C-81453-4Charles III2025-2026An Act respecting the protection of critical cyber systems in the federally regulated sectorCritical Cyber Systems Protection ActCritical Cyber Systems Protection Act20266
18
20266
15
C-47.49, s. 112026[Enacted by section 11 of chapter 9 of the Statutes of Canada, 2026, not in force.]PreambleWhereas the Government of Canada has a fundamental responsibility to protect Canada’s national security and the safety of Canadians;Whereas the Government of Canada acknowledges that because some cyber systems are critically important to vital services and vital systems their disruption could have serious consequences for national security or public safety;Whereas the Government of Canada, through its national cyber security strategy, is committed to enhancing the security and resilience of the critical cyber systems of the federally regulated sector and to exercising leadership in cyber security to foster collaboration across Canada, with the provinces and territories and around the world;Whereas the Government of Canada is committed to working with various stakeholders, including the federally regulated sector, to help protect those systems and to encourage information sharing among the stakeholders;And whereas the Government of Canada acknowledges the necessity to protect the privacy of Canadians with respect to their personal information in accordance with the Privacy Act;His Majesty, by and with the advice and consent of the Senate and House of Commons of Canada, enacts as follows:Short Title
Short titleThis Act may be cited as the Critical Cyber Systems Protection Act.
Definitions
DefinitionsThe following definitions apply in this Act.appropriate regulator means, in respect of a designated operator, the regulator set out in column 2 of Schedule 2 that corresponds to the class of operators to which the designated operator belongs. (organisme réglementaire compétent)Bank means the Bank of Canada established by subsection 3(1) of the Bank of Canada Act. (Banque)Canadian Energy Regulator means the Canadian Energy Regulator established by subsection 10(1) of the Canadian Energy Regulator Act. (Régie canadienne de l’énergie)Canadian Nuclear Safety Commission means the Commission established by subsection 8(1) of the Nuclear Safety and Control Act. (Commission canadienne de sûreté nucléaire).Chief Executive Officer has the same meaning as in section 2 of the Canadian Energy Regulator Act. (président-directeur général)Commission means the Commission referred to in subsection 26(1) of the Canadian Energy Regulator Act. (Commission)confidential information means any information obtained under this Act in respect of a critical cyber system thatconcerns a vulnerability of any designated operator’s critical cyber system or the methods used to protect that system and that is consistently treated as confidential by the designated operator;if disclosed could reasonably be expected to result in material financial loss or gain to, or could reasonably be expected to prejudice the competitive position of, a designated operator; orif disclosed could reasonably be expected to interfere with contractual or other negotiations of a designated operator. (renseignements confidentiels)critical cyber system means a cyber system that, if its confidentiality, integrity or availability were compromised, could affect the continuity or security of a vital service or vital system. (cybersystème essentiel)cyber security incident, in respect of a critical cyber system, means an incident, including an act, omission or circumstance, that interferes or may interfere withthe continuity or security of a vital service or vital system; orthe confidentiality, integrity or availability of the critical cyber system. (incident de cybersécurité)cyber system means a system of interdependent digital services, technologies, assets or facilities that form the infrastructure for the reception, transmission, processing or storing of information. (cybersystème)designated operator means a person, partnership or unincorporated organization that belongs to any class of operators referred to in Schedule 2. (exploitant désigné)Governor has the same meaning as in section 2 of the Bank of Canada Act. (gouverneur)internal audit means an independent and objective assurance and advisory review conducted in accordance with any internationally recognized guidance on professional practices respecting internal auditing and specified in Treasury Board policies, such as the International Professional Practices Framework of the Institute of Internal Auditors.  (vérification interne)Minister means the Minister of Public Safety and Emergency Preparedness or, if another federal minister is designated under section 4, that minister. (ministre)personal information has the same meaning as in section 3 of the Privacy Act. (renseignements personnels)regulator meansthe Minister of Industry;the Minister of Transport;the Superintendent;the Bank;the Canadian Energy Regulator; orthe Canadian Nuclear Safety Commission. (organisme réglementaire)responsible minister means the minister responsible for an Act that is ordinarily administered by an appropriate regulator with respect to any class of operators set out in Schedule 2. (ministre compétent)Superintendent means the Superintendent of Financial Institutions appointed under subsection 5(1) of the Office of the Superintendent of Financial Institutions Act. (surintendant)Tribunal means the Transportation Appeal Tribunal of Canada that is established under subsection 2(1) of the Transportation Appeal Tribunal of Canada Act. (Tribunal)vital service means a service that is referred to in Schedule 1. (service critique)vital system means a system that is referred to in Schedule 1. (système critique)
Application
Binding on His MajestyThis Act is binding on His Majesty in right of Canada.
Designation of MinisterThe Governor in Council may, by order, designate any federal minister to be the Minister referred to in this Act.
Purpose
PurposeThe purpose of this Act is to help to protect critical cyber systems in order to support the continuity and security of vital services and vital systems by ensuring that, among other things,any cyber security risks in respect of critical cyber systems are identified and managed, including risks associated with supply chains and the use of third-party products and services;critical cyber systems are protected from being compromised;any cyber security incidents affecting, or having the potential to affect, critical cyber systems are detected; andthe impacts of cyber security incidents affecting critical cyber systems are minimized.
Vital Services and Vital Systems
Addition to Schedule 1The Governor in Council may, by order, add to Schedule 1 a service that is delivered, or a system that is operated, as part of a work, undertaking or business that is within the legislative authority of Parliament, if the Governor in Council is satisfied that the service or system is vital to national security or public safety.Amendment to Schedule 1The Governor in Council may, by order, amend or delete any service or system set out in Schedule 1.
Designated Operators of Critical Cyber Systems
Class of operators and corresponding regulatorThe Governor in Council may, by order, amend Schedule 2 byaddinga class of operators — consisting of persons, partnerships or unincorporated organizations that operate a work or carry on an undertaking or business that is within the legislative authority of Parliament — in respect of a vital service or vital system, andthe regulator for that class; oramending or deleting a class of operators or the regulator for that class.
Critical cyber system — obligation of designated operatorA designated operator that owns, controls or operates a critical cyber system must comply with the requirements of this Act and the regulations with respect to that critical cyber system.
Cyber Security Program
Establishing cyber security programAfter an order that is made under section 7 is published in the Canada Gazette, Part II, a designated operator that belongs to a class of operators set out in Schedule 2 must, within 90 days after the day on which the designated operator becomes a member of that class, establish a cyber security program in respect of its critical cyber systems and include in the program steps to, in accordance with any regulations,identify and manage any organizational cyber security risks, including risks associated with the designated operator’s supply chain and its use of third-party products and services;protect its critical cyber systems from being compromised;detect any cyber security incidents affecting, or having the potential to affect, its critical cyber systems;minimize the impact of cyber security incidents affecting critical cyber systems; anddo anything that is prescribed by the regulations.NoticeImmediately after the program has been established, the designated operator must notify the appropriate regulator in writing that the program has been established.
Providing program to appropriate regulatorThe designated operator must, within 90 days after the day on which the designated operator becomes a member of a class of operators that is set out in Schedule 2, provide the cyber security program or make it available to the appropriate regulator in the manner prescribed by the regulations or, if no manner is so prescribed, in the manner that the appropriate regulator considers appropriate.
Extension of 90-day periodThe appropriate regulator may, at the designated operator’s written request, extend the 90-day period for complying with either subsection 9(1) or section 10, or both. The 90-day period may be extended more than once at the discretion of the appropriate regulator.
Implementation and maintenance of programAfter a cyber security program is established, the designated operator must implement that program by taking the steps that are included in the program under section 9 and maintain the program.
Review of cyber security program — commencementA designated operator must commence a review of its cyber security program on each date that is prescribed by the regulations or, if no dates are prescribed, on every anniversary of the day on which its cyber security program was established under section 9.Completion of reviewThe designated operator must complete the review within 60 days after the day on which the review was commenced under subsection (1), unless another period is prescribed by the regulations, and amend the program as a result of the review if needed.Notification — changes to programThe designated operator must, within 30 days after the day on which the review is completed, unless another period is prescribed by the regulations, notify the appropriate regulator of whether or not any changes were made to the program after the previous review.
Notification — other changesA designated operator must, within a period prescribed by the regulations, notify the appropriate regulator ofany material change in the designated operator’s ownership or control;any material change in the designated operator’s supply chain or in its use of third-party products and services; andany circumstances that are prescribed by the regulations.Further notification — changes to programThe designated operator must, within 90 days after the day on which a notification was provided under subsection (1), also notify the appropriate regulator whether or not any changes were made to the program as a result of any material changes or any circumstances described in paragraph (1)(a), (b) or (c) and, if changes were made, the nature of those changes.Extension of 90-day periodThe appropriate regulator may, at the designated operator’s written request, extend the 90-day period for complying with subsection (2). The 90-day period may be extended more than once at the discretion of the appropriate regulator.
Mitigation of Supply-Chain and Third-Party Risks
Mitigation — supply-chain or third-partyAs soon as any cyber security risk associated with the designated operator’s supply chain or its use of third-party products and services has been identified under paragraph 9(1)(a), the designated operator must mitigate those risks.
Guidelines on mitigation of risksThe Communications Security Establishment may, in consultation with relevant industry stakeholders, develop guidelines on the mitigation of risks associated with supply chains and the use of third-party products and services, taking into consideration internationally recognized frameworks such as those developed by the International Organization for Standardization on cybersecurity in supplier relationships.
Guidance from Communications Security EstablishmentAn appropriate regulator may provide to the Communications Security Establishment any information, including any confidential information, respecting a designated operator’s cyber security program or any steps taken under section 15, for the purpose of requesting advice, guidance or services from the Communications Security Establishment in accordance with the mandate of the Communications Security Establishment, in respect of the exercise of the appropriate regulator’s powers or the performance of its duties and functions under this Act.
Reporting of Cyber Security Incidents
Report — cyber security incidentA designated operator must, within a period prescribed by the regulations, not to exceed 72 hours, report a cyber security incident in respect of any of its critical cyber systems to the Communications Security Establishment in accordance with the regulations, for the purpose of enabling the Communications Security Establishment to exercise its powers or perform its duties and functions.
NotifyImmediately after reporting a cyber security incident, the designated operator mustnotify the appropriate regulator, in the form and manner prescribed by the regulations that the report was made; andgive a copy of the report to the appropriate regulator.
For greater certaintyFor greater certainty, nothing in sections 17 and 18 affects the provisions of the Personal Information Protection and Electronic Documents Act.
Communications Security Establishment — provision of incident reportThe Communications Security Establishment must, without delay, at the request of a regulator, give that regulator a copy of any incident report or any portion of it that relates to a designated operator in respect of which that regulator is the appropriate regulator, for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations.
