Evaluation of the Investigative Powers for the 21st Century Initiative
Executive Summary
Introduction
This report presents the results of an evaluation of the Investigative Powers for the 21st Century Initiative (IP21C), a horizontal initiative led by the Department of Justice Canada (Justice) in collaboration with the Public Prosecution Service of Canada (PPSC), the Royal Canadian Mounted Police (RCMP) and Global Affairs Canada (GAC).
The IP21C Initiative has supported the implementation of new legal authorities arising from former Bill C-13, the Protecting Canadians from Online Crime Act (PCOCA) that came into force on March 10, 2015.
Program Description
It had long been recognized that new investigative powers were needed both to protect Canadians and investigate crimes that are facilitated by computer and communications technology, and to combat crimes that have a transnational dimension.
Since 2000, the Government of Canada (GOC)’s efforts through the Lawful Access Initiative (LAI) have concentrated on assessing the need for new and amended legislation. The IP21C Initiative stems from the portions of the LAI relating to amendments to the Criminal Code, which came into force with the enactment of the PCOCA. This Act introduced specialized investigative powers under judicial authorization to obtain digital evidence. It amended the Criminal Code, the Mutual Legal Assistance in Criminal Matters Act (MLACMA), the Canada Evidence Act and the Competition Act which:
- added to the regime of production orders to provide more precise tools to respond to contemporary technology and related investigative requirements while balancing privacy and human rights appropriately;
- introduced a new regime for rapidly preserving volatile data, using preservation demands and orders;
- supported the gathering of digital evidence in criminal investigations, including to assist foreign investigative and prosecution authorities; and,
- enabled Canada to ratify the Convention on Cybercrime of the Council of Europe (the Budapest Convention), which occurred on July 8, 2015. The Convention is the only multilateral-level legal instrument to combat computer-related crime.
The IP21C Initiative was supported by funding of $60.74 million over five years (2015-16 to 2019-20) and ongoing funds of $12.25 million annually.
Justice, PPSC, the RCMP and GAC are jointly responsible for managing the implementation of the IP21C Initiative, while each executes its specific activities in the criminal justice and international policy systems. The primary target populations for the IP21C Initiative are police and prosecutors. The intent is to provide them with more effective means to investigate and prosecute cybercrime and computer-assisted crime, while respecting the privacy and freedoms of Canadians.
Five main activities have been implemented by the Initiative:
- Legal analysis, policy development and coordination on domestic and international issues – Includes legal and policy advice, litigation support and prosecution services required to steward implementation of the legislative provisions related to investigative powers in the PCOCA, as well as to meet Canada’s international obligations stemming from ratification of the Budapest Convention.
- Awareness and training – Includes development of awareness and training materials to ensure that the legislative reforms enacted by the PCOCA would be implemented in a consistent manner. The primary audiences for training have been the law enforcement community and prosecutors. Efforts were also directed at raising awareness of the PCOCA provisions among Canada’s international partners.
- Technical research and tools to support criminal investigations – Involves the development of new tools, techniques and solutions for warranted, real time interception of transmission data and analysis of seized data, including international requests related to the Budapest Convention.
- Administration of a data preservation scheme – Involves developing a dedicated triage function to administer a new data preservation scheme, in accordance with the legal provisions in the PCOCA, and to respond to international requests for assistance.
- International cooperation – Involves advancing international cooperation on cybercrime and ensuring that Canada’s interests related to cybercrime and other computer-assisted crimes are reflected in Canada’s broader foreign policy.
Findings
The main findings of the horizontal evaluation of the IP21C Initiative with respect to the evaluation issues are summarized below.
Relevance
The overall objective of the IP21C Initiative – to provide the means to implement the investigative powers added to the Criminal Code by the PCOCA and to meet Canada’s international obligations stemming from ratification of the Budapest Convention – continues to be relevant, as cybercrime and computer-assisted crimes are growing at a fast rate both in Canada and internationally, and criminals are increasingly exploiting evolving technologies.
The PCOCA provided legislative reforms that were necessary to permit specialized investigative powers under judicial authorization to obtain digital evidence not only for the high-tech computer crimes such as hacking, or organized crime, but also to deal with everyday offences when a criminal sends an email, uses their cell phone, or posts an image on a social networking site. These reforms have led to a regime of production orders that enable a judge to know precisely what type of data is being sought and to balance privacy and human rights. Additionally, the PCOCA introduced a new regime for rapidly preserving volatile data, using preservation demands and preservation orders.
The evaluation evidence indicates that there is an ongoing need for the key activities funded by the IP21C Initiative, including:
- Legal analysis, policy development and coordination on domestic and international issues – While there has been very little litigation with respect to the IP21C investigative powers to date and no successful Charter of Rights and Freedoms (Charter) challenges, Justice needs to maintain the capacity to defend any future challenges and to make future amendments to the Criminal Code as required. GAC also needs to continue to coordinate Canada’s foreign policy approach on cybercrime in the international arena, which is becoming increasingly complex and politicised.
