July 16, 2024
The Canadian Security Intelligence Service (CSIS) has been looking for a new production order power; it’s on its way. The role of CSIS is to investigate activities suspected of constituting threats to the security of Canada and to report on these to the Government of Canada. CSIS is also empowered to take measures to reduce threats to the security of Canada. On May 6, 2024, the Government of Canada tabled Bill C-70, An Act Respecting Countering Foreign Interference. The Bill sped through the House of Commons and the Senate and received Royal Assent on June 20, 2024. The Bill will create a Foreign Influence Transparency and Accountability Act and make a number of significant amendments to other statutes such as the Criminal Code of Canada, the Canada Evidence Act, the Security of Information Act and the Canadian Security Intelligence Service Act (CSIS Act). Among the proposed amendments to the CSIS Act is the creation of a new preservation order and a new production order for CSIS.
The new orders are a positive development. The preservation and production orders are much more streamlined and easier to comply with. And the appropriate checks and balances are there: the new orders are only available first with the approval of the Minister of Public Safety and then only with judicial approval based on information under oath. Here’s a closer look at the proposed new CSIS production and preservation orders.
Preservation Order
Like police are able to obtain under the Criminal Code, the amendments will give CSIS the ability to obtain a preservation order. Currently, a preservation order for law enforcement in section 487.013 of the Criminal Code is restricted to “computer data”. The proposed CSIS Act preservation order will extend this to “any information, record or document — regardless of medium or form — or thing”. A Federal Court judge can grant a preservation order where there are reasonable grounds to suspect there is any “any information, record or document — regardless of medium or form — or thing” that will assist CSIS in carrying out its mandate, and that CSIS intends to seek via a warrant or production order. Notably, CSIS can’t obtain “things” via a production order, only via a warrant.
Production Orders
Also like the Criminal Code for traditional law enforcement, the amendments will give CSIS the ability to obtain a production order. Currently, CSIS can only compel the production of information via its search warrant powers under section 21 of the CSIS Act, sometimes accompanied by an assistance order. But for third parties that might possess information that’s the subject of a court-approved warrant, the warrant is an awkward and sometimes unworkable device:
As a result, when CSIS is looking for information about customers or users of third-party services, they can’t give that service provider a copy of the warrant. This, of course, causes difficulties for service providers that need to satisfy themselves both that CSIS has the lawful authority to acquire the information and that the service provider is lawfully permitted to disclose the information without risk of liability under Canadian law. The new production order should solve this problem: it will name the organization being ordered to produce the records and it will name the specific records CSIS is seeking. The organization on the receiving end of it will be able to satisfy itself that the order is it’s a lawful order and what it’s requiring them to produce.
Reasonable Grounds. The new production order will largely mirror general production orders under the Criminal Code of Canada. A CSIS officer will have to appear before a designated Federal Court judge and satisfy the judge, based on information under oath, that “that there are reasonable grounds to believe that the information, record or document is in the person or entity’s possession or control and will assist the Service to investigate, within or outside Canada, a threat to the security of Canada or to perform its duties and functions under section 16.” This is similar to a showing of probable cause in the U.S.
Extraterritorial Application. The new CSIS Act provisions say the order can apply to data and records that are outside of Canada – but notably, it’s silent with respect to its application to organizations outside of Canada. Applying this extraterritorially will be problematic, more problematic than attempting to do so with a Criminal Code production order. Countries often have a common interest in investigating crime; however, interests might diverge more vigorously when you’re dealing with the covert collection of security intelligence. Canada would understandably be very offended if the Chinese security service attempted to compel records from a Canada-based, Canadian company. The reverse is likely also the case.