Cyber Security Directions
DirectionThe Governor in Council may, by order, direct any designated operator or class of operators to comply with any measure set out in the direction for the purpose of protecting a critical cyber system, if the Governor in Council believes on reasonable grounds that it is necessary to make the order for that purpose.Private communicationDespite subsection (1), the Governor in Council must not order the decoding of an encrypted private communication, as defined in section 183 of the Criminal Code.Amend or revokeThe Governor in Council may, by order, amend or revoke a direction in whole or in part.FactorsBefore making an order under subsection (1), the Governor in Council must considerits operational impacts on affected designated operators;its impact on public safety of Canadians;its impact on the privacy of Canadians;its financial impacts on affected designated operators;its impact on the delivery of vital services and vital systems to consumers; andany other factor that the Governor in Council considers to be relevant.Scope and substanceThe provisions of the direction must, in scope and substance, be reasonable in relation to the purpose of protecting a critical cyber system.Compliance with directionEvery designated operator that is subject to a direction must comply with it.Notification by MinisterThe Minister must, within 90 days after an order is made under subsection (1), notify the National Security and Intelligence Committee of Parliamentarians and the National Security and Intelligence Review Agency of the making of the order.For greater certaintyFor greater certainty, despite subsection (1), the Governor in Council is not permitted to order any designated operator or class of operators to intercept a private communication or a radio-based telephone communication, as those terms are defined in section 183 of the Criminal Code.
Contents of directionA direction made under section 20 must set outthe name of the designated operator or the class of operators in respect of which the direction applies;the measures to be taken by the designated operator along with any conditions; andthe period within which those measures are to be taken.ConditionIn addition to any conditions referred to in paragraph (1)(b), the Governor in Council may impose other conditions in a direction.
Exemption from Statutory Instruments ActAn order made under section 20 is exempt from the application of sections 3, 5 and 11 of the Statutory Instruments Act.Precondition for contraventionA designated operator must not be found to have contravened a direction made under section 20 unless it is proved that, at the time of the alleged contravention, the designated operator had been notified of the direction or reasonable steps had been taken to bring the purport of the notice to those designated operators likely to be affected by it.CertificateA certificate purporting to be signed by the Minister or responsible minister and stating that a notice containing the order was given to designated operators likely to be affected by it is, in the absence of evidence to the contrary, proof that notice was given to those designated operators.
Exchange of informationTo the extent necessary, for any purpose related to the making, amending or revoking of a cyber security direction in respect of a designated operator, the following persons or entities may collect information from and disclose information, including confidential information, to each other:the Minister;the responsible minister;the appropriate regulator;the Minister of Foreign Affairs;the Minister of National Defence;the Chief of the Defence Staff;the Chief or an employee of the Communications Security Establishment;the Director or an employee of the Canadian Security Intelligence Service; andany other person or entity that is prescribed by the regulations.Confidential informationAny confidential information, within the meaning of this Act or any other Act of Parliament that applies to or is administered by a person or entity referred to in subsection (1), that is collected or disclosed under that subsection must be treated as confidential.
Prohibition against disclosureEvery designated operator that is subject to a cyber security direction is prohibited from disclosing, or allowing to be disclosed, the fact that a cyber security direction was issued and the content of that direction, except in accordance with section 25.
Disclosure — when allowedA designated operator that is subject to a cyber security direction may disclose the fact that the direction was issued and its content only to the extent necessary to comply with the direction.Prohibition — further disclosureA person must not, without the authorization of the designated operator, disclose or allow the disclosure of any information obtained by them under subsection (1).
Disclosure and Use of Information
ProhibitionSubject to subsection (2), a person must not knowingly disclose confidential information or allow it to be disclosed to any agency, body or other person or allow any other agency, body or other person to have access to the information, except ifthe disclosure is required by law;the information to be disclosed is publicly available;the designated operator to which the information relates consents to its disclosure;the disclosure is necessary for the protection of vital services, vital systems or critical cyber systems;the disclosure is made in accordance with any provision of this Act; orthe disclosure is made in accordance with the Security of Canada Information Disclosure Act.Right to disclose information preservedNothing in this section precludes a person from disclosing confidential information to a law enforcement agency or the Canadian Security Intelligence Service if the disclosure of the information is otherwise lawful.Confidential informationAny confidential information that is disclosed or allowed to be accessed under subsection (1) must be treated as confidential.
For greater certaintyFor greater certainty, nothing in this Act affects the provisions of the Privacy Act in relation to the protection of personal information.
Agreements and arrangements — exchange of informationSubject to subsection (2), the Minister, a responsible minister or a regulator may enter into an agreement or arrangement, in writing, with the government of a province or of a foreign state, or with an international organization established by the governments of foreign states, for the exchange of information, other than confidential information, relating to the protection of critical cyber systemsbetween the Minister, the responsible minister or the regulator, as the case may be, and any institution or agency of that government; orbetween the Minister, the responsible minister or the regulator, as the case may be, and the international organization.Confidential information — government of provinceConfidential information may be disclosed to any institution or agency of the government of the province only ifit is disclosed under the agreement or arrangement; andthe Minister, the responsible minister or the regulator, as the case may be, is satisfied that the information will be treated in a confidential manner and not be further disclosed without their express consent.
Exchange of information by appropriate regulatorIf it is necessary for the protection of vital services, vital systems or critical cyber systems, the appropriate regulator for a class of operators may provide the Minister or the responsible minister with any information, including any confidential information, that is related to the exercise of the appropriate regulator’s powers or the performance of its duties and functions under this Act or the regulations. However, if for the same reason the Minister or the responsible minister makes a request for the information, the appropriate regulator must provide the information so requested.Confidential informationAny confidential information, within the meaning of this Act or any other Act of Parliament that applies to or is administered by the appropriate regulator, that is provided under subsection (1) must be treated as confidential.
Request for informationFor the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations, a regulator may request that a person, partnership or unincorporated organization provide it with any information, and the person, partnership or unincorporated organization, as the case may be, must provide the requested information within the time and in the manner set out in the request.
Disposal of personal informationAny personal information, as defined in section 3 of the Privacy Act, that is collected or obtained under this Act must be disposed of if it is no longer necessary for the purposes for which it was collected or obtained or for verifying compliance or preventing non-compliance with this Act, and in accordance with any requirement under the Privacy Act that applies to it.
For greater certaintyFor greater certainty, nothing in this Act affects the provisions of the Communications Security Establishment Act in relation to the protection of personal information.
Record Keeping
RecordsEvery designated operator must keep records respectingany steps taken to implement the designated operator’s cyber security program;every cyber security incident that the designated operator reported under section 17;any steps taken by the designated operator under section 15 to mitigate any supply-chain or third-party risks;any measures taken by the designated operator to implement a cyber security direction; andany matter prescribed by the regulations.PlaceThe records must be kept in Canada by the designated operator at any place that is prescribed by the regulations — or, if no place is prescribed, at the designated operator’s place of business — and in the manner and for the period determined by the appropriate regulator unless another manner or period is prescribed by the regulations.
Administration and EnforcementLimitation on Liability
No liabilityA person who exercises powers or performs duties or functions under this Act is not liable in respect of anything done or omitted to be done in good faith in the exercise of those powers or the performance of those duties or functions.Immunity — accompanying personsA person referred to in subsection 32(5), 41(5), 50(5), 59(5), 68(5) or 78(5) is not liable for anything done or omitted to be done in good faith while helping any other person in the exercise of their powers or the performance of their duties and functions under this Act.
PowersSuperintendent of Financial InstitutionsGeneral Provisions
Authority to enter place — SuperintendentSubject to section 33, the Superintendent may, for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations, enter a place, including a conveyance, in which the Superintendent has reasonable grounds to believe that an activity regulated under this Act is being conducted or any document, information or thing that is relevant to that purpose is located.Powers of entryFor the purpose referred to in subsection (1), the Superintendent mayexamine anything in the place;use any cyber system, or cause it to be used, for the purpose of examining, among other things, any information contained in or available to it;prepare a document, or cause one to be prepared, based on the information;examine any record, report, data or other document and make copies of it or take extracts from it;use any copying equipment in the place or cause it to be used; andremove any document, record or cyber system, or a portion of it, from the place for the purpose of examining it or copying it.Return of document, record or cyber systemIf the Superintendent removes any document, record or cyber system under paragraph (2)(f), the Superintendent must return it to its owner or the person in charge of it, on completion of the examination or copying.Duty to assistEvery owner or person in charge of a place that is entered by the Superintendent and every person found in the place must give the Superintendent all reasonable assistance to enable the Superintendent to exercise the Superintendent’s powers or perform the Superintendent’s duties and functions under this Act and provide the Superintendent with any document or information, or access to any data, that the Superintendent may reasonably require.Persons accompanyingThe Superintendent may be accompanied by any other person that the Superintendent believes is necessary to help the Superintendent exercise the Superintendent’s powers or perform the Superintendent’s duties and functions under this section.Entering private propertyThe Superintendent and any person accompanying the Superintendent may enter and pass through private property, other than a dwelling-house on that property, in order to gain entry to a place referred to in subsection (1).
Dwelling-houseIn the case of a dwelling-house, the Superintendent is not authorized to enter it without the occupant’s consent except under the authority of a warrant issued under subsection (2).Authority to issue warrantA justice of the peace may, on ex parte application, issue a warrant authorizing the Superintendent to enter a dwelling-house, subject to any conditions specified in the warrant, if the justice of the peace is satisfied by information on oath thatthe dwelling-house is a place referred to in subsection 32(1);entry to the dwelling-house is necessary for a purpose referred to in subsection 32(1); andentry to the dwelling-house was refused by the occupant or there are reasonable grounds to believe that it will be refused or to believe that consent to entry cannot be obtained from the occupant.Use of forceIn executing the warrant, the Superintendent is not entitled to use force unless the use of force has been specifically authorized in the warrant and the Superintendent is accompanied by a peace officer.
Internal Audit
Internal audit orderSubject to any regulations, the Superintendent may, in writing, order a designated operator to, within a specified period and in accordance with the order, conduct an internal audit of its practices, books and other records to determine whether the designated operator is in compliance with any provision of this Act or the regulations.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
ReportThe designated operator must comply with the order and provide to the Superintendent, within the period specified in the order, a report of the results of the audit, including, if the designated operator determines that there is non-compliance with any provision of this Act or the regulations, the nature of the non-compliance and any measures that have been taken or will be taken by the designated operator to comply with the provision.
Compliance Order
Power to order termination of contraventionIf the Superintendent believes on reasonable grounds that there is or is likely to be a contravention of any provision of this Act or the regulations, the Superintendent may order a designated operator tostop doing something that is or is likely to be in contravention of that provision or cause it to be stopped; ortake any measure that is necessary in order to comply with the requirements of that provision or to mitigate the effects of non-compliance.Time and mannerThe order must specify the time within which and the manner in which the designated operator may request a review of the order by the Superintendent.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
Compliance with orderA designated operator that is subject to an order made under section 36 must comply with it.Notification of complianceOnce the designated operator complies with the order, it must notify the Superintendent, without delay, of its compliance.
