Evidence of meeting #44 for Public Safety and National Security in the 45th Parliament, 1st session. (The original version is on Parliament’s site, as are the minutes.) The winning word was reasonable.

A video is available from Parliament.

On the agenda

Members speaking

Before the committee

Gilkes  Acting Officer-in-Charge, RCMP Lawful Access, Royal Canadian Mounted Police
Bilodeau  Assistant Deputy Minister, National and Cyber Security Branch, Department of Public Safety and Emergency Preparedness
Hiegel  Director General, National Security Policy Directorate, Department of Public Safety and Emergency Preparedness
Superintendent Richard Burchill  Director General, Technical Investigation Services, Royal Canadian Mounted Police
Wong  Acting General Counsel, Policy Sector, Department of Justice
Gibner  Deputy Assistant Deputy Minister, Policy Sector, Department of Justice
Nashef  Director General, Policy, Planning and Accountability, Canadian Security Intelligence Service

9:15 p.m.

Conservative

Chak Au Conservative Richmond Centre—Marpole, BC

Thank you very much.

Now I want to turn from international to domestic. Spencer was just mentioned. I'm not a lawyer. I'm trying to educate myself by studying some of the cases. In my research, of course, the Spencer case came up, but I tend to feel that you and I may have come to different conclusions.

In the Spencer case, as I found out, the police were investigating the sharing of child pornography over the Internet. The police obtained an IP address and then asked the service provider for the subscriber's name and address without a warrant. I think that was the case, right?

9:15 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

You have that correct, sir.

9:15 p.m.

Conservative

Chak Au Conservative Richmond Centre—Marpole, BC

Yes.

I think, also, at the hearing, a key question was asked, which was this: Should a person have a reasonable expectation of privacy regarding subscriber information linking an IP address to their identity? I think the Supreme Court's ruling was yes, right? The Supreme Court felt there should be a reasonable expectation of privacy for subscriber information.

9:15 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

Again, you have that right, sir, because before that, there was case law that said basic subscriber information did not even engage section 8. There was no reasonable expectation of privacy. This was quite new, and you're right: That's what the court held. Also, they required a judicial authorization, which is what's before you now.

9:15 p.m.

Conservative

Chak Au Conservative Richmond Centre—Marpole, BC

Exactly.

As you said, the court went on to say that the subscriber information is not really a person's name and address. When linked to an IP address, it views who was using the Internet connections and, therefore, provides the key to uncovering a person's online activities and so on.

I think the court's ruling said that, instead of lowering the threshold, perhaps it's just the opposite: It should be better protected. The case established subscriber information and just the conditions of privacy protection. I think that's the first case.

Then, of course, I found another case from 2024. I'm not sure if I'm pronouncing it correctly, but it's the Bykovets case. I think, again, you know about that case, and I think the court, 10 years after the Spencer case, went on to ask another question related to the new technology. The question asked was this: Is there a reasonable expectation of privacy in an IP address itself? Again, the Supreme Court's ruling was yes.

The court also went on to say that modern Internet use leaves detailed digital traces. Once an IP address is linked to other information, it can reveal a lengthy, detailed picture of any individual's activities. Accordingly, the court mentioned that technological developments have greatly increased the amount of personal information that can be inferred from digital identifiers. Then, rather than reducing privacy protection because technology makes surveillance easier, the court held that constitutional protections must adapt to preserve meaningful privacy in the digital age.

Putting all this together, my question is this: Now that the Supreme Court has made it clear that subscribers' information and IP addresses reveal far more than technical data.... It's not just phone-book information anymore—they can expose a detailed portrayal of a person's private life. If the court has recognized increasing privacy interests in digital information, what evidence do you have to conclude that reducing the legal threshold from “reasonable grounds to believe” to “reasonable grounds to suspect” is consistent with section 8 of the charter?

9:20 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

I'm going to start by just situating you with section 8 of the charter. It permits reasonable searches and seizures, in recognition of the fact that the state's legitimate interest in advancing enforcement goals remain consistent with privacy. It's a balancing exercise.

It's a two-part test.

The first one is whether there is a search at all. Was there a reasonable expectation of privacy? It's not complete privacy. It has to be a reasonable expectation of privacy.

