# Dashboard & Reporting Obligations

The statutory reporting framework, approval mechanics, and governance authorities that anchor annual S-211 compliance work.

## The Core Reporting Framework Under the Supply Chains Act

The Act applies to entities engaged in specified goods-related activities and requires an annual May 31 report covering the mandatory categories in section 11.

For private-sector entities, the legal starting point is section 9 of the Fighting Against Forced Labour and Child Labour in Supply Chains Act. It captures entities that produce, sell, or distribute goods, import goods into Canada, or control entities carrying on those activities. Section 11 then requires an annual report to the Minister of Public Safety on or before May 31 describing the steps taken during the previous financial year to prevent and reduce the risk that forced labour or child labour is used in the production of goods or in imported goods.

Section 11(3) is the operative checklist for annual reporting. It requires disclosure about structure, activities and supply chains; policies and due diligence processes; risk areas and the steps taken to assess and manage those risks; remediation measures for forced labour or child labour; remediation of loss of income to vulnerable families; training; and how the entity assesses effectiveness. Public Safety Canada's reporting guidance tracks this structure closely and expects narrative disclosure about what the entity actually did, not generic statements of aspiration.

The reporting page and Public Safety Canada's guidance also matter operationally because they explain where the report has to appear after submission: in the federal catalogue and in a prominent place on the reporting entity's own website. For dashboard and readiness purposes, that means the legal compliance task is not complete when a PDF is drafted. It is complete only when approval, attestation, submission, and public posting are all aligned.

### Citations

- Supply Chains Act, s 9: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 9 (application to entities) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-9.html)
- Supply Chains Act, s 11: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 11 (annual report, mandatory contents, approval and attestation) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-11.html)
- PSC Reporting Obligations: Public Safety Canada, Reporting obligations (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/rprtng-blgtns-en.aspx)

## Board Approval, Attestation, and Informed Oversight

The Act makes governing-body approval and attestation mandatory, while Canadian governance authorities explain why directors should approach that step as a real risk-oversight exercise.

Section 11(4) and (5) of the Act require the report to be approved by the governing body and evidenced by a statement of approval plus the signature of one or more members of that governing body. That statutory design is important: it elevates supply-chain reporting from a back-office disclosure task to a governance task that must be owned at board or equivalent governing-body level.

BCE and Peoples are not S-211 cases, but they are core Canadian governance authorities for how directors should approach this role. BCE explains that directors act in the best interests of the corporation viewed as a good corporate citizen and may consider the interests of affected stakeholders. Peoples emphasizes that directors must act prudently and on a reasonably informed basis. Read together, those authorities support using the annual report process as a structured board review of supply-chain human-rights risk, not a rubber-stamp exercise.

National Policy 58-201 is also helpful by analogy because it recommends that boards adopt a written mandate for stewardship of principal business risks and ensure systems are in place to manage them. In an S-211 setting, the practical implication is straightforward: if the board is asked to approve and attest to a report, management should be able to show the evidence chain behind the report, the risk methodology used, and the process by which the governing body reviewed the draft before signing.

### Citations

- Supply Chains Act, s 11(4)-(5): Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 11(4)-(5) (approval and attestation) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-11.html)
- 2008 SCC 69: BCE Inc. v. 1976 Debentureholders, 2008 SCC 69, [2008] 3 SCR 560 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/6238/index.do)
- 2004 SCC 68: Peoples Department Stores Inc. (Trustee of) v. Wise, 2004 SCC 68, [2004] 3 SCR 461 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/2184/index.do)
- NP 58-201: National Policy 58-201, Effective Corporate Governance (https://www.osc.ca/en/securities-law/instruments-rules-policies/5/58-201/national-policy-np-58-201-effective-corporate-governance)

---

# Supplier Due Diligence

Real Canadian authorities on parent-company exposure, supplier control, and the difference between due diligence that is operational versus purely cosmetic.

## Nevsun and the Litigation Risk of Weak Supplier Due Diligence

Nevsun confirms that Canadian courts may hear claims tied to alleged forced labour and other customary international law violations connected to overseas operations.

Nevsun is the most important reported Canadian case in this space. Eritrean workers alleged they were forced to work at a mine associated with a Canadian company and sought damages in British Columbia for domestic torts and for breaches of customary international law norms, including the prohibition on forced labour. The Supreme Court of Canada refused to strike those claims at the pleadings stage and held that it was not plain and obvious the claims had no reasonable prospect of success.

For supplier-diligence work, the significance of Nevsun is not that every supply-chain dispute becomes a successful lawsuit. The significance is narrower and more concrete: Canadian companies cannot assume that overseas operational distance or layered corporate structure will end the legal analysis at the threshold. Weak diligence, poor monitoring, and shallow oversight can become part of a litigation record rather than merely a disclosure problem.

