Ontario’s Bill 194, also known as the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024, was tabled by the Government of Ontario on May 13, 2024, aiming to enhance privacy and regulate artificial intelligence (AI) in the province.
If passed, Bill 194 will grant expanded powers to the Information and Privacy Commissioner of Ontario (IPC), impose new requirements on AI usage, and bolster privacy rights for children. These changes will be implemented through amendments to the Freedom of Information and Protection of Privacy Act (FIPPA) and the introduction of the Enhancing Digital Security and Trust Act, 2024.
Amendments to FIPPA will affect provincial public sector entities like government ministries, universities, and agencies. Notably, municipal public sector bodies are excluded from these amendments. Key updates under Bill 194 include:
– Strengthening privacy protections
– Regulating the use of AI
– Enhancing security measures for children’s data
Additionally, Bill 194 proposes new cybersecurity and AI legislation applicable to both provincial and municipal public sector organizations, as well as children’s aid societies and school boards. However, the specifics of the legislation remain broad, with detailed regulations and directives expected to clarify implementation requirements.
Should Bill 194 pass, public sector institutions in Ontario will need to revise their privacy policies, procedures, and technology contracts. While the bill carries significant implications, uncertainties persist concerning its full impact on organizational budgets and cybersecurity measures. As stakeholders voice their opinions, feedback collection on Bill 194 is open until June 11, 2024.
