Canada's Bill C-25 Enacts Sweeping Election Reforms with Tougher Penalties

For legal practitioners specializing in election law and regulatory compliance, Bill C-25 marks a pivotal shift. The legislation strengthens the enforcement architecture of the Canada Elections Act, empowers the Commissioner to levy higher fines, and establishes statutory obligations for federal political parties around privacy and data breach reporting. It also closes loopholes that allowed anonymous and foreign funding, directly responding to the Public Inquiry into Foreign Interference.

On June 18, 2026, the Government of Canada witnessed a landmark moment in electoral security as Bill C-25, the Strong and Free Elections Act, received Royal Assent. The legislation, a direct response to recommendations from the Public Inquiry into Foreign Interference in Federal Electoral Processes and Democratic Institutions (PIFI), the Chief Electoral Officer, and the Commissioner of Canada Elections, introduces a suite of targeted amendments to the Canada Elections Act. This move signals an urgent recognition that Canada’s democratic infrastructure faces sophisticated, evolving threats—from AI-generated deepfakes to covert foreign funding—and that existing legal frameworks, while robust, required modernization to maintain public trust. The law’s expedited passage, characterized as priority amendments, underscores the gravity of the interference risk as the next federal election cycle approaches.

“

The legislation strengthens the enforcement architecture of the Canada Elections Act, empowers the Commissioner to levy higher fines, and establishes statutory obligations for federal political parties around privacy and data breach reporting.

The bill’s centerpiece is a sweeping ban on 'sophisticated deepfakes of electoral actors that intend to mislead Canadians.' This provision directly tackles one of the most technologically advanced forms of disinformation, placing Canada among a growing number of democracies legislating against AI-manipulated political media. For cybersecurity practitioners, this creates immediate operational challenges: political campaigns and electoral agencies must now deploy detection tools capable of identifying synthetic media in real time, while legal experts will scrutinize the law's definitions of 'sophisticated' and 'intent' to forecast enforceability and potential free expression challenges.

Equally transformative are the new privacy and data breach requirements imposed on federal political parties. For the first time, these entities must establish formal privacy policies and disclose breaches of personal information. This shifts a long-standing regulatory gap; previously, political parties operated largely outside the scope of Canada’s personal information protection laws. The practical implications are significant: all registered parties will need to appoint data protection officers, implement breach notification protocols, and potentially overhaul data handling practices. The provision aligns Canada more closely with European GDPR-style accountability, though the details—such as timelines for breach reporting and thresholds for notification—remain to be defined in subsequent regulations or guidance from the Office of the Privacy Commissioner.

Financial integrity features prominently in the reforms. Bill C-25 closes channels for anonymous and foreign funding in electoral processes, a direct countermeasure to the PIFI findings that such flows represent a primary conduit for covert influence. Additionally, the act protects nomination and leadership contests from threats including undue foreign influence, bribery, and intimidation. These provisions extend the federal election umbrella into internal party affairs, a novel expansion that will likely prompt legal debate about the state’s role in party governance. The law also strengthens voter protections against unlawful influence at all times—not just during the formal election period—recognizing that modern influence operations begin long before a writ is dropped.

Enforcement receives a substantial boost. The Commissioner of Canada Elections (CCE), whose mandate to ensure compliance with the Canada Elections Act is often tested by limited resources and statutory constraints, gains increased administrative monetary penalties (AMPs) for violations. While the specific new penalty ceilings are not detailed in the announcement, the signaling effect is clear: non-compliance will carry stiffer financial consequences. This, combined with new investigatory or enforcement tools implied by the amendments, aims to deter both foreign and domestic malefactors.

A less discussed but operationally critical amendment targets long ballots, which the government notes 'challenge the administration and accessibility of federal elections for voters, candidates and election workers.' By mitigating this issue—likely through technical adjustments to ballot design or candidate eligibility rules—Elections Canada can reduce the logistical strain during high-turnout events, indirectly strengthening the overall integrity and efficiency of the vote.