The OECD Due Diligence Guidance and the UN Guiding Principles give the best recognized framework for turning that lesson into practice. They emphasize risk-based prioritization, leverage, tracking, and remediation. In a supplier module, those sources support building diligence around evidence, follow-up, and escalation, instead of treating questionnaires or codes of conduct as stand-alone compliance artefacts.

### Citations

- 2020 SCC 5: Nevsun Resources Ltd. v. Araya, 2020 SCC 5, [2020] 1 SCR 166 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/18169/index.do)
- OECD DDG 2018: OECD, Due Diligence Guidance for Responsible Business Conduct (2018) (https://www.oecd.org/en/publications/2018/02/oecd-due-diligence-guidance-for-responsible-business-conduct_c669bd57.html)
- UNGP: OHCHR, Guiding Principles on Business and Human Rights, UN Doc A/HRC/17/31 (2011) (https://www.ohchr.org/Documents/Issues/Business/A.HRC.17.31.pdf)

## Hudbay, Das, and What Courts Look for in Supply-Chain Negligence Claims

Hudbay shows negligence claims can survive where the parent company is alleged to have directed or assumed responsibility, while Das shows the limits where proximity and pleaded facts are weak.

Hudbay is often cited because the Ontario Superior Court allowed negligence claims to proceed against a Canadian parent company arising from alleged violence tied to a foreign mining project. At the pleadings stage, the decision accepted that the plaintiffs had alleged enough about the parent company's own role, control, policies, and decisions to justify moving the case forward rather than striking it outright.

Das is an important companion case because it shows the other side of the line. The Ontario Court of Appeal upheld the dismissal of claims arising from the Rana Plaza disaster, with the pleading and conflict-of-laws analysis proving fatal. Das therefore does not erase supply-chain litigation risk, but it does show that plaintiffs still need viable pleaded facts, proximity, and an actionable legal route. Courts will look closely at what the defendant actually undertook, controlled, represented, or ignored.

Taken together, Hudbay and Das are useful supplier-law authorities because they focus attention on practical variables compliance teams can influence: mapping the supplier relationship, documenting leverage, aligning public statements with actual controls, and recording what happens after red flags are found. Public Safety Canada's guidance points in the same direction by encouraging disclosure of how risks are identified and managed rather than conclusory claims that suppliers are simply expected to comply.

### Citations

- 2013 ONSC 1414: Choc v. Hudbay Minerals Inc., 2013 ONSC 1414 (https://www.canlii.org/en/on/onsc/doc/2013/2013onsc1414/2013onsc1414.html)
- 2018 ONCA 1053: Das v. George Weston Limited, 2018 ONCA 1053 (https://www.canlii.org/en/on/onca/doc/2018/2018onca1053/2018onca1053.html)
- PSC Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)

---

# Incidents & Forced Labour Identification

The criminal-law definition of exploitation, the indicator frameworks used in practice, and the escalation logic that should inform incident handling.

## Criminal Code Trafficking and the Legal Meaning of Exploitation

Sections 279.01 and 279.04 of the Criminal Code define trafficking and exploitation in terms that matter directly when incident reports raise coercion, threats, deception, or abuse of power.

The Criminal Code gives the clearest Canadian statutory definition of trafficking-related exploitation. Section 279.01 criminalizes recruiting, transporting, receiving, harbouring, or controlling a person for the purpose of exploiting them. Section 279.04 explains that exploitation exists where a person is caused to provide labour or a service through conduct that could reasonably be expected to make them believe their safety or the safety of someone known to them would be threatened if they refused.

R. v. A.A. is frequently cited because it confirms that the exploitation inquiry is objective and does not require proof of overt physical violence in every case. The question is whether the conduct could reasonably be expected to create the required fear. That matters for incident triage because coercive labour situations often present first as intimidation, dependency, debt, or threats rather than as immediately visible physical assault.

R. v. Moazami is useful in practice because the facts illustrate common control mechanisms: document retention, coercion, debt, and threats. When compliance teams receive site-level allegations involving those features, they should not treat them as generic labour grievances. The legal definition of exploitation makes those features relevant to a much more serious forced-labour analysis and supports rapid escalation, evidence preservation, and senior review.

