An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts

Sponsor

Status

In committee (House), as of Oct. 3, 2025

Subscribe to a feed (what's a feed?) of speeches and votes in the House related to Bill C-8.

Summary

This is from the published bill. The Library of Parliament has also written a full legislative summary of the bill.

Part 1 amends the Telecommunications Act to add the promotion of the security of the Canadian telecommunications system as an objective of the Canadian telecommunications policy and to authorize the Governor in Council and the Minister of Industry to direct telecommunications service providers to do anything, or refrain from doing anything, that is necessary to secure the Canadian telecommunications system. It also establishes an administrative monetary penalty scheme to promote compliance with orders and regulations made by the Governor in Council and the Minister of Industry to secure the Canadian telecommunications system as well as rules for judicial review of those orders and regulations.
Part 2 enacts the Critical Cyber Systems Protection Act to provide a framework for the protection of the critical cyber systems of services and systems that are vital to national security or public safety and that are delivered or operated as part of a work, undertaking or business that is within the legislative authority of Parliament. It also, among other things,
(a) authorizes the Governor in Council to designate any service or system as a vital service or vital system;
(b) authorizes the Governor in Council to establish classes of operators in respect of a vital service or vital system;
(c) requires designated operators to, among other things, establish and implement cyber security programs, mitigate supply-chain and third-party risks, report cyber security incidents and comply with cyber security directions;
(d) provides for the exchange of information between relevant parties; and
(e) authorizes the enforcement of the obligations under the Act and imposes consequences for non-compliance.
This Part also makes consequential amendments to certain Acts.

Elsewhere

All sorts of information on this bill is available at LEGISinfo, an excellent resource from Parliament. You can also read the full text of the bill.

Bill numbers are reused for different bills each new session. Perhaps you were looking for one of these other C-8s:

C-8 (2021) Law Economic and Fiscal Update Implementation Act, 2021
C-8 (2020) Law An Act to amend the Citizenship Act (Truth and Reconciliation Commission of Canada's call to action number 94)
C-8 (2020) An Act to amend the Criminal Code (conversion therapy)
C-8 (2016) Law Appropriation Act No. 5, 2015-16

Debate Summary

line drawing of robot

This is a computer-generated summary of the speeches below. Usually it’s accurate, but every now and then it’ll contain inaccuracies or total fabrications.

Bill C-8 aims to protect Canadian critical infrastructure by amending the Telecommunications Act and establishing cybersecurity measures for federally regulated sectors, including finance, energy, and transportation.

Liberal

  • Addresses rising cyber threats: The party asserts Bill C-8 is essential to urgently enhance Canada's preparedness and resilience against expanding, complex, and malicious cyber threats targeting critical infrastructure.
  • Introduces new legal framework: The bill amends the Telecommunications Act for security as a policy objective and enacts the Critical Cyber Systems Protection Act, compelling operators to protect systems and report incidents.
  • Improves privacy and accountability: Bill C-8 strengthens privacy protections for Canadians, increases government transparency and accountability, and includes a reasonableness standard for issuing orders, addressing stakeholder concerns.

Conservative

  • Supports cybersecurity, seeks amendments: The Conservative party supports the principle of strengthening Canada's critical cyber systems and intends to vote for the bill at second reading, but will scrutinize it closely and propose amendments at committee.
  • Protects privacy and charter rights: Conservatives seek to ensure the bill does not infringe on Canadians' privacy and Charter rights, citing concerns about sweeping ministerial powers, secret orders, and the potential to cut off individual services without due process.
  • Addresses flawed scope and oversight: The party criticizes the bill's narrow scope, which excludes vital institutions like hospitals and schools, and demands stronger oversight, transparency, accountability mechanisms, and fair cost-sharing for national security measures.
  • Criticizes government's delays: Conservatives criticize the Liberal government's repeated delays and past incompetence in advancing cybersecurity legislation, which has left Canada vulnerable and lagging behind its international allies.

NDP

  • Supports strengthening cybersecurity: The NDP acknowledges the necessity of Bill C-8 to strengthen critical infrastructure against cyber-threats but emphasizes the need for a balanced approach that protects rights.
  • Criticizes sweeping ministerial powers: The party is concerned about the bill granting sweeping powers to the Minister of Industry and cabinet without prior judicial approval, parliamentary review, or independent oversight.
  • Raises privacy and civil liberty risks: Concerns include mandatory information sharing with vague standards, lack of privacy impact assessments, and no guarantees against data repurposing, potentially jeopardizing GDPR adequacy.
  • Calls for worker protection and fairness: The NDP highlights the absence of compensation for companies, support for workers, and calls penalties extreme, urging safeguards for fairness and due process, especially for frontline employees.

