Vol. 148, No. 14 — July 2, 2014
Registration
SOR/2014-153 June 13, 2014
AERONAUTICS ACT
Regulations Amending the Canadian Aviation Security Regulations, 2012 (Airport Security Programs)
P.C. 2014-678 June 12, 2014
His Excellency the Governor General in Council, on the recommendation of the Minister of Transport, pursuant to subsection 4.3(2) (see footnote a), sections 4.71 (see footnote b) and 4.9 (see footnote c), paragraphs 7.6(1)(a) (see footnote d) and (b) (see footnote e) and section 7.7 (see footnote f) of the Aeronautics Act (see footnote g), makes the annexed Regulations Amending the Canadian Aviation Security Regulations, 2012 (Airport Security Programs).
REGULATIONS AMENDING THE CANADIAN AVIATION SECURITY REGULATIONS, 2012 (AIRPORT SECURITY PROGRAMS)
AMENDMENTS
1. Section 1 of the Canadian Aviation Security Regulations, 2012 (see footnote 1) is replaced by the following:
Regulations overview
1. (1) These Regulations are the principal means of supplementing the legislative framework set out in sections 4.7 to 4.87 of the Act. They are designed to enhance preparedness for acts or attempted acts of unlawful interference with civil aviation and to facilitate the detection of, prevention of, response to and recovery from acts or attempted acts of unlawful interference with civil aviation.
Other instruments
(2) These Regulations are supplemented from time to time by other aviation security regulations and by security measures, interim orders, ministerial orders and emergency directions.
2. (1) The definition “security personnel” in section 3 of the Regulations is repealed.
(2) The definitions “regulatory requirement” and “restricted area” in section 3 of the Regulations are replaced by the following:
- “regulatory requirement”
« exigence réglementaire » - “regulatory requirement” means a requirement of
- (a) these Regulations;
- (b) any other aviation security regulations;
- (c) a security measure;
- (d) an interim order; or
- (e) a ministerial order.
- “restricted area”
« zone réglementée » - “restricted area” means any part of an aerodrome that is designated as a restricted area by the operator of the aerodrome in accordance with a regulatory requirement.
(3) Section 3 of the Regulations is amended by adding the following in alphabetical order:
“aerodrome security personnel”
« personnel de sûreté de l’aérodrome »
“aerodrome security personnel” means individuals who are employed by the operator of an aerodrome or by one of the operator’s contractors to prepare for, detect, prevent, respond to, and assist in the recovery from, acts or attempted acts of unlawful interference with civil aviation.
“sensitive information respecting aviation security”
« renseignements délicats relatifs à la sûreté aérienne »
“sensitive information respecting aviation security” means information — including information respecting risks, threats, vulnerabilities, systems, equipment, controls and procedures as well as plans and technical drawings — that could be used to exploit or create a vulnerability or to facilitate an act or attempted act of unlawful interference with civil aviation.
3. Section 8 of the Regulations is renumbered as subsection 8(1) and is amended by adding the following:
Notification by peace officer
(2) If the peace officer is authorized by the air carrier under section 531, the peace officer must present the identification and the form referred to in that section to the screening officers.
4. (1) Subsection 79(1) of the Regulations is replaced by the following:
Weapons
79. (1) Subject to subsections (2.1) to (4), a person must not carry or have access to a weapon on board an aircraft.
(2) Section 79 of the Regulations is amended by adding the following after subsection (2):
Exception — air carrier flights
(2.1) A Canadian in-flight security officer who is acting in the course of their duties may carry or have access to a loaded firearm on board an aircraft operated by an air carrier.
5. Division 3 of Part 4 of the Regulations is replaced by the following:
DIVISION 3
AVSEC LEVELS
Overview
Division overview
96. This Division sets out requirements respecting the implementation of additional safeguards in the event of heightened risk conditions.
AVSEC Level Requirements
Additional safeguards
97. If the AVSEC level is raised or maintained above level 1 for an aerodrome or any part of an aerodrome, the operator of the aerodrome must immediately take the following actions:
- (a) determine which additional safeguards are likely to mitigate the heightened risk condition;
- (b) notify any persons or organizations that have aviation security roles and responsibilities at the aerodrome and are affected by the heightened risk condition;
- (c) implement or continue to implement the additional safeguards; and
- (d) notify the Minister of the additional safeguards that are being or will be implemented.
Notification
98. When the AVSEC level is lowered for an aerodrome or any part of an aerodrome, the operator of the aerodrome must immediately notify the persons and organizations that were notified under paragraph 97(b).
Legal powers and obligations
99. For greater certainty, nothing in these Regulations authorizes the operator of an aerodrome to implement additional safeguards that are inconsistent with the operator’s legal powers and obligations.
[100 to 107 reserved]
6. The heading before section 111 of the Regulations is replaced by the following:
Security Official
7. The heading before section 113 and sections 113 and 114 of the Regulations are replaced by the following:
[113 and 114 reserved]
8. The reference “[115 to 119 reserved]” after the reference “[113 and 114 reserved]” of the Regulations is replaced by the following:
Aerodrome Security Personnel
Initial training
115. (1) The operator of an aerodrome must ensure that a member of the aerodrome security personnel does not carry out an aerodrome-related security role or responsibility at the aerodrome unless the member has received initial training in relation to that role or responsibility.
