Canadian Bill Sparks Debate Over User Metadata

By Tahani Elghazaly
Published May 21, 2026

Latest news on WhatsApp أجدد الأخبار على واتساب

Canada’s proposed Bill C-22, known as the Lawful Access Act, 2026, is drawing growing concern over a provision that could allow regulations requiring certain electronic service and telecommunications providers to retain categories of metadata for up to one year. The bill received first reading in the House of Commons on March 12, 2026.

The federal government says the proposal does not cover the content of messages, web-browsing history, or social media activity. The bill text says metadata retention regulations may include transmission data for reasonable periods not exceeding one year, while excluding information that would reveal the substance of communications, browsing history, or social media activity.

Privacy advocates argue that metadata can still reveal highly sensitive patterns. It may not show what a person wrote, but it can show when a communication happened, who was involved, what device was used, and in some cases location-related information. Experts warn that retaining this information at scale could create a detailed map of people’s movements and relationships, even without access to message content.

The government says the bill is intended to modernize lawful access tools for criminal and national security investigations, with judicial oversight attached to certain requests. Critics say the concern is broader: forcing companies to store data about users who are not suspected of wrongdoing could expand privacy risks and make large datasets more attractive targets for misuse or cyberattacks.

The debate has also drawn objections from major technology companies. Reuters reported that Apple and Meta warned Bill C-22 could pressure companies to weaken encryption or build broader government access capabilities, while Public Safety Canada said the bill would not require companies to introduce a “systemic vulnerability” into electronic protections.

For users in Canada, the issue is practical and personal. Metadata is tied to everyday digital life, from phones and internet connections to messaging apps and location-based services. The central question now is how Canada will balance faster investigative access with the privacy rights of ordinary users.