Variation or Revocation. As with Criminal Code production orders, the organization that is on the receiving end can apply to a Canadian court to have the order varied or revoked because on grounds either:
For U.S.-based organizations, it’s arguably “unreasonable in the circumstances” to require the organization to violate U.S. law, such as the Stored Communication Act, a so-called “blocking” statute that regulates the circumstances under which an ‘‘electronic communications service provider” in the U.S. can disclose information related to its account-holders. It could also be argued that data that’s subject to a non-Canadian blocking statute could be “otherwise protected from disclosure by law”. Importantly, an application to vary or revoke can only be made within 14 days after receiving the order.
Please contact your McInnes Cooper lawyer or any member of our Privacy, Data Protection & Cyber Security Team @ McInnes Cooper to discuss compliance with CSIS preservation or production orders.
McInnes Cooper has prepared this document for information only; it is not intended to be legal advice. You should consult McInnes Cooper about your unique circumstances before acting on this information. McInnes Cooper excludes all liability for anything contained in this document and any use you make of it.
© McInnes Cooper, 2024. All rights reserved. McInnes Cooper owns the copyright in this document. You may reproduce and distribute this document in its entirety as long as you do not alter the form or the content and you give McInnes Cooper credit for it. You must obtain McInnes Cooper’s consent for any other form of reproduction or distribution. Email us at [email protected] to request our consent.
Aug 15, 2024
On June 21, 2024, the Supreme Court of Canada concluded – decisively - that the Canadian Charter of Rights and Freedoms applies to protect the…
Jun 26, 2024
An increasing number of municipalities in Canada are using public video camera surveillance to promote public safety and help deter crimes like…
Jun 20, 2024
On April 30, 2024, the Ontario Divisional Court decided the victim of a serious cyber security incident was required to produce to privacy…
Apr 30, 2024
Bill C-63, if passed, will create the hotly anticipated Online Harms Act to regulate certain online platforms, create new Criminal Code of…
Mar 14, 2024
On March 1, 2024, the Supreme Court of Canada decided a police request for disclosure of an IP address is a “search” under section 8 of the…
Dec 15, 2023
Over four years after it began, the federal government still hasn’t finalized its overhaul of the private sector privacy law regime that both…
Sep 25, 2023
There’s a new scam on the web: Electronic Fund Transfer (EFT) scams. Most are familiar with established scams like phishing and ransomware and…
Jun 9, 2023
You arrive at the legendary Madison Square Garden to catch the Mariah Carey concert. It’s the big event of the trip – the reason you came to…
Apr 27, 2023
The benefits to employees, and often to employers, of remote work has made it a staple of today’s workplace. But the move to remote work…
Feb 1, 2023
On January 26, 2023, the Office of the Privacy Commissioner of Canada (OPC) released a report of findings requiring companies using targeted…
Jan 26, 2023
In November 2022, the Ontario Court of Appeal definitively decided an organization whose information systems are breached by a malicious third…
Jul 20, 2022
There’s a new privacy law coming to Canada. In June, the federal government introduced a complete overhaul of the privacy law regime that both…
Jun 30, 2022
On June 16, 2022, the federal government took a second shot at a complete overhaul of the private sector privacy law regime that both protects…
Dec 16, 2021
We updated this publication on January 12, 2024. The name of the game is to have a plan to mitigate the risk that a data breach will happen…
Jan 26, 2021
Updated March 4, 2022. Privacy is critical to every business in every sector, including startups and growing businesses: to comply with the…
Nov 19, 2020
We updated this publication on June 30, 2022. NOTE: On June 16, 2022, the Government of Canada introduced Bill C-27: Digital Charter…
Mar 28, 2019
Organizations subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) – those that collect, use or…
Feb 20, 2019
On February 14, 2019, the Supreme Court of Canada decided yet another criminal law decision that will likely have broader ramifications for…
