Digital rights advocates urge EU to step in and save encryption from Canada's Bill C-22

A coalition of privacy organizations is urging the EU to intervene against Canada's Bill C-22 The proposed law could compel European tech companies to weaken encryption and retain user metadata This follows a massive backlash in Canada from major tech giants and leading VPN providers In a last-ditch effort to protect end-to-end encryption, digital rights advocates are calling on the European Union to intervene against Canada's controversial Bill C-22.

Also known as the Lawful Access Act , the proposed legislation threatens to force technology companies into building surveillance capabilities that can help law enforcement and intelligence services access digital information during high-stakes investigations.

Access Now, alongside a coalition of European civil society organizations, has published an open letter urging European Commission President Ursula von der Leyen and other top EU officials to step in.

The groups warn that Bill C-22 is not just a domestic issue, as its sweeping data retention mandates and surveillance requirements will inherently compromise the privacy of millions of people globally.

For privacy-conscious users relying on secure messaging apps or the best VPN to keep their digital lives private, the stakes couldn't be higher.

If passed, Bill C-22 could grant Canadian authorities the power to secretly compel European-based companies to comply with data demands, completely bypassing traditional oversight and transparency.

Namrata Maheshwari, Global Encryption Policy Lead and Asia Pacific Policy Manager at Access Now, warns that the bill threatens to normalize excessive surveillance powers, while converting "devices that work for people into devices that work against them." "Steps must be taken to prevent it from becoming law," Maheshwari added. (Image credit: Future) NEW : Leave No Trace — A weekly newsletter on digital privacy and online surveillance.

Leave No Trace investigates the companies and governments putting our digital freedom at risk — and the people fighting back. 📩 Subscribe now to get every edition delivered to your inbox every Friday, launching this September.

What’s at stake for Europe? While Canada's Lawful Access Act may sound like a local concern, the legislation has an aggressive extraterritorial reach.

The open letter suggests that Bill C-22 would apply to any service provider whose platform is used by people in Canada.

Digital rights experts also warn the new rules would target providers with zero Canadian users, provided they belong to a corporate group carrying out business activity in the country.

The coalition argues that a Canadian minister would have the authority to secretly order a European company to weaken the security of products used across the EU.