Jurisdiction

Ontario, Canada: data, AI and cyber laws

Regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Ontario Bill 194Enacts the Enhancing Digital Security and Trust Act, 2024, which lets Ontario set cyber security program, incident reporting and AI governance rules for public sector entities, and rules on digital information about minors held by school boards and children's aid societies. It also amends FIPPA to require privacy impact assessments, reasonable safeguards and breach notification to the IPC and affected people where there is a real risk of significant harm.In effect since Jan 29, 2025

Past deadlines

ComplianceJul 1, 2025 · 16 months ago · Source

FIPPA privacy amendments in forceRemaining FIPPA amendments, including privacy impact assessments, safeguards and breach notification to the IPC, come into force.

Takes effectJan 29, 2025 · 21 months ago · Source

Enhancing Digital Security and Trust Act in forceSchedule 1 (cyber security, AI and minors' data framework) and some FIPPA amendments come into force by OIC 361/2025.

MilestoneNov 25, 2024 · 23 months ago · Source

Royal AssentBill 194 receives Royal Assent as S.O. 2024, c. 24.