### Citations

- Criminal Code, s 279.01: Criminal Code, s 279.01 (trafficking in persons) (https://laws-lois.justice.gc.ca/eng/acts/c-46/section-279.01.html)
- Criminal Code, s 279.04: Criminal Code, s 279.04 (exploitation) (https://laws-lois.justice.gc.ca/eng/acts/c-46/section-279.04.html)
- 2015 ONCA 558: R. v. A.A., 2015 ONCA 558 (https://www.canlii.org/en/on/onca/doc/2015/2015onca558/2015onca558.html)
- 2014 BCSC 261: R. v. Moazami, 2014 BCSC 261 (https://www.canlii.org/en/bc/bcsc/doc/2014/2014bcsc261/2014bcsc261.html)

## ILO Indicators and Why They Matter in Canadian Incident Work

The ILO indicators are not a substitute for legal judgment, but Canadian reporting and border-control materials make them highly practical for identifying and escalating forced-labour risk.

The ILO indicators of forced labour are practical warning signs rather than a Canadian statutory test. They include coercion, deception, abuse of vulnerability, retention of identity documents, debt bondage, withholding of wages, abusive living or working conditions, and restrictions on movement. As an incident-management tool, they help teams move from vague concern to a structured description of what has been observed or alleged.

Canadian official materials reinforce their operational value. CBSA Memorandum D9-1-6 explains that importers are responsible for conducting due diligence so that goods imported into Canada are not mined, manufactured, or produced wholly or in part by forced labour. Public Safety Canada's 2025 annual report to Parliament also shows that reporting organizations are increasingly framing risk in terms of raw materials, locations, sectors, and supplier tiers. That is compatible with using indicator-based incident tagging at the evidence level.

The practical lesson is that incident systems should capture both the allegation and the indicator pattern. A single allegation may not prove forced labour, but a cluster of indicators across one supplier, facility, recruiter, commodity, or geography can materially change the legal and disclosure posture. The indicators therefore belong in the intake and escalation workflow, not only in training slides.

### Citations

- ILO Indicators 2025: ILO, Indicators of Forced Labour (2025 revised edition) (https://researchrepository.ilo.org/esploro/outputs/encyclopediaEntry/ILO-indicators-of-forced-labour/995680797902676)
- CBSA D9-1-6: CBSA Memorandum D9-1-6, Goods manufactured or produced by prison or forced labour (https://www.cbsa-asfc.gc.ca/publications/dm-md/d9/d9-1-6-eng.html)
- 2025 Parliament Report: Public Safety Canada, 2025 Annual Report to Parliament on the Fighting Against Forced Labour and Child Labour in Supply Chains Act (https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/2025-frcd-lbr-chld-lbr-spply-chns-ct-scnd-rprt/index-en.aspx)

---

# Training & Employment Standards

The legal floor beneath workforce protections, the treatment of vulnerable workers, and how training should connect to real labour-rights risks rather than generic ethics messaging.

## Source-First Orientation for S-211 Training

Training should begin with the Act's filing cycle, reporting-entity test, and penalty exposure so learners understand the legal frame before moving into scenarios.

The training baseline should be source-first: the annual filing cycle, the reporting-entity threshold test, and the consequences of non-compliance are all anchored in primary legal or regulator materials. Section 11 sets the May 31 annual reporting deadline for the prior financial year and requires governing-body approval plus a signed attestation.

Public Safety Canada's guidance gives the practical scope analysis. It frames reporting as a two-step question: determine whether the organization is an entity, then determine whether its activities trigger reporting. That structure is useful for learners because it separates legal status from operational activity instead of treating S-211 as a generic corporate policy topic.

Section 19 creates summary-conviction exposure for reporting failures and for knowingly false or misleading statements or information, with fines of up to $250,000. Training does not need to make every learner a lawyer, but it should make the compliance stakes concrete enough that report owners, reviewers, and operational teams understand why evidence quality matters.

### Citations

- Supply Chains Act, s 11: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 11 (annual report contents, approval, and attestation) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-11.html)
- PSC Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)
- Supply Chains Act, s 19: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 19 (offences and punishment) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-19.html)

## Role-Based Learning Paths for S-211 Controls

Training is more defensible when it is tailored to the decisions different teams actually make: board approval, supplier diligence, incident escalation, and report assembly.

Board and officer training should focus on what the governing body must review before approving an annual report. The learning path should map the section 11 approval and attestation workflow, separate management drafting from board-level approval duties, and help build a review record showing the board was informed before signing.

Supplier diligence training should be aimed at procurement, sourcing, ESG, and compliance teams. Those teams need to connect Public Safety Canada's activity test with OECD risk-based due diligence concepts so onboarding, contractual expectations, questionnaires, follow-up, and remediation are prioritized by actual supply-chain risk rather than treated as checklist-only tasks.

Incident-recognition training should be tailored to investigators, ethics teams, auditors, HR, and site leaders. It should teach the ILO forced-labour definition and indicators, including document retention, debt bondage, threats, withholding of wages, and restrictions on movement, then explain when repeated or clustered indicators should escalate into supplier remediation or disengagement decisions.

