Logging onto social media in Canada may one day require proof of identity, not just a password. Prime Minister Mark Carney's government has introduced Bill C-34, the Safe Social Media Act, which would ban anyone under 16 from accessing social media platforms and compel all users to verify their age - a requirement critics say will, in practice, necessitate some form of digital ID. The bill arrives as part of a broader, accelerating effort to bring Canada's internet under federal regulatory authority, one that predates Carney and now shows no sign of slowing.
What the Bill Actually Does - and What It Leaves Undefined
Bill C-34 prohibits minors under the age of 16 from using social media and places the enforcement burden squarely on platforms. To comply, those platforms would need to implement age-verification systems capable of reliably distinguishing adult users from minors. In a country with no existing mandatory digital identity infrastructure, that almost certainly means building one - or pressuring users to present government-issued credentials online.
Beyond age verification, the legislation identifies seven categories of prohibited "harmful content":
- Intimate content communicated without consent
- Content that sexually victimizes a child or revictimizes a survivor
- Content that induces a child to harm himself
- Content used to bully a child
- Content that foments hatred
- Content that incites violence
- Terrorism or violent extremism content
Several of these categories are unambiguous. Others are not. The bill defines "terrorism" and "violent extremism" with some specificity - acts politically, religiously, or ideologically motivated to intimidate the public or undermine institutions. But the bill does not define "hatred," a conspicuous omission in a piece of legislation that uses the term as a basis for content prohibition and platform liability. Without a statutory definition, enforcement of that category falls to whoever holds regulatory authority - in this case, a newly created digital safety commissioner whose mandate critics describe as uncomfortably broad.
Platforms that fail to comply face fines of up to $10 million, plus an additional penalty of 3% of global revenue. The scale of those penalties means even large technology companies will have strong financial incentives to over-remove content rather than risk regulatory action. As the Canadian Civil Liberties Association's executive director Howard Sapers put it: "Bill C-34 introduces obligations which are so alarmingly broad that providers of regulated services will be tempted to over-comply at the expense of users' freedom of expression and privacy rights."
A Pattern of Escalating Federal Control Over the Internet
Bill C-34 does not exist in isolation. It is the latest legislative move in a campaign that began under former Prime Minister Justin Trudeau and is now continuing - and intensifying - under Carney.
The most alarming proposal to date was Bill C-63, the Online Harms Act, which died when Parliament dissolved before it could be passed. Among its provisions were preventive peace bonds that could impose curfews, travel restrictions, electronic monitoring, or house arrest on individuals who had not been convicted of any crime - and had not even been accused of one - but whom authorities feared might commit a hate-related offence in the future. The legislation also sought to revive Section 13 of the Canadian Human Rights Act, which had previously been repealed, exposing Canadians to civil penalties for certain forms of online expression. Civil liberties organizations across the country condemned it as pre-crime legislation, a term that describes laws designed to punish not actions but anticipated future conduct.
Bill C-63 never became law. But its ambitions have not been abandoned. Bill C-34 carries forward several of the same structural impulses: content regulation, platform liability, and a centralized enforcement mechanism with discretionary authority. Whether C-34 is intended as a replacement for C-63 or simply an additional layer atop it remains unclear - a deliberate ambiguity that itself warrants scrutiny.
Meanwhile, Bill C-9, the Combatting Hate Act, is expected to receive final approval without significant obstruction. That legislation expands Canada's hate speech laws and removes a long-standing legal defense for good-faith religious expression in certain criminal hate speech cases - a change that has alarmed religious freedom advocates and civil liberties groups in equal measure.
Bill C-22 and the Surveillance Question
Separate from the content regulation agenda, the Carney government has also introduced Bill C-22, which would require technology companies to disclose user communications to federal authorities or Canadian law enforcement upon request - potentially overriding those companies' own stated privacy policies. The implications extend beyond Canada's borders. Two senior U.S. Republican lawmakers, House Judiciary Committee Chairman Jim Jordan and House Foreign Affairs Committee Chairman Brian Mast, have written to Canada's Public Safety Minister expressing concern that Bill C-22 could compromise the privacy rights of users in both countries.
The combination of Bills C-34 and C-22 is significant. One creates the infrastructure for verified digital identity tied to platform access; the other creates a legal mechanism for authorities to request the communications of identified users. Together, they represent a substantial expansion of state visibility into what Canadians do and say online - even if neither bill, taken alone, is framed in those terms.
The Deeper Stakes
The strongest argument for legislation like Bill C-34 is genuine. Children's safety online is a serious issue, and there is legitimate democratic interest in holding large platforms accountable for the content they host and profit from. Sapers acknowledged as much: "Greater transparency and accountability from tech companies is long overdue." The question is not whether those goals are worth pursuing. The question is whether the mechanism chosen is proportionate, clearly defined, and appropriately constrained.
A digital safety commissioner with broad and loosely defined authority over "harmful content," combined with financial penalties severe enough to induce platform-level over-censorship, combined with age-verification requirements that serve as a practical forcing function for digital ID - this is a significant architectural change to how Canadians interact with the internet. The fact that some individual provisions sound reasonable does not make the overall structure benign.
Canada is not the first country to move in this direction. The United Kingdom's Online Safety Act established a comparable regulatory framework, and the European Union's Digital Services Act imposes content moderation obligations on large platforms across member states. What distinguishes the Canadian situation is the breadth of discretion being granted to a single appointed official, the absence of clear statutory definitions for key prohibited categories, and the simultaneous push on multiple legislative fronts - speech, surveillance, and identity verification - within a compressed timeframe. Each bill, read in isolation, can be defended on its own terms. Read together, they describe a federal government acquiring tools that would have been considered extraordinary just a few years ago.