The Spencer and Bykovets cases were on the first part. Was there a search at all? Before that, the case law was that there wasn't even a search. On the minimal intrusion, there was no reasonable expectation of privacy. The court is saying that now there is, folks.

You need to go to the next stage, which is, is it authorized by law? Is the law itself reasonable, and was the search conducted? Now we're in a new world, where we need the tool to be authorized by law.

In constructing this piece of legislation for your consideration, that's what we did. We said it has to be judicially authorized, and we're looking for a tool that's useful to officers. We already have all sorts of hammers, as it were, in the search world, but we need something tailored for officers to use at the beginning of an investigation, where we're not looking for evidence of an offence. We're actually just looking for information. It has to be tailored. It has to be narrow. It's going to be judicially authorized.

It's in that balancing, in that weighing of the reasonable grounds to suspect, which is used in all sorts of situations where things are tailored and the intrusion is minimal. That is the standard that's used in criminal law.

That's why that is put before you.

There is no lowering. Nothing's been lowered, because this is a new tool.

I hope that answers your question. I wanted to situate you in terms of section 8 more generally.

9:20 p.m.

Conservative

Chak Au Conservative Richmond Centre—Marpole, BC

Not quite. Even though you said that it's not lowering the threshold, in fact it is. You're making a distinction between reasonable grounds to suspect and reasonable grounds to believe. You have made that distinction. At the end, you're choosing the lower threshold, which is to suspect rather than to believe. Actually, you do lower the threshold.

Are you saying that you don't expect there will be some constitutional challenge if this threshold is adopted?

9:20 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

Again, I want to make sure that we're on the same page.

Before Spencer in 2014, officers routinely received this information voluntarily. Spencer changed the world. The Supreme Court of Canada said that you needed lawful authority. They didn't say that you needed to get a warrant that's at the reasonable grounds standard. They said that you needed to create a law that allows officers to have this power.

In crafting the legislation that's before you, we looked at criminal law more generally in the Criminal Code and the nature of the intrusion itself, the tool itself. It is tailored. It is limited in scope and nature to such an extent that the reasonable grounds to suspect standard was chosen for that new tool. It is consistent with the Criminal Code and other provisions like it. It is consistent. That is what I'm trying to say.

9:20 p.m.

Conservative

Chak Au Conservative Richmond Centre—Marpole, BC

Do you anticipate that this will be challenged in court?

9:20 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

What I can say is that the Minister of Justice is required to review all legislation before he submits it here. He has done that. He's fulfilled his obligations under the Department of Justice Act. It's before you to make that decision.

I can't anticipate what courts or counsel may or may not do in terms of challenging the legislation.

9:25 p.m.

Conservative

Chak Au Conservative Richmond Centre—Marpole, BC

Assuming that in the future, this legislation is challenged in court, what will be the line of defence?

9:25 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

If there was a court case, we would be making the same sorts of arguments that we are raising with you folks here to consider whether it's the right tool. We would go through the nature of the tool, and the consistency with the Criminal Code and case law. Those would be the arguments that we would make.

9:25 p.m.

Conservative

Chak Au Conservative Richmond Centre—Marpole, BC

Thank you.

Those are my questions.

The Chair Liberal Jean-Yves Duclos

Thank you, MP Au.

MP Kronis.

Tamara Kronis Conservative Nanaimo—Ladysmith, BC

Thank you so much, Mr. Chair.

As we try to come to a consensus on the amendment proposed by my Bloc colleague, I think it's really important to understand the problem the government says it's trying to solve with this clause, and to stand that solution up against the Bloc amendment. It is similar to amendments proposed by both the Conservatives and the NDP, and it relates to a concern expressed to me by Ms. May. It is really important, at the outset, to recognize that all the opposition parties have taken issue with the way the bill is drafted around this standard.

I'm going to have some questions for the witnesses and will try to get to the bottom of this in a way Canadians can understand, because privacy is so important to Canadians. I know there are some people at home who are following this issue closely.

Before I get to those questions, though, there's something I would like to say, through the chair, specifically to my colleagues on the other side of the table, because they're the ones supporting the bill the way it's currently drafted, with respect to this standard.

