Back From The Grave: Bill C-8 Revives Comprehensive Cybersecurity Law

Previously McMillan's Privacy and Data Protection Group reported on Bill C-26, which died on the Order Paper when Parliament was prorogued in January 2025 (read our in-depth analysis of Bill – C-26 here).

On June 18, 2025, the Minister of Public Safety reintroduced the Bill as Bill C-8: An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts ("Bill C-8"). Nearly identical to its predecessor, Bill C-8 would do two things if passed: (1) revise the Telecommunications Act and (2) establish the Critical Cyber Systems Protection Act ("CCSPA"). Bill C-8 would grant new enforcement powers for cybersecurity across Canada's critical federal infrastructure.