The Merged Office

The series has an Edition that proves a child-safety law is the frame under which an identity apparatus gets installed on everyone. The bill that frame describes has now been tabled, and it carries something the Edition did not yet name. In the same motion that it expands what the state may police online, it deletes the office built to check that policing, and a companion bill five days later merges the result with the regulator that holds the nation's data. What comes out is not a protection for children. It is a single office that polices speech and holds data at once, its two independent watchdogs removed on the way, and the child-safety frame is the vehicle the whole consolidation travels under. This case is about that office.

§01 · The watchdog deleted in the name of streamlining

The predecessor bill, C-63, proposed a structure with a deliberate separation of functions: a Digital Safety Commission to enforce, a Digital Safety Office to administer, and, distinct from both, an independent Digital Safety Ombudsperson, whose role was to represent the public against the platforms and against the regulator itself. The ombudsperson is the layer that exists to be on the public's side of the table when the public is outmatched.

Bill C-34, the Safe Social Media Act, tabled on 10 June 2026 by the Minister of Canadian Identity and Culture, removes the Ombudsperson and the Office.verified The removal is described, in the reporting on the bill, as a streamlining of bureaucracy, a reduction in the number of bodies. And it is that. But the body it reduces is the independent one. Streamlining is a vocabulary that makes the deletion of an oversight function read as administrative tidiness. The question a streamlining frame is built to discourage is the only one that matters here: which layer was removed, and whose interest did it represent. The layer removed is the one that represented the public against the office that remains.

Counter: fewer bodies can mean a cleaner, faster regulator, and that is the stated aim. Granted. But efficiency that is achieved by deleting the one body whose job was to oppose the regulator is not a neutral simplification. It is a removal of friction from exactly the place friction was supposed to be.

§02 · The authority that was concentrated

What the removed functions did does not vanish; it is concentrated. C-34 leaves a single Digital Safety Commission of Canada, which writes the regulations, assesses compliance, manages complaints, conducts audits, issues compliance orders, decides which platforms are exempted from the under-sixteen restriction (section 29), and imposes administrative monetary penalties up to the greater of ten million dollars or three per cent of an operator's gross global revenue (section 88), rising to twenty million or five per cent for the most serious offences (section 107).verified One legal reading of the result calls it an internet super-regulator. The same body that fines a platform also manages the complaints against it and writes the rules it is judged by.

A concentration of that weight is a real instrument of power, and the case does not argue it is illegitimate to give a regulator real power. It argues something narrower and structural: the same motion that gave one body this enforcement weight is the motion that removed the independent body positioned to stand against it. And the public's route to that body is itself gated. Under section 68(2), a person is "not entitled to make a complaint to the Commission" until they have first used their best efforts to seek recourse through the operator's own internal process.verified The offender's process becomes the filter on the offender's accountability, the move Case 10 · The Process Is the Filter documents. Power was concentrated, the watchdog was removed, and the door to the regulator was placed behind the platform's own complaint desk, all in one bill, under one frame.

§03 · The merger that makes it one office

The decisive move sits not inside C-34, but in the bill tabled five days after it. Bill C-36, the Protecting Privacy and Consumer Data Act, introduced on 15 June 2026 by the Minister of Artificial Intelligence and Digital Innovation, replaces the federal private-sector privacy law. It does not merely rename the regulator. It removes the Privacy Commissioner of Canada's jurisdiction over the private sector entirely, reassigning every private-sector function, complaints, investigations, audits, codes of practice and penalties, to a renamed body: the Digital Safety and Data Protection Commission of Canada.verified That is the same Commission C-34 built to police online content. One reading of the pair calls it a digital super-regulator that pushes the Privacy Commissioner out.

These are two mandates that, in a system designed to limit concentrated power, one keeps apart. The authority to decide what content comes down and which operators are sanctioned is a speech authority. The authority to govern how personal data is collected, held and destroyed is a data authority. C-34 itself creates large new troves of exactly that data, every adult's age-verification record, collected as the price of the under-sixteen ban. The merged office is the office that decides what speech comes down and the office that governs the identity data the same regime compels. One body, both mandates, and, per the first section, no independent ombudsperson beside it, and now no independent Privacy Commissioner for the private sector either. Two watchdogs removed, both functions folded into one super-regulator. This is the ratchet Case 23 documents, made institutional: not only "verify every adult's identity," but "merge the body that polices the speech with the body that holds the papers, and remove the two offices that stood guard over each."

Two watchdogs deleted in one fortnight. One office left, holding the speech and the data at once.

§04 · What is being laundered, named plainly

What is being laundered is a consolidation. Independent oversight is removed, enforcement authority is concentrated, and speech and data mandates are merged into a single office, and all of it travels under the one frame that is structurally immune to objection, protecting children. The frame is not a lie. The harm to children online is real, and the bill does address parts of it: it names chatbots as a regulated class and writes them conduct rules, it requires synthetic content to be labelled, it orders a twenty-four-hour takedown for the worst material. The frame is a vehicle. It is the carrier under which an institutional change that would be contested on its own terms, delete the watchdog, merge the regulators, moves without being examined on its own terms. The child-safety content is the cargo everyone reads; the institutional architecture is the freight underneath.

This is the seventh discharge layer this volume has had to name, and it is distinct from the others because what is corrupted is not a piece of conduct but the structure of oversight itself. The reputation moves of the earlier cases launder a person or a record. This launders the shape of the state's own accountability. The bodies keep their formal names. The Commission is still a commission; the bill still speaks of safety and transparency. Only the architecture has changed: the offices that were meant to check the regulator are inside it now, and the regulator is one office holding two mandates that were always kept apart.

The case claims this, and only this: that across two bills tabled five days apart, under a protective frame, two independent oversight offices were removed, enforcement power was centralised, and the speech regulator was merged with the data regulator into one office, the office that also holds the identity data the same law compels every adult to surrender. The companion to the case is The Age Gate, which carries the age-verification spine of the same instrument; this case carries its institutional half. The protection is the frame. The merged office is the residue.