Request for reviewAn order that is made under section 36 must be reviewed by the Superintendent at the written request of the designated operator that is subject to the order.Contents and time for making requestThe request must be made within the time and in the manner specified in the order and state the grounds for review and set out the evidence that supports those grounds.Order in effectThe order continues to apply during a review unless the Superintendent decides otherwise.
Decision on completion of reviewOn completion of a review, the Superintendent must confirm, amend, revoke or cancel the order and provide notice of the decision to the designated operator and the reasons for it.Deemed decisionIf the Superintendent does not make a decision in respect of the request within 90 days after the day on which the request is received, or within any further period that is agreed on by the Superintendent and the designated operator, the Superintendent is deemed to have confirmed the order.
Minister of IndustryGeneral Provisions
Designation of inspectorsThe Minister of Industry may designate persons or classes of persons as inspectors for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations.Certificate of designationEach inspector must be provided with a certificate of designation in a form established by the Minister of Industry and, when entering any place under subsection 41(1), must, on request, produce the certificate to the person in charge of the place.
Authority to enter place — inspectorSubject to subsection 42(1), the inspector may, for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations, enter a place, including a conveyance, in which they have reasonable grounds to believe that an activity regulated under this Act is being conducted or any document, information or thing that is relevant to that purpose is located.Powers of entryFor the purpose referred to in subsection (1), the inspector mayexamine anything in the place;use any cyber system, or cause it to be used, for the purpose of examining, among other things, any information contained in or available to it;prepare a document, or cause one to be prepared, based on the information;examine any record, report, data or other document and make copies of it or take extracts from it;use any copying equipment in the place or cause it to be used; andremove any document, record or cyber system, or a portion of it, from the place for the purpose of examining it or copying it.Return of document, record or cyber systemIf the inspector removes any document, record or cyber system referred to in paragraph (2)(f), the inspector must return it to its owner or the person in charge of it, on completion of the examination or copying.Duty to assistEvery owner or person in charge of a place that is entered by the inspector and every person found in the place must give the inspector all reasonable assistance to enable the inspector to exercise the inspector’s powers or perform the inspector’s duties and functions under this Act and provide that inspector with any document or information, or access to any data, that the inspector may reasonably require.Persons accompanyingThe inspector may be accompanied by any other person that the inspector believes is necessary to help the inspector exercise the inspector’s powers or perform the inspector’s duties and functions under this section.Entering private propertyThe inspector and any person accompanying the inspector may enter and pass through private property, other than a dwelling-house on that property, in order to gain entry to a place referred to in subsection (1).
Dwelling-houseIn the case of a dwelling-house, the inspector is not authorized to enter it without the occupant’s consent except under the authority of a warrant issued under subsection (2).Authority to issue warrantA justice of the peace may, on ex parte application, issue a warrant authorizing the inspector named in it to enter a dwelling-house, subject to any conditions specified in the warrant, if the justice of the peace is satisfied by information on oath thatthe dwelling-house is a place referred to in subsection 41(1);entry to the dwelling-house is necessary for a purpose referred to in subsection 41(1); andentry to the dwelling-house was refused by the occupant or there are reasonable grounds to believe that it will be refused or to believe that consent to entry cannot be obtained from the occupant.Use of forceIn executing the warrant, the inspector is not entitled to use force unless the use of force has been specifically authorized in the warrant and they are accompanied by a peace officer.
Internal Audit
Internal audit orderSubject to any regulations, the Minister of Industry or a person designated by that Minister may, in writing, order a designated operator to, within a specified period and in accordance with the order, conduct an internal audit of its practices, books and other records to determine whether the designated operator is in compliance with any provision of this Act or the regulations.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
ReportThe designated operator must comply with the order and provide to the Minister of Industry or the person designated by that Minister, within the period specified in the order, a report of the results of the audit, including, if the designated operator determines that there is non-compliance with any provision of this Act or the regulations, the nature of the non-compliance and any measures that have been taken or will be taken by the designated operator to comply with the provision.
Compliance Order
Power to order termination of contraventionIf the Minister of Industry or a person designated by that Minister believes on reasonable grounds that there is or is likely to be a contravention of any provision of this Act or the regulations, they may order a designated operator tostop doing something that is or is likely to be in contravention of that provision or cause it to be stopped; ortake any measure that is necessary in order to comply with the requirements of that provision or to mitigate the effects of non-compliance.Time and mannerThe order must specify the time within which and the manner in which the designated operator may request a review of the order by the Minister of Industry.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
Compliance with orderA designated operator that is subject to an order made under section 45 must comply with it.Notification of complianceOnce the designated operator complies with the order, it must notify the Minister of Industry or the person designated by that Minister, without delay, of its compliance.
Request for reviewAn order that is made under section 45 must be reviewed by the Minister of Industry at the written request of the designated operator that is subject to the order.Contents and time for making requestThe request must be made within the time and in the manner specified in the order and state the grounds for review and set out the evidence that supports those grounds.Order in effectThe order continues to apply during a review unless the Minister of Industry decides otherwise.
Decision on completion of reviewOn completion of a review, the Minister of Industry must confirm, amend, revoke or cancel the order and provide notice of the decision to the designated operator and the reasons for it.Deemed decisionIf the Minister of Industry does not make a decision in respect of the request within 90 days after the day on which the request is received, or within any further period that is agreed on by the Minister of Industry and the designated operator, the Minister of Industry is deemed to have confirmed the order.
Bank of CanadaGeneral Provisions
DesignationThe Bank may designate persons or classes of persons for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations.Certificate of designationEach person designated under subsection (1) must be provided with a certificate of designation in a form established by the Bank and, when entering any place under subsection 50(1), must, on request, produce the certificate to the person in charge of the place.
Authority to enter place — designated personSubject to section 51, the person designated under subsection 49(1) may, for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations, enter a place, including a conveyance, in which they have reasonable grounds to believe that an activity regulated under this Act is being conducted or any document, information or thing that is relevant to that purpose is located.Powers of entryFor the purpose referred to in subsection (1), the person designated under subsection 49(1) mayexamine anything in the place;use any cyber system, or cause it to be used, for the purpose of examining, among other things, any information contained in or available to it;prepare a document, or cause one to be prepared, based on the information;examine any record, report, data or other document and make copies of it or take extracts from it;use any copying equipment in the place or cause it to be used; andremove any document, record or cyber system, or a portion of it, from the place for the purpose of examining it or copying it.Return of document, record or cyber systemIf the person designated under subsection 49(1) removes any document, record or cyber system referred to in paragraph (2)(f), the person so designated must return it to its owner or the person in charge of it, on completion of the examination or copying.Duty to assistEvery owner or person in charge of a place that is entered by the person designated under subsection 49(1) and every person found in the place must give the person designated under subsection 49(1) all reasonable assistance to enable them to exercise their powers or perform their duties and functions under this Act and provide that person designated under subsection 49(1) with any document or information, or access to any data, that they may reasonably require.Persons accompanyingThe person designated under subsection 49(1) may be accompanied by any other person that they believe is necessary to help them exercise their powers or perform their duties and functions under this section.Entering private propertyThe person designated under subsection 49(1) and any person accompanying the person so designated may enter and pass through private property, other than a dwelling-house on that property, in order to gain entry to a place referred to in subsection (1).
Dwelling-houseIn the case of a dwelling-house, the person designated under subsection 49(1) is not authorized to enter it without the occupant’s consent except under the authority of a warrant issued under subsection (2).Authority to issue warrantA justice of the peace may, on ex parte application, issue a warrant authorizing the person designated under subsection 49(1) and named in the warrant to enter a dwelling-house, subject to any conditions specified in the warrant, if the justice of the peace is satisfied by information on oath thatthe dwelling-house is a place referred to in subsection 50(1);entry to the dwelling-house is necessary for a purpose referred to in subsection 50(1); andentry to the dwelling-house was refused by the occupant or there are reasonable grounds to believe that it will be refused or to believe that consent to entry cannot be obtained from the occupant.Use of forceIn executing the warrant, the person designated under subsection 49(1) is not entitled to use force unless the use of force has been specifically authorized in the warrant and they are accompanied by a peace officer.
Internal Audit
Internal audit orderSubject to any regulations, the Bank may, in writing, order a designated operator to, within a specified period and in accordance with the order, conduct an internal audit of its practices, books and other records to determine whether the designated operator is in compliance with any provision of this Act or the regulations.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
ReportThe designated operator must comply with the order and provide to the Bank, within the period specified in the order, a report of the results of the audit, including, if the designated operator determines that there is non-compliance with any provision of this Act or the regulations, the nature of the non-compliance and any measures that have been taken or will be taken by the designated operator to comply with the provision.
Compliance Order
Power to order termination of contraventionIf a person designated by the Bank believes on reasonable grounds that there is or is likely to be a contravention of any provision of this Act or the regulations, the person so designated may order a designated operator tostop doing something that is or is likely to be in contravention of that provision or cause it to be stopped; ortake any measure that is necessary in order to comply with the requirements of that provision or to mitigate the effects of non-compliance.Time and mannerThe order must specify the time within which and manner in which the designated operator may request a review of the order by the person designated by the Bank.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
Compliance with orderA designated operator that is subject to an order made under section 54 must comply with it.Notification of complianceOnce the designated operator complies with the order, it must notify the person designated by the Bank referred to in subsection 54(1), without delay, of its compliance.
Request for reviewAn order that is made under section 54 must be reviewed by the Governor at the written request of the designated operator that is subject to the order.Contents and time for making requestThe request must be made within the time and in the manner specified in the order and state the grounds for review and set out the evidence that supports those grounds.Order in effectThe order continues to apply during a review unless the Governor decides otherwise.
Decision on completion of reviewOn completion of a review, the Governor must confirm, amend, revoke or cancel the order and provide notice of the decision to the designated operator and the reasons for it.Deemed decisionIf the Governor does not make a decision in respect of the request within 90 days after the day on which the request is received, or within any further period that is agreed on by the Governor and the designated operator, the Governor is deemed to have confirmed the order.
Canadian Nuclear Safety CommissionGeneral Provisions
DesignationThe Canadian Nuclear Safety Commission may designate persons or classes of persons for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations.Certificate of designationEach person designated under subsection (1) must be provided with a certificate of designation in a form established by the Canadian Nuclear Safety Commission and, when entering any place under subsection 59(1), must, on request, produce the certificate to the person in charge of the place.
