New Laws Expand State Power Over Privacy and Freedom in Canada

Recent federal legislation in Canada reflects a growing shift in how government authority is exercised in relation to individual rights. While each bill is presented as a targeted response to concerns—cybersecurity, public safety, or social cohesion—taken together, they suggest a broader trend: an expansion of state power into areas traditionally protected by privacy rights, freedom of expression, and the rule of law.

Consider Bill C-26, which would allow law enforcement and intelligence agencies to obtain certain digital information—such as location data, time stamps, and network identifiers—from telecommunications providers, in some cases without a warrant. While the government maintains that this does not include access to message content, courts have increasingly recognized that metadata can reveal highly personal details about an individual’s life.

Section 8 of the Canadian Charter of Rights and Freedoms protects against unreasonable search and seizure. Warrantless access to sensitive personal data has generally been viewed as constitutionally suspect unless narrowly constrained. Yet Bill C-26 lowers the threshold for access while also permitting confidential orders that may prevent companies from disclosing government demands. This raises not only privacy concerns, but also questions about transparency and freedom of expression.

Bill C-9, the Combatting Hate Act, introduces another set of challenges. While its stated goal is to address hate speech and protect vulnerable communities, it also expands the scope of enforcement and increases reliance on discretionary judgment. The removal of certain legal safeguards—such as the “good faith religious expression” defence—along with broad and undefined terms like “harmful” or “intolerant,” creates uncertainty about how the law may be applied.

Even where protections such as Attorney General oversight remain, the process itself can become punitive. Investigations, legal costs, and reputational harm may arise long before a final determination is made. In other jurisdictions, similar laws have led to prosecutions over speech that was lawful when originally expressed, raising concerns about retroactive scrutiny in the digital age.

Bill C-8, which reintroduces earlier cybersecurity legislation previously tabled as Bill C-26, expands federal authority to direct telecommunications providers and critical infrastructure operators to take specific actions in response to cyber threats. It allows government to issue binding orders and require compliance with security measures, sometimes under conditions of confidentiality.

The concerns are about how much control this gives government over private communications systems, and how little transparency there may be around some of those orders. There are also concerns about limited oversight, meaning decisions could be made and enforced without much public or judicial review. Another concern is that broad powers used for cybersecurity could expand over time into more routine monitoring or direction of private digital systems.

Other legislation points to similar patterns.

Bill C-4, addressing political party data practices, establishes a framework for handling voter information but stops short of imposing the same rigorous privacy standards required of private-sector organizations.

Meanwhile, Bill C-5 enables the federal government to fast-track major infrastructure projects deemed to be in the “national interest,” potentially reducing the scope of environmental review, public consultation, and independent scrutiny.

Across these bills, several common themes emerge: expanded access to personal data without traditional judicial oversight; increased reliance on vague or broadly defined legal standards; greater concentration of decision-making power within government; and a shift from prior authorization toward after-the-fact review.

This shift matters. Rights protected under the Charter are not only legal principles—they are practical safeguards that depend on how laws are applied in real-world situations. When oversight is reduced, definitions are broadened, and enforcement is accelerated, the balance between individual liberty and state authority begins to change.

The question is not whether these freedoms continue to exist in law. It is whether they will continue to function as meaningful protections in practice.