Progress

Current status
adopted
15 Jun 2026adopted
04 Jun 2026adopted
26 Mar 2026under deliberation
18 Jun 2025under deliberation

Scope

Implementers
Canada
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
legislature
Government Body
central government
parliament
Implementation Level
national

Timeline of events

15 Jun 2026
adopted

Critical Cyber Systems Protection Act (Bill C-8) including cybersecurity obligations for designated operators received royal assent

On 15 June 2026, the Critical Cyber Systems Protection Act, introduced as Bill C-8 in the 45th Parliament, received royal assent and became law as Statutes of Canada, 2026, chapter 9. The Act establishes mandatory cybersecurity programme requirement…

Event typelaw
Action typesigning
Government branchexecutive
Government bodycentral government
04 Jun 2026
adopted

Senate adopted Critical Cyber Systems Protection Act (Bill C-8) including security obligations

On 4 June 2026, the Senate adopted the Bill respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts (Bill C-8). Part 2 of the Act will enact the Critical Cyber Systems Protection Act (CCSPA) t…

Event typelaw
Action typeadoption
Government branchlegislature
Government bodyparliament
26 Mar 2026
under deliberation

House of Commons passed Critical Cyber Systems Protection Act (Bill C-8) including security obligations

On 26 March 2026, the House of Commons passed the Bill on respecting cybersecurity, amending the Telecommunications Act, and making consequential amendments to other Acts (Critical Cyber Systems Protection Act/ Bill C-8) following committee review …

Event typelaw
Action typepassage
Government branchlegislature
Government bodyparliament
18 Jun 2025
under deliberation

Critical Cyber Systems Protection Act (Bill C-8) including security obligations was introduced to House of Commons

On 18 June 2025, the Minister of Public Safety introduced the Bill on respecting cybersecurity, amending the Telecommunications Act, and making consequential amendments to other Acts (Critical Cyber Systems Protection Act/ Bill C-8). The Bill includ…

Event typelaw
Action typeintroduction
Government branchlegislature
Government bodyparliament