🍁 civid v1

Status and scope

• The supplied text identifies Bill C-22 as passed by the House of Commons on June 18, 2026. It is truncated during Part 2; the detailed provisions of Part 3 and the schedule are not provided.

Part 1 — Timely access to data and information

• Service confirmations: Police, other authorized public officers and CSIS could demand that a telecommunications provider confirm whether it serves or has served a specified person, account or identifier. At least 24 hours must be allowed to respond. Providers could seek judicial review; demands must not disclose medical or solicitor-client privileged information.
• Subscriber information: A judge or justice could order a public-facing service provider to produce specified subscriber information, including identifying details, account identifiers and information about services and devices. The test is reasonable grounds to suspect that it will assist a federal-offence investigation.
• Other access powers: The bill clarifies that officers may request lawful voluntary disclosures and use unsolicited or publicly available information. It also permits certain searches or seizures, including subscriber information, without a warrant or order in exigent circumstances when the conditions for obtaining one exist but obtaining it is impracticable.
• Computer data and tracking: It provides for warrants authorizing examination of computer data, including data on systems already held by officers. Warrants could also cover tracking or transmission data concerning similar devices or communications methods not known when the warrant was issued, subject to specified grounds.
• Cross-border requests: A judge or justice could authorize an officer to request subscriber information or transmission data from a foreign provider; the request must be sent within 30 days. Separately, the Justice Minister and a court could authorize enforcement in Canada of qualifying foreign production decisions.
• Challenges and secrecy: Providers generally have up to five business days to seek review of a service-confirmation demand and up to 10 business days for certain production orders, subject to the bill’s timing and notice rules. Non-disclosure conditions or orders are available.
• Part 1 also amends the CSIS Act, the Controlled Drugs and Substances Act and the Cannabis Act, and makes consequential and coordinating amendments. Most of Part 1 would come into force 180 days after royal assent.

Part 2 — Supporting authorized access

• The bill would create a framework requiring electronic service providers serving people in Canada or doing business in Canada to facilitate access already authorized under the Criminal Code or CSIS Act.
• Regulations could require designated core providers to develop and maintain access capabilities and retain specified categories of metadata for up to six months. They could not require retention of information revealing communication content, web-browsing history or social-media activities. The schedule defining core-provider classes is not included in the supplied text.
• The Public Safety Minister could issue similar orders to individual providers, whether or not they are core providers. An order requires Intelligence Commissioner approval and can last no more than two years. The Minister may provide compensation for some or all compliance costs.
• The text says these obligations do not themselves authorize access to customers’ personal information. It also limits compelled decryption and provides that providers need not comply with provisions that would require them to introduce, or prevent them from fixing, a defined systemic vulnerability.
• The table of provisions lists inspections, audits, compliance orders, monetary penalties, offences and annual reporting. The supplied text cuts off before those detailed provisions, so their conditions and amounts cannot be determined from it.

Part 3 — Parliamentary review

• According to the bill’s summary, Part 3 provides for parliamentary review of Parts 1 and 2. Its detailed provisions are not included in the supplied text.