Key takeaways
- On October 19, 2026, the government tabled the Charter statement for Bill C-34, the Safe Social Media Act, more than four months after introduction. It confirms the under-16 account ban engages sections 2(b), 7, 8, 11, and 15 of the Charter.
- The case for the ban is a single unsupported sentence, and the privacy case for mandatory age assurance is thinner still: requiring millions of Canadians to hand identity data to platforms only “could be perceived as” engaging section 8. The statement never mentions the bill’s Privacy Commissioner consultation on age assurance, which Bill C-36 would repeal.
- The statement’s structure is its weakest point: the exemption that would let compliant services skip the ban only becomes available after the ban takes effect, and the less restrictive alternatives it lists are the bill’s own design duties.
The statement that took four months
Eleven days ago I wrote that Bill C-34 had no Charter statement four months after first reading. The statement is out now, tabled in the House on October 19, and it reads like a brief against its own bill.
A Charter statement is not a legal opinion; section 4.2 of the Department of Justice Act requires one for every government bill, and Justice Canada’s goal is to have it ready around first reading. This one arrived after months of debate, with the ban already carrying the weight of a struck-down French counterpart and a struggling Australian ban. Those comparisons come from Michael Geist’s October 21 analysis. The statement itself cites neither.
What the ban actually is
Operators of certain regulated social media services, to be designated by Cabinet in regulation, must run age verification or age estimation that keeps anyone under 16 from holding an account. The Digital Safety Commission can exempt a service it is satisfied has adequate safeguards for children.
The statement then walks the Charter rights the bill touches:
| Charter section | What engages it |
|---|---|
| 2(b), expression | The ban itself, the duty to act responsibly, the 24-hour takedown duty, bot and synthetic-content labelling, private Commission hearings |
| 7, liberty | Compelling employees to attend oral examinations under oath |
| 8, privacy | Commission inspection and document-production powers, researcher access to operator data sets, one-year preservation of violent or terrorism content plus identifying data for warrant-backed law enforcement access |
| 11, offence rights | Administrative monetary penalties up to 3% of global revenue or $10 million, whichever is higher |
| 15, equality | The age distinction: under-16s cannot hold accounts, under-18s get the duty’s protection |
For privacy teams, the row to sit with is section 8. It is where the document is weakest.
The privacy section is the tell
The statement is candid about the Commission’s powers: inspection, compelled production, warrant-backed entry, researcher access to operator data sets, and one-year preservation of content and identifying data for warrant-backed police access. All of these, it says, can intrude on a reasonable expectation of privacy and engage section 8.
Then it turns to the age-assurance mandate, the provision that will require millions of Canadians to hand identity data to platforms, and the language drops a register. Those measures only “could be perceived as engaging section 8.” The statement leans on PIPEDA continuing to apply, on Commission-made age-assurance standards that do not exist yet, and on the bill’s conditions: data collected only for age purposes, protected until verified, destroyed when done.
Geist flags what the section never mentions. Section 122 of the bill requires the Commission to consult the Privacy Commissioner before issuing age-assurance guidance, and Bill C-36 would repeal that consultation. The one external privacy check in the bill is being written out by another bill, and the Charter analysis does not notice.
The evidence is one sentence
For the ban itself, the statement offers a single unsupported assertion: “There is considerable social science evidence about the risks posed to young people by social media use.” No studies, no reports, no expert bodies named. A court applying section 1 will ask for the evidence behind a limit on expression. A sentence is not evidence.
The statement’s age-based examples are voting, drivers’ licences, and consent to medical treatment and sexual intercourse. None restricts a minor’s own expression or access to a medium of communication. And the ban applies only to holding an account, not to anonymous browsing, though browsing exposure is one of the harms the statement cites.
The sequencing problem
The exemption that lets a service avoid the ban is available only if the Commission is satisfied it has adequate safeguards. But the Commission’s age-assurance standards, the Privacy Commissioner review, and the exemption criteria all arrive after the ban takes effect, once the provisions are brought into force and Cabinet designates the covered services. Safeguards first would be the lawful sequence. The statement describes the reverse, then argues the result is minimally impairing.
The statement also names the less restrictive alternatives that defeat that argument: restrictions on profiling and algorithmic recommendation, private-by-default settings, limits on features like unsolicited contact from adults. Those are the bill’s own child-protection design duties. If safeguards are adequate protection, which the exemption process assumes, exclusion as the default is a hard position to hold.
The government’s defense is not nothing: age-based distinctions are a common lawful way of ordering society, the ban stops at accounts, and the exemption exists for services that prove their safeguards. A court may find that enough. It still has to get past the sequencing, and the statement gives it no help.
Actionable takeaway: Do not treat the under-16 ban as settled law. Treat it as a design constraint with a litigation clock. If your service has Canadian users under 18, model three scenarios: no exemption criteria published, criteria published with an application process, and a court striking the ban while the design duties stand. In each, the statement’s age-assurance conditions are the floor: collect only for age purposes, protect until verified, destroy when done, and document the pipeline as if section 8 applies, because a court may decide it does. Watch the Commission’s exemption consultation when it opens. That docket, not the ban itself, is where the workable standard will be written.