Authority to enter place — designated personSubject to subsection 60(1), the person designated under subsection 58(1) may, for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations, enter a place, including a conveyance, in which they have reasonable grounds to believe that an activity regulated under this Act is being conducted or any document, information or thing that is relevant to that purpose is located.Powers of entryFor the purpose referred to in subsection (1), the person designated under subsection 58(1) mayexamine anything in the place;use any cyber system, or cause it to be used, for the purpose of examining, among other things, any information contained in or available to it;prepare a document, or cause one to be prepared, based on the information;examine any record, report, data or other document and make copies of it or take extracts from it;use any copying equipment in the place or cause it to be used; andremove any document, record or cyber system, or a portion of it, from the place for the purpose of examining it or copying it.Return of document, record or cyber systemIf the person designated under subsection 58(1) removes any document, record or cyber system referred to in paragraph (2)(f), the person so designated must return it to its owner or the person in charge of it, on completion of the examination or copying.Duty to assistEvery owner or person in charge of a place that is entered by the person designated under subsection 58(1) and every person found in the place must give the person designated under subsection 58(1) all reasonable assistance to enable them to exercise their powers or perform their duties and functions under this Act and provide them with any document or information, or access to any data, that they may reasonably require.Persons accompanyingThe person designated under subsection 58(1) may be accompanied by any other person that they believe is necessary to help them exercise their powers or perform their duties and functions under this section.Entering private propertyThe person designated under subsection 58(1) and any person accompanying the person so designated may enter and pass through private property, other than a dwelling-house on that property, in order to gain entry to a place referred to in subsection (1).
Dwelling-houseIn the case of a dwelling-house, the person designated under subsection 58(1) is not authorized to enter it without the occupant’s consent except under the authority of a warrant issued under subsection (2).Authority to issue warrantA justice of the peace may, on ex parte application, issue a warrant authorizing the person designated under subsection 58(1) and named in the warrant to enter a dwelling-house, subject to any conditions specified in the warrant, if the justice of the peace is satisfied by information on oath thatthe dwelling-house is a place referred to in subsection 59(1);entry to the dwelling-house is necessary for a purpose referred to in subsection 59(1); andentry to the dwelling-house was refused by the occupant or there are reasonable grounds to believe that it will be refused or to believe that consent to entry cannot be obtained from the occupant.Use of forceIn executing the warrant, the person designated under subsection 58(1) is not entitled to use force unless the use of force has been specifically authorized in the warrant and they are accompanied by a peace officer.
Internal Audit
Internal audit orderSubject to any regulations, the person designated under subsection 58(1) may, by order in writing, require a designated operator to, within a specified period and in accordance with the order, conduct an internal audit of its practices, books and other records to determine whether the designated operator is in compliance with any provision of this Act or the regulations.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.ReviewA person designated under subsection 58(1) must refer any order made under this section to the Canadian Nuclear Safety Commission for review and the Canadian Nuclear Safety Commission must confirm, amend or revoke the order.
ReportThe designated operator must comply with the order and provide to the person designated under subsection 58(1), within the period specified in the order, a report of the results of the audit, including, if the designated operator determines that there is non-compliance with any provision of this Act or the regulations, the nature of the non-compliance and any measures that have been taken or will be taken by the designated operator to comply with the provision.
Compliance Order
Power to order termination of contraventionIf the person designated under subsection 58(1) believes on reasonable grounds that there is or is likely to be a contravention of any provision of this Act or the regulations, the person so designated may, by order, require a designated operator tostop doing something that is or is likely to be in contravention of that provision or cause it to be stopped; ortake any measure that is necessary in order to comply with the requirements of that provision or to mitigate the effects of non-compliance.Time and mannerThe order must specify the time within which and manner in which the designated operator may request a review of the order by the Canadian Nuclear Safety Commission.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.ReviewA person designated under subsection 58(1) must refer any order made under this section to the Canadian Nuclear Safety Commission for review and the Canadian Nuclear Safety Commission must confirm, amend or revoke the order.
Compliance with orderA designated operator that is subject to an order made under section 63 must comply with it.Notification of complianceOnce the designated operator complies with the order, it must notify the person designated under subsection 58(1), without delay, of its compliance.
Request for reviewAn order that is made under section 63 must be reviewed by the Canadian Nuclear Safety Commission at the written request of the designated operator that is subject to the order.Contents and time for making requestThe request must be made within the time and in the manner specified in the order and state the grounds for review and set out the evidence that supports those grounds.Order in effectThe order continues to apply during a review unless the Canadian Nuclear Safety Commission decides otherwise.
Decision on completion of reviewOn completion of a review under subsection 65(1), the Canadian Nuclear Safety Commission must confirm, amend, revoke or cancel the order and provide notice of the decision to the designated operator and the reasons for it.Deemed decisionIf the Canadian Nuclear Safety Commission does not make a decision in respect of the request within 90 days after the day on which the request is received, or within any further period that is agreed on by the Canadian Nuclear Safety Commission and the designated operator, the Canadian Nuclear Safety Commission is deemed to have confirmed the order.
Canadian Energy RegulatorGeneral Provisions
Designation of inspection officersThe Chief Executive Officer may designate persons or classes of persons as inspection officers for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations.Certificate of designationEach inspection officer must be provided with a certificate of designation in a form established by the Canadian Energy Regulator and, when entering any place under subsection 68(1), must, on request, produce the certificate to the person in charge of the place.
Authority to enter place — inspection officerSubject to subsection 69(1), the inspection officer may, for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations, enter a place, including a conveyance, in which they have reasonable grounds to believe that an activity regulated under this Act is being conducted or any document, information or thing that is relevant to that purpose is located.Powers of entryFor the purpose referred to in subsection (1), the inspection officer mayexamine anything in the place;use any cyber system, or cause it to be used, for the purpose of examining, among other things, any information contained in or available to it;prepare a document, or cause one to be prepared, based on the information;examine any record, report, data or other document and make copies of it or take extracts from it;use any copying equipment in the place or cause it to be used; andremove any document, record or cyber system, or a portion of it, from the place for the purpose of examining it or copying it.Return of document, record or cyber systemIf the inspection officer removes any document, record or cyber system referred to in paragraph (2)(f), the inspection officer must return it to its owner or the person in charge of it, on completion of the examination or copying.Duty to assistEvery owner or person in charge of a place that is entered by the inspection officer and every person found in the place must give the officer all reasonable assistance to enable the officer to exercise the officer’s powers or perform the officer’s duties and functions under this Act and provide that officer with any document or information, or access to any data, that the officer may reasonably require.Persons accompanyingThe inspection officer may be accompanied by any other person that the inspection officer believes is necessary to help the inspection officer exercise the inspection officer’s powers or perform the inspection officer’s duties and functions under this section.Entering private propertyThe inspection officer and any person accompanying the inspection officer may enter and pass through private property, other than a dwelling-house on that property, in order to gain entry to a place referred to in subsection (1).
Dwelling-houseIn the case of a dwelling-house, the inspection officer is not authorized to enter it without the occupant’s consent except under the authority of a warrant issued under subsection (2).Authority to issue warrantA justice of the peace may, on ex parte application, issue a warrant authorizing the inspection officer named in it to enter a dwelling-house, subject to any conditions specified in the warrant, if the justice of the peace is satisfied by information on oath thatthe dwelling-house is a place referred to in subsection 68(1);entry to the dwelling-house is necessary for a purpose referred to in subsection 68(1); andentry to the dwelling-house was refused by the occupant or there are reasonable grounds to believe that it will be refused or to believe that consent to entry cannot be obtained from the occupant.Use of forceIn executing the warrant, the inspection officer is not entitled to use force unless the use of force has been specifically authorized in the warrant and they are accompanied by a peace officer.
Internal Audit
Internal audit orderSubject to any regulations, an inspection officer who is expressly authorized by the Chief Executive Officer to make orders under this section may, by order in writing, require a designated operator to, within a specified period and in accordance with the order, conduct an internal audit of its practices, books and other records to determine whether the designated operator is in compliance with any provision of this Act or the regulations.Notice and reportThe inspection officer who makes an order under this section must, as soon as possible, report the circumstances and terms of the order to the Commission.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
ReportThe designated operator must comply with the order and provide to the inspection officer within the period specified in the order, a report of the results of the audit, including, if the designated operator determines that there is non-compliance with any provision of this Act or the regulations, the nature of the non-compliance and any measures that have been taken or will be taken by the designated operator to comply with the provision.
Notice of Non-Compliance
Notice of non-complianceIf an inspection officer has reasonable grounds to believe that a designated operator or other person has contravened any provision of this Act or the regulations made under this Act, the inspection officer may issue a notice of non-compliance to the designated operator or other person.Contents of noticeThe notice of non-compliance must be made in writing and must set outthe name of the designated operator or other person to which the notice is directed;the provision of this Act or of the regulations made under it that is alleged to have been contravened or the order or decision that is alleged to have been contravened;the relevant facts surrounding the alleged contravention; andthe period within which the designated operator or other person may provide comments in response to the notice.
Compliance Order
Power to order termination of contraventionIf the inspection officer who is expressly authorized by the Chief Executive Officer to make orders under this section believes on reasonable grounds that there is or is likely to be a contravention of any provision of this Act or the regulations, the inspection officer may order a designated operator tostop doing something that is or is likely to be in contravention of that provision or cause it to be stopped; ortake any measure that is necessary in order to comply with the requirements of that provision or to mitigate the effects of non-compliance.Time and mannerThe order may specify the time within which and the manner in which the designated operator may request a review of the order by the Commission.Notice and reportAn inspection officer who makes an order under this section must, as soon as possible,notify, in writing, the designated operator of the terms of the order and the reasons for the order; andreport the circumstances and terms of the order to the Commission.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
Compliance with orderA designated operator that is subject to an order made under section 73 must comply with it.Notification of complianceOnce the designated operator complies with the order, it must notify the inspection officer, without delay, of its compliance.
Powers of CommissionThe Commission may designate persons or classes of persons to conduct reviews under this section.Request for reviewAn order that is made under section 73 must be reviewed by the Commission or the person designated under subsection (1) at the written request of the designated operator that is subject to the order.Contents and time for making requestThe request must be made within the time and in the manner specified in the order, if any, and state the grounds for review and set out the evidence that supports those grounds.Order in effectThe order continues to apply during a review unless the Commission or the person designated under subsection (1) decides otherwise.
Decision on completion of reviewOn completion of a review, the Commission or the person designated under subsection 75(1) must confirm, amend, revoke or cancel the order and provide notice of the decision to the designated operator and the reasons for it.Deemed decisionIf the Commission or the person designated under subsection 75(1) does not make a decision in respect of the request within 90 days after the day on which the request is received, or within any further period that is agreed on by the Commission or the person designated under subsection 75(1) and the designated operator, the Commission or the person designated under subsection 75(1) is deemed to have confirmed the order.
Minister of TransportGeneral Provisions
DelegationThe Minister of Transport may delegate, subject to any restrictions or limitations that the Minister of Transport may specify, any of the Minister of Transport’s powers, duties and functions under this Act — other than the power to delegate under this section — to any person or class of persons.
