June 17, 2026 - Federal, Private Sector

Bill C-8: what businesses need to know about the new cybersecurity framework

Bill C-8, An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts, establishes the most significant federal cybersecurity framework Canada has enacted. The Bill creates a dual regime: it expands the federal government’s power to secure Canada’s telecommunications system, and it imposes mandatory, enforceable cybersecurity obligations on operators of critical cyber systems across federally regulated sectors.

Please see this Osler Update, prepared by members of Osler's National Privacy and Data Management team, for a detailed review of the statutory framework.