Initiative overview
The Act has created a legislative foundation to strengthen cyber security, privacy protections, and responsible AI use in the select broader public sector entities. The legislation includes a definition for AI and allows government to set regulations related to AI use in the public sector. Progress is measured through enactment of the legislation, consultations, and development of regulations. Over time, and if regulations are approved, the Act is expected to improve digital trust, reduce cyber and privacy risks, and enable responsible AI use in the broader public sector.
Development of the Act reinforced the value of enabling legislation that provides a durable foundation while allowing future requirements to be refined as risks and technologies evolve. Engagement with stakeholders helped inform a balanced approach. Experience suggests that success depends on clear legislative intent, phased implementation, and alignment with existing privacy, cyber security, and digital governance frameworks.