Authority to enter place — Minister of TransportSubject to section 79, the Minister of Transport may, for the purpose of verifying compliance or preventing non-compliance with any provision of this Act or the regulations, enter a place, including a conveyance, in which the Minister of Transport has reasonable grounds to believe that an activity regulated under this Act is being conducted or any document, information or thing that is relevant to that purpose is located.Powers of entryFor the purpose referred to in subsection (1), the Minister of Transport mayexamine anything in the place;use any cyber system, or cause it to be used, for the purpose of examining, among other things, any information contained in or available to it;prepare a document, or cause one to be prepared, based on the information;examine any record, report, data or other document and make copies of it or take extracts from it;use any copying equipment in the place or cause it to be used; andremove any document, record or cyber system, or a portion of it, from the place for the purpose of examining it or copying it.Return of document, record or cyber systemIf the Minister of Transport removes any document, record or cyber system referred to in paragraph (2)(f), the Minister of Transport must return it to its owner or the person in charge of it, on completion of the examination or copying.Duty to assistEvery owner or person in charge of a place that is entered by the Minister of Transport and every person found in the place must give the Minister of Transport all reasonable assistance to enable the Minister of Transport to exercise the Minister of Transport’s powers or perform the Minister of Transport’s duties and functions under this Act and provide that Minister with any document or information, or access to any data, that the Minister of Transport may reasonably require.Persons accompanyingThe Minister of Transport may be accompanied by any other person that the Minister of Transport believes is necessary to help the Minister of Transport exercise the Minister of Transport’s powers or perform the Minister of Transport’s duties and functions under this section.Entering private propertyThe Minister of Transport and any person accompanying the Minister of Transport may enter and pass through private property, other than a dwelling-house on that property, in order to gain entry to a place referred to in subsection (1).
Dwelling-houseIn the case of a dwelling-house, the Minister of Transport is not authorized to enter it without the occupant’s consent except under the authority of a warrant issued under subsection (2).Authority to issue warrantA justice of the peace may, on ex parte application, issue a warrant authorizing the Minister of Transport to enter a dwelling-house, subject to any conditions specified in the warrant, if the justice of the peace is satisfied by information on oath thatthe dwelling-house is a place referred to in subsection 78(1);entry to the dwelling-house is necessary for a purpose referred to in subsection 78(1); andentry to the dwelling-house was refused by the occupant or there are reasonable grounds to believe that it will be refused or to believe that consent to entry cannot be obtained from the occupant.Use of forceIn executing the warrant, the Minister of Transport is not entitled to use force unless the use of force has been specifically authorized in the warrant and they are accompanied by a peace officer.
Internal Audit
Internal audit orderSubject to any regulations, the Minister of Transport may, in writing, order a designated operator to, within a specified period and in accordance with the order, conduct an internal audit of its practices, books and other records to determine whether the designated operator is in compliance with any provision of this Act or the regulations.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
ReportThe designated operator must comply with an order and provide to the Minister of Transport, within the period specified in the order, a report of the results of the audit, including, if the designated operator determines that there is non-compliance with any provision of this Act or the regulations, the nature of the non-compliance and any measures that have been taken or will be taken by the designated operator to comply with the provision.
Compliance Order
Power to order termination of contraventionIf the Minister of Transport believes on reasonable grounds that there is or is likely to be a contravention of any provision of this Act or the regulations, the Minister of Transport may order a designated operator tostop doing something that is or is likely to be in contravention of that provision or cause it to be stopped; ortake any measure that is necessary in order to comply with the requirements of that provision or to mitigate the effects of non-compliance.Time and mannerThe order must specify the time within which and the manner in which the designated operator may request a review of the order by the Minister of Transport.Exemption from Statutory Instruments ActAn order made under subsection (1) is exempt from the application of the Statutory Instruments Act.
Compliance with orderA designated operator that is subject to an order made under section 82 must comply with it.Notification of complianceOnce the designated operator complies with the order, it must notify the Minister of Transport, without delay, of its compliance.
Request for reviewAn order that is made under section 82 must be reviewed by the Minister of Transport at the written request of the designated operator that is subject to the order.Contents and time for making requestThe request must be made within the time and in the manner specified in the order and state the grounds for review and set out the evidence that supports those grounds.Order in effectThe order continues to apply during a review unless the Minister of Transport decides otherwise.
Decision on completion of reviewOn completion of a review, the Minister of Transport must confirm, amend, revoke or cancel the order and provide notice of the decision to the designated operator and the reasons for it.Deemed decisionIf the Minister of Transport does not make a decision in respect of the request within 90 days after the day on which the request is received, or within any further period that is agreed on by the Minister of Transport and the designated operator, the Minister of Transport is deemed to have confirmed the order.
General Provisions
ObstructionA person must not obstruct or hinder the Superintendent, inspector, person designated under subsection 49(1) or 58(1), inspection officer or Minister of Transport, as the case may be, in exercising their powers or performing their duties and functions under this Act.
Providing false or misleading informationA person must not, with respect to any matter related to this Act, knowinglyprovide any person with false or misleading information; orprovide any incident report that contains false or misleading information.
Administrative Monetary PenaltiesGeneral Provisions
Definition of penaltyIn sections 89 to 135, penalty means an administrative monetary penalty imposed under those sections for a violation.
Purpose of penaltyThe purpose of a penalty is to promote compliance with this Act and not to punish.
ViolationEvery designated operator or other person that contravenes or fails to comply with a provision of this Act or of the regulations made under this Act — designated by regulations made under paragraph 135(1)(f) — commits a violation and is liable to a penalty of an amount to be determined in accordance with this Act and the regulations.
PenaltyThe amount that may be fixed under any regulations made under paragraph 135(1)(h) as the penalty for a violation must not be more than$500,000, in the case of an individual; and$15,000,000, in any other case.
Due diligence availableDue diligence is a defence in a proceeding in relation to a violation.Common law principlesEvery rule and principle of the common law that renders any circumstance a justification or excuse in relation to a charge for an offence under this Act applies in respect of a violation to the extent that it is not inconsistent with this Act.
Liability of directors or officersIf a designated operator commits a violation, any director or officer of the designated operator that directed, authorized, assented to, acquiesced in or participated in the commission of the violation is a party to the violation and is liable to a penalty of an amount to be determined in accordance with this Act and the regulations, whether or not the designated operator has been proceeded against in accordance with this Act.
Continuing violationA violation that is committed or continued on more than one day constitutes a separate violation in respect of each day on which it is committed or continued.
Violation or offenceProceeding with any act or omission as a violation under this Act precludes proceeding with it as an offence under this Act, and proceeding with it as an offence under this Act precludes proceeding with it as a violation under this Act.Violations not offencesFor greater certainty, a violation is not an offence and, accordingly, section 126 of the Criminal Code does not apply in respect of a violation.
Limitation period or prescriptionProceedings in respect of a violation must not be commenced later than three years after the subject-matter of the proceedings became known to the appropriate regulator.
Debts to His MajestyA penalty and any interest due in respect of the penalty constitute a debt due to His Majesty in right of Canada and may be recovered in the Federal Court or any other court of competent jurisdiction.Limitation period or prescriptionProceedings to recover the debt must not be commenced after the period of five years that begins on the day on which the debt became payable.Proceeds payable to Receiver GeneralA penalty paid or recovered under this Act is payable to and must be remitted to the Receiver General.
Certificate of defaultThe unpaid amount of any debt referred to in subsection 97(1) may be certified bythe appropriate regulator; orif the appropriate regulator is the Minister of Transport, by the Tribunal.RegistrationRegistration in the Federal Court or in any other court of competent jurisdiction of a certificate issued under subsection (1) has the same force and effect as a judgment of that court for a debt of the amount specified in the certificate and all related registration costs.
Superintendent of Financial InstitutionsGeneral Provisions
Notice of violation — SuperintendentIf the Superintendent has reasonable grounds to believe that a designated operator or other person has committed a violation, the Superintendent may issue a notice of violation to the designated operator or other person. If a notice of violation is issued, the Superintendent must cause it to be served on the designated operator or other person.Contents of notice of violationThe notice of violation must name the designated operator or other person that is alleged to have committed the violation, identify the alleged violation and set outthe penalty for the violation that the designated operator or other person is liable to pay;the right of the designated operator or other person, within 30 days after the notice is served or within any longer period that the Superintendent specifies, to pay the penalty or to make representations to the Superintendent with respect to the violation or the proposed penalty, or both, and the manner for doing so; andthe fact that, if the designated operator or other person does not pay the penalty or make representations in accordance with the notice, the designated operator or other person will be deemed to have committed the violation and be liable to the penalty set out in the notice.Correction or cancellation of notice of violationAt any time before the designated operator or other person makes representations in respect of a notice of violation to the Superintendent or enters into a compliance agreement with the Superintendent, the Superintendent may cancel the notice of violation or correct an error in it.
PenaltyThe penalty for a violation is to be determined by taking into accountthe designated operator’s or other person’s history of compliance or non-compliance with the provisions of this Act or of the regulations;the nature and scope of the violation;whether the designated operator or other person made reasonable efforts to mitigate or reverse the effects of the violation;whether the designated operator or other person derived any competitive or economic benefit from the violation;any other factors prescribed by the regulations; andany other factors that the Superintendent considers relevant.
PaymentIf the designated operator or other person named in the notice of violation pays the penalty set out in the notice, they are deemed to have committed the violation and the proceedings commenced in respect of the violation are ended.AlternativesInstead of paying the penalty set out in the notice, the designated operator or other person named in the notice may, in accordance with the notice,make representations to the Superintendent in respect of the alleged violation or of the penalty; orif the Superintendent offers a compliance agreement, enter into the compliance agreement with the Superintendent to ensure the designated operator’s or other person’s compliance with the provision to which the violation relates.
Representation to SuperintendentThe Superintendent must decide, on a balance of probabilities, after considering any representations made under paragraph 101(2)(a), whether the designated operator or other person committed the violation and, if the Superintendent so decides, the Superintendent may, subject to the regulations made under paragraph 135(1)(h), impose the penalty set out in the notice, a lesser penalty or no penalty.DecisionThe Superintendent must render a decision in writing, including reasons for it and must serve a copy of the decision on the designated operator or other person.Responsibility to pay penaltyIf the Superintendent decides that the designated operator or other person committed the violation, the designated operator or other person is liable to the penalty as set out in the decision.Effect of paymentIf the designated operator or other person pays the penalty set out in the decision, the Superintendent must accept the amount as complete satisfaction of the penalty in respect of the violation and the proceedings commenced in respect of the violation are ended.Violation not committed — effectIf the Superintendent decides that the designated operator or other person did not commit the violation, the proceedings commenced in respect of the violation are ended.
Compliance Agreements
Entering into compliance agreementsIf the Superintendent offers to enter into a compliance agreement with the designated operator or other person, the agreement is subject to any terms that the Superintendent considers appropriate, including the reduction, in whole or in part, of the penalty for the violation.RepresentationsIf a compliance agreement is entered into, the designated operator or other person cannot make any representations under paragraph 101(2)(a).DeemingA designated operator or other person that enters into a compliance agreement with the Superintendent is deemed to have committed the violation in respect of which the compliance agreement was entered into.Notice of complianceIf the Superintendent is of the opinion that a designated operator or other person that has entered into a compliance agreement has complied with it, the Superintendent must serve a notice to that effect on the designated operator or other person and, on the service of the notice, the proceedings commenced in respect of the violation are ended.Notice of defaultIf the Superintendent is of the opinion that a designated operator or other person that has entered into a compliance agreement has not complied with it, the Superintendent must cause the designated operator or other person to be served with a notice of default informing them thatthey are liable to pay, within the time and in the manner set out in the notice of default, the penalty set out in the notice of violation in respect of which the compliance agreement was entered into, less any amount they paid under the compliance agreement; andthe Superintendent may make public the designated operator’s or other person’s name, the nature of the violation, the scope of the non-compliance with the compliance agreement and the penalty payable.Effect of paymentIf a designated operator or other person pays the penalty set out in the notice of default within the time and in the manner set out in that notice, the Superintendent must accept the amount as complete satisfaction of the penalty owing in respect of the violation and the proceedings commenced in respect of the violation are ended.
