The Canadian federal government has proposed a new version of its 'lawful access' legislation, known as Bill C-22, which gives police enhanced powers to access online data during criminal investigations. This bill was introduced to address both the need for law enforcement to investigate digital crimes effectively and to alleviate the privacy concerns that arose from previous drafts of the legislation. Key components of the bill include a framework for police to confirm whether telecommunications providers have delivered services to individuals without a warrant, although this will be limited strictly to verification purposes.

The new legislation sets stricter parameters around the production of data for investigations. While it still allows police to request certain data without a prior warrant, such requests will now be restricted to essential identifying details, including names and addresses. These orders will require a judicial warrant based on a threshold of reasonable suspicion, a modification aimed at ensuring that privacy rights are considered in the enforcement process. Nonetheless, the scope of who qualifies as an online service provider has been broadened to include various types of online companies, beyond just traditional internet and phone service providers.

Additionally, the revised law would empower Canadian law enforcement to seek transmission data or subscriber information from foreign digital service providers, like Google and Meta, through the courts. This raises important discussions about the jurisdictional boundaries and international cooperation in policing cybercrime, as Canadian authorities grapple with the technical and legal challenges involved in accessing data held by foreign entities. The implications of this legislation could significantly impact how law enforcement agencies operate in the digital age, balancing the need for security and the protection of personal privacy.