from the article

  While Bill C-8 does not explicitly grant law enforcement direct access, information disclosed under its cybersecurity compliance regime could still be forwarded to police or national security agencies. This raises the possibility of using compliance obligations as a back door for investigative surveillance, without warrant, reasonable grounds, or even public transparency. Civil liberties advocates have cautioned that the Bill should be amended to include strict use limitations and notification requirements when such information is transferred