Google warns lawful-access bill could create major cybersecurity risks

https://www.theglobeandmail.com/politics/article-google-lawful-access-bill-c-22-cybersecurity-risks/

Publish Date: 2026-05-24 20:21:00

Open this photo in gallery:

A Google logo at the Vivatech fair in Paris in June, 2023. Google have joined Meta and Apple in urging the government to make changes to Bill C-22.ALAIN JOCARD/AFP/Getty Images

Google is warning that the government’s lawful-access bill would establish a “surveillance infrastructure” that risks compromising cybersecurity in ways that could facilitate foreign interference, while weakening its users’ privacy.

In a submission to the House of Commons committee scrutinizing the bill, Google said it is committed to supporting efforts by law enforcement and Canada’s intelligence agencies to protect the public against crime and terrorism.

But it said that should be done “without engineering vulnerabilities into products and services that weaken security for all users.”

Meta and Apple have already urged the government to make changes to Bill C-22, which would require “electronic service providers” in Canada to adjust their systems to give surveillance and monitoring capabilities to police services and the Canadian Security Intelligence Service.

Google disrupts effort by criminal hackers to exploit vulnerability using AI

CSIS and law enforcement have long argued that Canada is lagging behind its Five Eyes intelligence partners in not having such a lawful-access regime to aid investigations.

But the latest attempt to pass a bill in Canada has faced steep opposition, including from secure-messaging app Signal, Canadian tech companies, privacy advocates and civil liberties groups.

Google, in a brief submitted to the Commons public safety committee, said it has “significant concerns” about parts of the bill, including wording that “gives the Minister of Public Safety sweeping powers to issue secret orders” to facilitate the interception or retrieval of data.

“Secret Ministerial Orders would severely restrict companies’ ability to engage transparently with users, undermining the users’ trust and ability to hold companies…

Source