Signal SentryUpdated Oct 4, 16:30 UTCPM Drop
Laws · Ontario, Canada

Ontario Bill 194: Enhancing Digital Security and Trust Act, 2024

Gives Ontario power to set rules, by regulation, on how public sector entities use AI: disclosure, accountability frameworks, risk management, human oversight and technical standards. It also covers cyber security and children's data. Its first regulations (in force July 1, 2026) deal with cyber security and school-board data. No AI-specific regulation under the Act was found.

At a glance

In force
Jurisdiction
Ontario, Canada
Type
Law
Official title
Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 (S.O. 2024, c. 24); Schedule 1 enacts the Enhancing Digital Security and Trust Act, 2024

What this means for you

If you build AI

  • Selling AI to Ontario public bodies? Expect them to ask for information, risk documentation and oversight features once AI regulations are made under this Act.

If you deploy AI

  • Applies to public sector entities (FIPPA/MFIPPA institutions such as ministries, hospitals, school boards). AI duties start only when a regulation prescribes them.
  • Ontario ministries and agencies already follow the Responsible Use of AI Directive.

If you use AI

  • In future, Ontario public bodies may have to tell you when they use AI and have a person oversee certain AI systems. The regulations that would require this are not yet in place.

Key dates

  1. Nov 25, 2024PastRoyal Assent (Statutes of Ontario 2024, chapter 24)Source
  2. Jul 1, 2026PastFirst EDSTA regulations take effect (cyber security; school boards and children's data). Neither is an AI ruleSource

Status history

  1. Jan 29, 2025In forceSched. 1 ss. 1-14 were left to proclamation; the e-Laws consolidation of Sched. 1 starts on this dateSource
  2. Nov 25, 2024PassedStatutes of Ontario 2024, chapter 24Source
  3. May 13, 2024ProposedSource

In the Drops

No Drop has covered this law yet.