Bloc

  • Supports bill C-8: The Bloc Québécois supports the bill's objective to protect critical sectors from cyber-attacks, but stresses the need for significant amendments to address various concerns.
  • Protects Quebec's jurisdiction: The party strongly opposes federal intrusion into Quebec's jurisdiction over electricity, particularly concerning Hydro-Québec's existing robust cybersecurity systems and adherence to North American standards.
  • Ensures privacy and transparency: The Bloc demands amendments to ensure greater government accountability, enhance transparency through reporting requirements, and strengthen privacy protections against broad information collection powers.
Was this summary helpful and accurate?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:20 a.m.

Bloc

Simon-Pierre Savard-Tremblay Bloc Saint-Hyacinthe—Bagot—Acton, QC

Mr. Speaker, there are a number of positive elements in the bill. One example is that it enacts the new critical cyber systems protection act. Another is the impact that amending the Telecommunications Act to add promotion of security could have.

However, what is being proposed may also have an impact on provincial infrastructure, such as Hydro-Québec, and we are worried about that encroachment.

As I said, I have no problem with the objective of what is being put in place. However, we must keep an eye on areas of overreach, which should be limited and more strictly controlled. I am confident that our colleagues on the Standing Committee on Public Safety and National Security will be able to do a good job on this.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:25 a.m.

NDP

Gord Johns NDP Courtenay—Alberni, BC

Mr. Speaker, one concern New Democrats have raised is the one-size-fits-all approach. This bill would lump together banks, telecoms, nuclear facilities and energy co-operatives under a single compliance framework. All of them would face the same 90-day timeline to stand up cybersecurity programs, no matter their size or capacity. For large corporations, perhaps this is feasible. For small operators or co-ops, it could be impossible.

Should compliance obligations not be tailored to the realities of different sectors?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:25 a.m.

Bloc

Simon-Pierre Savard-Tremblay Bloc Saint-Hyacinthe—Bagot—Acton, QC

Mr. Speaker, I do not disagree with my colleague on that. I think this will likely come up in committee. As soon as we start hearing from witnesses, some will say that they agree with the idea, but that they need more time and a transition plan.

Needless to say, no one can argue against virtue and common sense. That is why it is hard to disagree with what my colleague said.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:25 a.m.

Winnipeg North Manitoba

Liberal

Kevin Lamoureux LiberalParliamentary Secretary to the Leader of the Government in the House of Commons

Mr. Speaker, protecting the critical systems we have in place is ultimately protecting the Canadian economy, among many other things. Yes, we need to be concerned about the whole issue of privacy and so forth, but not moving legislation of this nature forward would have a very negative impact on cybersecurity and our economy.

I wonder if the member could provide his thoughts on how important it is for the Canadian economy as a whole that we have legislation of this nature.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:25 a.m.

Bloc

Simon-Pierre Savard-Tremblay Bloc Saint-Hyacinthe—Bagot—Acton, QC

Mr. Speaker, it is important for the economy as a whole, especially in today's world. That said, there are some important privacy considerations at stake. That about sums up my remarks. Yes, doing this is essential, but not at any cost. I think that is my speech in a nutshell.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:25 a.m.

Conservative

Dane Lloyd Conservative Parkland, AB

Mr. Speaker, there has been some concern about some provisions of the bill that talk about when the minister has a reasonable belief that there is a threat to the telecommunications system. One, the word “system” might be an overly broad way of categorizing the telecommunications infrastructure and, two, when dealing with individuals, there could be some room for potential abuses.

I was hoping the member could talk to us about his perspective on ways we could perhaps strengthen this legislation to ensure that individual Canadians with concerns are not being in any way targeted by this legislation.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:25 a.m.

Bloc

Simon-Pierre Savard-Tremblay Bloc Saint-Hyacinthe—Bagot—Acton, QC

Mr. Speaker, that is why I was saying that it is important for the committee to do a thorough job. It must ensure that the bill's objective, which is commendable, is not pursued without regard for the consequences, which could be devastating.

Our remarks are summed up nicely in the testimony of the Privacy Commissioner of Canada. He said that he supported the idea but urged caution. Are there safeguards in place, given that it would be possible to use the data, to discover people's personal online search history and to look at their old emails? Does the bill not go a bit too far? Should we not make it clear that these things should not be done at all costs? They are already happening in the context of criminal investigations, but that is not the case here.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:25 a.m.

Conservative

Leslyn Lewis Conservative Haldimand—Norfolk, ON

Mr. Speaker, I rise today with heavy concerns about Bill C-8, a proposed law presented as a measure to secure Canada's telecommunications and critical infrastructure.

