Bill C-8

An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts

Sponsor

Status

In committee (House), as of Oct. 3, 2025

Subscribe to a feed (what's a feed?) of speeches and votes in the House related to Bill C-8.

Summary

This is from the published bill. The Library of Parliament has also written a full legislative summary of the bill.

Part 1 amends the Telecommunications Act to add the promotion of the security of the Canadian telecommunications system as an objective of the Canadian telecommunications policy and to authorize the Governor in Council and the Minister of Industry to direct telecommunications service providers to do anything, or refrain from doing anything, that is necessary to secure the Canadian telecommunications system. It also establishes an administrative monetary penalty scheme to promote compliance with orders and regulations made by the Governor in Council and the Minister of Industry to secure the Canadian telecommunications system as well as rules for judicial review of those orders and regulations.
Part 2 enacts the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national security or public safety and that are delivered or operated as part of a work, undertaking or business that is within the legislative authority of Parliament. It also, among other things,
(a) authorizes the Governor in Council to designate any service or system as a vital service or vital system;
(b) authorizes the Governor in Council to establish classes of operators in respect of a vital service or vital system;
(c) requires designated operators to, among other things, establish and implement cyber security programs, mitigate supply-chain and third-party risks, report cyber security incidents and comply with cyber security directions;
(d) provides for the exchange of information between relevant parties; and
(e) authorizes the enforcement of the obligations under the Act and imposes consequences for non-compliance.
This Part also makes consequential amendments to certain Acts.

Elsewhere

All sorts of information on this bill is available at LEGISinfo, an excellent resource from Parliament. You can also read the full text of the bill.

Bill numbers are reused for different bills each new session. Perhaps you were looking for one of these other C-8s:

C-8 (2021) Law Economic and Fiscal Update Implementation Act, 2021

C-8 (2020) Law An Act to amend the Citizenship Act (Truth and Reconciliation Commission of Canada's call to action number 94)

C-8 (2020) An Act to amend the Criminal Code (conversion therapy)

C-8 (2016) Law Appropriation Act No. 5, 2015-16

Debate Summary

This is a computer-generated summary of the speeches below. Usually it’s accurate, but every now and then it’ll contain inaccuracies or total fabrications.

Bill C-8 aims to protect Canadian critical infrastructure by amending the Telecommunications Act and establishing cybersecurity measures for federally regulated sectors, including finance, energy, and transportation.

Liberal

Addresses rising cyber threats: The party asserts Bill C-8 is essential to urgently enhance Canada's preparedness and resilience against expanding, complex, and malicious cyber threats targeting critical infrastructure.
Introduces new legal framework: The bill amends the Telecommunications Act for security as a policy objective and enacts the Critical Cyber Systems Protection Act, compelling operators to protect systems and report incidents.
Improves privacy and accountability: Bill C-8 strengthens privacy protections for Canadians, increases government transparency and accountability, and includes a reasonableness standard for issuing orders, addressing stakeholder concerns.

Conservative

Supports cybersecurity, seeks amendments: The Conservative party supports the principle of strengthening Canada's critical cyber systems and intends to vote for the bill at second reading, but will scrutinize it closely and propose amendments at committee.
Protects privacy and charter rights: Conservatives seek to ensure the bill does not infringe on Canadians' privacy and Charter rights, citing concerns about sweeping ministerial powers, secret orders, and the potential to cut off individual services without due process.
Addresses flawed scope and oversight: The party criticizes the bill's narrow scope, which excludes vital institutions like hospitals and schools, and demands stronger oversight, transparency, accountability mechanisms, and fair cost-sharing for national security measures.
Criticizes government's delays: Conservatives criticize the Liberal government's repeated delays and past incompetence in advancing cybersecurity legislation, which has left Canada vulnerable and lagging behind its international allies.

NDP

Supports strengthening cybersecurity: The NDP acknowledges the necessity of Bill C-8 to strengthen critical infrastructure against cyber-threats but emphasizes the need for a balanced approach that protects rights.
Criticizes sweeping ministerial powers: The party is concerned about the bill granting sweeping powers to the Minister of Industry and cabinet without prior judicial approval, parliamentary review, or independent oversight.
Raises privacy and civil liberty risks: Concerns include mandatory information sharing with vague standards, lack of privacy impact assessments, and no guarantees against data repurposing, potentially jeopardizing GDPR adequacy.
Calls for worker protection and fairness: The NDP highlights the absence of compensation for companies, support for workers, and calls penalties extreme, urging safeguards for fairness and due process, especially for frontline employees.

Bloc

Supports bill C-8: The Bloc Québécois supports the bill's objective to protect critical sectors from cyber-attacks, but stresses the need for significant amendments to address various concerns.
Protects Quebec's jurisdiction: The party strongly opposes federal intrusion into Quebec's jurisdiction over electricity, particularly concerning Hydro-Québec's existing robust cybersecurity systems and adherence to North American standards.
Ensures privacy and transparency: The Bloc demands amendments to ensure greater government accountability, enhance transparency through reporting requirements, and strengthen privacy protections against broad information collection powers.

Was this summary helpful and accurate?