Canadas Bill C-22 Mandates Encryption Backdoors and Metadata Retention with Five Eyes Data Sharing Implications

Analysis
Joint opposition from House Judiciary and Foreign Affairs committee chairs turns C-22 into a bilateral security liability, undercutting Ottawa's argument that the bill aligns Canada with Five Eyes partners. The "systemic vulnerability" carve-out is vague by design, but that vagueness undermines enforceability. The UK Apple precedent and the 2024 Salt Typhoon breach establish that companies will exit privacy features rather than engineer backdoors. Ottawa may calculate that US Congressional objections reflect tech-industry lobbying rather than a durable national security concern and that Five Eyes interoperability arguments neutralize domestic resistance, though internal government deliberation is thinly sourced. Passage with backdoor provisions intact by end of 2026 is unlikely given the bill's committee stage and thin Liberal leadership commitment to hold provisions as written.