FinancialMediaGuide reports that a debate over digital security is once again intensifying in Canada. Bill C-22, proposed by the Liberal Party, which recently gained a parliamentary majority, aims to expand law enforcement powers to identify cyber threats. However, Apple and Meta have publicly expressed concern that its adoption could force them to weaken user data protection and create potential vulnerabilities in end-to-end encryption systems that are accessible only to users.
End-to-end encryption, used in iMessage and WhatsApp, is considered one of the most reliable ways to protect information from cyber espionage and hacking. Any attempt to implement encryption bypass mechanisms, experts say, would create new points of vulnerability that could be exploited by malicious actors. Last year, a similar request from British authorities led Apple to temporarily withdraw a cloud storage feature using end-to-end encryption, highlighting the global risks of such demands.
Apple stated that the bill undermines its ability to provide users with expected security and privacy features and could require the implementation of backdoors, which the company strictly avoids. Meta also warns that the broad powers granted by the law, coupled with minimal oversight and lack of guarantees, could make users less protected. Experts believe such measures could reduce trust in digital services and negatively affect the reputation of companies.
Canadian authorities claim that the law would not require changes that create systemic vulnerabilities and that companies themselves know how to protect their systems. However, experience shows that any means of bypassing encryption quickly become targets for cyberattacks.
The international context amplifies these concerns: in the U.S., U.K., and Australia, similar issues are being debated, with companies facing pressure from authorities to access encrypted data. The adoption of C-22 could limit service functionality in Canada, forcing tech companies to seek secure legal and technical workarounds to avoid violating user rights.
At FinancialMediaGuide, we see three key points. First, C-22 could set a precedent for other countries, intensifying global debates about balancing security and privacy. Second, companies will invest in new data protection methods to comply with the law without weakening encryption. Third, users should be prepared for potential limitations in service functionality, which requires transparent communication from both companies and the government.
We at Financial Media Guide believe that the Canadian Parliament needs to reconsider C-22 in light of international experience and data security threats. Without these adjustments, the country’s digital infrastructure and citizens’ trust in public and private services will be significantly at risk, and the implications for cybersecurity could be long-lasting.
