Codify — Article

Ontario bill lets ministry share sex-offender registry data with ‘prescribed’ entities under agreement

Amends Christopher’s Law to permit disclosure to regulation‑designated organizations for crime‑prevention or law‑enforcement purposes, subject to ministry agreements.

The Brief

Bill 74 amends Christopher’s Law (Sex Offender Registry), 2000 to expand who can receive information from the provincial sex‑offender registry. It keeps police services and policing bodies in other jurisdictions on the list, and adds a new category of "prescribed entities" that the ministry may authorize to receive, collect, retain and use registry information for crime‑prevention or law‑enforcement purposes.

The bill couples the new disclosure route with a contractual safeguard: the ministry must enter into an agreement with any prescribed entity, and the Lieutenant Governor in Council may make regulations naming prescribed entities and governing those agreements. The change shifts key implementation details to regulations and ministry agreements, creating operational and privacy questions for both data recipients and registrants on the registry.

At a Glance

What It Does

Adds a statutory path allowing ministry employees to disclose registry information to entities prescribed by regulation and permits those entities to collect, retain and use the information for crime‑prevention or law‑enforcement purposes. It requires the ministry to enter into an agreement with any prescribed entity before disclosure.

Who It Affects

Directly affects the Ministry that runs the registry, police services and policing partners in other jurisdictions, and any entity that the Lieutenant Governor in Council designates as a "prescribed entity" under the new regulation‑making power.

Why It Matters

The bill broadens authorized recipients beyond traditional police partners while leaving core operational limits to agreements and regulations. That creates flexibility for targeted information sharing but also transfers significant discretion over safeguards and oversight to the executive branch.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

Christopher’s Law currently allows disclosure of registry information to police services and policing entities in other jurisdictions. Bill 74 replaces and supplements that framework by inserting a new statutory route: the ministry may disclose registry information to entities that are later prescribed by regulation.

Those prescribed entities are explicitly allowed to collect, retain and use the information, but only for crime‑prevention or law‑enforcement purposes.

Before disclosure under the new route, the ministry must enter into an agreement with each prescribed entity. The bill does not spell out what must be in those agreements; instead it creates a regulation‑making power to identify prescribed entities and to govern the form or content of the agreements.

The text therefore creates a two‑step control: legal authorization in the statute plus contract terms negotiated or imposed by the ministry.Operationally, the amendment expands who can receive sensitive registry records but leaves the details—who qualifies as a prescribed entity, what technical or procedural safeguards apply, how long data may be retained, and what recourse a registrant has—to regulations and agency agreements. The bill also makes the substitution to subsection 10(3) come into force on royal assent while deferring the start date for the rest of the Act to an order in council, allowing a short window for immediate effect of the disclosure authorization and a later period for regulatory or administrative setup.The practical consequence is that the ministry will need processes to negotiate and manage agreements, and recipients will need to demonstrate their capability to secure and use registry data within the agreed limits.

At the same time, registrants’ privacy protections are not expanded in the statute; the protections available will depend on what the regulations and agreements require and how the ministry enforces them.

The Five Things You Need to Know

1

The bill inserts a new subsection permitting ministry employees or authorized persons to disclose registry information to entities "prescribed" by regulation for crime‑prevention or law‑enforcement purposes.

2

Before disclosing to a prescribed entity, the ministry must enter into an agreement with that entity respecting the disclosure—agreements are mandatory, not optional.

3

The statute explicitly continues to allow disclosures to police services and entities that provide policing under other jurisdictions; the new route is in addition to those powers.

4

Section 14 is amended to give the Lieutenant Governor in Council regulation powers to name prescribed entities and to govern the required agreements.

5

The substitution to the core disclosure subsection comes into force on royal assent; the rest of the Act comes into force by order of the Lieutenant Governor in Council.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

Section 1(1)–(2)

Rewrites the core disclosure subsection and updates cross‑references

▾

The bill removes and replaces the existing subsection that controlled disclosure and updates the subsection numbering. That technical change clears the way for two distinct disclosure paths: the continued disclosure to police/policing partners and a new, separately numbered path for prescribed entities. The cross‑reference updates ensure existing liability or exemption clauses that relied on the old numbering now apply to the new text.

