What is the current status of Bill C-8 in the Canadian legislative process?

1. What is Bill C‑8 and where did it come from — the short legislative pedigree

Bill C‑8, titled An Act respecting cyber security, amends the Telecommunications Act and would create the Critical Cyber Systems Protection Act (CCSPA); it is substantially similar to Bill C‑26 from the prior Parliament, which reached the Senate’s third reading but died on the Order Paper when Parliament was prorogued in January 2025 ^{[1] [5]}. The government tabled the new iteration on June 18, 2025 and parliamentary information pages list the bill and legislative summary materials ^{[1] [6]}.

2. Current procedural status in Parliament

Public legal commentary and legislative tracking indicate Bill C‑8 has been re‑introduced and “advanced to second reading in the House of Commons,” with LEGISinfo and other legal analyses noting the bill was tabled in mid‑June and has been the subject of parliamentary materials and a Library of Parliament legislative summary ^{[2] [6]}. The official Parliament of Canada Bill page confirms a first‑reading entry for the measure ^[7].

3. What the bill would do if enacted — the core powers and obligations

Bill C‑8 would create the CCSPA imposing mandatory cybersecurity obligations on designated operators in sectors such as telecommunications, banking, energy, transportation, nuclear and clearing/settlement systems, and would expand federal oversight in the Telecommunications Act, including new order‑making powers for the Governor in Council and the Minister of Industry ^{[8] [9] [2]}. Regulators named to exercise sectoral oversight include the Minister of Industry, Minister of Transport, OSFI, Bank of Canada, Canadian Energy Regulator and Canadian Nuclear Safety Commission ^{[5] [9]}.

4. Civil‑society and privacy warnings — constitutional and rights concerns

Civil society groups and privacy advocates have signalled “fundamental constitutional flaws” and a “dangerous loophole” in the bill, urging amendment during committee review; the Privacy Commissioner has flagged risks around broad information collection and sharing powers and insufficient safeguards ^[3]. The Canadian Constitution Foundation warns the bill could let the minister order telecommunications providers to cut individual services or weaken encryption standards and enable unconstitutional searches ^[4].

5. Government rationale and industry commentaries — national security and resilience framing

The government and many legal/industry advisers frame Bill C‑8 as necessary to protect critical infrastructure and strengthen resilience against escalating cyber threats; law‑firm and consultancy analyses describe a significant governance shift and urge designated operators to prepare compliance programs ^{[1] [8] [5]}. Government materials and stakeholders argue the CCSPA aligns Canada with international counterparts and fills gaps identified since earlier cyber incidents ^{[1] [5]}.

6. Key contested powers and transparency issues flagged in official documents

The Department of Justice Charter Statement notes the bill would allow the Minister of Industry to disclose information collected under the Telecommunications Act to provincial or foreign governments and international organisations where relevant to security, a provision that raises oversight and rights questions highlighted in government materials ^[10]. Analysts also point to broad authorities to issue binding orders to telecom providers and to new information‑handling and data residency requirements for records ^{[2] [1]}.

7. Where things may go next — parliamentary steps and stakeholder engagement

Available reporting shows Bill C‑8 was re‑introduced and has moved into the House of Commons process (first reading to second reading stage noted in commentary); the usual next steps would be debate at second reading, committee review (where amendments can be sought), and return to the House for report and third reading before Senate consideration ^{[2] [6]}. Civil society and industry have already called for committee amendments and further consultation ^{[3] [11]}.

8. What reporting doesn’t yet say — limits of current sources

Available sources document tabling, re‑introduction, and advancement to second reading along with policy analysis and advocacy positions, but they do not provide a minute‑by‑minute parliamentary status update (e.g., exact dates of second‑reading votes, committee referral motions, or any amendments adopted to date); those precise procedural actions are not found in the current reporting supplied here ^{[6] [7]}.

Takeaway: Bill C‑8 is live in the 45th Parliament as the government’s vehicle for a major cybersecurity regime (the CCSPA) and Telecommunications Act changes; it has moved into the Commons’ consideration but faces strong scrutiny from privacy advocates, legal analysts and some industry voices over broad ministerial and disclosure powers that are likely to be central in committee debates ^{[1] [3] [2]}.