Apple encryption protections are facing a new political test in Canada, where the company has publicly opposed Bill C-22 over concerns that the proposed law could force technology companies to weaken the security of their products. The bill is framed by the Canadian government as a lawful-access measure designed to help law enforcement and intelligence agencies respond to crime and national security threats. Apple says the current draft risks going much further.
In a statement reported by Reuters, Apple warned that Bill C-22 could allow the Canadian government to force companies to break encryption by inserting backdoors into their products, something the company said it will never do. Meta has raised similar concerns, arguing that the draft could require companies to build or maintain capabilities that weaken encryption or even install government spyware on their systems.
The dispute places Canada inside a broader international fight over encrypted communications. Governments argue that police and intelligence agencies need modern tools to investigate serious crime, terrorism, child exploitation, and security threats in a world where communications have moved to digital platforms. Technology companies and security experts counter that there is no safe way to create an encryption backdoor only for lawful access. Once a weakness exists, it can be targeted by criminals, hostile governments, spyware vendors, and malicious insiders.
For Apple, the issue cuts directly into one of its strongest brand promises. iPhone, iMessage, iCloud security features, device encryption, and privacy protections are central to how the company presents its ecosystem. A law that could compel technical changes to encrypted systems would force Apple into the same kind of confrontation it has faced before in the United States and the United Kingdom.
Bill C-22 Reopens the Encryption Backdoor Debate
Apple encryption concerns around Bill C-22 center on the difference between lawful access and technical access. Lawful access means the government has legal authority to seek information under defined rules. Technical access asks whether a company can actually provide that information without weakening the security architecture protecting everyone else.
Bill C-22, introduced as an Act respecting lawful access, would create a framework requiring electronic service providers to facilitate access to information when authorized under Canadian law. Government materials describe the bill as a modernization effort designed to help the Canadian Security Intelligence Service and law enforcement agencies detect, deter, and respond to crime and security threats.
The problem is that encrypted services are designed specifically so providers cannot read user content. End-to-end encryption means the message, call, or data is protected so only the intended users hold the keys needed to access it. If a provider cannot see the content, it cannot simply hand it over. To satisfy certain access demands, the provider would need to redesign the system, add a new access mechanism, or weaken the protection.
That is why Apple is objecting now, before the bill becomes law. The company is not saying law enforcement should never investigate digital crime. It is saying the bill, as drafted, could create powers broad enough to compel security changes that undermine encryption for everyone.
Public Safety Canada has pushed back on that interpretation, saying the law would not require companies to introduce a systemic vulnerability into electronic protections such as encryption. But critics argue that the bill’s safeguards and definitions may not be clear enough, especially if key terms are left to regulation or ministerial interpretation.
Apple’s Privacy Brand Is on the Line
Apple encryption policy has been consistent for years: the company opposes backdoors because any intentional weakness can become a wider security risk. That position became widely known during the 2016 San Bernardino dispute, when Apple resisted an FBI demand to create software that could help unlock an iPhone. Apple argued then that the government was asking for a tool that could threaten the security of many users, not only one device.
The Canada dispute follows the same logic. Apple’s statement says the bill could undermine the privacy and security features users expect from the company at a time of rising threats from malicious actors. That language is important because Apple is framing encryption not as a barrier to safety, but as a safety feature.
That framing reflects how people actually use encrypted devices and services. Encrypted messages, backups, passwords, health data, financial information, business files, photos, location data, and personal communications are not abstract privacy concerns. They protect families, journalists, activists, lawyers, businesses, students, healthcare workers, and ordinary users from fraud, spying, identity theft, and cybercrime.
If a government can require a company to build access into a secure system, Apple fears that other governments may demand the same. A Canadian rule could become a precedent. A U.K. order could become a model. A U.S. case could become a pressure point. Apple sells the same devices and services globally, so a local encryption demand can have international consequences.
This is why Apple tends to fight encryption mandates aggressively. A backdoor created for one country may be difficult to contain technically, legally, or politically.
Meta’s Warning Broadens the Fight
Apple is not alone in opposing Bill C-22. Meta has warned that the bill’s technical assistance obligations could force companies to break, weaken, or circumvent encryption and other zero-knowledge security architectures. That matters because WhatsApp is one of the world’s largest end-to-end encrypted messaging services, and its security model depends on Meta not being able to read message content.
Meta’s criticism broadens the issue beyond iPhone. The bill could affect messaging services, cloud platforms, device makers, app providers, and other electronic service providers. If the law gives authorities the ability to demand technical changes from companies that provide digital services in Canada, the effects could reach much of the modern internet.
The shared Apple-Meta position also shows that encryption is one of the few areas where major technology companies often align despite competing in other markets. Apple and Meta disagree on advertising, privacy, platforms, app rules, and business models, but both have strong reasons to resist mandates that would weaken encrypted systems.
For users, the practical question is whether security can remain strong if governments demand exceptional access. Security researchers have long argued that exceptional-access systems are extremely difficult to build safely because they create new targets. The technical access point must be protected, governed, audited, and prevented from misuse. If it fails, the damage can affect far more people than the original investigation.
Canada Faces a Hard Policy Tradeoff
Bill C-22 puts Canada in the middle of a difficult public-safety debate. Law enforcement agencies face real challenges when suspects use encrypted devices and services. Investigators argue that legal authority can become meaningless if companies cannot provide access to data after a court order or lawful demand. That is the government’s strongest argument for modernizing lawful access.
The other side is that strong encryption protects the public at scale. It protects bank accounts, medical conversations, business secrets, government communications, personal messages, and digital identity. Weakening it could make Canadians more vulnerable to the same criminals and foreign threats the law is meant to fight.
The best version of the debate should not pretend there is an easy answer. Law enforcement needs tools to investigate serious crimes. Users need secure communications and devices. The question is whether Bill C-22 can give authorities workable powers without forcing companies to redesign encryption or create systemic risk.
Apple’s opposition suggests the company does not believe the current text gets that balance right. Public Safety Canada says the bill is not intended to require systemic vulnerabilities. The gap between those positions is where the legislative fight will unfold.
The stakes are high because encryption rules tend to set precedent. If Canada passes a law that companies believe can compel backdoors, other countries may point to it. If Canada narrows the bill to protect encryption more explicitly, it could become a model for lawful-access legislation that avoids forcing technical weakening.
For Apple users, the issue is not only Canadian policy. It is whether the privacy and security architecture behind iPhone and Apple services can remain intact when governments seek greater access to digital information. Bill C-22 is still under debate, but Apple’s warning makes clear that the company sees the proposal as more than a local legal dispute. It sees it as another front in the global fight over whether secure products can remain secure when governments demand a key.
