State & Local News
Ontario Updates Cybersecurity and Privacy Framework
March 14, 2026
Ontario is modernizing its cybersecurity, privacy, and Freedom of Information (FOI) framework to enhance protection of personal data, improve public information access, and align regulatory standards with other Canadian jurisdictions. The updates introduce stronger cybersecurity requirements for public institutions, exclude certain political offices from FOI obligations, and implement operational changes to support digital government initiatives.
- Why this matters: Procurement professionals should anticipate revised cybersecurity and privacy standards impacting public sector contracts and vendor compliance requirements in Ontario.
- Organizations providing IT, cybersecurity, and data management services to Ontario public institutions may see new opportunities to support compliance and digital transformation efforts.
- The alignment with broader Canadian frameworks suggests potential harmonization benefits for vendors operating across multiple provinces.
- Procurement teams should review updated policies to ensure contract terms and vendor qualifications reflect the enhanced security and privacy mandates.
Agencies
Ministry of Public and Business Service Delivery and Procurement, Ontario Public Service