A deep dive into the real story behind viral claims about mass arrests and internet censorship legislation

Recent social media posts have set off alarm bells across the internet, claiming the UK has arrested 12,000 people for social media posts in the past year, while Canada is pursuing three bills that would “delete you from the internet,” “jail you for posting a meme,” and enable mass surveillance. While some of these claims contain kernels of truth, they require significant context and correction—and understanding them is crucial as similar patterns emerge across Western democracies.

The CLOUD Act: How Your Private Data Crosses Borders Without Your Knowledge

Watch our video breakdown of these claims here

The UK’s Social Media Arrests: What’s Really Happening

The claim about 12,000 UK arrests is accurate: in 2023, UK police made 12,183 arrests under communications laws—approximately 33 per day, representing a 58% increase from 2019. To put this in perspective, that’s more than one arrest every hour of every day for online communications.

However, context matters enormously:

These arrests fall under the Communications Act 2003 and Malicious Communications Act 1988, which cover not just social media but all electronic communications including email and phone calls. The laws address “harmful communication” including incitement to terrorism and violence, online threats, abuse, and unwanted communication.

The gap between arrests and convictions is staggering. Despite high arrest numbers, only 1,119 people were convicted under these provisions in 2023, and just 137 received immediate custodial sentences in 2024. Most prison terms were less than two months. This means that for every 100 people arrested, fewer than 10 are convicted, and only about 1 sees jail time.

The most common reason arrests don’t proceed is “evidential difficulties,” particularly when victims decline to pursue legal action. Police are obligated to investigate every reported violation, but only about 2.5% of suspects are ultimately held accountable.

The UK Online Safety Act Context

These arrests must be understood within the broader framework of UK internet regulation. The UK Online Safety Act, which came into force in 2023, represents one of the world’s most comprehensive attempts to regulate online content. While the Act primarily targets platforms rather than individual users, it creates an ecosystem where speech online is increasingly scrutinized and regulated.

The Act requires platforms to remove illegal content, protect children from harmful material, and implement age verification systems. Critics argue this creates a chilling effect where platforms over-moderate to avoid liability, while supporters contend it’s necessary to combat genuine harms.

Civil liberties groups have raised legitimate concerns that the communications laws are being overzealously enforced, with people detained for messages causing “annoyance,” “inconvenience,” or “anxiety”—terms critics argue are far too vague for criminal law. The arrest-first, sort-it-out-later approach means thousands experience the trauma and disruption of arrest for speech that ultimately doesn’t meet the threshold for prosecution.

Canada’s Bills: Separating Fact from Fiction

The characterizations of Canada’s Bills C-8, C-9, and C-2 circulating on social media are highly misleading. Here’s what each bill actually does—and why the concerns are more nuanced than viral posts suggest.

Bill C-8: NOT About “Deleting You From the Internet”

Bill C-8 is Canada’s cybersecurity legislation, formally titled “An Act respecting cyber security, amending the Telecommunications Act.” It targets organizations operating critical infrastructure including telecommunications, financial services, energy, transportation, and nuclear facilities.

The bill’s primary focus is legitimate cybersecurity:

The bill requires designated operators to establish comprehensive cybersecurity programs within 90 days, report incidents within 72 hours, and comply with government cybersecurity directions. Administrative monetary penalties could reach $15 million per violation, per day, for organizations—and $1 million per violation, per day, for individuals.

However, buried within this cybersecurity framework is a concerning provision: Bill C-8 would allow the Minister of Industry to secretly order telecommunications providers to stop providing services to specified individuals if there are “reasonable grounds to believe” it’s necessary to secure Canada’s telecommunications system against threats. An individual who doesn’t comply, including by failing to keep the order secret, could face fines up to $25,000 for first contraventions and $50,000 for subsequent ones.

The Canadian Constitution Foundation warns this power could be used to “secretly cut off political dissidents from their phone or Internet service,” citing the 2022 Freedom Convoy protests as precedent for government overreach. During those protests, the government invoked emergency powers to freeze bank accounts and compel tow truck services—demonstrating willingness to use extraordinary measures against protesters.

