Canada: Passed Critical Cyber Systems Protection Bill (C-26)

On 19 June 2024, the House of Commons of Canada passed Bill C-26, amending the Telecommunications Act and enacting the Critical Cyber Systems Protection Act. The Bill regulates operators in finance, energy, telecommunications, and transport. The Bill mandates entities to implement cybersecurity programs and outlines measures regarding risk mitigation, incident reporting, and compliance with government directions. The Bill also establishes penalties and enforcement mechanisms.