Dec 19, 2018
On December 13, 2018, the Supreme Court of Canada confirmed that a third party can’t waive a person’s right to privacy or their rights under…
Aug 20, 2018
Updated July 8, 2024. Every organization subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA, soon to…
Aug 3, 2018
Updated June 28, 2024. As of November 1, 2018, organizations in Canada subject to the Personal Information Protection and Electronic…
Jun 13, 2018
Businesspeople (and their legal counsel) are on the road more than ever before: according to Statistics Canada, while Canada-U.S. traffic is…
Jan 12, 2018
Whether a provincial court will grant police a “production order” under the Criminal Code of Canada requiring a non-Canadian company to…
Jun 28, 2017
On June 28, 2017, the Supreme Court of Canada confirmed a Canadian court can issue an interlocutory injunction (an order requiring an entity or…
Jun 23, 2017
On June 23, 2017, the Supreme Court of Canada decided that in a contest between the choice of forum clause in Facebook’s online terms of use…
Jun 7, 2017
On June 7, 2017, the federal government repealed the regulations that would have brought into effect the sections of Canada’s Anti Spam…
Feb 24, 2017
Updated January 29, 2024. Most organizations (72%) store the personal information of customers. employees, suppliers, vendors or partners,…
Jan 25, 2017
Doing business with the public sector creates an often overlooked – but very real – risk that the confidential information a business…
Nov 22, 2016
On November 17, 2016 the Supreme Court of Canada decided a mortgagee has the mortgagor’s implied consent to disclose its discharge statement…
Mar 24, 2016
When a business responds to a public sector Request for Proposal or Expression of Interest (both of which we’ll refer to as an RFP for these…
Jan 27, 2016
On January 21, 2016, the Ontario Superior Court of Justice dramatically expanded the scope of legal privacy protection – and the liability…
Mar 25, 2015
On March 3, 2015 Canada’s Privacy Commissioner determined that Health Canada breached privacy laws by mailing letters to over 40,000 Marihuana…
Mar 6, 2015
On March 5, 2015, the Canadian Radio and Television Commission (the CRTC, the main agency charged with administering and enforcing most of CASL)…
Dec 11, 2014
On December 11, 2014 the Supreme Court of Canada continued its trend to recognize privacy rights – and develop the law to protect them –…
Dec 11, 2014
On January 15, 2015, the software provisions of Canada’s Anti-Spam Legislation (CASL) will take effect. CASL’s anti-spam sections, touted…
Dec 1, 2014
The construction industry - project owners, contractors, subcontractors and trades - might be relaxing, ignoring the hype around Canada’s…
Oct 14, 2014
CASL’s anti-spam sections came into force on July 1, 2014. Every organization that CASL affects should now be complying with it – and their…
Aug 1, 2014
Most Canadians have heard about Canada’s Anti-Spam Legislation (CASL): we’ve been bombarded with “CASL Compliant” emails asking us to…
Jun 16, 2014
On June 13, 2014 the Supreme Court of Canada decided that Canadians have a reasonable expectation of privacy in their online activities, and…
Jun 12, 2014
The countdown to CASL is almost over: there are only 13 business days until the anti-spam provisions of CASL – and most of the penalties for…
May 8, 2014
On July 1, 2014 – less than two months from now - the anti-spam sections of Canada’s Anti-Spam Legislation (CASL) take effect. Individuals…
Apr 15, 2014
The countdown to CASL is on: on July 1, 2014, the anti-spam sections of Canada’s Anti-Spam Legislation (“CASL”) take effect. Individuals…
Feb 28, 2014
On July 1, 2014, the anti-spam sections of Canada’s Anti-Spam Legislation (aka “CASL”) will take effect. CASL is: Broad. It applies…
Feb 28, 2014
On July 1, 2014, the anti-spam sections of Canada’s Anti-Spam Legislation (aka “CASL”) take effect. CASL will apply to just about every…
Nov 8, 2013
On November 7, 2013, the Supreme Court of Canda decided police require specific authorization in a search warrant to search the data in a…
Nov 28, 2012
On October 19, 2012 the Supreme Court of Canada (SCC) decided a teacher criminally charged with possession of child pornography and unauthorized…
Subscribe to McInnes Cooper to stay current with our leading insights on legal updates, trends, news, events, and services.