Minister of IndustryGeneral Provisions
DesignationThe Minister of Industry may designate persons or classes of persons who are authorized to issue notices of violation and to enter into a compliance agreement with a designated operator.
Notice of violation — designated personIf a person designated under section 104 has reasonable grounds to believe that a designated operator or other person has committed a violation, the person so designated may issue a notice of violation to the designated operator or other person. If a notice of violation is issued, the person designated under section 104 must cause it to be served on the designated operator or other person.Contents of notice of violationThe notice of violation must name the designated operator or other person that is alleged to have committed the violation, identify the alleged violation and set outthe penalty for the violation that the designated operator or other person is liable to pay;the right of the designated operator or other person, within 30 days after the notice is served or within any longer period that the person designated under section 104 specifies, to pay the penalty or to make representations to the Minister of Industry with respect to the violation or the proposed penalty, or both, and the manner for doing so; andthe fact that, if the designated operator or other person does not pay the penalty or make representations in accordance with the notice, the designated operator or other person will be deemed to have committed the violation and be liable to the penalty set out in the notice.Correction or cancellation of notice of violationAt any time before the designated operator or other person makes representations in respect of a notice of violation to the Minister of Industry or enters into a compliance agreement with the person designated under section 104, the person so designated may cancel the notice of violation or correct an error in it.
PenaltyThe penalty for a violation is to be determined by taking into accountthe designated operator’s or other person’s history of compliance or non-compliance with the provisions of this Act or of the regulations;the nature and scope of the violation;whether the designated operator or other person made reasonable efforts to mitigate or reverse the effects of the violation;whether the designated operator or other person derived any competitive or economic benefit from the violation;any other factors prescribed by the regulations; andany other factors that the person designated under section 104 who issued the notice of violation considers relevant.
PaymentIf the designated operator or other person named in the notice of violation pays the penalty set out in the notice, they are deemed to have committed the violation and the proceedings commenced in respect of the violation are ended.AlternativesInstead of paying the penalty set out in the notice, the designated operator or other person named in the notice may, in accordance with the notice,make representations to the Minister of Industry in respect of the alleged violation or of the penalty; orif the person designated under section 104 offers a compliance agreement, enter into the compliance agreement with the person so designated to ensure the designated operator’s or other person’s compliance with the provision to which the violation relates.
RepresentationThe Minister of Industry must decide, on a balance of probabilities, after considering any representations made under paragraph 107(2)(a), whether the designated operator or other person committed the violation and, if that Minister so decides, that Minister may, subject to the regulations made under paragraph 135(1)(h), impose the penalty set out in the notice, a lesser penalty or no penalty.DecisionThe Minister of Industry must render a decision in writing, including reasons for it and must serve a copy of the decision on the designated operator or other person.Responsibility to pay penaltyIf the Minister of Industry determines that the designated operator or other person committed the violation, the designated operator or other person is liable to the penalty as set out in the decision.Effect of paymentIf the designated operator or other person pays the penalty set out in the decision, the Minister of Industry must accept the amount as complete satisfaction of the penalty in respect of the violation and the proceedings commenced in respect of the violation are ended.Violation not committed — effectIf the Minister of Industry determines that the designated operator or other person did not commit the violation, the proceedings commenced in respect of it are ended.
Compliance Agreements
Entering into compliance agreementsIf the person designated under section 104 offers to enter into a compliance agreement with the designated operator or other person, the agreement is subject to any terms that the person so designated considers appropriate, including the reduction, in whole or in part, of the penalty for the violation.RepresentationsIf a compliance agreement is entered into, the designated operator or other person cannot make any representations under paragraph 107(2)(a).DeemingA designated operator or other person that enters into a compliance agreement with the person designated under section 104 is deemed to have committed the violation in respect of which the compliance agreement was entered into.Notice of complianceIf the person designated under section 104 is of the opinion that a designated operator or other person that has entered into a compliance agreement has complied with it, the person so designated must serve a notice to that effect on the designated operator or other person and, on the service of the notice, the proceedings commenced in respect of the violation are ended.Notice of defaultIf the person designated under section 104 is of the opinion that a designated operator or other person that has entered into a compliance agreement has not complied with it, the person so designated must cause the designated operator or other person to be served with a notice of default informing them thatthey are liable to pay, within the time and in the manner set out in the notice of default, the penalty set out in the notice of violation in respect of which the compliance agreement was entered into, less any amount they paid under the compliance agreement; andthe Minister of Industry may make public the designated operator’s or other person’s name, the nature of the violation, the scope of the non-compliance with the compliance agreement and the penalty payable.Effect of paymentIf a designated operator or other person pays the amount set out in the notice of default within the time and in the manner specified in that notice, the Minister of Industry must accept the amount as complete satisfaction of the amount owing in respect of the violation and the proceedings commenced in respect of the violation are ended.
Bank of CanadaGeneral Provisions
Notice of violation — BankIf the Bank has reasonable grounds to believe that a designated operator or other person has committed a violation, the Bank may issue a notice of violation to the designated operator or other person. If a notice of violation is issued, the Bank must cause it to be served on the designated operator or other person.Contents of notice of violationThe notice of violation must name the designated operator or other person, identify the alleged violation and set outthe penalty for the violation that the designated operator or other person is liable to pay;the right of the designated operator or other person, within 30 days after the notice is served or within any longer period that the Bank specifies, to pay the penalty or to make representations to the Governor with respect to the violation or the proposed penalty, or both, and the manner for doing so; andthe fact that, if the designated operator or other person does not pay the penalty or make representations in accordance with the notice, the designated operator or other person will be deemed to have committed the violation and be liable to the penalty set out in the notice.Correction or cancellation of notice of violationAt any time before the designated operator or other person makes representations in respect of a notice of violation to the Governor or enters into a compliance agreement with the Bank, the Bank may cancel the notice of violation or correct an error in it.
PenaltyThe penalty for a violation is to be determined by taking into accountthe designated operator’s or other person’s history of compliance or non-compliance with the provisions of this Act or of the regulations;the nature and scope of the violation;whether the designated operator or other person made reasonable efforts to mitigate or reverse the effects of the violation;whether the designated operator or other person derived any competitive or economic benefit from the violation;any other factor prescribed by the regulations; andany other factors that the Bank considers relevant.
PaymentIf the designated operator or other person named in the notice of violation pays the penalty set out in the notice, they are deemed to have committed the violation and the proceedings commenced in respect of the violation are ended.AlternativesInstead of paying the penalty set out in the notice, the designated operator or other person named in the notice may, in accordance with the notice,make representations to the Governor in respect of the alleged violation or of the penalty; orif the Bank offers a compliance agreement, enter into the compliance agreement with the Bank to ensure the designated operator’s or other person’s compliance with the provision to which the violation relates.
Representation to GovernorThe Governor must decide, on a balance of probabilities, after considering any representations made under paragraph 112(2)(a), whether the designated operator or other person committed the violation and, if the Governor so decides, the Governor may, subject to the regulations made under paragraph 135(1)(h), impose the penalty set out in the notice, a lesser penalty or no penalty.DecisionThe Governor must render a decision in writing, including reasons for it and the Bank must serve a copy of the decision on the designated operator or other person.Responsibility to pay penaltyIf the Governor decides that the designated operator or other person committed the violation, the designated operator or other person is liable to the penalty as set out in the decision.Effect of paymentIf the designated operator or other person pays the penalty set out in the decision, the Bank must accept the amount as complete satisfaction of the penalty in respect of the violation and the proceedings commenced in respect of the violation are ended.Violation not committed — effectIf the Governor decides that the designated operator or other person did not commit the violation, the proceedings commenced in respect of it are ended.
Compliance Agreements
Entering into compliance agreementsIf the Bank offers to enter into a compliance agreement with the designated operator or other person, the agreement is subject to any terms that the Bank considers appropriate, including the reduction, in whole or in part, of the penalty for the violation.RepresentationsIf a compliance agreement is entered into, the designated operator or other person cannot make any representations under paragraph 112(2)(a).DeemingA designated operator or other person that enters into a compliance agreement with the Bank is deemed to have committed the violation in respect of which the compliance agreement was entered into.Notice of complianceIf the Bank is of the opinion that a designated operator or other person that has entered into a compliance agreement has complied with it, the Bank must serve a notice to that effect on the designated operator or other person and, on the service of the notice, the proceedings commenced in respect of the violation are ended.Notice of defaultIf the Bank is of the opinion that a designated operator or other person that has entered into a compliance agreement has not complied with it, the Bank must cause the designated operator or other person to be served with a notice of default informing them thatthey are liable to pay, within the time and in the manner set out in the notice of default, the penalty set out in the notice of violation in respect of which the compliance agreement was entered into, less any amount they paid under the compliance agreement; andthe Bank may make public the designated operator’s or other person’s name, the nature of the violation, the scope of the non-compliance with the compliance agreement and the penalty payable.Effect of paymentIf a designated operator or other person pays the amount set out in the notice of default within the time and in the manner specified in that notice, the Bank must accept the amount as complete satisfaction of the amount owing in respect of the violation and the proceedings commenced in respect of the violation are ended.
Canadian Nuclear Safety CommissionGeneral Provisions
DesignationThe Canadian Nuclear Safety Commission may designate persons or classes of persons who are authorized to issue notices of violation and to enter into a compliance agreement with a designated operator.
Notice of violation — designated personIf a person designated under section 115 has reasonable grounds to believe that a designated operator or other person has committed a violation, the person so designated may issue a notice of violation to the designated operator or other person. If a notice of violation is issued, the person so designated must cause it to be served on the designated operator or other person.Contents of notice of violationThe notice of violation must name the designated operator or other person that is alleged to have committed the violation, identify the alleged violation and set outthe penalty for the violation that the designated operator or other person is liable to pay;the right of the designated operator or other person, within 30 days after the notice is served or within any longer period that the person designated under section 115 specifies, to pay the penalty or to make representations to the Canadian Nuclear Safety Commission with respect to the violation or the proposed penalty, or both, and the manner for doing so; andthe fact that, if the designated operator or other person does not pay the penalty or make representations in accordance with the notice, the designated operator or other person will be deemed to have committed the violation and be liable to the penalty set out in the notice.Correction or cancellation of notice of violationAt any time before the designated operator or other person makes representations in respect of a notice of violation to the Canadian Nuclear Safety Commission or enters into a compliance agreement with the person designated under section 115, the person so designated may cancel the notice of violation or correct an error in it.