Civil liberties advocates warn that the bill empowers the federal government to secretly order telecom providers “to do anything or refrain from doing anything,” with no limits preventing such orders from being used to impose surveillance obligations on private companies and weaken encryption standards.

The concern isn’t that Bill C-8 will “delete you from the internet” for posting memes. It’s that it creates infrastructure for cutting off telecommunications access based on vague “national security” justifications, with minimal judicial oversight and maximum secrecy.

Bill C-9: NOT Specifically About “Jail for Posting a Meme”

Bill C-9, the “Combatting Hate Act,” was introduced September 19, 2025, to address rising hate crimes. It would criminalize intimidation at places of worship, schools, and community centers; make hate-motivated crime a specific offense carrying maximum penalties up to 10 years imprisonment; and prohibit displaying Nazi symbols or terrorist organization symbols when done to willfully promote hatred, with penalties up to two years in prison.

The bill would define hatred in the Criminal Code as “the emotion that involves detestation or vilification and that is stronger than disdain or dislike,” and clarify that statements are not inciting hatred “solely because they discredit, humiliate, hurt or offend.”

On its face, this seems reasonable—who wants to defend Nazi symbols or hate crimes? But the devil is in the implementation. 37 civil society organizations signed a joint letter warning that the new intimidation offense is “so broadly and vaguely defined that it could lead to the suppression of constitutionally protected expression and peaceful assembly,” potentially criminalizing peaceful protests near tens of thousands of locations in Canada.

The provision criminalizing the display of certain terrorism or hate symbols lacks clear and meaningful safeguards. Organizations are placed on Canada’s terror list through a process that lacks transparency and offers limited avenues of appeal. This means a symbol could be criminalized based on political determinations, not just objective criteria.

Furthermore, the removal of the long-standing requirement that the Attorney General consent to hate propaganda charges eliminates a key institutional check. This increases the risk of arbitrary, inconsistent or selective enforcement, especially against equity-deserving groups who have historically been subject to excessive surveillance and policing of their expression.

The “jail for posting a meme” framing is hyperbolic, but the concern that overly broad hate speech laws could criminalize political satire, criticism, or controversial opinions is legitimate. The question is where to draw the line between protecting vulnerable groups and protecting free expression—and whether criminal law is the right tool.

Bill C-2: The Real Surveillance Concern

Bill C-2, the “Strong Borders Act,” is where legitimate surveillance concerns are concentrated. Introduced as border security legislation, it contains extensive surveillance provisions that civil liberties groups call “the most alarming legislation since Harper’s Bill C-51.”

This is the bill that truly warrants alarm. While framed as addressing border security, it dramatically expands domestic surveillance capabilities:

Warrantless Data Access:

Police and CSIS can demand information about online accounts, login locations, and service interactions with no warrant required, based only on “reasonable suspicion.” Companies have just five days to challenge orders and receive blanket immunity from lawsuits if they hand over data.

The Supreme Court previously defined subscriber information narrowly as “the name, address, and telephone number” of a customer associated with a particular IP address. However, Bill C-2’s definition is far more expansive and can include contact information, account numbers, and “information relating to the services provided to the client,” including types of services, timeline of services, and information identifying specific devices or equipment.

Forced Backdoors:

The bill allows for “technical capability orders,” forcing Canadian tech companies, VPNs, cloud providers, and app developers—regardless of where they’re based—to build surveillance tools into their products, as long as they don’t introduce a “systemic vulnerability,” a term the bill doesn’t define.

Cybersecurity experts warn that the “secretive, encryption-breaking powers” in the bill “threaten the online security of everyone in Canada,” and that it “empowers government officials to secretly order telecommunications companies to install backdoors inside encrypted elements in Canada’s networks.”

This echoes similar debates happening in the EU around encryption. The EU’s Chat Control proposal would require messaging apps to scan private messages for illegal content—effectively breaking end-to-end encryption. While that vote was postponed following massive public opposition, the debate illustrates a global trend toward governments demanding access to encrypted communications.

