveillance reforms that can compel companies to break their encryption. Similar encryption-threatening proposals have emerged in the **EU**, **France**, **India**, **Ireland**, **Spain**, **Sweden**, and **Switzerland**. While not all have become law, the global hostility towards strong encryption is undeniable. ## Bill C-22's Core Provisions and Criticisms First proposed in 2025 and partially revised after significant criticism, Bill C-22 broadly mandates that tech companies, even those operating outside Canada, introduce "technical capabilities" for law enforcement access. While the bill claims it will not require a "systemic vulnerability," opponents argue that any mechanism allowing access to end-to-end encrypted data inherently creates a backdoor, vulnerable to discovery and exploitation. The rise of AI tools for reverse engineering further exacerbates this risk. "Companies could be asked to introduce vulnerabilities, build backdoors, bypass, weaken or otherwise defeat encryption," members of the **US House Judiciary and Foreign Affairs committee** stated in a May letter to Canadian officials. Beyond encryption, Bill C-22 also includes provisions that could force companies to retain user activity metadata, a practice explicitly avoided by many privacy-focused services like **Psiphon** and **DuckDuckGo**. These companies argue this would compel them to alter their business models, collecting data they neither need nor want, thereby diminishing user trust and increasing the potential for widespread surveillance. "If you are asking and requiring for this infrastructural change—that they retain metadata by default—it is creating a surveillance capability within a tool that didn’t have it," says Afsaneh Rigot, founder of the **De|Center**, a research organization dedicated to mitigating technological harms. Rigot warns of a "trickle effect," where such laws are often replicated globally, impacting users in repressive regimes like Iran. ## The Search for Safe Havens As more countries consider such legislation, developers of privacy and anti-censorship tools are increasingly searching for safe jurisdictions. However, relocating headquarters may not be a comprehensive solution when laws can follow users across borders. "Changing your headquarters isn’t much of a plan B when the law follows your users, as C-22 would," notes Joseph Lorenzo-Hall, security portfolio lead at the **Internet Society**. He emphasizes that true protection lies in holding minimal user data, but even that defense is compromised if governments can compel data collection. "A safe haven needs more than favorable winds in strong encryption. It needs laws that let companies keep their privacy promises and defend them against foreign threats to confidentiality and integrity."