Canada's intelligence watchdog found the Communications Security Establishment (CSE) violated federal law by targeting a Canadian citizen. The National Security and Intelligence Review Agency (NSIRA) report states CSE overstepped its mandate when analyzing data from a citizen's device, which was shared by the Canadian Security Intelligence Service (CSIS) for foreign intelligence purposes.

The breach centers on a legal friction point: while CSIS can collect data on Canadians, CSE is prohibited from directing surveillance at citizens. The watchdog dismissed CSE's argument that the analysis was legal because its goal was foreign intelligence, calling it a deliberate overreach rather than incidental collection.

CSE has agreed to update its policies and analyst training to prevent future violations. However, a rift remains with CSIS, which argues that stopping such requests would harm its ability to investigate threats. The finding raises questions about inter-agency cooperation and the balance between national security and privacy protections.