Canada: Adopted Critical Cyber Systems Protection Bill (C-26)

On 5 December 2024, the Senate of Canada adopted Bill C-26, amending the Telecommunications Act and enacting the Critical Cyber Systems Protection Act. The Bill had previously been passed by the House of Commons on 19 June 2024. The Bill regulates operators in finance, energy, telecommunications, and transport. The Bill mandates entities to implement cybersecurity programs and outlines measures regarding risk mitigation, incident reporting, and compliance with government directions. The Bill also establishes penalties and enforcement mechanisms.