- Awareness and training – The “awareness” phase of the IP21C Initiative has ended, as prosecutors and law enforcement are now very familiar with the IP21C-related investigative powers. Outreach activities will need to continue to assist stakeholders in applying the Criminal Code provisions, primarily on a reactive or as needed basis. Ongoing training of prosecutors and law enforcement officials on the Criminal Code amendments has become integrated into the training programs offered by such organizations as the Canadian Police College and the PPSC School for Prosecutors.
- Administration of data preservation scheme – The IP21C Initiative has enabled the RCMP to develop and implement a data preservation scheme to handle a large volume of data preservation requests from foreign law enforcement. This activity needs to continue, as Canada will continue to receive preservation requests from foreign law enforcement and therefore must maintain a capability to manage such requests. The RCMP established a National Cyber Crime Coordination Unit to be a single point of contact.
- Technical research and tools to support criminal investigations – RCMP Technical Investigations Services have developed tools to access, obtain and process digital evidence from a device or digital storage medium seized as evidence (data at rest) as well as tools that are deployed in a live communications situation (data in motion). As cybercrimes are becoming increasingly more technologically complex, it will be critical for the RCMP and other federal agencies to develop additional tools to support criminal investigations.
Moreover, the Budapest Convention is the main international instrument on cybercrime. It aims to help its state parties to harmonize their national laws, improve their investigative techniques, and increase cooperation. Ratification of the Convention allowed Canada to cooperate with other signatory countries in the investigation of cybercrime and enabled access to digital evidence that may be found in another country. Canada is viewed as playing a strong role internationally in supporting the Convention.
While the evidence from this evaluation indicates that the PCOCA addressed a significant need to modernize the investigatory powers in the Criminal Code, Canada’s laws need to continually evolve so that law enforcement and prosecutors are equipped with the tools necessary to combat cybercrime and other computer-assisted crime. Police and prosecutors highlighted in particular the challenges associated with obtaining timely access to basic subscriber information and encrypted data.
Performance
The findings of the evaluation regarding the performance of the IP21C Initiative in achieving its main intended outcomes are as follows:
- Awareness and knowledge of the IP21C-related investigatory powers – The target audiences of the IP21C Initiative, including law enforcement, prosecutors and telecommunications service providers are now very familiar with the legislative amendments made to the Criminal Code and other acts. IP21C officials devoted considerable effort to raising awareness and knowledge of the key elements of the PCOCA.
- Management of issues and consistency of implementation and interpretation of the investigatory powers – Relatively few legal and operational issues have arisen related to the new investigatory powers. While it was expected that numerous Charter challenges would arise from the new investigative powers, this has not yet proved to be the case. The resources provided to the federal partners by the IP21C Initiative have helped them to manage implementation of the investigatory powers in a variety of ways, ranging from supporting prosecutions that rely on these powers to providing internal stakeholders with legal and policy advice. The main legal issue raised by key informants is that the new transmission data recorder warrant provisions do not provide access to basic subscriber information. The investigatory powers have largely been consistently implemented across Canada.
- An improved ability to combat cybercrime and computer-assisted crime – The IP21C Initiative has contributed to improving Canada’s operational ability to combat cybercrime and other computer-assisted crimes, both domestically and internationally. IP21C officials have collaborated extensively with each other and with external stakeholders to support implementation of the IP21C-related investigatory powers. The RCMP has implemented a dedicated triage function to process and track data preservation requests received from foreign law enforcement. It also has developed new tools to access, obtain and process digital evidence from devices seized as evidence, as well as tools used in a live intercept situation.
- Improved international co-operation to obtain digital evidence – The IP21C Initiative has helped Canada to increase its level of cooperation internationally to obtain digital evidence to combat cybercrime and computer-assisted crime. Canada is viewed by international stakeholders as being in compliance with its requirements under the Cybercrime Convention and other applicable mutual legal assistance (MLA) agreements. Canada is viewed internationally as playing an important role in supporting the Convention, with a considerable effort devoted to the drafting of a Second Additional Protocol, still under negotiation within the Council of Europe. Justice IAG has improved the speed with which MLA requests seeking digital evidence received from foreign law enforcement and prosecutors are processed and executed. The Initiative also contributed to improved coordination and consistency in Canada’s foreign policy approach on cybercrime and computer-assisted crime.
Design
The IP21C Initiative has been well coordinated. The IP21C Initiative business plan was thoroughly prepared and the Initiative has evolved as expected.
Recommendations
No recommendations are included as the IP21C Initiative was implemented as expected and there are no identified barriers to the achievement of expected results.
- Date modified: