First, this will be challenged in court. C-22 violated sections 8 of the Charter which states "Everyone has the right to be secure against unreasonable search or seizure" Forcing service providers to collect data without a warrant violates Canadians rights to privacy.

As for steps I've taken or will take:

1. No accounts with any bigtech.
2. The only accounts in my name are financial, drivers' license and official government.
3. I'll be switching to SimpleX if/when Signal leaves Canada.
4. I'll continue using a Mullvad VPN. If their servers get blocked, I'll take advantage of their "Server IP override" feature.
5. TailsOS is also an option.

Overall, I don't plan of changing much as I've already done most of the work on my privacy journey.

Truthfully, I'm more concerned about ID verification (commonly called age verification).