Section 1(2)–(3.0.1)

Confirms police and other‑jurisdiction policing remain authorized recipients

▾

The amendment preserves the status quo for police services and policing bodies under other jurisdictions by explicitly listing them as authorized recipients. This keeps existing inter‑police sharing authority intact while setting it apart from the new 'prescribed entity' mechanism.

Section 1(3.0.2)–(3.0.3)

Creates the 'prescribed entity' disclosure route and makes agreements mandatory

▾

This is the core policy change: the ministry can disclose registry data to any entity the regulations prescribe, and those entities may collect, retain and use the data for crime‑prevention or law‑enforcement purposes. Critically, the bill conditions disclosure on a pre‑existing agreement between the ministry and the prescribed entity; however, the bill defers the content of both the prescription and the agreement terms to regulations and negotiation, rather than specifying statutory minimums.

3 more sections▾
Section 1(4)

Adjusts existing liability/penalty cross‑references to include the new route

▾

By adding the new subsection references into other provisions, the bill makes sure that existing rules—such as prohibitions on unauthorized sharing or criminal or civil liabilities—apply consistently to disclosures made under the new prescribed‑entity pathway.

Section 2

Regulation‑making powers: who may be prescribed and what agreements must cover

▾

The bill adds two regulation‑making clauses to section 14: one to prescribe entities for the new disclosure route, and another to govern agreements used under subsection 10(3.0.3). That delegation gives the executive broad latitude to define qualifying entities and the procedural or substantive obligations in agreements, but it also concentrates discretion outside the statute itself.

Sections 3–4

Commencement and short title

▾

Subsection 1(2) (the text replacing the disclosure subsection) comes into force on royal assent; the remainder of the Act comes into force on a day set by order of the Lieutenant Governor in Council. The bill also sets a short title for reference. The staggered commencement gives the ministry a brief window to begin disclosure under the new wording while allowing time to finalize regulations and agreements.

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Police services and interjurisdictional policing partners — they retain existing access and benefit from a statutory clarification that maintains their role while enabling complementary sharing arrangements.
  • Entities the government designates as 'prescribed' — once prescribed and under agreement, these organizations gain legal access to registry data for prevention or enforcement tasks they otherwise would not have.
  • The Ministry responsible for the registry — gains a flexible tool (contractual agreements plus regulatory definitions) to tailor information sharing to operational needs without further primary‑law amendments.

Who Bears the Cost

  • Registrants on the sex‑offender registry — face broader potential sharing of their personal information and attendant privacy, reputational and reintegration risks because the statute expands recipients without prescribing new registrant safeguards.
  • The Ministry — must negotiate, manage and monitor multiple agreements, and will carry the administrative burden and potential liability for improper disclosures or insufficient oversight.
  • Prescribed entities — will need to implement technical, procedural and legal controls to meet any agreement terms and to manage retained data, creating compliance and resource costs.

Key Issues

The Core Tension

The central dilemma is balancing targeted information sharing to enhance public safety against the privacy and reintegration interests of registrants: the bill expands pathways for disclosure to improve crime‑prevention and enforcement, but it pushes critical decisions about who sees sensitive data and under what conditions into regulations and contracts, leaving protection levels contingent on administrative choices rather than statutory limits.

The bill creates a powerful discretion by delegating key content to regulations and contractual agreements. That design gives the government flexibility to tailor arrangements to varying operational partners, but it also leaves open what baseline safeguards—purpose limitation, minimum retention periods, access controls, independent auditing, breach reporting, or registrant notification—will exist.

Because those safeguards are not in the statute, much of the real protection will depend on the quality of regulations and the ministry’s diligence in negotiating and enforcing agreements.

Another tension concerns scope creep: the phrase "prescribed entity" is open‑ended. If regulations permit non‑traditional partners (for example, non‑law‑enforcement public agencies or NGOs) to be prescribed, the practical effect could be a broadening of access beyond what the public and registrants currently expect.

The mandatory agreement requirement is a mitigation, but the statute does not require that agreements be publicly disclosed, subject to third‑party oversight, or include specific privacy protections, leaving enforcement and transparency questions unresolved. Operationally, the ministry will also face capacity challenges: negotiating bespoke agreements, enforcing technical safeguards, and auditing use and retention across multiple recipients will require staffing, funding and clear policy templates—none of which the bill guarantees.

There's more to this law than the bill.

Codify Laws traces every connection across the legislative lifecycle.

Bill↓Regulations↓Statute↓Proclamation↓In-Force Date
Try Codify Laws →