Welcome to Kernel Panic, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here.

Canada's latest legislative moves have prompted concerns, with tech giants and privacy advocates warning of potential exits. Psiphon, known for keeping Iranian internet open, says it will leave if the bill passes. Signal, Apple, Meta and others echo similar sentiments, highlighting the global trend towards greater government surveillance.

The debate extends beyond Canada, with similar proposals in the UK, Australia, EU and elsewhere. Critics argue that these measures, like C-22, aim to weaken encryption, creating backdoors and increasing data retention. Cryptographers warn that such backdoors are inherently insecure, potentially leading to abuse by anyone, including cybercriminals.

While some companies consider relocation, the problem persists. As Afsaneh Rigot from the De|Center points out, such laws will inevitably spread, affecting users worldwide. The safe haven for privacy services, therefore, remains elusive, necessitating constant vigilance and adaptation.

The strongest defence, according to Joseph Lorenzo-Hall at the Internet Society, is minimal data handling. However, this is not enough when laws can compel increased data collection, making it difficult for tech firms to operate in a secure, privacy-friendly manner.