Ontario Bill 194
In force Ontario, Canada · In force Jan 29, 2025 · no upcoming deadlines
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
Enacts the Enhancing Digital Security and Trust Act, 2024, which lets Ontario set cyber security program, incident reporting and AI governance rules for public sector entities, and rules on digital information about minors held by school boards and children's aid societies. It also amends FIPPA to require privacy impact assessments, reasonable safeguards and breach notification to the IPC and affected people where there is a real risk of significant harm.
- Who it applies to
- Ontario ministries and provincial institutions under FIPPA, municipal bodies, children's aid societies and school boards. Private companies are not directly covered.
- Penalties
- No administrative fines in the Act; obligations are enforced through regulations, ministerial directives and IPC review powers.
- Enforced by
- Ontario Ministry of Public and Business Service Delivery and Procurement; Information and Privacy Commissioner of Ontario (FIPPA parts)
- Official name
- Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024
- Citation
- S.O. 2024, c. 24
- Topics
- cybersecurity, ai, privacy, children, breach-notification
Research notes
Detailed cyber security and AI duties depend on regulations and directives made under Schedule 1.
Related
Questions about Ontario Bill 194
- What are the Ontario Bill 194 compliance deadlines?
- Nov 25, 2024: Royal Assent. Jan 29, 2025: Enhancing Digital Security and Trust Act in force. Jul 1, 2025: FIPPA privacy amendments in force.
- When does Ontario Bill 194 take effect?
- Ontario Bill 194 took effect on Jan 29, 2025.
- Who does Ontario Bill 194 apply to?
- Ontario ministries and provincial institutions under FIPPA, municipal bodies, children's aid societies and school boards. Private companies are not directly covered.
- What are the penalties under Ontario Bill 194?
- No administrative fines in the Act; obligations are enforced through regulations, ministerial directives and IPC review powers.