When I initially spoke to Bill C-22 in the chamber, the issues around the government choosing the standard of “reasonable grounds to suspect” instead of “reasonable grounds to believe” attracted a lot of attention. One of our members, who practises criminal law, practically grabbed me by the lapels as I was coming out of the chamber after my speech, to talk about it. Ms. May also pulled me aside to have a conversation about it. The specific reason it's such a big deal to lawyers and lawmakers—it's important that people watching this at home understand—is that these questions.... “Reasonable grounds to believe” and “reasonable grounds to suspect” are not just technical legal terms. They determine how much evidence and how much work the state needs to do before it can intrude into someone's privacy.

I thought Ms. Gibner did an excellent job of explaining the basics of privacy law and the kinds of tests the court uses. I'm not going to reiterate the earlier conversation the committee had with respect to using the lower standard for production orders in general. I think the committee got that vote wrong, and I would have supported the Bloc amendment. The fact that the committee has already made a decision to use that lower standard for domestic subscriber production orders does not automatically mean the same standard has to apply in the international context.

That's the context in which we're discussing the standard here.

I thought Ms. Gibner did a really nice job of describing Spencer, because that case changed the frame. We no longer look at it and say, “This is just basic subscriber information or basic customer information.” Spencer made it clear, from a judicial perspective and a charter perspective, that we're dealing with what can be highly revealing information that attracts a reasonable expectation of privacy under the Constitution. It is useful to think about the ethos of Spencer being here with us in this room, because the way it situates this debate we're having reminds us that subscriber information is not considered to be neutral under Canadian law. It is often a key that connects a person to their digital life. Once that identity is disclosed, that privacy interest is gone forever. Once you know who it is, you know who it is. It's one of those things that are hard to reverse. That's why this standard matters, and it's why the choice of standard in legislation matters.

If Parliament chooses the threshold of “reasonable grounds to suspect” instead of “reasonable grounds to believe”, it's lowering the bar for the state.

When I say “the state”, I don't mean it in the sense of the United States, for people who are watching from home. I mean it in the sense of “the state”: the entity of government that in some ways takes care of us and in some ways has the power to show up at our house and drag us out at four o'clock in the morning, because that is part of the social contract. The social contract that we make is with the state. The charter relates to the things and the role that the state plays in our lives, when we have individual autonomy and when we are part of that collective. It really matters.

I sat and listened to my colleague, Madame DeBellefeuille, talk about how the conversation we are having here is not a filibuster. It is not something where we are holding up the work that the government wants to do. It is an inherent part of the work that we do in this chamber.

I understand that tempers have gotten high over the last few days and that there is an agenda that the government would like to push through, that there are things they want to do, but we have stood in the chamber over and over again and said that the government's failure to plan a legislative agenda with enough sitting days and enough time to get the work that they want done through Parliament is not something that should become our problem. We should not be rushing through important conversations about things as basic as privacy, especially when these are ongoing conversations that are happening in the courts and that are happening in our communities.

I'm not going to reiterate what Madame DeBellefeuille said, but I think it's really important that no one in this room feels that they are being pushed hard—I'm not going to use the word “bullied”—into skipping over understanding what these really important standards do, because we're no longer talking about the standard for a regular production order. What we're talking about when we get to this amendment is the same standard as it applies to something called a “mutual legal assistance treaty”. That is something that serves a slightly different purpose than the production order.

My understanding is that a production order, as we think about it, is a tool that's used by Canadian authorities to obtain information directly from companies and enterprises over which Canada has jurisdiction. When we get into mutual legal assistance treaties—or MLATs, as we call them, because who doesn't love a four-letter acronym—what we're doing is we're asking.... I want to make sure I'm correct on this, so please, someone, correct me if I'm wrong. An MLAT actually involves asking another country to use its legal processes to obtain information on Canada's behalf from a company or an enterprise in that country.

Have I got that correct? Okay. That's good, because that's where we are in this debate. We are debating the legal standard that should be used when we are asking another country to go and get information from one of its corporate persons, I guess. In Canada, it would be a person, but it would be more of a corporate person or an enterprise. We are asking it to go into its database, into its information, and give law enforcement in Canada information that Canadian authorities can then use.