Training elements
(2) Initial training for aerodrome security personnel must include instruction and evaluation in relation to the topics set out below that are relevant to the aerodrome-related security roles and responsibilities of the personnel:
- (a) international instruments respecting aviation security, the aviation security provisions of the Act and regulatory requirements;
- (b) the security controls and procedures at the aerodrome where the personnel are employed;
- (c) systems and equipment at the aerodrome;
- (d) an overview of threats to aviation security and acts or attempted acts of unlawful interference with civil aviation;
- (e) the recognition of goods that are listed or described in TP 14628 or that pose an immediate threat to aviation security; and
- (f) the actions to be taken by the personnel in response to a threat to aviation security or an act or attempted act of unlawful interference with civil aviation.
Grandfathering
(3) Aerodrome security personnel who are employed at the aerodrome on the day on which this section comes into force are exempted from initial training in relation to any topic for which they have already received training.
Follow-up training
116. (1) The operator of an aerodrome must ensure that aerodrome security personnel receive follow-up training when any of the following circumstances arise:
- (a) a change is made in the aviation security provisions of the Act or in regulatory requirements and the change is relevant to the aerodrome-related security roles and responsibilities of the personnel;
- (b) a change is made in the security controls and procedures at the aerodrome where the personnel are employed and the change is relevant to the aerodrome-related security roles and responsibilities of the personnel;
- (c) a new or modified action is to be taken by the personnel in response to a threat to aviation security or an act or attempted act of unlawful interference with civil aviation; and
- (d) a significant risk or an emerging trend in aviation security is identified to the operator by the Minister and the risk or trend is relevant to the aerodrome-related security roles and responsibilities of the personnel.
Follow-up training
(2) The operator of an aerodrome must ensure that a member of the aerodrome security personnel receives follow-up training when the Minister or the operator identifies a shortcoming in the member’s performance when the member is carrying out security controls or following security procedures at the aerodrome.
Training elements
(3) Follow-up training must include
- (a) a review of any initial-training element related to the circumstance set out in subsection (1) or (2) that gave rise to the follow-up training; and
- (b) instruction and evaluation in relation to that circumstance.
On-the-job training
117. If, at an aerodrome, the initial or follow-up training of aerodrome security personnel includes on-the-job training, the operator of the aerodrome must ensure that the on-the-job training is provided by a person who has received that same training or has significant experience working as a member of the aerodrome security personnel at an aerodrome listed in Schedule 1.
Training records
118. (1) The operator of an aerodrome must ensure that, for each individual who receives training in accordance with section 115 or 116, there is a training record that includes
- (a) the individual’s employee group or contractor group, if applicable, and a description of the individual’s aerodrome-related security roles and responsibilities;
- (b) a description of all the training that the individual has received in accordance with section 115 or 116; and
- (c) evaluation results for all the training that the individual has received in accordance with section 115 or 116.
Record keeping
(2) The operator of the aerodrome must keep the training record for at least two years.
Ministerial access
(3) The operator of the aerodrome must make the training record available to the Minister on reasonable notice given by the Minister.
[119 reserved]
9. Sections 121 and 122 of the Regulations are replaced by the following:
Passenger screening facilities
121. The operator of an aerodrome must make facilities available for passenger screening checkpoints and must make at least one facility available for the private screening of passengers.
False declaration notice
122. (1) The operator of an aerodrome must post a notice at each passenger screening checkpoint stating that it is an offence for a person at the aerodrome to falsely declare
- (a) that the person is carrying a weapon, an explosive substance, an incendiary device or any other item that could be used to jeopardize the security of an aerodrome or aircraft, or that such an item is contained in goods in the person’s possession or control or in goods that the person has tendered or is tendering for screening or transportation; or
- (b) that another person who is at an aerodrome or on board an aircraft is carrying a weapon, an explosive substance, an incendiary device or any other item that could be used to jeopardize the security of an aerodrome or aircraft, or that such an item is contained in goods in the other person’s possession or control or in goods that the other person has tendered or is tendering for screening or transportation.
Official languages
(2) The notice must be clearly visible and be in at least both official languages.
10. Section 125 of the Regulations and the heading before it are replaced by the following:
Screening of Checked Baggage
Checked baggage screening facilities
125. The operator of an aerodrome must make facilities available for the screening of checked baggage and baggage intended to be checked baggage.
11. Section 139 of the Regulations is replaced by the following:
Prohibition
139. (1) If a person has been given notice, orally, in writing or by a sign, that access to a part of an aerodrome is prohibited or is limited to authorized persons, the person must not enter or remain in that part of the aerodrome without authorization.
Restricted areas
(2) The operator of an aerodrome may authorize a person to enter or remain in a restricted area if the requirements of Divisions 6 to 8 are met.
Non-public areas other than restricted areas
(3) The operator of an aerodrome may authorize a person to enter or remain in a part of the aerodrome that is not a public area but is not a restricted area if the safety of the aerodrome, persons at the aerodrome and aircraft is not jeopardized.
