Key points
- Psiphon and Signal have stated they will leave the Canadian market if the proposed bill passes.
- Apple, Meta, DuckDuckGo and NordVPN have criticised the legislation or considered withdrawing services.
- The law aims to expand police and intelligence agency access to encrypted data through mandated logging.
Users of encrypted messaging and privacy tools in Canada face potential service disruption. Psiphon and Signal have declared they will leave the country if the proposed surveillance legislation passes. These companies argue that the bill requires unacceptable changes to their security architecture and open-source projects.
The proposed law could essentially mandate backdoors and increase data retention requirements for encrypted services. According to WIRED Security, this legislation could force providers to maintain logs and introduce intentional flaws into their products. Cryptographers and security engineers consistently state that such backdoors cannot be built safely, yet policymakers continue to pursue these measures.
Context on the legislation
Kate Robertson, a senior research associate at the University of Toronto’s Citizen Lab, notes that some officials view technology as a crime scene. This perspective drives a fixation on accessing data, regardless of security implications. Governments already possess broad digital surveillance powers, but these proposals aim to expand access further. The goal is to give law enforcement greater abilities to solve crimes involving encrypted data.
Who is affected
Canadian users of Psiphon, Signal, Apple, Meta, DuckDuckGo and NordVPN are directly involved. Psiphon, an anti-censorship tool used by millions in Iran, will leave if the bill passes. Signal will exit because the law demands changes to its open-source code. Apple and Meta have publicly criticized the bill. DuckDuckGo and NordVPN say they would consider pulling their services.
Our take on the response
That suggests a significant shift in the global privacy landscape. If democratic nations adopt such laws, fewer safe havens will remain for privacy-focused services. The industry response highlights a fundamental conflict between state surveillance goals and technical security realities. Users may need to seek alternative providers located in jurisdictions with stronger encryption protections.
What affected people can do
Users should review their current communication tools and understand the legal jurisdiction of their service providers. Check whether your organisation uses applications that might withdraw from Canada. Monitor official announcements from vendors for any service changes. Be alert for phishing attempts that exploit this news to steal credentials. Verify all communications through trusted channels before entering any login details or sharing sensitive information.
Background: Backdoors
A backdoor is a hidden method that allows someone to bypass usual authentication or security mechanisms to access a system. Attackers install them to maintain access even if you change passwords or patch the original vulnerability. They are often invisible to standard security tools and require specific removal procedures.
Read the full guide: Backdoors Explained: How Hidden Access Points Compromise Your System
What to do and how to stay safe: Signal
- Review the privacy policies of your messaging and VPN applications to understand data retention practices.
- Enable two-factor authentication on all accounts to add a layer of security beyond encryption.
- Keep your software updated to ensure you have the latest security patches and features.
- Educate staff on recognising social engineering attempts that reference current legislative news.
Step-by-step guide: Detect Online Tracking: Signs in Logs, Browsers and Network Traffic
General security guidance from the Breach Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which companies have threatened to leave Canada?
Psiphon and Signal have stated they will leave the country if the bill passes.
What does the proposed legislation require?
It could essentially mandate backdoors, increase data retention and include provisions for additional logging.
Why do experts oppose these changes?
Cryptographers and security engineers say backdoors cannot be built safely and compromise security.