Report-assembly training belongs with report owners, legal, internal audit, and sustainability teams. That path should emphasize covering each mandatory report topic, keeping questionnaire responses aligned with the PDF report and public posting, and using Public Safety Canada's annual report to benchmark common disclosure patterns and gaps.

### Citations

- Supply Chains Act, s 11: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 11 (annual report contents, approval, and attestation) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-11.html)
- PSC Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)
- OECD DDG 2018: OECD, Due Diligence Guidance for Responsible Business Conduct (2018) (https://www.oecd.org/en/publications/2018/02/oecd-due-diligence-guidance-for-responsible-business-conduct_c669bd57.html)
- ILO Forced Labour: International Labour Organization, What is forced labour? (https://www.ilo.org/topics/forced-labour-modern-slavery-and-trafficking-persons/what-forced-labour)
- ILO Indicators: International Labour Organization, Indicators of Forced Labour (https://www.ilo.org/publications/ilo-indicators-forced-labour)
- PSC 2025 Report: Public Safety Canada, 2025 Annual Report to Parliament on the Fighting Against Forced Labour and Child Labour in Supply Chains Act (https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/2025-frcd-lbr-chld-lbr-spply-chns-ct-scnd-rprt/index-en.aspx)

## Reported Precedent That Belongs in Training

Nevsun gives the training program a forced-labour litigation anchor, while BCE and Peoples explain why S-211 oversight should be treated as a real governance exercise.

Nevsun Resources Ltd. v. Araya is the clearest Canadian forced-labour precedent in this training set. The Supreme Court of Canada allowed claims based on alleged forced labour and other customary international law violations to proceed against a Canadian company. For training purposes, its value is that it shows forced-labour risk is not only a disclosure issue; it can become direct litigation exposure tied to overseas operations and business relationships.

BCE Inc. v. 1976 Debentureholders is not an S-211 case, but it is a central governance authority. It explains that directors must act in the best interests of the corporation viewed as a good corporate citizen and may consider a broad range of stakeholder interests. That makes it useful when training boards and executives on why supply-chain human-rights risk should be treated as a real corporate risk.

Peoples Department Stores Inc. (Trustee of) v. Wise confirms that directors owe their fiduciary duty to the corporation and must make decisions prudently and on a reasonably informed basis. In an S-211 training program, the practical lesson is simple: a governing body that signs an annual report should be able to show the information and review process behind the attestation.

### Citations

- 2020 SCC 5: Nevsun Resources Ltd. v. Araya, 2020 SCC 5, [2020] 1 SCR 166 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/18169/index.do)
- 2008 SCC 69: BCE Inc. v. 1976 Debentureholders, 2008 SCC 69, [2008] 3 SCR 560 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/6238/index.do)
- 2004 SCC 68: Peoples Department Stores Inc. (Trustee of) v. Wise, 2004 SCC 68, [2004] 3 SCR 461 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/2184/index.do)

## Primary Sources for Training Design and Quality Control

The strongest training program ties each learning objective back to a statute, regulator source, international framework, or reported precedent.

Public Safety Canada's reporting obligations page and guidance are the core Canadian regulator sources for training design. They explain who must report, the May 31 deadline, approval workflow, questionnaire submission process, publication requirements, and the expectation that entities disclose how risks are identified and managed.

The 2025 annual report to Parliament gives useful quality-control context because it describes government-level observations about reporting patterns, common risks, risk-management measures, corrective measures, and enforcement reporting under the Act. Training teams can use it to benchmark whether their curriculum speaks to the same risk categories appearing in current Canadian reporting practice.

The OECD due diligence guidance and ILO forced-labour materials provide the operating method beneath the training. The OECD source supports risk-based identification, prevention, mitigation, tracking, and remediation, while the ILO sources give the definition and practical indicators needed by front-line personnel who may be the first to see coercion, vulnerability, or abuse.

### Citations

- Reporting Obligations: Public Safety Canada, Reporting obligations (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/rprtng-blgtns-en.aspx)
- PSC Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)
- PSC 2025 Report: Public Safety Canada, 2025 Annual Report to Parliament on the Fighting Against Forced Labour and Child Labour in Supply Chains Act (https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/2025-frcd-lbr-chld-lbr-spply-chns-ct-scnd-rprt/index-en.aspx)
- OECD DDG 2018: OECD, Due Diligence Guidance for Responsible Business Conduct (2018) (https://www.oecd.org/en/publications/2018/02/oecd-due-diligence-guidance-for-responsible-business-conduct_c669bd57.html)
- ILO Forced Labour: International Labour Organization, What is forced labour? (https://www.ilo.org/topics/forced-labour-modern-slavery-and-trafficking-persons/what-forced-labour)
- ILO Indicators: International Labour Organization, Indicators of Forced Labour (https://www.ilo.org/publications/ilo-indicators-forced-labour)

## Employment Standards as a Minimum Floor, Not an Optional Benchmark

Canadian employment law treats statutory minimums as non-waivable, which makes employment-standards literacy a serious compliance input when reviewing recruitment or workplace conditions.

