Apple warns: Bill C-22 could force backdoors Apfelpatient

Apple and Meta are jointly opposing a new Canadian law that could force tech companies to include backdoors in their encryption. Bill C-22 is currently being debated in the House of Commons in Ottawa. Apple is taking a clear stance – echoing a similar debate in the UK.

The debate surrounding government backdoors in encrypted communications has reached a new country. Canada's ruling Liberal Party has introduced Bill C-22, a legislative proposal that could compel Apple to weaken its security architecture. Apple and Meta have jointly opposed it. The parallels to the British controversy of 2025 are unmistakable – back then, the UK forced Apple to completely disable its enhanced privacy features for iCloud on the island, rather than integrate a backdoor. Now, Cupertino faces a similarly tough decision in Canada.

What the law specifically provides

Bill C-22 contains provisions that would grant Canadian law enforcement agencies extensive access to user data. The justification is the usual one: police and intelligence agencies could thus detect security threats earlier and react more quickly. Apple has made it clear in a Reuters statement that the company will not build backdoors into its products – a position the company has consistently maintained for years.

Meta argues along similar lines. The law contains "far-reaching powers, minimal oversight, and no clear safeguards," which could ultimately worsen the security of Canadian users. According to Apple, how closely the law resembles the British model depends on the specific interpretation of the provisions. However, the parallels are striking.

How the British case turned out

Apple's reference to Great Britain is more than just rhetorical. In early 2025, the British government, through a secret "Technical Capability Notice" under the Investigatory Powers Act, compelled Apple to install a backdoor for encrypted iCloud data. A secret order that, according to reports, would have affected not only British but also globally uploaded data.. Apple refused any technical cooperation and instead chose to completely disable the Advanced Data Protection feature in the UK.

The conflict remained unresolved for months. Only significant pressure from Washington brought movement to the matter: Tulsi Gabbard, then Director of the US National Intelligence Organization (NID), publicly stated that the British demand might violate the CLOUD Act and the civil rights of American citizens. In August 2025, the British government finally withdrew its demand – a rare and clear victory for Apple in the dispute between tech companies and governments.

What policy does Apple take regarding encryption?

Apple's position has been consistent for decades. The company argues that any form of backdoor automatically becomes a vulnerability that will sooner or later be exploited by cybercriminals, foreign intelligence agencies, or politically motivated actors. Tim Cook has repeatedly reaffirmed this stance since the 2016 San Bernardino incident, when Apple refused to unlock an iPhone for the FBI - precisely because a circumvention of encryption, once built, would never remain solely in the hands of the agency that originally requested it.

IT security experts largely share this assessment. A backdoor isn't technically a lock with an extra key, but rather a design flaw in the system. Anyone who incorporates such a mechanism cannot guarantee that only authorized users will find it. This applies regardless of whether a law officially restricts access to specific authorities – the technical vulnerability exists anyway.

What is the significance of the Canadian initiative?

Bill C-22 is therefore not an isolated law, but part of a broader pattern. Several democracies are simultaneously discussing expanded access rights to encrypted data, often citing terrorism, organized crime, or child protection. The crux of the matter: If even a single major country successfully implements such a law, others are likely to follow – both Western democracies and authoritarian regimes.

That's precisely why the Canadian case has significance far beyond its own borders. Apple's British dispute has demonstrated its willingness to severely test individual markets to protect its encryption architecture. Should Bill C-22 pass in its current form, a similar reaction in Canada is conceivable – such as withdrawing certain iCloud security features from the country. This wouldn't be a real solution, but it would send another political signal.

Apple is drawing a clear red line – once again

With this public statement, Apple is marking what now appears to be established policy in Canada. Security and privacy are non-negotiable, and the company will not voluntarily accept any backdoor in any market. How far Ottawa respects this position will become clear in the coming weeks in the House of Commons – and may ultimately lead to a repeat of the British script. (Image: Shutterstock / New Africa)