Canada will be a police state by Christmas if Parliament passes Bills C-2, C-8, and C-9 in their current form, and even more so if the federal government reintroduces the former Bill C-63.
Bill C-63 may or may not be reintroduced. But Bills C-2, C-8, and C-9 are now actually being considered by the House of Commons.
Further, Bill C-8 provides the federal government with new powers to control private companies, simply by declaring them to be “designated operators” of “critical” cyber systems that are “vital” to national security or public safety, including obtaining subscriber information of customers. Any company that a cabinet minister declares to be a “designated operator” must follow the government’s orders to “establish and implement cyber security programs, mitigate supply-chain and third-party risks, report cyber security incidents and comply with cyber security directions.”
A federal cabinet minister can impose surveillance obligations on private companies, which will be required to provide the government with any information demanded. This amounts to search powers and mass data collection without judicial oversight, contrary to the Charter. The federal government will be able to collect massive quantities of subscriber data and user data (e.g., websites that a customer visits) without a warrant, and without Canadians knowing whether or when the government has collected personal information about them. Bill C-8 contains no safeguards to prevent the government from obtaining sensitive personal information about Canadians, without a warrant, under the guise of regulatory measures to protect cybersecurity.
Bill C-8 empowers the government to order a company to “develop a security plan” in relation to its services, networks, and facilities, and order the company to take steps to mitigate any “vulnerability” (as defined by the government) and implement “standards” as specified and determined by the government. Just in case the above powers are not sufficiently absolute, Bill C-8 empowers the federal government to direct a company “to do a specified thing or refrain from doing a specified thing.”
The minister’s order can include “a provision prohibiting the disclosure of its existence, or some or all of its contents,” such that the government can tyrannize citizens and businesses in secret. Under Bill C-8, a minister’s orders and even federal regulations can be kept secret indefinitely, with no obligation for public reporting or transparency, making it impossible for the public or Parliament to scrutinize government actions.
Bill C-8 empowers the federal cabinet to “secure” the “Canadian telecommunications system” (not defined clearly) against any “threat,” including “interference, manipulation, disruption or degradation.” While Bill C-8 does not focus on website content and social media commentary, its language does not prevent the federal cabinet from using its new powers to censor what politicians deem to be misinformation or disinformation that might “disrupt” or “degrade” or “manipulate” the internet, including websites and social media.
Bill C-8 specifically states that no Canadian individual or business is entitled to any compensation from the government for any financial losses resulting from the minister’s order “to do a specified thing or refrain from doing a specified thing.”
A Canadian who violates a federal government order is liable to pay an “administrative monetary penalty” of up to $50,000 per day. Canadian companies are liable to fines up to $15 million per day for failing to comply with an order. Bill C-8 states that these penalties are “to promote compliance with orders” and “not to punish.”
Of course, a Canadian who found herself kicked off the internet thanks to a minister’s order could sue and seek a court ruling to quash the minister’s order, provided that she has an extra $100,000 or so available for litigation that would drag on for years (as litigation almost always does).
Politicians as well as unelected bureaucrats know that Canadians support public safety and national security. Politicians therefore use these legitimate and worthwhile goals as clever slogans to justify a massive power-grab, whereby the federal cabinet can designate any cyber service or cyber system in Canada as “vital,” and therefore subject to government control.
The federal government does not need a new law to protect its own “telecommunications” (i.e. non-paper) systems, or those of private companies. Hacking into a cyber system and damaging someone else’s property are already criminal offences. Giving government broad new powers to kick individual Canadians off the internet is not necessary for cracking down on cybercrime.
Our freedoms are fragile. They will not survive and thrive automatically, but only through the passionate and active support of Canadians who love their free and democratic society. If we do not want Canada to become a police state by Christmas, Canadians need to contact their MPs and urge them to vote against Bills C-2, C-8 and C-9, and urge them to oppose the reintroduction of former Bill C-63, the Online Harms Act.