Machtinger remains a leading authority for the proposition that statutory employment standards are a floor and cannot be contracted away. The Supreme Court of Canada held that contractual terms purporting to provide less than statutory minimum termination protections were void. While that case arose in a dismissal context, its broader significance for training and compliance is that minimum employment standards are not optional bargaining points.

Ontario's Employment Standards Act and the Ministry's guide make the same point in plainer administrative language: employees cannot waive ESA rights, reprisals are prohibited, and violations can trigger orders, penalties, and prosecution. That matters in supply-chain work because many red flags associated with forced labour begin with basic employment-rights failures, such as unlawful deductions, withheld wages, or coercive leave and scheduling practices.

A legally useful training program should therefore do more than tell staff to report misconduct. It should teach operational teams what the statutory floor looks like, what unlawful waivers or coercive arrangements can look like in practice, and why ordinary employment-rights failures can escalate into broader forced-labour risk when combined with recruitment debt, threats, or movement restrictions.

### Citations

- 1992 CanLII 102 (SCC): Machtinger v. HOJ Industries Ltd., 1992 CanLII 102 (SCC), [1992] 1 SCR 986 (https://www.canlii.org/en/ca/scc/doc/1992/1992canlii102/1992canlii102.html)
- Ontario ESA: Employment Standards Act, 2000, SO 2000, c 41 (https://www.ontario.ca/laws/statute/00e41)
- Ontario ESA Guide: Ontario, Your guide to the Employment Standards Act (https://www.ontario.ca/document/your-guide-employment-standards-act-0)

## Vulnerable Workers, Unequal Bargaining Power, and Why Training Must Be Specific

Canadian courts recognize that highly one-sided labour arrangements can exploit structural vulnerability, which supports role-specific training for people who design, approve, or monitor worker-facing arrangements.

Uber Technologies v. Heller is not a forced-labour case, but it is a major Canadian authority on inequality of bargaining power and unconscionability in a work relationship. The Supreme Court of Canada found the arbitration clause before it unconscionable in part because it effectively blocked a vulnerable worker from realistically vindicating statutory rights. The decision is useful in training design because it shows courts will examine how formal contractual language operates in real life for workers with limited bargaining power.

That insight supports training that is tailored to the people who shape labour conditions: procurement teams, recruiters, legal teams, HR, and site managers. These groups need training on how vulnerability is created or worsened by document retention, debt, non-transparent deductions, fear of retaliation, opaque complaint channels, or impractical contract terms. Generic anti-slavery messaging is much less useful than scenario-based instruction tied to specific operational decisions.

Public Safety Canada's guidance requires reporting on training provided to employees, but it does not prescribe one standard curriculum. That leaves entities responsible for designing training that fits their risk profile. Authorities like Uber and the provincial employment-standards guidance help explain why targeted, role-specific training is better evidence than a one-size-fits-all annual presentation with little connection to actual points of worker vulnerability.

### Citations

- 2020 SCC 16: Uber Technologies Inc. v. Heller, 2020 SCC 16, [2020] 2 SCR 118 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/18406/index.do)
- BC ESA Guide: Province of British Columbia, Interpretive Guide to the Employment Standards Act and Regulation (https://www2.gov.bc.ca//gov/content/employment-business/employment-standards-advice/employment-standards/forms-resources/igm)
- PSC Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)

---

# Annual Reports & Disclosure Obligations

The legal requirements for annual reports, revision mechanics, offence provisions, and the quality-control points that matter before publication.

## Mandatory Content, Revisions, and Publication Mechanics

A defensible S-211 report has to satisfy the content rules in section 11, be corrected properly if revised under section 12, and be submitted and posted in the required manner.

The report content requirements are set by section 11 of the Act, and they are not optional. The report has to cover the seven mandatory categories and also include the approval and attestation required by section 11(4) and (5). Public Safety Canada's guidance adds the practical filing rules: the report must be uploaded as a PDF through the federal portal and then posted prominently on the reporting entity's own website.

Section 12 matters because it creates an express mechanism for revised reports. A revised report must repeat the required content, state the date of revision, describe the changes made to the original report, and go through the same approval and attestation process. That makes revision control a legal issue rather than an informal editing choice. If facts change or an error is discovered, the correction process should be documented and routed back through the governing body.

