Ontario’s public sector is expanding cyber and digital obligations for public sector organizations on July 1. Scott Williams highlights two new regulations under the Enhancing Digital Security and Trust Act, 2024 that introduce mandatory cybersecurity governance requirements and new transparency obligations for school boards.
Category: Information and Privacy
New FIPPA Privacy Requirements Take Effect for Ontario Public Sector Institutions
Schedule 2 of the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 (Bill 194), came into effect on July 1, 2025. The legislation introduced significant amendments to the Freedom of Information and Protection of Privacy Act (FIPPA) including enhanced compliance obligations.
Federal Court of Appeal Upholds Mandatory Nuclear Industry Alcohol and Drug Testing Requirements for Workers in “Safety-Critical” Positions
In a significant ruling for employers in safety-sensitive industries, the Federal Court of Appeal has upheld the constitutional validity of mandatory pre-placement and random alcohol and drug testing requirements for safety-critical positions at Class I nuclear facilities. The decision in Power Workers’ Union et al v Attorney General of Canada, Ontario Power Generation, Bruce Power,…
IPC Power to Determine Administrative Monetary Penalties Takes Effect
On January 1, 2024, changes to the General Regulation made under the Personal Health Information Protection Act (PHIPA) took effect (see O. Reg. 343/23). The changes stipulate how the Information and Privacy Commissioner of Ontario (IPC) determines the amount of administrative monetary penalties (AMPs) issued as part of its enforcement powers for violations of PHIPA….