That puts us into a different realm. It puts us over borders and it engages questions around international comity, around foreign sovereignty and around cross-border co-operation, and not just with the United States or even with countries that are democratic. The IP addresses could really be from anywhere. We'll talk about that a bit, I hope, but it's cross-border co-operation that simply does not arise in a domestic co-operation order.

I think, as Ms. Gibner pointed out, that what we have in Canada when it comes to our privacy landscape is something to which there is no comparator. There isn't really a Spencer in any of the countries that we're dealing with. It's a way in which Canadian rights and Canadian privacy rights are...“unique” is a bit of an overused word, but they're certainly not common, and it requires thinking. That means that we think about these problems in a different way.

There's been some conversation around the table. However, I hope the way I've explained this helps make it clear to everybody sitting around the table why it is possible to have one standard for a domestic production order and a different standard for an international production order.

Is that a fair summary of where we are, Ms. Gibner? Do you have anything you'd like to add to that?

9:35 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

In response to your last statement, I will say that it would seem more important to me and to Canadians that Canadians protect Canadians' privacy. I'm unclear on why we would have protections for other countries more so than for Canadians. That doesn't really make sense to me, personally.

9:35 p.m.

Conservative

Tamara Kronis Conservative Nanaimo—Ladysmith, BC

Given that I think we have this wrong—and I think we got it wrong on the first question—I'm actually hoping I'll be able to convince my colleagues through this round of questioning and through our conversation.

9:35 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

Remember how we started earlier. The standards of the Five Eyes and G7 partners are already lower than ours. We're actually giving those partners our higher standards, if you know what I mean.

9:35 p.m.

Conservative

Tamara Kronis Conservative Nanaimo—Ladysmith, BC

Do we do that in the realm of forced labour? There are countries that have lower labour standards than ours. We have rules that say we shouldn't be importing goods made under conditions of slavery in other countries. Accepting that other countries' legal standards are lower than ours and that, therefore, we shouldn't use a higher standard—

9:35 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

I'm saying the exact opposite, which is that our standards are already higher. By working with our international partners, we are imposing on ourselves...or at least this legislation suggests to you that the right approach is that, yes, we apply Canadian standards, higher standards, on our partners, not lower, for example. We're not having it voluntarily provided to us. We are requiring this lawful authorization at the higher standard that those countries don't impose on themselves.

9:35 p.m.

Conservative

Tamara Kronis Conservative Nanaimo—Ladysmith, BC

I wish I had been here for the conversation about the other clause. I would submit to you that we made the wrong decision on that.

I could make an argument, based on Spencer and other legal cases, that there is a material difference between suspecting and believing. Since I don't have the opportunity to make that argument on that clause, I will make it here instead.

You may believe that, if we did it differently, you would have the lower standard on this and the higher standard on the other one. I would like you to confirm that the standards don't have to be the same.

9:35 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

This committee can decide whatever this committee wants to do in terms of standards, for sure.

9:35 p.m.

Conservative

Tamara Kronis Conservative Nanaimo—Ladysmith, BC

Moving on to the clause, I just want to have the conversation about this clause. I want to make it clear that I'm having the conversation about this clause independent of the other clause that the committee already made a decision on.

I can understand why the government would want to make it easier and faster for Canadian police to get digital records, especially when the records are held by foreign service providers. That's the goal here. Is that correct?

9:40 p.m.

Deputy Assistant Deputy Minister, Policy Sector, Department of Justice

Kimberly Gibner

The goal is to provide officers with timely access to information, particularly at the beginning of investigations.

9:40 p.m.

Conservative

Tamara Kronis Conservative Nanaimo—Ladysmith, BC

What I'd like to understand....

I'll go to Sergeant Gilkes or perhaps Chief Superintendent Burchill—whoever wants to answer this question.

The nub originates with law enforcement. When we talked last week about a different amendment, the Liberal.... It was a Liberal subamendment to a Bloc amendment. When we talked about that situation, we were talking about a fairly straightforward fraud situation, where you go to get information under a production order.

How do we get to an MLAT? What changes in that fact scenario we talked about that gets us into an MLAT?