Canada: Cybersecurity regulation in Critical Cyber Systems Protection Act (Bill C-8)
Progress
Scope
Timeline of events
Critical Cyber Systems Protection Act (Bill C-8) including cybersecurity obligations for designated operators received royal assent
On 15 June 2026, the Critical Cyber Systems Protection Act, introduced as Bill C-8 in the 45th Parliament, received royal assent and became law as Statutes of Canada, 2026, chapter 9. The Act establishes mandatory cybersecurity programme requirement…
Senate adopted Critical Cyber Systems Protection Act (Bill C-8) including security obligations
On 4 June 2026, the Senate adopted the Bill respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts (Bill C-8). Part 2 of the Act will enact the Critical Cyber Systems Protection Act (CCSPA) t…
House of Commons passed Critical Cyber Systems Protection Act (Bill C-8) including security obligations
On 26 March 2026, the House of Commons passed the Bill on respecting cybersecurity, amending the Telecommunications Act, and making consequential amendments to other Acts (Critical Cyber Systems Protection Act/ Bill C-8) following committee review …
Critical Cyber Systems Protection Act (Bill C-8) including security obligations was introduced to House of Commons
On 18 June 2025, the Minister of Public Safety introduced the Bill on respecting cybersecurity, amending the Telecommunications Act, and making consequential amendments to other Acts (Critical Cyber Systems Protection Act/ Bill C-8). The Bill includ…