Concerns Over Bill C-22 Metadata Retention

Hi all, I’m a data privacy researcher at SFU with concerns over Bill C-22 and its metadata retention requirements. I had a shower thought this morning: what would happen if the bad guys got this information during a war.

For those who don’t know, Bill C-22 requires the collection and retention of metadata (date, time, location, IP addresses, etc.) for basically all internet activity from every device with a wifi connection. This data would then need to be retained for a year, with the police saying they’d like the retention period extended to three years. This forms a comprehensive surveillance map of every Canadian, including those in the military.

If the data collected under Bill C-22 were obtained by an enemy during a war is there anything stopping them from, for example, tracking the location of important military personnel?