A Surveillance Treaty Dressed Up as Fighting Cybercrime: Canada Signs the UN Convention

The Government of Canada has announced that it has signed the UN Convention against Cybercrime, presenting it as an agreement with “some of the strongest human rights safeguards” among international criminal-justice treaties and emphasizing its provisions on protecting children. Yet, as Michael Geist points out, that framing conceals a very different reality: the document is not so much about cybercrime as about the large-scale exchange of electronic evidence and cross-border surveillance.

A Russian initiative against the Budapest Convention

The idea for the treaty was born in 2017 as a Russian initiative, aimed at displacing the Council of Europe's Budapest Convention, which Moscow refuses to join. When the UN General Assembly voted in 2019 to open negotiations, Canada, together with the United States and the EU, opposed the move, warning that the process would become a tool for expanding state surveillance powers. Having lost the vote, the democracies chose to take part in the negotiations rather than leave the drafting of the rules to Russia, China, and Iran. Canada was among the most active delegations pressing for human rights caveats, and it proved possible to strip out of the final text the articles on “speech and content offences.”

Who signed and who abstained

Canada did not appear at the signing ceremony in Hanoi in October — along with the United States, Japan, the Netherlands, Norway, and a number of other countries. Signing on, by contrast, were Russia, China, Iran, North Korea, Belarus, Cuba, Venezuela, and Saudi Arabia, as well as the United Kingdom, Australia, France, Germany, and the EU. Nine months later, Ottawa signed the treaty without explaining what had changed.

Where the danger lies

The convention's procedural powers extend to electronic evidence in any criminal case, and its international cooperation obligations apply to any “serious crime” — that is, one punishable by four years or more. Since in a number of states such penalties are prescribed for criticizing the authorities, for journalism, for blasphemy, or for same-sex relationships, the treaty effectively turns repressive national laws into grounds for cross-border data collection. The Electronic Frontier Foundation, Human Rights Watch, and other organizations warn that the convention requires the introduction of real-time interception mechanisms, yet leaves judicial authorization to the discretion of domestic law, permits non-disclosure orders, and contains no exception for political offences.

Back in December 2024, nearly two dozen Canadian organizations and experts, including Amnesty International Canada and Citizen Lab, urged against signing the document, warning that it would create a channel for transnational repression against diaspora communities. More than 120 security researchers noted the risk of criminalizing good-faith research.

Geist links the decision to the domestic “lawful access” agenda: ratification will require passing legislation with expanded powers to collect and share data, as laid out in Bill C-22. At the same time, Canada already has the Budapest Convention and bilateral treaties with the countries it wants to cooperate with — so the practical value of the new document boils down to engagement with precisely those states that pose the greatest risks.

Source: Hacker News