Non-public areas other than restricted areas
(4) A lessee at an aerodrome who has the use of, or is responsible for, a part of the aerodrome that is not a public area but is not a restricted area may authorize a person to enter or remain in that part of the aerodrome if the safety of the aerodrome, persons at the aerodrome and aircraft is not jeopardized.
12. Subsection 142(2) of the Regulations is replaced by the following:
Pilot’s licence
(2) A pilot’s licence issued under the Canadian Aviation Regulations is a document of entitlement for a restricted area that is used by general aviation, if the holder of the licence also holds a valid medical certificate of a category that is appropriate for that licence and
- (a) is acting in the course of their employment; or
- (b) requires access to an aircraft that they own or operate.
13. Section 155 of the Regulations is amended by adding the following after subsection (1):
Reason for deactivation
(1.1) If the operator of an aerodrome asks CATSA to deactivate a restricted area identity card, the operator must inform CATSA of the reason for the request.
14. Section 167 of the Regulations is renumbered as subsection 167(1) and is amended by adding the following:
Display of temporary passes
(2) A person to whom a temporary pass has been issued must not enter or remain in a restricted area unless they visibly display the pass on their outer clothing at all times.
15. Section 174 of the Regulations is repealed.
16. Divisions 9 to 11 of Part 4 of the Regulations are replaced by the following:
DIVISION 9
AIRPORT SECURITY PROGRAMS
Overview
Division overview
189. This Division sets out the regulatory framework for promoting a comprehensive, coordinated and integrated approach to airport security. The processes required under this Division are intended to facilitate the establishment and implementation of effective airport security programs that reflect the circumstances of each aerodrome.
Interpretation
Processes and procedures
190. For greater certainty, any reference to a process in this Division includes the procedures, if any, that are necessary to implement that process.
Airport Security Program Requirements
Requirement to establish and implement
191. (1) The operator of an aerodrome must establish and implement an airport security program.
Program requirements
(2) As part of its airport security program, the operator of an aerodrome must
- (a) define and document the aerodrome-related security roles and responsibilities assigned to each of the operator’s employee groups and contractor groups;
- (b) communicate the information referred to in paragraph (a) to the employees and contractors in those groups;
- (c) have a security policy statement that establishes an overall commitment and direction for aerodrome security and sets out the operator’s security objectives;
- (d) communicate the security policy statement in an accessible manner to all persons who are employed at the aerodrome or who require access to the aerodrome in the course of their employment;
- (e) establish and implement a process for responding to aerodrome-related security incidents and breaches in a coordinated manner that is intended to minimize their impact;
- (f) establish and implement a security awareness program that promotes a culture of security vigilance and awareness among the following persons:
- (i) persons who are employed at the aerodrome,
- (ii) crew members who are based at the aerodrome, and
- (iii) persons, other than crew members, who require access to the aerodrome in the course of their employment;
- (g) assess risk information and disseminate it within the operator’s organization for the purpose of informed decision-making about aviation security;
- (h) establish and implement a process for receiving, retaining, disclosing and disposing of sensitive information respecting aviation security in order to protect the information from unauthorized access;
- (i) identify sensitive information respecting aviation security and receive, retain, disclose and dispose of sensitive information respecting aviation security in a manner that protects the information from unauthorized access;
- (j) disclose sensitive information respecting aviation security to the following persons if they have been assigned aerodrome-related security roles and responsibilities and require the information to carry out those roles and responsibilities:
- (i) persons who are employed at the aerodrome, and
- (ii) persons who require access to the aerodrome in the course of their employment;
- (k) have a current scale map of the aerodrome that identifies all restricted areas, security barriers and restricted area access points; and
- (l) document how the operator achieves compliance with the aviation security provisions of the Act and the regulatory requirements that apply to the operator.
Other program requirements
(3) The following also form part of the airport security program:
- (a) the security official referred to in section 112;
- (b) the aerodrome security personnel training referred to in sections 115 and 116;
- (c) the security committee or other working group or forum referred to in section 195;
- (d) the multi-agency advisory committee referred to in section 196;
- (e) the airport security risk assessment referred to in section 197;
- (f) the strategic airport security plan referred to in section 202;
- (g) the emergency plan referred to in section 206; and
- (h) the security exercises referred to in sections 207 and 208.
[192 reserved]
Documentation
193. (1) The operator of an aerodrome must
- (a) keep documentation related to its airport security risk assessment and any review of it for at least five years;
- (b) keep documentation related to its strategic airport security plan and any amendment to it for at least five years; and
- (c) keep all other documentation related to its airport security program for at least two years.
Ministerial access
(2) The operator of the aerodrome must make the documentation available to the Minister on reasonable notice given by the Minister.
Requirement to amend
194. The operator of an aerodrome must amend its airport security program if the operator identifies, at the aerodrome, an aviation security risk that is not addressed by the program.
Committees
Security committee
195. (1) The operator of an aerodrome must have a security committee or other working group or forum that
- (a) advises the operator on the development of controls and processes that are necessary at the aerodrome in order to comply with the aviation security provisions of the Act and the regulatory requirements that apply to the operator;
- (b) helps coordinate the implementation of the controls and processes that are necessary at the aerodrome in order to comply with the aviation security provisions of the Act and the regulatory requirements that apply to the operator; and
- (c) promotes the sharing of information respecting the airport security program.
