8Additional expectation—provider will take reasonable steps regarding encrypted services

8 Additional expectation—provider will take reasonable steps regarding encrypted services

(1) If the service uses encryption, the provider of the service will take reasonable steps to develop and implement processes to detect and address material or activity on the service that is unlawful or harmful. (2) Subsection 8(1) does not require the provider of the service to undertake steps that could do the following: (a) implement or build a systemic weakness, or a systemic vulnerability, into a form of encrypted service; (b) build a new decryption capability in relation to encrypted services; or (c) render methods of encryption less effective.