Protecting Civic Space and Democracy in the Digital Era

This theme is about protecting the fundamental rights of free expression, assembly, and participation in an increasingly digital world. As online platforms become central to public discourse, it is crucial to address challenges such as digital surveillance, misinformation and censorship. This theme promotes policies focused on open, secure, and inclusive digital spaces, ensuring that Canadians are protected online. This theme also stresses the need for transparent regulations and the protection of privacy to maintain a healthy, functioning democracy in the digital age. 

Activities related to this theme:  

Digital literacy programs 

Combatting misinformation and disinformation 

Open internet and access to information initiatives 

Movement Towards Open Source Software

By  aachili

14 Jun 2025

1 Upvote

0 Downvotes

169  Views

1  Improvement

Increasing reliance on proprietary software and software providers (ex Microsoft Azure, Microsoft Office, Amazon Web Services) reduces the government's ability to ensure that citizen and resident data is stored safely, that the data is not used by malicious or independently motivated actors, and impedes migration and innovation for the government software stack.

Digital security research often discusses a concept called Shannon's Maxim [1] that informally says that "you should assume your adversary knows as much or more about your system than you do". Reliance on closed source software places the onus on the technology provider to ensure the security of our data. In recent years that capability has come under increasing scrutiny by academia and even CISA [2] due to increasing numbers and severity of security flaws in proprietary software (ex. Microsoft Windows, Crowdstrike). Compounding this problem is that software providers increasingly demanding real-time access to user devices for the purpose of continuous updates while simultaneously forcing migration to other external systems [3]. This makes telemetry data for many public services accessible to the respective software/hardware provider in addition to frustrating the end user and decreasing productivity when learning a new system. Taken together, the amount of data and the type of data stored with these providers poses a risk to the Canadian software supply chain.

The storage of public data on large cloud service provider Software As A Service (SAAS) platforms (ex. AWS, Microsoft Azure) subjects public data to the storage conditions of the cloud provider; terms that are notoriously bloated and difficult to understand. When we provide data, such as mentioned in the previous paragraph, to these data storage providers, they now control access and distribution of sensitive and identifying information of public servants. Despite promises to keep sensitive data within Canada [4] this is by convention, not by design. In addition, employees of the data storage provider now have access to this data, and when we consider the size of the workforce of a company such as Microsoft [5], this becomes a problem where we are again relying on the software provider to ensure security.

Finally, if data is held by centralized and highly integrated cloud platforms, migration of that data to another software stack becomes difficult. Often when migrating away from these large providers, local technicians are left to their own devices to determine the best way to perform migrations, leading to downtime, data loss and unexpected system outages [personal experience].

Some European governments have begun the transition to open source softwares to power public service administrative and front-line infrastructure [6, 7]. Open source means that "users have the freedom to run, edit, contribute to, and share the software" [8] and the increasing maturity of the open source community and open source software tools means that security researchers and system administrators can audit software freely. For the government, transitioning to open source software and local cloud providers means that:  1. The government maintains control of data  2. Security becomes much easier to verify  3. Access to updated software is trivial  4. Requesting features is easy and  5. Implementing those features can be taken up by local developers and other contractors

A transition to open source software would allow the government and public service to maintain greater autonomy, transparency, and flexibility across the software supply chain.

Bibliography

[1] Shannon's Maxim, AKA Kerchoff's Principle : https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle

[2] CISA report on exchange 2023 vulnerabilities and exploits : https://www.cisa.gov/resources-tools/resources/CSRB-Review-Summer-2023-MEO-Intrusion

[3] End of life for Windows 10, widely used in the public service : https://support.microsoft.com/en-us/windows/windows-10-support-ends-on-october-14-2025-2ca8b313-1946-43d3-b55c-2b95b107f281

[4] Microsoft Azure Secure Instances : https://learn.microsoft.com/en-us/azure/container-instances/container-instances-confidential-overview

[5] Microsoft Employee Population : https://www.statista.com/statistics/273475/number-of-employees-at-the-microsoft-corporation-since-2005/

[6] German Migration to GNU/Linux based systems in progress : https://interoperable-europe.ec.europa.eu/sites/default/files/inline-files/Open%20Source%20Software%20Country%20Intelligence%20Report%20-%20Germany.docx.pdf

[7] Complete list of organizations migrating to LibreOffice from Microsoft Office : https://wiki.documentfoundation.org/LibreOffice_Migrations

Register/Login to add your improvement
trevortwining trevortwining

trevortwining

Existing GC open source tooling, like the Government's use of the Drupal Content Management system (https://drupal.org) should be highligted and best practices shared for similar procurements.