Terms of reference
(2) The operator of the aerodrome must manage the security committee or other working group or forum in accordance with written terms of reference that
- (a) identify its membership; and
- (b) define the roles and responsibilities of each member.
Records
(3) The operator of the aerodrome must keep records of the activities and decisions of the security committee or other working group or forum.
Multi-agency advisory committee
196. (1) The operator of an aerodrome must have a multi-agency advisory committee.
Membership
(2) The operator of the aerodrome must invite at least the following persons and organizations to be members of the multi-agency advisory committee:
- (a) the Department of Transport;
- (b) CATSA;
- (c) the police service with jurisdiction at the aerodrome;
- (d) the Royal Canadian Mounted Police;
- (e) the Canadian Security Intelligence Service; and
- (f) the Canada Border Services Agency.
Terms of reference
(3) The operator of the aerodrome must manage the multi-agency advisory committee in accordance with written terms of reference.
Objectives
(4) The objectives of the multi-agency advisory committee are
- (a) to advise the operator of the aerodrome on its airport security risk assessment and its strategic airport security plan; and
- (b) to promote the sharing of sensitive information respecting aviation security at the aerodrome.
Records
(5) The operator of the aerodrome must keep records of the activities and decisions of the multi-agency advisory committee.
Airport Security Risk Assessments
Airport security risk assessments
197. The operator of an aerodrome must have an airport security risk assessment that identifies, assesses and prioritizes aviation security risks and that includes the following elements:
- (a) a threat assessment that evaluates the probability that aviation security incidents will occur at the aerodrome;
- (b) a criticality assessment that prioritizes the areas, assets, infrastructure and operations at or associated with the aerodrome that most require protection from acts and attempted acts of unlawful interference with civil aviation;
- (c) a vulnerability assessment that considers the extent to which the areas, assets, infrastructure and operations at or associated with the aerodrome are susceptible to loss or damage and that evaluates this susceptibility in the context of the threat assessment; and
- (d) an impact assessment that, at a minimum, measures the consequences of an aviation security incident or potential aviation security incident in terms of
- (i) a decrease in public safety and security,
- (ii) financial and economic loss, and
- (iii) a loss of public confidence.
Submission for approval
198. The operator of an aerodrome must submit its airport security risk assessment to the Minister for approval, and must submit a new airport security risk assessment to the Minister within five years after the date of the most recent approval.
Requirement to consult
199. The operator of an aerodrome must consult its multi-agency advisory committee when the operator is
- (a) preparing its airport security risk assessment for submission to the Minister for approval; and
- (b) conducting a review of its airport security risk assessment.
Airport security risk assessment — annual review
200. (1) The operator of an aerodrome must conduct a review of its airport security risk assessment at least once a year.
Airport security risk assessment — other reviews
(2) The operator of the aerodrome must also conduct a review of its airport security risk assessment if
- (a) a special event that is scheduled to take place at the aerodrome could affect aerodrome security;
- (b) the operator is planning a change to the physical layout or operation of the aerodrome that could affect aviation security at the aerodrome;
- (c) an environmental or operational change at the aerodrome could affect aerodrome security;
- (d) a change in regulatory requirements could affect aerodrome security;
- (e) the operator identifies, at the aerodrome, a vulnerability that is not addressed in the assessment, or the Minister identifies such a vulnerability to the operator; or
- (f) the Minister informs the operator that there is a change in the threat environment that could result in a new or unaddressed medium to high risk.
Equivalency
(3) For greater certainty, a review conducted under subsection (2) counts as a review required under subsection (1).
Documentation
(4) When the operator of the aerodrome conducts a review of its airport security risk assessment, the operator must document
- (a) any decision to amend or to not amend the assessment or the operator’s risk-management strategy;
- (b) the reasons for that decision; and
- (c) the factors that were taken into consideration in making that decision.
Notification
(5) The operator of the aerodrome must notify the Minister if, as a result of a review of its airport security risk assessment, the operator amends the assessment
- (a) to include a new medium to high risk; or
- (b) to raise or lower the level of a risk within the medium to high range.
Approval
201. The Minister must approve an airport security risk assessment submitted by the operator of an aerodrome if
- (a) the assessment meets the requirements of section 197;
- (b) the assessment has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the operator has considered risk information provided by its multi-agency advisory committee;
- (d) the operator has considered all available and relevant information; and
- (e) the operator has not overlooked an aviation security risk that could affect the operation of the aerodrome.
Strategic Airport Security Plans
Strategic airport security plans
202. (1) The operator of an aerodrome must establish a strategic airport security plan that
- (a) summarizes the operator’s strategy to prepare for, detect, prevent, respond to and recover from acts or attempted acts of unlawful interference with civil aviation;
- (b) includes a risk-management strategy that addresses the medium to high aviation security risks identified and prioritized in the operator’s airport security risk assessment; and
- (c) sets out a menu of additional safeguards that are
- (i) intended to mitigate heightened risk conditions in a graduated manner, and
- (ii) consistent with the operator’s legal powers and obligations.
