Bill S-209, an attempt to restrict youth access to online sexually explicit content, is supported by the Privacy Commissioner but heavily criticised by legal experts
The debate over mandatory age assurance for online access to sexually explicit content has arrived in Canada, with a renewed legislative push causing significant division among policy and privacy experts.
Bill S-209, “an Act to restrict young persons’ online access to pornographic material,” is the successor to a similar bill that failed to pass last year. Its reanimation is winning critical backing from the Privacy Commissioner of Canada, Philippe Dufresne, even as leading privacy advocates and the country’s legal community raise urgent concerns about data misuse and regulatory overreach.
In submissions to the Standing Senate Committee on Legal and Constitutional Affairs (LCJC), Dufresne lent his support to the bill, declaring that “it is possible to implement age-assurance mechanisms in a privacy-protective manner.” He noted that the latest draft has been enhanced by adding the requirement to limit the collection of personal information to only what is strictly necessary for the process.
The Privacy Commissioner’s stance represents cautious optimism, demonstrating confidence by developing implementation guidance with his office. Dufresne stressed his office’s need to be involved in reviewing any drafted regulations to ensure the “best interest of young persons and privacy are protected.”
Legal Experts Decry Lack of Regulatory Guardrails
Despite the Privacy Commissioner’s qualified endorsement, the Canadian Bar Association (CBA) has issued a sharp critique, arguing that while the bill’s intentions are noble, it currently lacks the necessary legal specificity and privacy safeguards.
In a frank letter, the CBA noted the fundamental legal difference between age verification (which requires an identity document, offering high accuracy at the cost of deeply compromising user anonymity) and age estimation (which is less intrusive but less precise).
The lawyers warn that Bill S-209 is dangerously vague, failing to specify critical guardrails: “The Bill lacks key specifics: no defined retention timeline, no clarity on the speed of destruction, no auditing or enforcement mechanisms, no requirements for storage location, and no remedies for users if data is mishandled.”
The CBA argued that the inevitable byproduct of mandatory age checks is the creation of a powerful dataset that links personal identifying data to records revealing an individual’s access to sexually explicit material and their specific interests.
“If this data must be collected, the Bill should explicitly say so and be amended to include legislative provisions that ensure the personal data of Canadians won’t be improperly retained, accessed, or otherwise misused,” the letter states.
Fears of ‘Slippery Slope’ & Government Overreach
The most significant alarm bell has been sounded by copyright and privacy commentator Michael Geist, who warned that the bill is a “dangerous” piece of legislation that risks becoming a mechanism for mandatory age verification across the Canadian internet.
Geist’s fears were amplified by statements from Bill S-209’s sponsor, Senator Julie Miville-Dechêne, who indicated the scope of the law is deliberately broad, extending beyond specific adult-content platforms.
Miville-Dechêne stated that “Bill S-209 does not just target platforms like Pornhub” and suggested the government could decide to include platforms like social media (such as X) in its choices.
Geist branded this as “an explicit declaration from the bill’s sponsor that there are few limits on government power to require Internet sites to institute age verification requirements.” He raised the possibility of these requirements being applied to common services like online search or AI services used to generate content.
Privacy advocates now fear that a bill designed to protect children from indecent material could ultimately be used to require virtually all Canadians to submit to identity verification simply to access commonly used social media and other web platforms, setting a severe precedent for digital freedom.