For report assembly, the safest approach is to treat the questionnaire, PDF, website posting, and internal evidence pack as one integrated disclosure package. Inconsistencies across those layers create avoidable exposure. The law and guidance do not require perfection, but they do require a coherent, approved, and supportable account of what the entity actually did during the reporting year.

### Citations

- Supply Chains Act, s 11: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 11 (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-11.html)
- Supply Chains Act, s 12: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 12 (revised reports) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-12.html)
- PSC Entity Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)

## Offences, False Statements, and the Limited Role of Due Diligence

Sections 19 and 21 create the offence framework. They should be read carefully, because the due-diligence protection is narrower than many teams assume.

Section 19(1) makes it an offence to fail to comply with section 11 or other listed provisions, with exposure on summary conviction to a fine of up to $250,000. Section 19(2) separately creates an offence for knowingly making false or misleading statements or knowingly providing false or misleading information to the Minister or a designated person. That knowledge requirement is important: teams should not casually describe every reporting error as criminal, but they also should not overlook the specific risk created by knowing inaccuracies.

Section 21 should be read closely because it is where the Act expressly addresses due diligence. It says that, in a prosecution for an offence under subsection 19(1), proof that the offence was committed by an employee or agent is sufficient unless the accused establishes that they exercised due diligence to prevent its commission. In other words, the statutory due-diligence protection is tied to that employee-or-agent context for section 19(1) offences; it is not a blanket cure-all for every reporting problem or every knowingly false statement under section 19(2).

Public Safety Canada's 2025 report to Parliament is useful here because it shows that the federal system is tracking corrective measures, offences, and punishments as part of the Act's implementation. For reporting teams, the practical lesson is to maintain a real verification trail: source tables, review notes, sign-off history, and records showing what steps were taken to prevent filing or publication errors before the report went public.

### Citations

- Supply Chains Act, s 19: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 19 (offences and punishment) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-19.html)
- Supply Chains Act, s 21: Fighting Against Forced Labour and Child Labour in Supply Chains Act, s 21 (offence by employee or agent; due diligence) (https://laws-lois.justice.gc.ca/eng/acts/F-10.6/section-21.html)
- 2025 Parliament Report: Public Safety Canada, 2025 Annual Report to Parliament on the Fighting Against Forced Labour and Child Labour in Supply Chains Act (https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/2025-frcd-lbr-chld-lbr-spply-chns-ct-scnd-rprt/index-en.aspx)

---

# Risk Assessment & Heat Mapping

How official Canadian and international materials describe risk identification, prioritization, and the link between risk mapping and defensible supply-chain controls.

## What It Means to Identify Risk Under the Act

Public Safety Canada treats risk identification as a transparency exercise about potential exposure, not an admission that forced labour has been proven in a given supply chain.

Public Safety Canada's guidance is explicit that identifying a risk in activities or supply chains does not mean saying forced labour or child labour is actually being used. The point of the disclosure exercise is to show that the entity has examined how its activities, suppliers, goods, geographies, and business relationships could contribute to risk, and what steps it has taken in response.

The 2025 annual report to Parliament gives a useful picture of how reporting organizations are currently describing risk. It records that many entities are identifying risks tied to raw materials or commodities, sectors and industries, direct suppliers, and locations of operations or factories. That is valuable benchmarking for heat-map design because it shows what the regulator is seeing as the common anatomy of a risk analysis in the second reporting cycle.

The OECD Due Diligence Guidance adds the method that the Act itself does not spell out in detail. It supports proportionate, risk-based prioritization by severity and likelihood, and it expects the assessment to connect to prevention, mitigation, tracking, communication, and remediation. A useful heat map therefore should not end at a coloured score. It should lead into concrete control choices and review intervals.

### Citations

- PSC Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)
- 2025 Parliament Report: Public Safety Canada, 2025 Annual Report to Parliament on the Fighting Against Forced Labour and Child Labour in Supply Chains Act (https://www.publicsafety.gc.ca/cnt/rsrcs/pblctns/2025-frcd-lbr-chld-lbr-spply-chns-ct-scnd-rprt/index-en.aspx)
- OECD DDG 2018: OECD, Due Diligence Guidance for Responsible Business Conduct (2018) (https://www.oecd.org/en/publications/2018/02/oecd-due-diligence-guidance-for-responsible-business-conduct_c669bd57.html)

## Border Risk, Commodity Risk, and High-Risk Supply Chains

Risk mapping should reflect the legal reality that Canada bars imports made wholly or in part by forced labour and that trade-law commitments reinforce that prohibition.

