VPN Sector Warns of 'Untenable' Market as Bill C-22 Nears Senate Approval
AI-generated image · Bay Street Wire
Tailscale and Windscribe lead a coalition of tech firms arguing that Ottawa's proposed lawful access legislation creates a regulatory collision between national security and encrypted privacy.
The tension between Canadian national security mandates and digital privacy has reached a boiling point. As Bill C-22 moves through the Senate, a coalition of tech firms is warning, as BetaKit first reported, that the legislation threatens to alienate the companies Canada needs to build a sovereign digital infrastructure.
**The Industry Pushback** A group of European and Canadian tech companies delivered an open letter to the ministers of public safety and industry on Thursday. The signatories argue that the proposed "lawful access" bill would weaken Canada's competitive standing and erode trust in the tech sector. Among the Canadian signers are Toronto-based Windscribe, Toronto-based Tailscale, Fredericton-based Beauceron Security, the Canadian subsidiary of Coinbase, and logistics firm Gobolt.
**Opinion: A Failure of Technical Balance** In my view, the resistance from specialized privacy providers like Tailscale and Windscribe highlights a critical failure in Bill C-22. The legislation attempts to balance national security with privacy without accounting for the technical realities of encryption. By forcing providers to facilitate access to digital information, Ottawa risks a regulatory collision that could render Canada a non-viable hub for privacy-centric innovation.
**The Core Conflict** The bill would grant expanded powers to the Canadian Security Intelligence Service (CSIS) and law enforcement to access digital information from service providers. BetaKit reports the bill's reach is global, applying to any digital service provider with subscribers in Canada, regardless of where the company is based.
Avery Pennarun, co-founder and CEO of Tailscale, stated that Canada must support legitimate investigations without making secure systems more vulnerable or hindering the competitiveness of Canadian firms.
**The Threat of Market Exit** The stakes are high. BetaKit notes that secure messaging platform Signal and VPN provider Windscribe have both threatened to move operations out of Canada if the bill passes in its current form. Windscribe CEO Yegor Sak described Canada as becoming an "untenable" environment for tech enterprises. Additionally, Tailscale indicated to The Globe and Mail it would be forced to seek corporate structures to separate its international operations from its Canadian presence.
**Legislative Status** The government has attempted to mitigate concerns by reducing the required metadata storage period from one year to six months. However, these concessions have failed to satisfy the coalition. While Bill C-36—intended to update privacy laws—has only completed its first reading, the controversial Bill C-22 is significantly further along and currently under review in the Senate.