Every AI Policy Ever · open in the interactive register

In forceBinding · Law

Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 (Schedule 1: Enhancing Digital Security and Trust Act, 2024)

Record CA-ON-01 · S.O. 2024, c. 24 (Bill 194, 43rd Parliament, 1st Session)

Issued by
Legislative Assembly of Ontario
Jurisdiction
Ontario (Canada)
Level · region
Sub-national · North America
Country
Canada
Published / adopted
2024-11-25
In force
2025-01-29
Language
English, French
Official identifier
S.O. 2024, c. 24 (Bill 194, 43rd Parliament, 1st Session)

Summary

Schedule 1 sets a framework for AI use by Ontario public-sector entities: prescribed entities must publish information about their AI use, adopt accountability frameworks, take prescribed risk-management steps, follow prescribed requirements and refrain from prohibited uses, and for prescribed uses ensure individual human oversight and disclosure; the minister may set technical standards.

Safety topics

public-sector useaccountability & liabilityhuman oversighttransparency & labellingprohibited practices

Status notes

Royal Assent received on 25 November 2024 (S.O. 2024, c. 24). Order in Council 361/2025 of 28 January 2025 named 29 January 2025 as the day Schedule 1, ss. 1-16, the Enhancing Digital Security and Trust Act, 2024, came into force; it also brought provisions of Schedule 2 (amendments to the Freedom of Information and Protection of Privacy Act) into force on 29 January and 1 July 2025. The AI duties in ss. 5 and 6 apply only to public sector entities and circumstances prescribed by regulation. As of the e-Laws currency date of 9 October 2026 the Act has no amendments, and the only regulations under it are O. Reg. 51/26 (cyber security) and O. Reg. 52/26 (digital technology affecting individuals under 18), in effect from 1 July 2026; no regulation yet prescribes entities or circumstances for the AI duties. Section 12 provides that the Act establishes no private law duty of care.

Sources

Open the official source https://www.ola.org/en/legislative-business/bills/parliament-43/session-1/bill-194

Local copy

Archived. Last attempt 2026-10-14 07:49:16 UTC

Official source (third-party copy, not published) archive/CA-ON-01/2026-10-11/official.html
Retrieved 2026-10-11 14:04:22 UTC
SHA-256 1cd5fa2d20165445afed84f8359223c53c1c06ada83dd4b3c3aa68dc865a83fe
Linked document (PDF) (third-party copy, not published) archive/CA-ON-01/2026-10-11/document-1.pdf
Retrieved 2026-10-11 14:04:24 UTC
SHA-256 c830202d71244913575bd346498e6d73056d6fddbe4281a4c23e67e6a2af5ba5
Linked document (PDF) (third-party copy, not published) archive/CA-ON-01/2026-10-11/document-2.pdf
Retrieved 2026-10-11 14:04:27 UTC
SHA-256 2f0f21cb8bd340b3bc6700dd422a8ce41c31cd54d8dd4d008aa1a08cde1ead0b

Verification

A
The instrument's own official text, or an official register, was stored and confirms the title, date and status. checked 2026-10-14 · official-url-fetched
The stored OLA bill page and Royal Assent PDF confirm the title, Royal Assent on 25 Nov 2024 as S.O. 2024, c. 24, the AI provisions in Schedule 1, ss. 5-8, and commencement by proclamation (s. 17). Three stored Government of Ontario pages (ontario.ca, 14 Oct 2026) settle the status. Order in Council 361/2025 names 29 Jan 2025 for Schedule 1, ss. 1-16. The e-Laws consolidation (browser-rendered copy and print PDF) shows the current version from 29 Jan 2025 to its currency date of 9 Oct 2026, 'No amendments', and O. Reg. 51/26 and 52/26 as the only regulations. The ontario.ca EDSTA page (updated 7 May 2026) says those regulations take effect on 1 Jul 2026. The plain http copy of e-Laws is an empty JavaScript shell. ontario.ca is not yet in CA-ON known_hosts, so the evidence script counts its quotes as secondary.
Second check: Independent check by Claude Code (claude-sonnet-5-5), 2026-10-14: 9 field(s) supported.

History

  1. 2026-10-14related: [{"slug": "ca-directive-automated-decision-making", "id": "CA-01"}] → [{"slug": "ca-directive-automated-decision-making", "id": "CA-01"}, {"id": "CA-O — two-way link to CA-ON-02 added in run 2026-10-14-discover-leads-2026-10-142026-10-14-discover-leads-2026-10-14 · Claude Code (claude-opus-5-5)
  2. 2026-10-14notes: Royal Assent received on 25 November 2024 (S.O. 2024, c. 24), as shown on the Le → Royal Assent received on 25 November 2024 (S.O. 2024, c. 24). Order in Council 3 — Added the commencement order and the regulations made so far (none for AI). Removed the earlier remark about e-Laws and the unconfirmed status, which is now settled.2026-10-14-refresh-ids-ca-on-01-coe-01-int-15-us-ca · Claude Code (claude-opus-5-5)
  3. 2026-10-14date_in_force: – → 2025-01-29 — 29 Jan 2025, the day named in Order in Council 361/2025.2026-10-14-refresh-ids-ca-on-01-coe-01-int-15-us-ca · Claude Code (claude-opus-5-5)
  4. 2026-10-14status: Adopted, not yet in force → In force — Schedule 1, ss. 1-16 came into force on 29 Jan 2025 under Order in Council 361/2025, as the e-Laws consolidation confirms.2026-10-14-refresh-ids-ca-on-01-coe-01-int-15-us-ca · Claude Code (claude-opus-5-5)

Related records

DADM Canada · In force

Ontario Responsible Use of AI Directive Ontario (Canada) · In force

Citation

Legislative Assembly of Ontario. Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 (Schedule 1: Enhancing Digital Security and Trust Act, 2024) [S.O. 2024, c. 24 (Bill 194, 43rd Parliament, 1st Session)]. 2024-11-25. https://www.ola.org/en/legislative-business/bills/parliament-43/session-1/bill-194. Status: In force; verified 2026-10-14 (level A). Local copy archive/CA-ON-01/2026-10-11/official.html retrieved 2026-10-11 14:04:22 UTC, SHA-256 1cd5fa2d20165445afed84f8359223c53c1c06ada83dd4b3c3aa68dc865a83fe. Every AI Policy Ever, version 1.18 (snapshot 2026-10-18), record CA-ON-01.

Improve this record

Know of an amendment, a status change or an error? Report news or an error on GitHub; the form opens with this record filled in.