Menu of additional safeguards
(2) The menu of additional safeguards must
- (a) describe, by activity type and location, the safeguards in place at the aerodrome in respect of AVSEC level 1 operating conditions;
- (b) allow the rapid selection of additional safeguards by activity type or location; and
- (c) indicate the persons and organizations responsible for implementing each additional safeguard.
Activity types
(3) For the purposes of paragraphs (2)(a) and (b), the activity types must include
- (a) access controls;
- (b) monitoring and patrolling;
- (c) communications; and
- (d) other operational controls.
Locations
(4) For the purposes of paragraphs (2)(a) and (b), the locations must include
- (a) public areas of the aerodrome;
- (b) areas of the aerodrome that are not public areas but are not restricted areas; and
- (c) restricted areas.
Requirement to consult
203. The operator of an aerodrome must consult its multi-agency advisory committee when the operator
- (a) establishes its strategic airport security plan; and
- (b) amends its strategic airport security plan under subsection 205.2(1).
Requirement to submit
204. The operator of an aerodrome must submit its strategic airport security plan to the Minister for approval.
Requirement to implement
205. The operator of an aerodrome must, as soon as its strategic airport security plan is approved, implement its risk-management strategy.
Approval of plan
205.1 The Minister must approve a strategic airport security plan submitted by the operator of an aerodrome if
- (a) the plan meets the requirements of section 202;
- (b) the plan has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the plan is likely to enable the operator to prepare for, detect, prevent, respond to and recover from acts or attempted acts of unlawful interference with civil aviation;
- (d) the risk-management strategy is in proportion to the risks it addresses;
- (e) the operator has considered the advice of its multi-agency advisory committee;
- (f) the operator has not overlooked an aviation security risk that could affect the operation of the aerodrome;
- (g) the additional safeguards can be implemented rapidly and consistently;
- (h) the additional safeguards are consistent with existing rights and freedoms; and
- (i) the plan can be implemented without compromising aviation security.
Amendments
205.2 (1) The operator of an aerodrome may amend its strategic airport security plan at any time, but must do so if
- (a) the plan does not reflect the operator’s most recent airport security risk assessment;
- (b) the Minister informs the operator that there is a change in the threat environment that could result in a new or unaddressed medium to high risk;
- (c) the Minister informs the operator that there is a change in the threat environment that requires the addition or deletion of additional safeguards;
- (d) the Minister informs the operator that its risk-management strategy is not in proportion to a medium to high risk set out in the operator’s airport security risk assessment;
- (e) the operator identifies a deficiency in the plan; or
- (f) a change is made in the aviation security provisions of the Act or in regulatory requirements and the change affects the additional safeguards.
Documentation
(2) If the operator of the aerodrome amends its strategic airport security plan, the operator must document
- (a) the reason for the amendment; and
- (b) the factors that were taken into consideration in making that amendment.
Submission of amendment
(3) If the operator of the aerodrome amends its strategic airport security plan, the operator must, as soon as possible, submit the amendment to the Minister for approval.
Approval
(4) The Minister must approve an amendment if
- (a) in the case of an amendment to the summary required under paragraph 202(1)(a), the conditions set out in paragraphs 205.1(a) to (c) have been met;
- (b) in the case of an amendment to the riskmanagement strategy required under paragraph 202(1)(b), the conditions set out in paragraphs 205.1(a) to (f) and (i) have been met; and
- (c) in the case of an amendment to the menu of additional safeguards required under paragraph 202(1)(c), the conditions set out in paragraphs 205.1(a), (b) and (f) to (i) have been met.
Implementation
(5) If the operator of the aerodrome amends its risk-management strategy, the operator must implement the amended version of the strategy once it is approved by the Minister.
Emergency Plans
Plan requirements
206. (1) The operator of an aerodrome must establish an emergency plan that sets out the response procedures to be followed at the aerodrome for coordinated responses to the following emergencies:
- (a) bomb threats;
- (b) hijackings of aircraft; and
- (c) other acts of unlawful interference with civil aviation.
Response procedures
(2) The response procedures must
- (a) set out in detail the actions to be taken by the employees and contractors of the operator of the aerodrome and identify the responsibilities of all other persons or organizations involved, including, as applicable, the police, emergency response providers, air carriers, emergency coordination centre personnel and control tower or flight service station personnel;
- (b) include detailed procedures for the evacuation of air terminal buildings;
- (c) include detailed procedures for the search of air terminal buildings;
- (d) include detailed procedures for the handling and disposal of a suspected bomb; and
- (e) include detailed procedures for the detention on the ground of any aircraft involved in a bomb threat or hijacking.
Security Exercises
Operations-based security exercise
207. (1) The operator of an aerodrome must, at least once every two years, carry out an operations-based security exercise that
- (a) tests the effectiveness of the operator’s emergency plan in response to an act of unlawful interference with civil aviation and involves the persons and organizations referred to in the plan; and
- (b) tests the effectiveness of additional safeguards that the operator chooses from its menu of additional safeguards.