I think we can all agree that cybersecurity is very important. Our information networks are the lifeblood of our economy, education, health systems and daily lives. Protecting this critical infrastructure is essential, but without liberty, there can be no security. As such, my speech today will focus on how Bill C-8 would impact the individual liberties of average Canadians.

Bill C-8 would grant the federal government sweeping powers. It would allow the Minister of Industry, with direction from cabinet, to order telecommunications service providers like Rogers, Telus and Bell to act, refrain from action, remove equipment, prohibit certain services and, in extreme cases, suspend or terminate services to individual users. While Bill C-8's intention is to focus on service providers, it indirectly encroaches on the fundamental freedoms of Canadians by failing to carve out an exemption for individual Canadians who rely on the Internet and telecommunications to work, travel, communicate, engage in commerce and banking and connect in their virtual communities.

Consider what that means in practical terms. In today's world, losing access to telecommunications or the Internet is not just a minor inconvenience; it is a form of isolation. It can prevent someone from working, learning, paying bills, accessing health care and participating in civic life. It is, in essence, a digital prison.

The gravest concern about Bill C-8 is that it contains provisions of secrecy and non-disclosure. A person whose Internet is cut off may not know why their service was terminated. They may not know the evidence against them. They may not have a meaningful opportunity to defend themselves. A Canadian could be trapped in a digital prison with no way to challenge it. Bill C-8 therefore breaches fundamental guarantees under the Charter of Rights. This strikes at the heart of our Constitution.

Section 7 of the charter guarantees the following:

Everyone has the right to life, liberty and security of the person and the right not to be deprived thereof except in accordance with the principles of fundamental justice.

Fundamental justice includes someone knowing the case against them and having a fair opportunity to defend themselves. Bill C-8, as it stands, would allow the government to deprive individuals of essential services without ever seeing the evidence, which is a profound breach of these principles.

Section 8 of the charter, which protects against unreasonable search and seizure, would also be engaged. The bill would allow the government to collect private information without consent and with minimal safeguards. This combination of secret orders and the lack of disclosure creates a scenario where Canadians' privacy and liberty are deeply at risk. Even if national security is invoked, section 1 of the charter requires that limitations on rights be proportionate, necessary and minimally impairing.

Secret orders, broad powers and no avenues for defence fail this test. Canadians should not have to surrender their rights to remain secure. Security and freedom can coexist. The government can both defend our telecommunications networks and protect the rights and freedoms of all Canadians.

Bill C-8 might secure networks, but as it stands, it risks imprisoning citizens digitally and denying them fundamental justice. In so doing, it would undermine the very freedoms we seek to protect. Let us not mistake security for liberty. Let us not trade the rights of Canadians for a false sense of protection.

Let me give a concrete example of how Bill C-8 could affect an ordinary Canadian. Imagine Sarah, a citizen frustrated with a government program she believes was mismanaged and corrupt. In her frustration, she posts online, threatening to expose government corruption. She threatens to reveal secret information she has collected about the program. The government views her post as a threat to the telecommunications system, so it quietly issues an order under Bill C-8. Her Internet provider receives direction to shut down her Internet and phone services, all without a court warrant or court order. The same provider is legally forbidden from disclosing the reason why Sarah's Internet was suspended. If the provider were to explain, it could face penalties and even jail. The next morning, Sarah is shocked to find that she cannot access her email, bank account or work portal. Her social media accounts are frozen. She cannot contact her friends, family or colleagues. She has been cut off entirely from the digital world and she has no idea why.

This is a system of double secrecy. The government order is hidden and the provider is prohibited from telling her anything. Sarah cannot see the evidence against her or ask questions, and she has no way of defending herself. She is effectively trapped in a digital prison. She is isolated, powerless and silenced.

Over the following days, the impact deepens. Sarah cannot pay her bills, participate in remote work, access health care portals or communicate with anyone. Eventually, she finds out the government is behind this, so she attempts to challenge the order, only to hear that any judicial review may involve secret evidence that she cannot see. The provider has the information but, under Bill C-8, is not allowed to share it. Every attempt to assert her rights is blocked. She is not merely inconvenienced; she is entirely cut off with no meaningful recourse.

This scenario is conceivable and would be legal under Bill C-8 as it stands. It illustrates why Bill C-8's secrecy and non-disclosure provisions are so dangerous to individuals. People may say this would never happen. The government will, no doubt, insist that the intent of the bill is clear, but why should Canadians trust it?

We must take the bill at face value. We must rely on what the text explicitly sets out in the law; otherwise, the law intended to protect telecommunications infrastructure could easily be weaponized by any government against ordinary citizens. Citizens most at risk are people like me. They are those who publicly and loudly express dissent, challenge orthodoxy or raise uncomfortable truths. These citizens most active in civil society are most at risk of being cut off, penalized and isolated without ever knowing why.

