What happens when a government can order technology companies to create a back door into encrypted communications that even they cannot access?
A rare cross-border coalition of Canadian civil-liberties advocates and Republican lawmakers is warning that Canada’s proposed surveillance legislation could threaten privacy rights on both sides of the border.
‘Privacy is not a luxury in a free society.’
Sweeping vulnerability
Supporters of proposed Bill C-22 say such powers are necessary to help law enforcement investigate terrorists, organized crime, and other serious threats in an age of encrypted messaging. Critics counter that once a vulnerability is built into a system, it cannot be confined to one country, one agency, or one investigation.
Last Friday, the Justice Centre for Constitutional Freedoms presented a petition to the office of Canadian Prime Minister Mark Carney. More than 40,000 people signed the petition opposing Bill C-22, which would expand the government’s ability to obtain electronic communications and other digital evidence during criminal and national security investigations.
US opposition
VPN providers are already threatening to leave the Canadian market if the bill becomes law. In a May 7 letter, Rep. Jim Jordan (R-Ohio), chairman of the House Judiciary Committee, and Rep. Brian Mast (R-Fla.), chairman of the House Foreign Affairs Committee, warned Canada’s Public Safety Minister Gary Anandasangaree that the legislation could jeopardize privacy rights in both countries.
“Canada’s Bill C-22, currently under consideration in Parliament, would drastically expand Canada’s surveillance and data access powers in ways that create significant cross-border risks to the security and data privacy of Americans,” the lawmakers wrote.
“We write to express our concerns that, if enacted, Bill C-22 would allow Canadian government officials to compel American companies to build backdoors into their encrypted systems, thereby introducing systemic vulnerabilities that could be exploited by hackers, foreign adversaries, and cybercriminals.”
The lawmakers also warned that the bill’s language is sufficiently broad to permit secret ministerial orders.
“If a U.S.-based provider is forced to redesign its system to facilitate Canadian authorized access to content that is currently inaccessible even to the provider itself, the resulting capability cannot be geographically limited,” they wrote. “This directly threatens the privacy of U.S. persons who expect and depend upon robust encryption to protect sensitive communications, health data, financial records, and personal correspondence from unwarranted intrusion.”
RELATED: Albertans are ready to vote on Canadian secession — so why is their premier stalling?
Separatist leader Mitch Sylvestre at a rally in front of the Elections Alberta headquarters in Edmonton, Canada. Henry Marken/Getty Images
Stark terms
At a Friday news conference before submitting the petition to Carney, JCCF board member John Robson, a prominent Ottawa historian and journalist, described the bill in stark terms.
“I’m here on Parliament Hill today because we are delivering a petition with 42,344 signatures asking Parliament not to proceed with Bill C-22 … because [Prime Minister Mark Carney] is the moving force behind this bill, and we’re hoping to persuade him that all these signatures from Canadians across the country … represent legitimate, serious concerns about the scope of this bill,” Robson said.
Robson noted that many Canadians and the constitutional scholars at the JCCF “are concerned about Bill C-22 because it would require service providers to compile Canadians’ electronic data, to develop systems for extracting information from it and turning it over to the government.”
“It’s not that Canadians … are against law enforcement having appropriate powers, including to fight organized crime,” Robson said.
“It’s one more ham-fisted way of targeting ordinary, law-abiding people instead of adopting tailored measures suitable to the real crime problems. And privacy is not a luxury in a free society.”
Read the full article here
