{"id":2626,"date":"2026-10-08T01:35:34","date_gmt":"2026-10-08T09:35:34","guid":{"rendered":"https:\/\/blog.mozilla.org\/netpolicy\/?p=2626"},"modified":"2026-10-08T01:35:34","modified_gmt":"2026-10-08T09:35:34","slug":"canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/","title":{"rendered":"Canada\u2019s bill C-22 threatens encryption, users\u2019 privacy and the security of digital economies\u00a0"},"content":{"rendered":"<p>Encryption is woven into everyday digital life. It protects our messages and passwords, but also banking and payments, health data, government services and the digital infrastructure societies rely on every day. Yet across jurisdictions, governments are increasingly considering laws that expand lawful access to data for law enforcement and national security purposes. In practice, this can mean requiring companies to create new ways to access encrypted data, introduce technical capabilities that bypass existing protections, or make otherwise secure systems insecure. These measures can weaken the very security encryption is designed to provide, with consequences for cybersecurity, privacy, fundamental rights and the wider economy. Canada\u2019s Bill C-22 is the latest example of this trend, raising serious concerns about the security and privacy consequences of expanding government access to data.<\/p>\n<p>For Mozilla, protecting that security is fundamental to both the products we build and the principles we advocate for. One of the <a href=\"https:\/\/www.mozilla.org\/en-US\/about\/manifesto\/#principles-04\">foundational principles<\/a> that guide Mozilla\u2019s mission and work holds that individuals\u2019 security and privacy on the internet are fundamental and must not be treated as optional. Protecting people\u2019s privacy and security is not an aspiration for us, but shapes the products we build every day: Firefox <a href=\"https:\/\/support.mozilla.org\/en-US\/kb\/enhanced-tracking-protection-firefox-desktop?utm_source=www.firefox.com&amp;utm_medium=referral&amp;utm_campaign=user-privacy\">blocks trackers<\/a>, protects you from <a href=\"https:\/\/support.mozilla.org\/en-US\/kb\/introducing-total-cookie-protection-standard-mode?utm_source=www.firefox.com&amp;utm_medium=referral&amp;utm_campaign=user-privacy\">profiling via cookies<\/a> and <a href=\"https:\/\/www.firefox.com\/de\/features\/block-fingerprinting\/\">fingerprinting<\/a>, comes with <a href=\"https:\/\/support.mozilla.org\/en-US\/kb\/how-does-phishing-and-malware-protection-work\">malware protection<\/a> and a <a href=\"https:\/\/www.firefox.com\/en-US\/features\/browser-with-built-in-vpn-secure-browsing\/\">built-in VPN<\/a>, offers <a href=\"https:\/\/support.mozilla.org\/en-US\/kb\/https-only-prefs\">HTTPs-only mode<\/a> and protects your passwords and credit card information by <a href=\"https:\/\/support.mozilla.org\/en-US\/kb\/how-firefox-securely-saves-passwords\">encrypting<\/a> them.<\/p>\n<p>Some of these protections are being threatened by <a href=\"https:\/\/www.parl.ca\/documentviewer\/en\/45-1\/bill\/C-22\/first-reading\">Canada\u2019s Lawful Access Act, also known as bill C-22<\/a>. Part two of the bill, the \u201cSupporting Authorized Access to Information Act\u201d (SAAIA) would introduce sweeping new powers to require electronic service providers to build and maintain capabilities that facilitate government access to information. If passed in its current form, companies could be asked to introduce vulnerabilities, build backdoors, bypass, weaken or otherwise defeat encryption, access data before encryption or decrypt encrypted data to provide access to law enforcement. Service providers could also be compelled to retain and access data they have purposefully chosen not to collect.<\/p>\n<p>Let us be clear: there is no safe way to create exceptional access to encrypted data that only the intended actor can use. An access mechanism created for law enforcement can also be discovered, exploited or abused by potentially bad actors.<\/p>\n<p>Such vulnerabilities and backdoors do not only undermine people\u2019s fundamental rights to privacy and data protection, but also the trust and security premises societies everywhere depend on. The same encryption that protects a private conversation also protects financial transactions, sensitive health information, business systems and critical digital services.<\/p>\n<p>Expanding capabilities of AI systems are only exacerbating these risks \u2013 governments should encourage the disclosure and patching of vulnerabilities, not compel companies to introduce insecurities deliberately. Only trustworthy and transparently governed digital infrastructures can be the basis for digitally sovereign societies.<\/p>\n<p>We are also concerned by C-22\u2019s scope, which does not stop at Canadian services or users. C-22 expansive surveillance capabilities and data retention obligations would undermine people\u2019s privacy and security everywhere, and the bill\u2019s confidentiality requirements would make it impossible for services to inform their users about security breaches or backdoors introduced.