Skip to content

GlobalLawDBby GenieAI

Laws Search Sanctions Map Data Developers

Search the text of the law

Log in Get an API key

Laws Search Sanctions Map Data Developers

Log in Get an API key

The Global Law Database. Free to read, built for people and AI agents.

Explore

All laws
Search the text
Sanctions
Map of connections
Compare UK and EU

Developers

AI agents (MCP)
REST API
Bulk data
API keys

Coverage

United Kingdom
European Union
United States
Canada
Australia
France
Germany
Netherlands
Spain
Austria
Norway
Finland
Switzerland
Ireland

GlobalLawDB is made by GenieAI, London. It is not legal advice: check the official text before relying on it. Text comes from official publishers under their licences, listed on the Data page.

ThemeMatch my systemLightDark

Canada
Critical Cyber Systems Protection Act
Reporting of Cyber Security Incidents
s 18.1

Critical Cyber Systems Protection Act

In forceThis text since 15 Jun 2026law://ca/sc/2026/c-9-s-11/sec_18.1@2026-11-11

Version in force onWhereCanada

18.1For greater certainty#

For greater certainty, nothing in sections 17 and 18 aﬀects the provisions of the Personal Information Protection and Electronic Documents Act.

Federal laws of Canada reproduced under the Reproduction of Federal Law Order (SI/97-5); not the official version. Source: Justice Laws Website.

Key facts

Type: Act · S.C. 2026, c. 9, s. 11
Enacted: 15 Jun 2026
Last amended: 15 Jun 2026
Text current to: 18 Jun 2026
Official: Justice Laws Website

History · 1 version

15 Jun 2026Reading

Connections

Cited by 2: Office of the Superintendent of Financial Institutions Act; Transportation Appeal Tribunal of Canada Act
Cites 1: Personal Information Protection and Electronic Documents Act

Defined terms · 21

Show every defined term

appropriate regulator
Bank
Canadian Energy Regulator
énergie)
Canadian Nuclear Safety Commission
Chief Executive Officer
Commission
confidential information
s critical cyber system or the methods used to protect that system and that is consistently treated as confidential by the designated operator;(b)if disclosed could reasonably be expected to result in material financial loss or gain to, or could reasonably be expected to prejudice the competitive position of, a designated operator; or(c)if disclosed could reasonably be expected to interfere with contractual or other negotiations of a designated operator. (renseignements confidentiels)
critical cyber system
cyber security incident
cyber system
designated operator
Governor
internal audit
Minister
personal information
regulator
responsible minister
Superintendent
Tribunal
vital service
vital system

ca/sc/2026/c-9-s-11