www.theglobeandmail.com Psiphon Threatens to Leave Canada Over Lawful Access Bill
Article Content
- •Psiphon plans to exit Canada if Bill C-22 passes.
- •The bill requires changes for surveillance by police and CSIS.
- •Psiphon has 20 million users globally, primarily in repressive countries.
Psiphon, a Toronto-based VPN provider, announced plans to exit Canada if the federal government's Bill C-22 is enacted. The bill mandates electronic service providers to implement surveillance capabilities for police and CSIS, which Psiphon argues would compromise user privacy. With 20 million monthly users globally, particularly in oppressive regimes like Iran and China, Psiphon emphasizes that the bill would hinder its ability to protect users from censorship. The company, originally a project of the Citizen Lab, is prepared to relocate its operations to maintain its privacy-preserving tools. The backlash against the bill has been significant among tech companies, with many expressing intentions to leave Canada if it passes.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Citizen Lab in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What is Bill C-22?
How many users does Psiphon have?
Why is Psiphon considering leaving Canada?
Continue Reading
Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited On September 30, 2026, Cisco disclosed a critical vulnerability (CVE-2026-76504) in the Catalyst SD-WAN Manager that allows unauthenticated remote attackers to bypass authentication and gain admin-level access to the system. This flaw stems from improper handling of URI encoding in HTTP requests, enabling attackers to…
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited In late September 2026, two critical zero-day vulnerabilities (CVE-2026-88771 and CVE-2026-88772) in Citrix NetScaler ADC and Gateway were actively exploited, allowing remote code execution. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabilities catalog on…