PenaltyThe penalty for a violation is to be determined by taking into accountthe designated operator’s or other person’s history of compliance or non-compliance with the provisions of this Act or of the regulations;the nature and scope of the violation;whether the designated operator or other person made reasonable efforts to mitigate or reverse the effects of the violation;whether the designated operator or other person derived any competitive or economic benefit from the violation;any other factor prescribed by the regulations; andany other factors that the person designated under section 115 who issued the notice of violation considers relevant.
PaymentIf the designated operator or other person named in the notice of violation pays the penalty set out in the notice, they are deemed to have committed the violation and the proceedings commenced in respect of the violation are ended.AlternativesInstead of paying the penalty set out in the notice, the designated operator or other person named in the notice may, in accordance with the notice,make representations to the Canadian Nuclear Safety Commission in respect of the alleged violation or of the penalty; orif the person designated under section 115 offers a compliance agreement, enter into the compliance agreement with the person so designated to ensure the designated operator’s or other person’s compliance with the provision to which the violation relates.
RepresentationThe Canadian Nuclear Safety Commission must decide, on a balance of probabilities, after considering any representations made under paragraph 118(2)(a), whether the designated operator or other person committed the violation and, if it so decides, it may, subject to the regulations made under paragraph 135(1)(h), impose the penalty set out in the notice, a lesser penalty or no penalty.DecisionThe Canadian Nuclear Safety Commission must render a decision in writing, including reasons for it and must serve a copy of the decision on the designated operator or other person.Responsibility to pay penaltyIf the Canadian Nuclear Safety Commission decides that the designated operator or other person committed the violation, the designated operator or other person is liable to the penalty as set out in the decision.Effect of paymentIf the designated operator or other person pays the penalty set out in the decision, the Canadian Nuclear Safety Commission must accept the amount as complete satisfaction of the penalty in respect of the violation and the proceedings commenced in respect of the violation are ended.Violation not committed — effectIf the Canadian Nuclear Safety Commission decides that the designated operator or other person did not commit the violation, the proceedings commenced in respect of it are ended.
Compliance Agreements
Entering into compliance agreementsIf the person designated under section 115 offers to enter into a compliance agreement with the designated operator or other person, the agreement is subject to any terms that the person so designated considers appropriate, including the reduction, in whole or in part, of the penalty for the violation.RepresentationsIf a compliance agreement is entered into, the designated operator or other person cannot make any representations under paragraph 118(2)(a).DeemingA designated operator or other person that enters into a compliance agreement with the person designated under section 115 is deemed to have committed the violation in respect of which the compliance agreement was entered into.Notice of complianceIf the person designated under section 115 is of the opinion that a designated operator or other person that has entered into a compliance agreement has complied with it, the person so designated must serve a notice to that effect on the designated operator or other person and, on the service of the notice, the proceedings commenced in respect of the violation are ended.Notice of defaultIf the person designated under section 115 is of the opinion that a designated operator or other person that has entered into a compliance agreement has not complied with it, the person so designated must cause the designated operator or other person to be served with a notice of default informing them thatthey are liable to pay, within the time and in the manner set out in the notice of default, the penalty set out in the notice of violation in respect of which the compliance agreement was entered into, less any amount they paid under the compliance agreement; andthe Canadian Nuclear Safety Commission may make public the designated operator’s or other person’s name, the nature of the violation, the scope of the non-compliance with the compliance agreement and the penalty payable.Effect of paymentIf a designated operator or other person pays the amount set out in the notice of default within the time and in the manner specified in that notice, the Canadian Nuclear Safety Commission must accept the amount as complete satisfaction of the amount owing in respect of the violation and the proceedings commenced in respect of the violation are ended.
Canadian Energy RegulatorGeneral Provisions
DesignationThe Chief Executive Officer may designate persons or classes of persons who are authorized to issue notices of violation and to enter into a compliance agreement with a designated operator.
Notice of violation — designated personIf a person designated under section 121 has reasonable grounds to believe that a designated operator or other person has committed a violation, the person so designated may issue a notice of violation to the designated operator or other person. If a notice of violation is issued, the person so designated must cause it to be served on the designated operator or other person.Contents of notice of violationThe notice of violation must name the designated operator or other person that is alleged to have committed the violation, identify the alleged violation and set outthe penalty for the violation that the designated operator or other person is liable to pay;the right of the designated operator or other person, within 30 days after the notice is served or within any longer period that the person designated under section 121 specifies, to pay the penalty or to make representations to the Commission with respect to the violation or the proposed penalty, or both, and the manner for doing so; andthe fact that, if the designated operator or other person does not pay the penalty or make representations in accordance with the notice, the designated operator or other person will be deemed to have committed the violation and be liable to the penalty set out in the notice.Correction or cancellation of notice of violationAt any time before the designated operator or other person makes representations in respect of a notice of violation to the Commission or enters into a compliance agreement with the person designated under section 121, the person so designated may cancel the notice of violation or correct an error in it.
PenaltyThe penalty for a violation is to be determined by taking into accountthe designated operator’s or other person’s history of compliance or non-compliance with the provisions of this Act or of the regulations;the nature and scope of the violation;whether the designated operator or other person made reasonable efforts to mitigate or reverse the effects of the violation;whether the designated operator or other person derived any competitive or economic benefit from the violation;any other factor prescribed by the regulations; andany other factors that the person designated under section 121 who issued the notice of violation considers relevant.
PaymentIf the designated operator or other person named in the notice of violation pays the penalty set out in the notice, they are deemed to have committed the violation and the proceedings commenced in respect of the violation are ended.AlternativesInstead of paying the penalty set out in the notice, the designated operator or other person named in the notice may, in accordance with the notice,make representations to the Commission in respect of the alleged violation or of the penalty; orif the person designated under section 121 offers a compliance agreement, enter into the compliance agreement with the person so designated to ensure the designated operator’s or other person’s compliance with the provision to which the violation relates.
Powers of CommissionThe Commission may designate persons or classes of persons to consider the representations made under paragraph 124(2)(a).Representation to CommissionThe Commission or the person designated under subsection (1) must decide, on a balance of probabilities, after considering any representations made under paragraph 124(2)(a), whether the designated operator or other person committed the violation and, if it so decides, it may, subject to the regulations made under paragraph 135(1)(h), impose the penalty set out in the notice, a lesser penalty or no penalty.DecisionThe Commission or the person designated under subsection (1) must render a decision in writing, including reasons for it and must serve a copy of the decision on the designated operator or other person.Responsibility to pay penaltyIf the Commission or the person designated under subsection (1) decides that the designated operator or other person committed the violation, the designated operator or other person is liable to the penalty as set out in the decision.Effect of paymentIf the designated operator or other person pays the penalty set out in the decision, the Commission or the person designated under subsection (1) must accept the amount as complete satisfaction of the penalty in respect of the violation and the proceedings commenced in respect of the violation are ended.Violation not committed — effectIf the Commission or the person designated under subsection (1) decides that the designated operator or other person did not commit the violation, the proceedings commenced in respect of it are ended.Federal CourtDespite section 28 of the Federal Courts Act, the Federal Court has exclusive original jurisdiction to hear and determine an application for judicial review of a decision made under this section by the Commission or the person designated under subsection (1).
Compliance Agreements
Entering into compliance agreementsIf the person designated under section 121 offers to enter into a compliance agreement with the designated operator or other person, the agreement is subject to any terms that the person so designated considers appropriate, including the reduction, in whole or in part, of the penalty for the violation.RepresentationsIf a compliance agreement is entered into, the designated operator or other person cannot make any representations under paragraph 124(2)(a).DeemingA designated operator or other person that enters into a compliance agreement with the person designated under section 121 is deemed to have committed the violation in respect of which the compliance agreement was entered into.Notice of complianceIf the person designated under section 121 is of the opinion that a designated operator or other person that has entered into a compliance agreement has complied with it, the person so designated must serve a notice to that effect on the designated operator or other person and, on the service of the notice, the proceedings commenced in respect of the violation are ended.Notice of defaultIf the person designated under section 121 is of the opinion that a designated operator or other person that has entered into a compliance agreement has not complied with it, the person designated under section 121 must cause the designated operator or other person to be served with a notice of default informing them thatthey are liable to pay, within the time and in the manner set out in the notice of default, the penalty set out in the notice of violation in respect of which the compliance agreement was entered into, less any amount they paid under the compliance agreement; andthe Canadian Energy Regulator may make public the designated operator’s or other person’s name, the nature of the violation, the scope of the non-compliance with the compliance agreement and the penalty payable.Effect of paymentIf a designated operator or other person pays the amount set out in the notice of default within the time and in the manner specified in that notice, the Canadian Energy Regulator must accept the amount as complete satisfaction of the amount owing in respect of the violation and the proceedings commenced in respect of the violation are ended.
Minister of TransportGeneral Provisions
Notice of violation — Minister of TransportIf the Minister of Transport has reasonable grounds to believe that a designated operator or other person has committed a violation, the Minister of Transport may issue a notice of violation to the designated operator or other person. If a notice of violation is issued, the Minister of Transport must cause it to be served on the designated operator or other person.Contents of notice of violationThe notice of violation must name the designated operator or other person that is alleged to have committed the violation, identify the alleged violation and set outthe penalty for the violation that the designated operator or other person is liable to pay;the right of the designated operator or other person, within 30 days after the notice is served or within any longer period that the Minister of Transport specifies, to pay the penalty and the manner for doing so;the right of the designated operator or other person, within 30 days after the notice is served or within any longer period that the Tribunal on application may allow, to file a request to review under paragraph 129(2)(a) with respect to the violation or the proposed penalty, or both; andthe fact that, if the designated operator or other person does not pay the penalty or file a request to review with the Tribunal in accordance with the notice, the designated operator or other person will be deemed to have committed the violation and be liable to the penalty set out in the notice.Correction or cancellation of notice of violationAt any time before the designated operator or other person files a request to review with the Tribunal under paragraph 129(2)(a) or enters into a compliance agreement with the Minister of Transport, the notice of violation may be canceled by the Minister of Transport or an error in it may be corrected.
PenaltyThe penalty for a violation is to be determined by taking into accountthe designated operator’s or other person’s history of compliance or non-compliance with the provisions of this Act or of the regulations;the nature and scope of the violation;whether the designated operator or other person made reasonable efforts to mitigate or reverse the effects of the violation;whether the designated operator or other person derived any competitive or economic benefit from the violation;any other factor prescribed by the regulations; andany other factors that the Minister of Transport considers relevant.
PaymentIf the designated operator or other person named in the notice of violation pays the penalty set out in the notice, they are deemed to have committed the violation and the proceedings commenced in respect of the violation are ended.AlternativesInstead of paying the penalty set out in the notice, the designated operator or other person named in the notice may, in accordance with the notice,file a request for a review with the Tribunal in respect of the alleged violation or of the penalty; orif the Minister of Transport offers a compliance agreement, enter into the compliance agreement with the Minister of Transport to ensure the designated operator’s or other person’s compliance with the provision to which the violation relates.
