The Liberal government passed its lawful access bill through the House of Commons on June 18, using a procedural motion to jointly move several pieces of legislation before Parliament adjourns for the summer.
The motion bundled together several pieces of legislation, including Bill C-22 on lawful access, a financial crimes agency bill, an indigenous self-government agreement act, a National Defence Act amendment bill, and legislation recognizing Arab Heritage Month.
Government House Leader Steven MacKinnon sought unanimous consent June 18 to deem the bills passed at various stages without taking separate votes, stating that Bill C-22 be “deemed concurred in at report stage on division, and be deemed read a third time and passed on division.”
It also sets out requirements for electronic service providers to keep certain metadata and create capacity for investigators to access their systems.
Several witnesses warned that aspects of the bill could reduce privacy protections, lead to cybersecurity risks, and impose costly and challenging compliance requirements on technology companies.
In amending the bill, the government shortened the maximum metadata retention period from one year to six months, limited the scope of user metadata that can be required for retention, and strengthened safeguards restricting access to or decryption of user-encrypted data.
The encryption amendment specifies that decryption may only be required where the encryption is provided by the electronic service provider and the provider has the technical means or necessary information to decrypt the data.
The amendment appears to state that one provider cannot be told to decrypt another provider’s encryption, but leaves open the ability of authorities to ask a platform to decrypt user data.
Procedural Disputes
The accelerated passage of Bill C-22 comes after a week of procedural disputes in Parliament which occurred after the Liberal government passed a motion forcing the committee to conclude its clause-by-clause review of the bill.Conservatives rejected Anandasangaree’s accusation of filibustering and opposed the expedited passage of the bill.
Caputo, a vice-chair of the committee, had also suggested the bill’s more contentious section get split off and left for further reworking and debate, but the proposal was not accepted by the government.
Tory MP Andrew Lawton accused the government of trying to “silence debate and shut down this committee’s work,” later saying the motion “rushes Bill C-22 through Parliament on the government’s timetable rather than allowing full parliamentary review.”
In addition to Google and Apple, the bill has also drawn opposition from a number of other technology companies including Proton VPN, Windscribe, NordVPN and Signal. The companies say that parts of the legislation could infringe on their privacy commitments to users or undermine their secure encryption systems.
With Bill C-22 having now passed the House of Commons, it next moves to the Senate for consideration. The Senate currently has three more sittings before it adjourns for the summer on June 23.







