Canada’s Lawful Access Bill Raises Privacy Concerns as NordVPN Warns It Could Leave
Latest news on WhatsApp أجدد الأخبار على واتساب
Canada’s proposed lawful access legislation, Bill C-22, is facing renewed scrutiny after NordVPN said it could consider limiting or removing its presence from Canadian jurisdiction if the bill forces obligations that compromise its no-logs architecture or encryption protections.
According to Global News, NordVPN said in a post on X that it is reviewing the legislation and would consider leaving Canada if the bill requires it to weaken its privacy protections. The company said there is no scenario in which it would compromise its no-logs model or encryption safeguards if mandatory obligations are imposed.
The federal government says Bill C-22 is intended to modernize lawful access tools for police and security agencies in the digital age. The Department of Justice says the proposed tools are meant to help law enforcement investigate serious threats while protecting privacy, and that some measures are limited to basic service or subscriber information rather than the content of communications.
The most sensitive part of the debate centres on electronic service providers. Justice Department documents say the bill would create a regulatory framework requiring certain providers to develop and maintain lawful access capabilities, and would allow the public safety minister to issue ministerial orders requiring a provider to develop a specific capability, subject to approval by the Intelligence Commissioner.
Privacy-focused companies and digital rights advocates say the language could pressure providers that rely on encryption or no-logs systems. NordVPN’s warning follows similar concerns from Signal and Windscribe, as well as objections from Apple and Meta, which have warned that the bill could weaken encryption or require companies to build capabilities that undermine user security.
The federal government rejects those claims. Global News cited a spokesperson for Public Safety Minister Gary Anandasangaree as saying the government is not legislating to require surveillance capabilities or encryption backdoors, and that authorities would still need legal authorization, such as a court warrant, to obtain data.
For ordinary users, the issue matters because VPNs and encrypted services are no longer niche tools. They are used to protect connections on public Wi-Fi, reduce tracking, secure communications, and protect journalists, businesses, activists, and people handling sensitive information. Any change that affects data retention or encryption could directly affect trust in digital services used in Canada.
NordVPN’s warning does not mean the service is leaving immediately. The company says it is monitoring the bill while it remains under parliamentary review. But the debate shows the growing tension between two public interests: giving law enforcement timely access to information in serious investigations, and preserving the privacy and security protections that Canadians rely on every day.
Bill C-22 has now become more than a policing file. It is a test of Canada’s approach to digital privacy, encryption, and user trust. The central question is whether the government can improve lawful access without weakening the protections that make secure communication possible.