Article 23.6 of CUSMA commits each Party to prohibit the importation of goods produced in whole or in part by forced or compulsory labour, including forced or compulsory child labour. Canada implemented that commitment through the forced-labour import prohibition reflected in tariff item 9897.00.00 and described in CBSA Memorandum D9-1-6.

The CBSA memorandum states plainly that goods mined, manufactured, or produced wholly or in part by forced labour are prohibited from entering Canada and that importers are responsible for conducting due diligence on their supply chains. That means risk mapping is not only a transparency exercise for annual reporting. It is also relevant to import compliance, detention risk, and downstream commercial disruption.

A legally grounded heat map should therefore flag not just broad geography or sector but also border-touching nodes: imported finished goods, imported components, high-risk commodities, and suppliers that are several tiers away but still materially connected to goods entering Canada. Public Safety Canada's guidance supports this by encouraging entities to explain how risks were identified and what sources or methods were used, including supply-chain mapping, questionnaires, audits, and stakeholder engagement.

### Citations

- CUSMA Art 23.6: Canada-United States-Mexico Agreement, Article 23.6 (Forced or Compulsory Labor) (https://www.international.gc.ca/trade-commerce/trade-agreements-accords-commerciaux/agr-acc/cusma-aceum/text-texte/23.aspx?lang=eng)
- CBSA D9-1-6: CBSA Memorandum D9-1-6, Goods manufactured or produced by prison or forced labour (https://www.cbsa-asfc.gc.ca/publications/dm-md/d9/d9-1-6-eng.html)
- PSC Guidance: Public Safety Canada, Guidance for entities (https://www.publicsafety.gc.ca/cnt/cntrng-crm/frcd-lbr-cndn-spply-chns/prpr-rprt-en.aspx)

---

# Policies & Governance

How internal policies, supplier codes, and governance mandates should be framed so they help evidence diligence instead of creating unsupported promises.

## Supplier Codes, Public Commitments, and the Risk of Overpromising

Canadian cases do not make every policy legally binding, but they show why companies should align their public commitments with what they can actually supervise and evidence.

Hudbay and Nevsun are often discussed together because both decisions keep attention on what a Canadian company itself is alleged to have done, directed, assumed, or represented. Neither case stands for the proposition that every code of conduct automatically creates liability. But together they illustrate why policies, public statements, and oversight claims can become relevant evidence in negligence or human-rights litigation when plaintiffs allege the company exercised meaningful control or responsibility.

That is why supplier codes and human-rights policies should be drafted with operational discipline. If a policy says the company audits suppliers, investigates red flags, requires remediation, or enforces escalation steps, there should be a working system behind those statements. A code that promises full oversight without the evidence, personnel, escalation routes, or remediation tools to support it can make the company's litigation posture worse rather than better.

The 2023 OECD Guidelines reinforce a more disciplined approach. They expect risk-based due diligence and emphasize prevention, mitigation, tracking, communication, and remediation. In policy design terms, that supports clear commitments, realistic scope, and explicit ownership. Strong policies are not the ones with the broadest language; they are the ones that match how the organization actually manages supplier risk.

### Citations

- 2013 ONSC 1414: Choc v. Hudbay Minerals Inc., 2013 ONSC 1414 (https://www.canlii.org/en/on/onsc/doc/2013/2013onsc1414/2013onsc1414.html)
- 2020 SCC 5: Nevsun Resources Ltd. v. Araya, 2020 SCC 5, [2020] 1 SCR 166 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/18169/index.do)
- OECD Guidelines 2023: OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023) (https://www.oecd.org/en/publications/2023/06/oecd-guidelines-for-multinational-enterprises-on-responsible-business-conduct_a0b49990.html)

## Board Mandates, Risk Ownership, and Governance Architecture

Governance policies should make it clear who owns supply-chain human-rights risk, how management reports upward, and what the board reviews before attestation.

National Policy 58-201 recommends that boards adopt written mandates acknowledging responsibility for stewardship of the issuer, including identifying principal risks and ensuring systems are in place to manage them. It also recommends codes of business conduct and ethics, ongoing director education, and a governance architecture that is explicit about risk oversight rather than informal or implied.

BCE and Peoples supply the jurisprudential context. They underscore that Canadian directors are expected to act in the corporation's best interests on an informed basis. In the S-211 context, those cases support treating forced-labour and child-labour exposure as a board-level risk topic that deserves defined reporting lines, regular management reporting, and documented review before sign-off on public reporting.

A strong governance policy set should therefore answer practical questions: which committee receives updates, who owns the risk register, what internal assurance is performed, what happens when a supplier incident is escalated, and what materials are provided to the governing body before it approves the annual report. Policies that answer those questions are not merely formal. They are part of the evidence that the entity actually governs the risk it reports on.

