I think this is Canada’s response to the US CLOUD Act and FISA 702. But, implied in this response is that Canada’s power system is uninterested in resolving the privacy issues that flow from those invasive pieces of US legislation as it relates to Canadians. Instead, it seems that the system has become interested or accustomed to access to this Canadian data, and wants it to continue with domestic legislation.

Ultimately, as we’ve seen with Salt Typhoon and other iterations of it, these types of indiscriminate legislation chips away at our collective rights, and makes the world less safe. With the recent news of the PHP vulnerabilities, and the eMudhra Certificate Security fiasco, it’s quite clear that building back doors to systems that have difficulty maintaining their front doors creates more instability and uncertainty.

https://ici.radio-canada.ca/rci/en/news/2182863/health-data-cloud-servers-canada-us

https://www.recordinglaw.com/news/fisa-section-702-surveillance-lapse/

https://www.computerworld.com/article/4239619/emudhra-quits-global-tls-certificate-market-after-compromise-of-ca-signing-keys.html

https://www.cbc.ca/news/business/php-cybersecurity-vulnerability-explainer-9.7392394