Ontario Police Are Fighting to Keep Their Spyware Secret ⇥ thestar.com

Betsy Powell, the Star:

Essentially spyware, an ODIT [on‑device investigative tool] can grant almost unlimited access. Investigators can capture screenshots, monitor keypresses, access emails and text messages — including those that are encrypted — and even remotely activate microphones and cameras. All without the owner knowing.

By August, police announced 23 arrests, 279 charges, and more than $9 million in recovered vehicles.

But the case has also done something else: It has pulled back the curtain on how police forces in Ontario — not just in Windsor, but in Toronto and Peel Region — are now using these powerful technologies to reach deep inside suspects’ devices. And despite ODITs growing use in major prosecutions in the province, government lawyers and police are fighting tooth and nail to keep almost everything about them secret: how they work; what safeguards, if any, govern their use; even the names of the companies that sell them.

The details of this report align with research published last year by Citizen Lab about Paragon’s Graphite spyware, including a likely link to the Ontario Provincial Police. It is not the only police force in Canada using ODITs, either. In 2022, the RCMP acknowledged its own use; Christopher Parsons, a civil rights advocate and director at the Information and Privacy Commissioner of Ontario, keeps a small library of related policies.