Jun 17 2025

Like(0)

Reply(0)

Top 2 Ideas

ATI Disclosure for the mid-21st Century

 Upvotes

 Downvotes

Reforming Access to Information Disclosure Practices When the Government of Canada's web publication standards were established in the early 2000s, they were built on the assumption that posting online content equalled the same as traditional publications with ISBN numbers. However, this approach did not adequately account for the unique characteristics of disclosures mandated by the Access to Information Act (ATIA). Historically, government disclosure processes relied on physical, paper-based methods—such as viewing documents in person, sending mail copies, or fax transmissions—methods inherently different from formal publications like novels or advertisements. Current Challenges and Costs During the 2024 calendar year, over 63,000 informal requests for previously released ATIA packages were made. Some packages received informal requests from as many as 80+ different parties requesting a copy of the disclosure. Presently, some of these disclosures are still delivered physically on USB drives packaged in bubble-wrapped envelopes and transported by courier services. This practice incurs substantial taxpayer costs. Transitioning to posting online would significantly reduce these expenses while simultaneously increasing public accessibility and efficiency. Integrity and Authenticity of Disclosures Citizens request previously released ATIA documents primarily because of their evidentiary significance. Altering or reformatting these documents, such as publishing them as website content, introduces unintended editorial changes that compromise the authenticity and integrity of the disclosures. It is crucial to maintain documents in their original form to preserve their value as trustworthy evidence. Advantages of Online Access Enabling immediate, direct online access to previously processed disclosure packages would yield numerous benefits. Although many of these documents are already accessible through third-party platforms, the government continues to employ outdated, costly, and inefficient physical delivery methods. These outdated practices delay public access and unnecessarily consume public sector resources, exacerbating existing backlogs in formal ATIA requests. Moreover, the current physical delivery process disproportionately disadvantages Francophone populations and individuals with accessibility needs. Citizens cannot preview or easily determine the relevance of the content, often resulting in weeks-long delays with uncertain outcomes. This inefficiency exemplifies bureaucratic waste, creates unnecessary electronic waste, contributes to greenhouse gas emissions, and contradicts Canada's stated commitments to digital efficiency and environmental responsibility. Redirecting the funds currently spent on expensive courier fees towards translations and developing accessible digital formats—including utilizing AI-supported technologies—would far better serve diverse public needs. Policy and Regulatory Recommendations Prompt clarification of regulatory and policy frameworks is essential to clearly distinguish between disclosures and formal publications. Rapidly adopting an online disclosure system must explicitly communicate this distinction and reaffirm citizens' rights to request translations or alternative formats when necessary. Conclusion Implementing these recommended reforms would significantly enhance government transparency, operational efficiency, and equitable access to information. Aligning these practices with the principles established in both the Official Languages Act and the Access to Information Act highlights their quasi-constitutional importance, ensuring each act complements the other effectively. Ultimately, these improvements would reduce costs, minimize unnecessary delays, and foster greater civic participation—critical goals for strengthening democratic governance in the 21st century.We also need to remember Canada's obligation as a Open Data Charter signatory.------------- We will 1. Implement oversight and review processes to report regularly to the public on the progress and impact of our open data initiatives; 2. Ensure that information published as a result of transparency or anticorruption laws is released as open data; 3. Provide training programs, tools, and guidelines designed to ensure government employees are capable of using open data effectively in policy development processes; 4. Engage with the Freedom of Information / Access to Information / Right to Information community to align the proactive release of open data with governments’ obligation to release information on request;   5. Engage proactively with citizens and civil society and private sector representatives to determine what data they need to effectively hold governments accountable; 6. Respect citizens’ right to freedom of expression by protecting those who use open data to identify corruption or criticize governments;7. Encourage the use of open data to develop innovative, evidence-based policy solutions that benefit all members of society, as well as empower marginalized communities.

View Details

Misinformation in healthcare + access to worldwide news

 Upvotes

 Downvotes

In my opinion, I believe that it would be worth being aware of worldwide news and also having a web that addresses misinformation in healthcare

View Details