Equivalency
(2) If, in response to an aviation security incident, the Minister raises the AVSEC level for an aerodrome or any part of an aerodrome, the implementation of additional safeguards by the operator of the aerodrome counts as an operations-based security exercise for the purposes of subsection (1).
Discussion-based security exercise
208. (1) The operator of an aerodrome must, at least once a year, carry out a discussion-based security exercise that
- (a) tests the effectiveness of the operator’s emergency plan in response to an act of unlawful interference with civil aviation and involves the persons and organizations referred to in the plan; and
- (b) tests the effectiveness of additional safeguards that the operator chooses from its menu of additional safeguards.
Exception
(2) Despite subsection (1), the operator of an aerodrome is not required to carry out a discussion-based security exercise in any year in which it carries out an operations-based security exercise.
Notice
209. The operator of an aerodrome must give the Minister 60 days’ notice of any security exercise that the operator plans to carry out.
Records
Additional safeguards
210. (1) Each time additional safeguards are implemented at an aerodrome in order to mitigate heightened risk conditions related to aviation security, the operator of the aerodrome must create a record that includes
- (a) a description of the additional safeguards that were implemented;
- (b) an evaluation of the effectiveness of those additional safeguards; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the implementation of those additional safeguards.
Emergencies
(2) Each time an emergency referred to in subsection 206(1) occurs at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) a description of the emergency;
- (b) an evaluation of the effectiveness of the operator’s emergency plan; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the emergency.
Exercises
(3) Each time a security exercise is carried out at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) an outline of the exercise scenario;
- (b) an evaluation of the effectiveness of the exercise; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the exercise.
Corrective Actions
Corrective actions
211. Subject to section 212, the operator of an aerodrome must immediately take corrective actions to address a vulnerability that contributes to a heightened aviation security risk at the aerodrome and that
- (a) is identified to the operator by the Minister; or
- (b) is identified by the operator.
Corrective action plan
212. If a corrective action to be taken by the operator of an aerodrome under section 211 involves a phased approach, the operator must include in its airport security program a corrective action plan that sets out
- (a) the nature of the vulnerability to be addressed;
- (b) a rationale for the phased approach; and
- (c) a timetable setting out when each phase of the corrective action plan will be completed.
Disclosure of Information
Prohibition
213. A person other than the Minister must not disclose security-sensitive information that is created or used under this Division unless the disclosure is required by law or is necessary to comply or facilitate compliance with the aviation security provisions of the Act, regulatory requirements or the requirements of an emergency direction.
DIVISION 10
RESERVED
[214 to 223 reserved]
DIVISION 11
PRIMARY SECURITY LINE PARTNERS
Overview
Division overview
224. This Division sets out the role of a primary security line partner in supporting the establishment and implementation of an effective airport security program by the operator of an aerodrome.
Security Official
Interpretation
225. A security official of a primary security line partner at an aerodrome is an individual who is responsible for
- (a) coordinating and overseeing compliance with the regulatory requirements that apply to the partner under this Part; and
- (b) acting as the principal contact between the partner, the operator of the aerodrome and the Minister with respect to security matters, including compliance with the regulatory requirements that apply to the partner under this Part.
One security official at all times
226. (1) A primary security line partner at an aerodrome must have, at all times, at least one security official or acting security official.
Contact information
(2) The primary security line partner must provide the operator of the aerodrome and the Minister with
- (a) the name of each security official and acting security official; and
- (b) 24-hour contact information for those officials.
Support for Airport Security Programs
Requirements
227. At each aerodrome where a primary security line partner carries out operations, the partner must
- (a) define and document the aerodrome-related security roles and responsibilities assigned to each of the partner’s employee groups and contractor groups that require access to restricted areas at the aerodrome in the course of their employment;
- (b) communicate the information referred to in paragraph (a) to the employees and contractors in those groups and document how that information is communicated;
- (c) establish, implement and document a security awareness program that promotes a culture of security vigilance and awareness among its employees and contractors if the security awareness program of the operator of the aerodrome does not cover matters that are unique to the partner’s operations;
- (d) document the measures, procedures and processes that the partner has in place at the aerodrome to protect the security of restricted areas and to prevent breaches of the primary security line;
- (e) create a document that
- (i) describes each area on the aerodrome’s primary security line that is occupied by the partner,
- (ii) indicates the location of each restricted area access point in those areas, and
- (iii) describes those restricted area access points;
- (f) establish, implement and document a process for receiving, retaining, disclosing and disposing of sensitive information respecting aerodrome security in order to protect the information from unauthorized access; and
- (g) identify sensitive information respecting aviation security and receive, retain, disclose and dispose of sensitive information respecting aerodrome security in a manner that protects the information from unauthorized access.
[228 to 230 reserved]
Provision of Information
Provision of information to operator of aerodrome
231. (1) At each aerodrome where a primary security line partner carries out operations, the partner must provide the operator of the aerodrome with the information that is documented or created under this Division on reasonable notice given by the operator.
Provision to Minister
(2) The primary security line partner must provide the Minister with the same information on reasonable notice given by the Minister.
