CitizenLab Analysis of Bill C-22 Surveillance Expansion in Canada (citizenlab.ca)

• SAAIA imposes open-ended surveillance obligations including metadata retention for up to one year.
• The bill threatens cybersecurity and is likely unconstitutional under the Canadian Charter.
• Lack of transparency on links to CLOUD Act and Budapest Protocol raises human rights concerns.

"CitizenLab and the CCLA analyze Bill C-22, the Lawful Access Act, which would impose broad surveillance obligations on electronic service providers, including mandatory metadata retention and technical capability requirements. The analysis highlights constitutional risks, cybersecurity dangers, and lack of transparency regarding international data-sharing agreements like the CLOUD Act. The authors recommend withdrawing Part 2 and suspending study until treaty compliance."