For these reasons, Bill C-8 undermines the principles of fundamental justice in the charter as it stands. Security in this context can be a pretext for control while transparency and liberty are sacrificed.

Sarah's story is not just a hypothetical; it is a warning. Bill C-8 risks turning ordinary Canadians into prisoners of secrecy, silenced without cause and stripped of their most basic rights. We can secure a network without the risk of trapping innocent citizens in a digital prison and without stripping them of the ability to defend themselves. This can be done. We can provide clear exemptions in the legislation for individual users, which should be part of what we discuss in committee. These are practical, reasonable measures that governments could adopt.

We owe it to all Canadians to do everything in our power to elect leaders who will not be silenced, who will protect their security and who will guard their freedoms, because freedom without security is a cage.

I am splitting my time with the hon. member for Kitchener South—Hespeler.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:35 a.m.

Winnipeg North Manitoba

Liberal

Kevin Lamoureux LiberalParliamentary Secretary to the Leader of the Government in the House of Commons

Mr. Speaker, I am not too sure if the member supports the legislation. It comes across that she has some concerns for individuals like Sarah.

I think the minister has been fairly clear as we have gone through this legislation that Bill C-8 is important for many different reasons. I recently highlighted that we need to protect the consumers of our economy through cybersecurity. It is not optional for the government to do it; it has to be done.

Would the member not, at the very least, agree that having cybersecurity to protect the Canadian economy is absolutely critical and that we need to have legislation? Maybe it is just a question of having some amendments to address some of the concerns the member has put forward.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:35 a.m.

Conservative

Leslyn Lewis Conservative Haldimand—Norfolk, ON

Mr. Speaker, I want all Canadians to know that cybersecurity is an extremely important thing in this digital era. It is very important for the government to take this seriously.

This bill is a very important bill, but that does not mean there are not elements it that, as a legislator and a trained lawyer, I must bring to the public's attention. There are some concerns about how individual users are not properly treated in this bill, and they need to be corrected.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:40 a.m.

Conservative

Ziad Aboultaif Conservative Edmonton Manning, AB

Mr. Speaker, my colleague is highlighting an important issue. We hear a lot of concerns from Canadians about Bill C-8. She included some of them in her speech. If she could shed light again on those concerns, it would be great.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:40 a.m.

Conservative

Leslyn Lewis Conservative Haldimand—Norfolk, ON

Mr. Speaker, we recognize that there are times when our telecommunication infrastructure is threatened. In those instances, the government must act expeditiously to minimize and curtail that threat. However, these provisions can seep over into the realm of ordinary citizens. In the example I gave of Sarah, her entire life was unravelled because of this legislation.

I do not believe this should be the intent of this legislation. We really need to look at the impact of this legislation on ordinary individuals, because the average Canadian needs their telecommunications to facilitate every aspect of their life.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:40 a.m.

Thérèse-De Blainville Québec

Liberal

Madeleine Chenette LiberalParliamentary Secretary to the Minister of Canadian Identity and Culture and Minister responsible for Official Languages and to the Secretary of State (Sport)

Mr. Speaker, I would like to thank my hon. colleague for her speech.

I would like some reassurance. You said that this cybersecurity bill is important. You focused a lot on Sarah's story, and we certainly agree that it is important to protect people's privacy.

To reassure the public, could you tell us what benefits you see in passing this bill? Will you work with us at committee to get it passed?

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:40 a.m.

The Deputy Speaker Tom Kmiec

I noticed the member used the word “you”. I would remind members that they must not address other members directly. They must address the Chair.

The hon. member for Haldimand—Norfolk.

An Act Respecting Cyber SecurityGovernment Orders

October 3rd, 2025 / 10:40 a.m.

Conservative

Leslyn Lewis Conservative Haldimand—Norfolk, ON

Mr. Speaker, security is always an advantage to private citizens, but security cannot come at the expense of liberty. We have the Charter of Rights in place and it must be respected.

There are a number of provisions in proposed sections 11 and 12 of Bill C-8 that would infringe upon section 7 of the charter, because there is a deprivation of our essential services without procedural fairness. Proposed sections 10 and 11 of the bill would also infringe upon section 8 of the charter, because there is a deprivation of privacy and being secure against unreasonable search and seizure. Proposed sections 11, 14, 16, 18 and 19 of the bill would also infringe upon Canadians' liberties, because there is a deprivation of section 1, which includes justifiable limits in the proportionality of any legislation upon a person's freedom, even when national security is a justifiable ground under section 1.

There are benefits. Security is a benefit to Canadians, but it cannot come at the expense of liberty.