[232 and 233 reserved]
Corrective Actions
Corrective actions
234. (1) Subject to section 235, a primary security line partner must immediately take corrective actions to address a vulnerability that contributes to an aerodrome-related security risk and that
- (a) is identified to the partner by the Minister;
- (b) is identified to the partner by the operator of the aerodrome where the partner carries out operations; or
- (c) is identified by the partner.
Notification
(2) If a primary security line partner takes corrective actions at an aerodrome, the primary security line partner must immediately notify the operator of the aerodrome.
Corrective action plan
235. If a corrective action to be taken by a primary security line partner under section 234 involves a phased approach, the primary security line partner must provide the Minister and the operator of the aerodrome with a corrective action plan that sets out
- (a) the nature of the vulnerability to be addressed;
- (b) a rationale for the phased approach; and
- (c) a timetable setting out when each phase of the corrective action plan will be completed.
Disclosure of Information
Prohibition
235.1 A person other than the Minister must not disclose security-sensitive information that is created or used under this Division unless the disclosure is required by law or is necessary to comply or facilitate compliance with the aviation security provisions of the Act, regulatory requirements or the requirements of an emergency direction.
17. Division 3 of Part 5 of the Regulations is replaced by the following:
DIVISION 3
AVSEC LEVELS
Overview
Division overview
260. This Division sets out requirements respecting the implementation of additional safeguards in the event of heightened risk conditions.
AVSEC Level Requirements
Additional safeguards
261. If the AVSEC level is raised or maintained above level 1 for an aerodrome or any part of an aerodrome, the operator of the aerodrome must immediately take the following actions:
- (a) determine which additional safeguards are likely to mitigate the heightened risk condition;
- (b) notify any persons or organizations that have aviation security roles and responsibilities at the aerodrome and are affected by the heightened risk condition;
- (c) implement or continue to implement the additional safeguards; and
- (d) notify the Minister of the additional safeguards that are being or will be implemented.
Notification
262. When the AVSEC level is lowered for an aerodrome or any part of an aerodrome, the operator of the aerodrome must immediately notify the persons and organizations that were notified under paragraph 261(b).
Legal powers and obligations
263. For greater certainty, nothing in these Regulations authorizes the operator of an aerodrome to implement additional safeguards that are inconsistent with the operator’s legal powers and obligations.
[264 and 265 reserved]
18. The heading before section 269 of the Regulations is replaced by the following:
Security Official
19. The reference “[271 to 275 reserved]” after section 270 of the Regulations is replaced by the following:
Aerodrome Security Personnel
Initial training
271. (1) The operator of an aerodrome must ensure that a member of the aerodrome security personnel does not carry out an aerodrome-related security role or responsibility at the aerodrome unless the member has received initial training in relation to that role or responsibility.
Training elements
(2) Initial training for aerodrome security personnel must include instruction and evaluation in relation to the topics set out below that are relevant to the aerodrome-related security roles and responsibilities of the personnel:
- (a) international instruments respecting aviation security, the aviation security provisions of the Act and regulatory requirements;
- (b) the security controls and procedures at the aerodrome where the personnel are employed;
- (c) systems and equipment at the aerodrome;
- (d) an overview of threats to aviation security and acts or attempted acts of unlawful interference with civil aviation;
- (e) the recognition of goods that are listed or described in TP 14628 or that pose an immediate threat to aviation security; and
- (f) the actions to be taken by the personnel in response to a threat to aviation security or an act or attempted act of unlawful interference with civil aviation.
Grandfathering
(3) Aerodrome security personnel who are employed at the aerodrome on the day on which this section comes into force are exempted from initial training in relation to any topic for which they have already received training.
Follow-up training
272. (1) The operator of an aerodrome must ensure that aerodrome security personnel receive follow-up training when any of the following circumstances arise:
- (a) a change is made in the aviation security provisions of the Act or in regulatory requirements and the change is relevant to the aerodrome-related security roles and responsibilities of the personnel;
- (b) a change is made in the security controls and procedures at the aerodrome where the personnel are employed and the change is relevant to the aerodrome-related security roles and responsibilities of the personnel;
- (c) a new or modified action is to be taken by the personnel in response to a threat to aviation security or an act or attempted act of unlawful interference with civil aviation; and
- (d) a significant risk or an emerging trend in aviation security is identified to the operator by the Minister and the risk or trend is relevant to the aerodrome-related security roles and responsibilities of the personnel.
Follow-up training
(2) The operator of an aerodrome must ensure that a member of the aerodrome security personnel receives follow-up training when the Minister or the operator identifies a shortcoming in the member’s performance when the member is carrying out security controls or following security procedures at the aerodrome.
Training elements
(3) Follow-up training must include
- (a) a review of any initial-training element related to the circumstance set out in subsection (1) or (2) that gave rise to the follow-up training; and
- (b) instruction and evaluation in relation to that circumstance.
On-the-job training
273. If, at an aerodrome, the initial or follow-up training of aerodrome security personnel includes on-the-job training, the operator of the aerodrome must ensure that the on-the-job training is provided by a person who has received that same training or has significant experience working as a member of the aerodrome security personnel at an aerodrome listed in Schedule 1 or 2.