Cross-Border Data Sharing:

Information gathered under these powers is likely to be shared with the United States under a CLOUD Act agreement currently being negotiated. A Canadian government official told Politico this would give Canadian police “the same kind of toolkit” that U.S. counterparts have under the PATRIOT Act and FISA.

The legislation contains references to potential “agreement[s] or arrangement[s]” with foreign states. Justice Canada officials acknowledged at a technical briefing that the intent of certain provisions is to enable Canada to implement and ratify the “Second Additional Protocol” to the Budapest Convention, a data-sharing treaty.

This means Canadian surveillance data could flow to U.S. agencies—including those known for mass surveillance programs revealed by Edward Snowden. For Canadian citizens concerned about privacy, their data could end up in U.S. government databases based on low thresholds and secretive processes.

The Scope of Opposition:

Over 300 organizations oppose Bill C-2, with OpenMedia stating it “sacrifices real Canadian privacy and values for a fake, manufactured border crisis.” This unprecedented coalition includes civil liberties groups, legal experts, privacy advocates, and technology organizations across the political spectrum.

University of Ottawa law professor Michael Geist provides a concerning example: imagine attending a protest where law enforcement uses an IMSI catcher (a surveillance device that intercepts communications between mobile phones and networks) to gain phone identifiers from attendees and confirm their cellular services. Under Bill C-2, police could then demand subscriber information from those providers without a warrant.

A Global Pattern Emerges

These developments in the UK and Canada aren’t isolated. They’re part of a broader pattern where democratic governments are expanding surveillance powers and restricting online speech, often using legitimate concerns—child safety, terrorism, hate speech—as justification.

The UK Online Safety Act and EU Digital Services Act represent parallel efforts to regulate online spaces. While their approaches differ, both shift responsibility for content moderation onto platforms and create new compliance regimes that affect speech online.

The EU Chat Control debate shows similar tensions: how do you protect children from online exploitation without undermining the encryption that protects everyone’s privacy and security? The answer isn’t simple, and governments are increasingly prioritizing surveillance capabilities over privacy protections.

The Bottom Line

The UK’s approximately 12,000 annual arrests under communications laws are real, though most don’t result in prosecution. Legitimate debate exists about whether these laws are too broadly applied, with the arrest process itself functioning as punishment even when charges don’t stick.

Canada’s bills present a more nuanced picture than viral social media posts suggest:

  • Bill C-8 is primarily about cybersecurity for critical infrastructure, but contains concerning provisions allowing secret telecommunications cutoffs with minimal oversight- Bill C-9 addresses hate crimes with provisions that have civil liberties groups worried about overly broad definitions that could chill legitimate speech and peaceful protest- Bill C-2 genuinely does contain extensive surveillance provisions that threaten privacy rights, including warrantless data access, forced encryption backdoors, and cross-border data sharing with the United States

The sensationalized social media descriptions—“delete you from the internet,” “jail for posting a meme,” “online surveillance”—obscure rather than illuminate these issues. They’re not entirely wrong, but they lack the nuance necessary for informed debate.

Understanding the actual content of legislation—and the legitimate civil liberties concerns versus hyperbole—is essential for democratic participation. When you can’t tell the difference between real threats to freedom and exaggerated claims, it becomes impossible to mount effective opposition to genuinely problematic provisions.

Both the UK and Canada face the difficult challenge of addressing genuine online harms while protecting fundamental freedoms. Getting this balance right requires:

  • Precise language in legislation that doesn’t capture protected speech- Meaningful judicial oversight rather than secret ministerial orders- Proportionality between the harm addressed and the powers granted- Transparency about how powers are used- Sunset clauses to ensure emergency powers don’t become permanent

The debate over internet regulation will define the boundaries of freedom in the digital age. Whether we end up with reasonable safeguards or surveillance states depends on citizens understanding what’s actually at stake—not just reacting to viral claims.

The truth is concerning enough without exaggeration. Pay attention, read the actual bills, and demand that lawmakers get the balance right. The internet you save may be your own.

🎧 Related Podcast Episode