APEP BAR NEWSROOM | October 17, 2026 | Evidence status: Legislation proposed; consequences disputed.
The promise of encrypted messaging is simple: private communications should stay private. But an increasingly public fight in Canada asks what happens when governments want service providers to be technically ready to hand over information.
In new reporting published on October 17, WIRED detailed mounting opposition to Canada’s Bill C-22. Privacy-focused companies—including Signal and Psiphon—have said the proposed legal framework could force changes they cannot accept. Some have raised the possibility of leaving the Canadian market if the legislation passes.
What the proposed law would do
The bill would establish lawful-access powers requiring certain electronic service providers to maintain technical capabilities relevant to authorized investigations. Privacy critics warn that those obligations, along with potential data-retention requirements, could weaken the security of tools specifically designed not to collect or expose user information.
The core technical disagreement is whether companies can create a special channel for authorized access without creating a vulnerability that others might eventually exploit.
What the Canadian government says
Canadian government briefing materials stress that the legislation is intended to support investigations subject to legal authorization and that the framework includes protections against requirements that create systemic vulnerabilities. Officials say investigative agencies need workable access to information that providers are legally required to deliver.
Security researchers and privacy advocates dispute whether those safeguards are sufficient in practice, particularly where end-to-end encryption or intentionally minimal data collection is involved.
What is confirmed—and what is not
Bill C-22 is a proposal, not a completed worldwide ban on encryption. Claims that every private message would automatically become readable to police go beyond what has been established. The serious, immediate news is that the legal and technical battle is active, and services say the outcome could affect where they operate.
The Apep question: If a service was designed so nobody—including its operator—could read your messages, should the government be able to require a redesign?
Sources
- WIRED — October 17 investigation
- Government of Canada — bill backgrounder
- Public Safety Canada — explanation of proposed safeguards
Featured image is a conceptual cybersecurity photograph, not a depiction of a specific Canadian system. Photo: FlyD / Unsplash.