Time and place of reviewOn receipt of the request referred to in paragraph 129(2)(a), the Tribunal must appoint a time and place for the review and notify the Minister of Transport and the designated operator or other person who filed the request of the time and place in writing.Review procedureThe member of the Tribunal who is assigned to conduct the review must provide the Minister of Transport and the designated operator or other person that filed the request with an opportunity that is consistent with procedural fairness and natural justice to present evidence and make representations.Burden of proofThe Minister of Transport has the burden of establishing on a balance of probabilities that the designated operator or other person committed a violation.Designated operator or other person not compelled to testifyA designated operator or other person that is alleged to have committed a violation is not required to give any evidence or testimony in the matter.Disclosure of confidential informationFor the purpose of a review requested under paragraph 129(2)(a), the Minister of Transport or the designated operator or other person may disclose confidential information to the Tribunal.
Determination by Tribunal memberIn making a determination at the conclusion of a review, the member of the Tribunal who conducts the review must, without delay, inform the Minister of Transport and the designated operator or other personthat the designated operator or other person has not committed a violation, in which case no further proceedings under this Act are to be taken against the designated operator or other person in respect of the alleged violation; orthat the designated operator or other person has committed a violation, in which case the member must also inform the Minister of Transport and the designated operator or other person of the amount determined by the member, subject to section 128 and the regulations made under paragraph 135(1)(h), to be payable to the Tribunal by or on behalf of the designated operator or other person and the period within which it must be paid.
Right of appealWithin 30 days after a determination is made under section 131, the Minister of Transport or designated operator or other person affected by the determination may appeal the determination to the Tribunal.Loss of right of appealA party who does not appear at a review hearing is not entitled to appeal the determination, unless the party establishes that there was sufficient reason to justify their absence.Disposition of appealThe appeal panel of the Tribunal that is assigned to hear an appeal may dismiss it or allow it and, in allowing the appeal, may substitute its decision for the determination.Finding of violationIf the appeal panel finds that a designated operator or other person has committed a violation, the panel must immediately inform the designated operator or other person, as the case may be, and the Minister of Transport of the finding and, subject to any regulations made under paragraph 135(1)(h), of the amount determined by the panel to be payable to the Tribunal by or on behalf of the designated operator or other person, as the case may be, in respect of the violation and the time within which it must be paid.Finding of no violationIf the appeal panel finds that a designated operator or other person has not committed a violation, the panel must immediately inform the designated operator or other person, as the case may be, and the Minister of Transport of the finding.
CertificateThe Minister of Transport may obtain from the Tribunal or the member, as the case may be, a certificate in the form established by the Governor in Council setting out the penalty required to be paid by the designated operator or other person that fails, within the time required,to pay the penalty set out in the notice of violation or to file a request for a review under paragraph 129(2)(a); orto pay the amount determined under paragraph 131(b).
Compliance Agreements
Entering into compliance agreementsIf the Minister of Transport offers to enter into a compliance agreement with the designated operator or other person, the agreement is subject to any terms that the Minister of Transport considers appropriate, including the reduction, in whole or in part, of the penalty for the violation.Filing requestIf a compliance agreement is entered into, the designated operator or other person cannot file a request for a review under paragraph 129(2)(a).DeemingA designated operator or other person that enters into a compliance agreement with the Minister of Transport is deemed to have committed the violation in respect of which the compliance agreement was entered into.Notice of complianceIf the Minister of Transport is of the opinion that a designated operator or other person that has entered into a compliance agreement has complied with it, the Minister of Transport must serve a notice to that effect on the designated operator or other person and, on the service of the notice, the proceedings commenced in respect of the violation are ended.Notice of defaultIf the Minister of Transport is of the opinion that a designated operator or other person that has entered into a compliance agreement has not complied with it, the Minister of Transport must cause the designated operator to be served with a notice of default informing them thatthey are liable to pay, within the time and in the manner set out in the notice of default, the penalty set out in the notice of violation in respect of which the compliance agreement was entered into, less any amount they paid under the compliance agreement; andthe Minister of Transport may make public the designated operator’s or other person’s name, the nature of the violation, the scope of the non-compliance with the compliance agreement and the penalty payable.Effect of paymentIf a designated operator or other person pays the penalty set out in the notice of default within the time and in the manner set out in that notice, the Minister of Transport must accept the amount as complete satisfaction of the penalty owing in respect of the violation and the proceedings commenced in respect of the violation are ended.
Regulations
RegulationsThe Governor in Council may make regulations for carrying out the purposes and provisions of this Act, including regulationsrespecting cyber security programs;respecting any condition and criteria respecting internal audits;respecting the form, manner and period for reporting any cyber security incidents referred to in section 17 and the types of incidents that must be reported;respecting the period within which a notification referred to under subsection 14(1) is to be provided;respecting the management of records referred to in section 30, including the collection, use, retention, disclosure and disposal of those records;designating any provision of this Act or of the regulations made under this Act for the purposes of section 90;classifying each violation as a minor violation, a serious violation or a very serious violation;fixing the maximum penalty in respect of each violation;defining, for the purposes of this Act, any word or expression that is used in this Act but is not defined; andprescribing anything that is to be prescribed under this Act.Consistency with regulatory and standards regimesIn making regulations under subsection (1), the Governor in Council must, to the extent possible, ensure consistency with existing regulatory and standards regimes, such as those established by provincial regulatory agencies or recognized industry standards development organizations.Other regulatory or standards regimesIn making regulations under subsection (1), the Governor in Council may provide that compliance with a requirement under a regulatory or standards regime referred to in subsection (2) is deemed to be compliance with any corresponding requirement under this Act.
Offences
Summary offencesEvery person who contravenes section 10, subsection 13(1) or 14(1), section 17 or 18, subsection 30(1) or (2) or 32(4), section 35, subsection 37(1) or 41(4), section 44, subsection 46(1) or 50(4), section 53, subsection 55(1) or 59(4), section 62, subsection 64(1) or 68(4), section 71, subsection 74(1) or 78(4), section 81 or subsection 83(1) is guilty of an offence punishable on summary conviction.Offence and punishment — section 29Every person, partnership or unincorporated organization that contravenes section 29 is guilty of an offence punishable on summary conviction.
Offence and punishmentEvery person who contravenes subsection 9(1), section 12 or 15, subsection 20(4), section 24, subsection 25(2), section 26 or 86 or paragraph 87(a) or (b) is guilty of an offence and liableon summary convictionin the case of an individual, to a fine in an amount that is in the discretion of the court or to imprisonment for a term of not more than two years less a day, or to both, andin the case of a corporation, to a fine in an amount that is in the discretion of the court; oron conviction on indictmentin the case of an individual, to a fine in an amount that is in the discretion of the court or to imprisonment for a term of not more than five years, or to both, andin the case of a corporation, to a fine in an amount that is in the discretion of the court.
Liability of directors or officersIf a designated operator commits an offence under this Act, any director or officer of the designated operator that directed, authorized, assented to, acquiesced in or participated in the commission of the offence is a party to the offence and is liable on conviction to the punishment provided for by this Act, even if the designated operator is not prosecuted for or convicted of the offence.
Continuing offenceIf an offence under section 136 or 137 is committed or continued on more than one day, it constitutes a separate offence for each day on which the offence is committed or continued.
Limitation period or prescriptionA prosecution must not be commenced in respect of an offence under this Act later than three years after the day on which the subject matter of the prosecution arose.
Due diligence defenceA person, partnership or unincorporated organization is not to be found guilty of an offence under this Act — other than an offence under section 137 that is in respect of a contravention of section 26 or paragraph 87(a) or (b) — if they establish that they exercised all due diligence to prevent the commission of the offence.
Offence by employee or agent or mandataryIn a prosecution under this Act, it is sufficient proof of an offence to establish that it was committed by an employee or agent or mandatary of the accused whether or not the employee or agent or mandatary is identified or has been prosecuted for the offence.
Proof of documentsIn any action or proceeding under this Act, any document purporting to be certified by a regulator as a true copy of a document made, given or issued under this Act is, without proof of the signature or of the official character of the person appearing to have signed the document,evidence of the original document of which it purports to be a copy;evidence of the fact that the original document was made, given or issued by or by the authority of or deposited with the person named in it and was made, given or issued at the time stated in the certified copy, if a time is stated in it; andevidence of the fact that the original document was signed, certified, attested or executed by the persons and in the manner shown in the certified copy.
Document entries as proofIn any action or proceeding under this Act, an entry in any record required under this Act to be kept is, in the absence of evidence to the contrary, proof of the matters stated in it as against the person who made the entry or the designated operator that was required to keep the record.
Judicial review — rulesThe following rules apply to judicial review proceedings in respect of the issuance of a cyber security direction under section 20:if the judge determines that evidence or other information provided by the Minister is not relevant or if the Minister withdraws the evidence or other information, the decision of the judge must not be based on that evidence or other information and the judge must return it to the Minister; andthe judge must ensure the confidentiality of all evidence and other information that the Minister withdraws.Definition of judgeIn this section, judge means the Chief Justice of the Federal Court or a judge of that Court designated by the Chief Justice.
Protection of information on appealSection 145 applies to any appeal of a decision made by the judge in relation to the judicial review proceedings referred to in that section and to any further appeal, with any necessary modifications.
General
Report to ParliamentThe Minister must, within three months after the end of each fiscal year, prepare a report on the administration of this Act for that fiscal year and cause a copy of the report to be laid before each House of Parliament on any of the first 15 sitting days of that House after the report is completed.ContentsThe report must include, for the fiscal year covered by the report, the following information in relation to orders made under subsection 20(1):the number of orders made under subsection 20(1) and the nature of the directions set out in those orders;the number of directions revoked under subsection 20(2);the number of designated operators that were subject to a direction;description of compliance of designated operators that partially complied with a direction;description of compliance of designated operators that fully complied with a direction; andan explanation of the necessity, proportionality, reasonableness and utility of the directions.ContentsThe report must contain information on, among other things,the number of directions issued under subsection 20(1) in the immediately preceding fiscal year;the number of designated operators that were issued directions under subsection 20(1) in the immediately preceding fiscal year; andany other information relating to the immediately preceding fiscal year that the Minister considers relevant, if that information is not likely to be about an identifiable designated operator or other person.
Solicitor-client privilege or professional secrecyNothing in this Act may be construed as affecting solicitor-client privilege or, in Quebec, the professional secrecy of advocates and notaries.
(Sections 2 and 6)Vital Services and Vital SystemsItemVital Services and Vital Systems1Telecommunications services2Interprovincial or international pipeline and power line systems3Nuclear energy systems4Transportation systems that are within the legislative authority of Parliament5Banking systems6Clearing and settlement systems
(Sections 2 and 7, subsection 9(1) and section 10)Classes of Operators and Corresponding RegulatorsColumn 1Column 2ItemClass of OperatorsRegulator