### Citations

- NP 58-201: National Policy 58-201, Effective Corporate Governance (https://www.osc.ca/en/securities-law/instruments-rules-policies/5/58-201/national-policy-np-58-201-effective-corporate-governance)
- 2008 SCC 69: BCE Inc. v. 1976 Debentureholders, 2008 SCC 69, [2008] 3 SCR 560 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/6238/index.do)
- 2004 SCC 68: Peoples Department Stores Inc. (Trustee of) v. Wise, 2004 SCC 68, [2004] 3 SCR 461 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/2184/index.do)

---

# Reference Systems & Compliance Frameworks

The international and Canadian frameworks most often used to structure a defensible S-211 program and explain how diligence should work in practice.

## Why the UN Guiding Principles and OECD Frameworks Matter

These are not Canadian statutes, but they are the leading reference systems for designing due diligence, remediation, and disclosure workflows that Canadian regulators and institutions recognize.

The UN Guiding Principles and the OECD responsible business conduct framework are the two most influential reference systems for modern supply-chain human-rights diligence. They set out a common structure: embed commitments, identify and assess adverse impacts, take action to prevent or mitigate them, track results, communicate about responses, and support remediation where appropriate.

These frameworks are especially useful because the Supply Chains Act requires reporting about due diligence, risk assessment, remediation, training, and effectiveness, but it does not prescribe one operating model. The OECD due-diligence steps and the UNGP architecture therefore give organizations a recognized way to organize policy, workflow, escalation, and recordkeeping across the reporting categories required by section 11.

Nevsun reinforces why these frameworks are more than window dressing in Canada. The Supreme Court's discussion of customary international law and the wider human-rights context helps explain why internationally recognized standards can become relevant when courts assess whether a company's approach to human-rights risk was serious, superficial, or plausibly negligent.

### Citations

- UNGP: OHCHR, Guiding Principles on Business and Human Rights, UN Doc A/HRC/17/31 (2011) (https://www.ohchr.org/Documents/Issues/Business/A.HRC.17.31.pdf)
- OECD DDG 2018: OECD, Due Diligence Guidance for Responsible Business Conduct (2018) (https://www.oecd.org/en/publications/2018/02/oecd-due-diligence-guidance-for-responsible-business-conduct_c669bd57.html)
- OECD Guidelines 2023: OECD Guidelines for Multinational Enterprises on Responsible Business Conduct (2023) (https://www.oecd.org/en/publications/2023/06/oecd-guidelines-for-multinational-enterprises-on-responsible-business-conduct_a0b49990.html)
- 2020 SCC 5: Nevsun Resources Ltd. v. Araya, 2020 SCC 5, [2020] 1 SCR 166 (https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/18169/index.do)

## Canada's Responsible Business Conduct Ecosystem: NCP, Strategy, and Supply Chains

Canada's own responsible-business-conduct system points companies toward due diligence, dispute resolution, and supply-chain risk management rather than minimal formal compliance alone.

Canada's responsible-business-conduct strategy explicitly describes due diligence as a way for Canadian companies to manage legal, operational, and reputational risk in their supply chains. It also treats responsible business conduct as a supply-chain issue across sectors, not just a niche problem for a small set of high-profile industries.

The National Contact Point material is useful because it shows the Canadian institutional machinery behind these expectations. Canada's NCP promotes the OECD Guidelines and can receive and process complaints about alleged non-observance by multinational enterprises operating in or from Canada. Its published materials explain that due diligence, human rights, disclosure, and employment issues are among the recurring themes in specific-instance work.

For systems design, the point is not that every S-211 reporting entity will end up in an NCP process. The point is that Canada itself points companies toward a broader diligence ecosystem built around the OECD Guidelines, UNGPs, complaint handling, and supply-chain risk management. A reference system that aligns with those authorities is therefore easier to defend than one built only around annual-report drafting.

### Citations

- Canada RBC Strategy: Global Affairs Canada, Responsible business conduct abroad: Canada's strategy for the future (2022-2027) (https://www.international.gc.ca/trade-commerce/rbc-cre/strategy-2022-strategie.aspx?lang=eng)
- Canada NCP About: Global Affairs Canada, About the National Contact Point for Responsible Business Conduct (https://www.international.gc.ca/trade-commerce/ncp-pcn/about-a-propos.aspx?lang=eng)
- Canada NCP 2024 Report: Global Affairs Canada, Canada's National Contact Point annual report 2024 (https://www.international.gc.ca/transparency-transparence/national-contact-point-contact-national/report-2024-rapport.aspx?lang=eng)
- RBC Abroad Portal: Global Affairs Canada, Responsible business conduct abroad (https://www.international.gc.ca/trade-commerce/rbc-cre/index.aspx?lang=eng)