Apple, Meta, Signal Face Exit Threat From Canada Over Encryption Backdoor Laws

Canadian technology companies and global firms are warning they will withdraw services if new surveillance legislation mandates encryption backdoors. Psiphon, which provides anti-censorship tools, said it would exit the country if the bill passes. Signal, the encrypted messaging app, also confirmed it would leave the Canadian market because the law would require unacceptable changes to its open source projects.

Apple and Meta have publicly criticized the proposed legislation. DuckDuckGo and NordVPN indicated they would consider pulling their services from Canada as well. These reactions highlight growing industry resistance to laws that compel companies to weaken security features. The firms argue that such mandates create unacceptable risks for users and violate fundamental security principles.

What we know

The proposed Canadian law aims to give police and intelligence agencies greater powers to access people’s information. It includes provisions for expanded data retention and what amounts to mandatory backdoors in encrypted products. According to Wired, this is part of a wider trend where democratic countries are proposing similar changes to surveillance laws.

Security engineers and cryptographers have consistently stated that intentional flaws in encrypted products cannot be built safely. Kate Robertson, a senior research associate at the University of Toronto’s Citizen Lab, noted that some officials view technology as a crime scene itself. This perspective drives a myopic fixation on gaining access, regardless of the security consequences for ordinary users.

Defender's checklist

• Review current data retention policies to ensure they align with minimum necessary collection principles.
• Assess reliance on third-party services that may be forced to weaken encryption under local laws.
• Monitor legislative developments in your jurisdiction that could mandate compliance with backdoor requirements.
• Verify that your organization’s security posture does not depend on features that could be legally compromised.

The background in plain language

Encryption scrambles data so only authorised parties can read it. A backdoor is a deliberate weakness that allows others, such as law enforcement, to bypass this protection. Security experts warn that creating a safe backdoor is impossible because any weakness can be discovered and exploited by malicious actors. Teams usually advise against any system design that includes intentional access points, as these undermine the entire security model.

What to do and how to stay safe: Psiphon

• Check whether the services you use for sensitive communications have stated they will withdraw from your region.
• Review your organisation’s vendor contracts to understand how local laws might impact data security guarantees.
• Ensure you are using end-to-end encryption for all sensitive communications where possible.
• Monitor official statements from technology vendors regarding compliance with new surveillance legislation.

Step-by-step guide: Data Brokers Opt Out: How to Remove Your Personal Information

General security guidance from the TechWire Beat newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which companies have threatened to leave Canada?

Psiphon and Signal have stated they will exit the Canadian market if the bill passes. DuckDuckGo and NordVPN said they would consider pulling services.

Why do security experts oppose encryption backdoors?

Cryptographers and security engineers consistently say that intentional flaws in encrypted products cannot be built safely and pose significant risks.

What does the proposed Canadian law aim to do?

The law aims to give police and intelligence agencies greater powers to access information, including through expanded data retention and mandated backdoors.