<\/p>\n<p>Guided by our <a href=\"https:\/\/surveillance.mozilla.org\/\">Surveillance Principles for a Secure, Trusted Internet<\/a>, we call on Canadian policymakers not to rush the legislative process to take experts\u2019 feedback into account in amending C-22 to protect everyone\u2019s security and privacy. Canada\u2019s interests are best served by regulation that protects encryption, strengthens cybersecurity and emphasizes transparency, checks and balances.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Encryption is woven into everyday digital life. It protects our messages and passwords, but also banking and payments, health data, government services and the digital infrastructure societies rely on every &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/\">Read more<\/a><\/p>\n","protected":false},"author":2034,"featured_media":2529,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[847,10139],"tags":[173936],"coauthors":[453016,452999],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Canada\u2019s bill C-22 threatens encryption, users\u2019 privacy and the security of digital economies\u00a0 - Open Policy &amp; Advocacy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Svea Windwehr, Tasos Stampelos\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/\",\"name\":\"Canada\u2019s bill C-22 threatens encryption, users\u2019 privacy and the security of digital economies\u00a0 - Open Policy &amp; Advocacy\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/netpolicy\/files\/2025\/12\/Surveillance_1920x1080.jpg\",\"datePublished\":\"2026-10-08T09:35:34+00:00\",\"dateModified\":\"2026-10-08T09:35:34+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33608f07823f013b799e5f4af4ff26eb\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/files\/2025\/12\/Surveillance_1920x1080.jpg\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/netpolicy\/files\/2025\/12\/Surveillance_1920x1080.jpg\",\"width\":1920,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/netpolicy\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Canada\u2019s bill C-22 threatens encryption, users\u2019 privacy and the security of digital economies\u00a0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/\",\"name\":\"Open Policy &amp; Advocacy\",\"description\":\"Mozilla&#039;s official blog on open Internet policy initiatives and developments\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33608f07823f013b799e5f4af4ff26eb\",\"name\":\"Svea Windwehr\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/f526f569cdaa472de6766b13c67d35c8\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/fc8854bfb82e2042b0c3833628b0d805?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/fc8854bfb82e2042b0c3833628b0d805?s=96&d=mm&r=g\",\"caption\":\"Svea Windwehr\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Canada\u2019s bill C-22 threatens encryption, users\u2019 privacy and the security of digital economies\u00a0 - Open Policy &amp; Advocacy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/","twitter_misc":{"Written by":"Svea Windwehr, Tasos Stampelos","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/","url":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/","name":"Canada\u2019s bill C-22 threatens encryption, users\u2019 privacy and the security of digital economies\u00a0 - Open Policy &amp; Advocacy","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/netpolicy\/files\/2025\/12\/Surveillance_1920x1080.jpg","datePublished":"2026-10-08T09:35:34+00:00","dateModified":"2026-10-08T09:35:34+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33608f07823f013b799e5f4af4ff26eb"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#primaryimage","url":"https:\/\/blog.mozilla.org\/netpolicy\/files\/2025\/12\/Surveillance_1920x1080.jpg","contentUrl":"https:\/\/blog.mozilla.org\/netpolicy\/files\/2025\/12\/Surveillance_1920x1080.jpg","width":1920,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2026\/10\/08\/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/netpolicy\/"},{"@type":"ListItem","position":2,"name":"Canada\u2019s bill C-22 threatens encryption, users\u2019 privacy and the security of digital economies\u00a0"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website","url":"https:\/\/blog.mozilla.org\/netpolicy\/","name":"Open Policy &amp; Advocacy","description":"Mozilla&#039;s official blog on open Internet policy initiatives and developments","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33608f07823f013b799e5f4af4ff26eb","name":"Svea Windwehr","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/f526f569cdaa472de6766b13c67d35c8","url":"https:\/\/secure.gravatar.com\/avatar\/fc8854bfb82e2042b0c3833628b0d805?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fc8854bfb82e2042b0c3833628b0d805?s=96&d=mm&r=g","caption":"Svea Windwehr"}}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/2626"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/users\/2034"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/comments?post=2626"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/2626\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/media\/2529"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/media?parent=2626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/categories?post=2626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/tags?post=2626"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/coauthors?post=2626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}