TORONTO — Today, the Ontario government is introducing legislation that, if passed, would provide new tools to prevent and respond to cyber security threats and safeguard critical public services, such as health care and education. By enhancing cyber resilience, the government is ensuring these essential sectors remain secure and operational, protecting the safety and privacy of all Ontarians while providing them with more connected and convenient services across government.
The Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 would also strengthen safeguards for children’s personal information and lay the foundation for the ethical use of artificial intelligence in the public sector.
“Our government is helping ensure people and businesses in Ontario have the right protections in place to freely and safely participate and thrive online,” said Todd McCarthy, Minister of Public and Business Service Delivery. “This new legislation would provide the right tools to prevent and quickly respond to future cyber-attacks and privacy breaches, improve our digital delivery of services and provide a strong framework for artificial intelligence governance.”
The legislation works to better protect the people of Ontario by:
Strengthening cyber security in the public sector. This includes critical sectors such as hospitals, schools and children’s aid societies. The legislation will help these organizations prevent and rapidly respond to cyber threats and attacks and minimize service interruptions, ensuring these organizations can continue to operate even when breaches occur.
Safeguarding the data of children and youth from being stolen or used inappropriately with stronger privacy protections when they are in settings like schools. Future regulations could prevent the misuse or sale of student data for predatory marketing by third parties, ensuring children are not unduly targeted or exploited by technology providers.
Modernizing privacy protections. Increase the authority of the Information and Privacy Commissioner of Ontario (IPC) to investigate and respond to privacy breaches and inappropriate use of personal data and mandating organizations to complete privacy impact assessments.
Building a strong foundation in artificial intelligence (AI) governance to solidify Ontario’s leadership in the responsible adoption of AI and emerging technologies. AI has the potential to transform vital programs and enhance services for the people of Ontario and we are ensuring it is used in a transparent, accountable, and ethical way.
Improving online customer service delivery. With the proposed changes, Ontarians who choose to opt-in can enjoy a more efficient experience with government services. The introduction of “tell us once” features means users will not have to repeatedly enter the same information during their interactions. This not only speeds up processes but also reduces the potential for errors, making government services more user-friendly and effective.
With more than 400 artificial intelligence firms and institutions, our province is at the centre of an AI-enabled future. As part of our ongoing work to develop safe and responsible AI applications while encouraging collaboration and fostering new partnerships, the Ontario government provided the Vector Institute with up to $27 million in June 2023, to help more Ontario companies connect with Vector’s AI experts. By continuously working to strengthen our partnerships with organizations like the Vector Institute, we are ensuring Ontario stays at the forefront of AI innovation, retains top AI talent and enhances the delivery of smarter, more efficient government services.
Our government will consult key public sector stakeholders, Indigenous partners, academia, technology and AI experts, the Ontario Human Rights Commission and the IPC as it develops regulations. As technologies continue to rapidly evolve, we are committed to continuously working with all partners to better protect Ontarians, especially our children.
Quick Facts
Ontario is implementing new and improved digital health care tools and services to improve patient care and enhance health system coordination. By strengthening cyber security and privacy measures, Ontario is safeguarding personal data to ensure a safe and seamless health care experience for people in Ontario.
Ontario is requesting comments on the draft bill from the public through the Ontario Regulatory Registry until June 11, 2024.
Ontario’s Cyber Security Centre of Excellence provides guidance, best practices and education on cyber security to the broader public sector to ensure our schools, hospitals and children’s aid societies have the best and most reliable access to every resource Ontario has to offer to prevent and respond to cyber threats and attacks.
Ontario is engaging the AI Expert Working Group, experts from tech and AI industry and academia to provide advice and recommendations on the development of Ontario’s Trustworthy AI Framework and responsible use of AI within the public service.
According to the Canadian Centre for Cyber Security, cyber-attacks are a growing threat to Ontario. IBM reports that the average cost of an incident in 2023 was $6.94 million.
