Protecting Privacy of Personal Information and the Reliable Operation of the Smart Grid in Ontario

Case number

EB-2016-0032

Launched

February 11, 2016

Sector

Electricity

Status

Active

Details

The OEB initiated a policy consultation to engage with key industry stakeholders to continue its review of the non-bulk electrical grid and associated business systems in Ontario that could impact the protection of personal information and smart grid reliability.

The privacy and security of consumer information has long been a priority of the OEB and is a requirement in every distributor’s licence.

The risk of unauthorized access to both operating and business systems in the sector is growing due to the increased use of automation, electronic communications and data flows.

The goal of this policy consultation will be to identify industry standards and best practices in order to establish a sector wide consistent framework for continuing to protect personal information and the reliable operation of the smart grid.

Reports

Staff Report to the Board on a Proposed Cyber Security Framework and Supporting Tools

Issued

June 1, 2017

Updates

Date	Issue / Document
April 25, 2019	The OEB has issued a letter with the adopted Cyber Security Readiness Report & Amendments to the Natural Gas Reporting and Record Keeping Requirements (RRR) Rule for Gas Utilities. Letter
March 14, 2019	The OEB has issued a letter proposing a Cyber Security Readiness Report & Proposed Amendments to a Natural Gas Reporting and Record Keeping Requirements (RRR) Rule. Comments are welcome by April 4, 2019. Letter - Proposed Amendments to a Rule - The Natural Gas Reporting and Record Keeping Requirements (RRR) Rule for Gas Utilities
November 29, 2018	The OEB has issued Amendments to the Electricity Reporting and Record Keeping Requirements (RRR). Letter - Cyber Security Readiness Report & Amendments to Electricity Reporting and Record Keeping Requirements (RRR)
October 15, 2018	The OEB has received the following comments on the letter issued September 20, 2018 and the proposed Cyber Security Readiness Report for licensed transmitters and distributors. Coalition of Large Distributors (CLD) Electricity Distributors Association (EDA) PUC Distribution Inc. (PUC) Lakefront Utilities Inc. LUI
September 20, 2018	The OEB has issued a letter proposing a Cyber Security Readiness Report & Amendments to the Electricity Reporting and Record Keeping Requirements (RRR) for licensed transmitters and distributors. Comments are welcome by October 15, 2018. Letter - Proposed Cyber Security Readiness Report & Amendments to Electricity Reporting and Record Keeping Requirements (RRR)
April 23, 2018	The OEB has issued a letter in response to enquiries regarding the interim reporting requirement. Letter
March 29, 2018	In the March 15, 2018 Notice of Amendments, the OEB indicated that an interim (3 month) progress report is critical to ensure that all licensees have reviewed the Framework and are taking steps to assess their cyber security readiness. Licensed transmitters and distributors are required to submit their certified interim progress report to the OEB between April 30, 2018 and June 15, 2018. A copy of the Interim Certification Report (Appendix A) can be found in letter below. Letter and Interim Certification Report
March 15, 2018	The OEB has issued a Notice of Amendments to the Distribution System Code and the Transmission System Code to implement the OEB’s policies related to Protecting Privacy of Personal Information and the Reliable Operation of the Smart Grid in Ontario for the Electricity and Natural Gas Distributors. Notice of Amendments (*a corrected version of the Notice was posted on March 19, 2018)
January 18, 2018	The OEB has received the following comments on the Proposed Notice of Code Amendments for the Electricity and Natural Gas Distributors, and the accompanying industry Ontario Cyber Security Framework. Coalition of Large Distributors (CLD) Electricity Distributors Association (EDA) Cover letter Comments Utilities Standards Forum (USF) / Grid Smart City
December 20, 2017	The OEB has issued a Proposed Notice of Code Amendments for the Electricity and Natural Gas Distributors, and the accompanying industry developed Ontario Cyber Security Framework, tools and Framework Implementation Report. Comments are welcome by January 18, 2018. Notice of Proposed Code Amendments Ontario Cyber Security Framework NIST Privacy Security Controls Self-Assessment Questionnaire (SAQ) Tool (xlsx) Inherent-Risk-Profile Tool (xlsx) AESI Framework Implementation Report
July 27, 2017	The OEB has received the following comments on the Cyber Security Framework: Burlington Hydro Canadian Gas Association (CGA) Coalition of Large Distributors (CLD) Cornerstone Hydro Electric Concepts Association's (CHEC) Electricity Distributors Association (EDA) Enbridge Gas Distribution (EGD) Energy+ IESO Oakville Hydro Ontario Energy Association (OEA) Security Compass Thunder Bay Hydro Union Gas Utilities Standards Forum (USF)
June 1, 2017	The OEB has issued a Staff Report to the Board on a Proposed Cyber Security Framework and Supporting Tools for the Electricity and Natural Gas Distributors, and the accompanying industry developed Cyber Security Framework. Comments are welcome by July 15, 2017. Cover Letter Staff Report to the Board on a Proposed Cyber Security Framework and Supporting Tools for the Electricity and Natural Gas Distributors AESI White Paper NIST Privacy Security Controls Self-Assessment Questionnaire (SAQ) (xlsx) Framework Risk Profile Tool (xlsx)
February 11, 2016	The OEB issued a letter initiating a policy consultation on Protecting Privacy of Personal Information and the Reliable Operation of the Smart Grid in Ontario. Letter