Anyone interested in registering a .ca domain must meet the CIRA's presence requirements too. So if you think the squatter doesn't meet those guidelines, then you could notify the CIRA, and see if they take action. Maybe the domain would become available and then you could scoop it up.

https://www.cira.ca/en/document/CPR.pdf

Also, keep an eye on the registration date. If it expire-delete, grab it. Often times the squatters give up on keeping a domain if they believe no one is interested it it anymore.