Training records
274. (1) The operator of an aerodrome must ensure that, for each individual who receives training in accordance with section 271 or 272, there is a training record that includes
- (a) the individual’s employee group or contractor group, if applicable, and a description of the individual’s aerodrome-related security roles and responsibilities;
- (b) a description of all the training that the individual has received in accordance with section 271 or 272; and
- (c) evaluation results for all the training that the individual has received in accordance with section 271 or 272.
Record keeping
(2) The operator of the aerodrome must keep the training record for at least two years.
Ministerial access
(3) The operator of the aerodrome must make the training record available to the Minister on reasonable notice given by the Minister.
[275 reserved]
20. Sections 277 and 278 of the Regulations are replaced by the following:
Passenger screening facilities
277. The operator of an aerodrome must make facilities available for passenger screening checkpoints and must make at least one facility available for the private screening of passengers.
False declaration notice
278. (1) The operator of an aerodrome must post a notice at each passenger screening checkpoint stating that it is an offence for a person at the aerodrome to falsely declare
- (a) that the person is carrying a weapon, an explosive substance, an incendiary device or any other item that could be used to jeopardize the security of an aerodrome or aircraft, or that such an item is contained in goods in the person’s possession or control or in goods that the person has tendered or is tendering for screening or transportation; or
- (b) that another person who is at an aerodrome or on board an aircraft is carrying a weapon, an explosive substance, an incendiary device or any other item that could be used to jeopardize the security of an aerodrome or aircraft, or that such an item is contained in goods in the other person’s possession or control or in goods that the other person has tendered or is tendering for screening or transportation.
Official languages
(2) The notice must be clearly visible and be in at least both official languages.
21. Section 281 of the Regulations and the heading before it are replaced by the following:
Screening of Checked Baggage
Checked baggage screening facilities
281. The operator of an aerodrome must make facilities available for the screening of checked baggage and baggage intended to be checked baggage.
22. Section 295 of the Regulations is replaced by the following:
Prohibition
295. (1) If a person has been given notice, orally, in writing or by a sign, that access to a part of an aerodrome is prohibited or is limited to authorized persons, the person must not enter or remain in that part of the aerodrome without authorization.
Restricted areas
(2) The operator of an aerodrome may authorize a person to enter or remain in a restricted area if the requirements of Divisions 6 to 8 are met.
Non-public areas other than restricted areas
(3) The operator of an aerodrome may authorize a person to enter or remain in a part of the aerodrome that is not a public area but is not a restricted area if the safety of the aerodrome, persons at the aerodrome and aircraft is not jeopardized.
Non-public areas other than restricted areas
(4) A lessee at an aerodrome who has the use of, or is responsible for, a part of the aerodrome that is not a public area but is not a restricted area may authorize a person to enter or remain in that part of the aerodrome if the safety of the aerodrome, persons at the aerodrome and aircraft is not jeopardized.
23. Subsection 298(2) of the Regulations is replaced by the following:
Pilot’s licence
(2) A pilot’s licence issued under the Canadian Aviation Regulations is a document of entitlement for a restricted area that is used by general aviation, if the holder of the licence also holds a valid medical certificate of a category that is appropriate for that licence and
- (a) is acting in the course of their employment; or
- (b) requires access to an aircraft that they own or operate.
24. Section 311 of the Regulations is amended by adding the following after subsection (1):
Reason for deactivation
(1.1) If the operator of an aerodrome asks CATSA to deactivate a restricted area identity card, the operator must inform CATSA of the reason for the request.
25. Section 323 of the Regulations is renumbered as subsection 323(1) and is amended by adding the following:
Display of temporary passes
(2) A person to whom a temporary pass has been issued must not enter or remain in a restricted area unless they visibly display the pass on their outer clothing at all times.
26. Section 330 of the Regulations is repealed.
27. Division 9 of Part 5 of the Regulations is replaced by the following:
DIVISION 9
AIRPORT SECURITY PROGRAMS
Overview
Division overview
345. This Division sets out the regulatory framework for promoting a comprehensive, coordinated and integrated approach to airport security. The processes required under this Division are intended to facilitate the establishment and implementation of effective airport security programs that reflect the circumstances of each aerodrome.
Interpretation
Processes and procedures
346. For greater certainty, any reference to a process in this Division includes the procedures, if any, that are necessary to implement that process.
Airport Security Program Requirements
Requirement to establish and implement
347. (1) The operator of an aerodrome must establish and implement an airport security program.
Program requirements
(2) As part of its airport security program, the operator of an aerodrome must
- (a) define and document the aerodrome-related security roles and responsibilities assigned to each of the operator’s employee groups and contractor groups;
- (b) communicate the information referred to in paragraph (a) to the employees and contractors in those groups;
- (c) have a security policy statement that establishes an overall commitment and direction for aerodrome security and sets out the operator’s security objectives;
- (d) communicate the security policy statement in an accessible manner to all persons who are employed at the aerodrome or who require access to the aerodrome in the course of their employment;
- (e) establish and implement a process for responding to aerodrome-related security incidents and breaches in a coordinated manner that is intended to minimize their impact;
- (f) establish and implement a security awareness program that promotes a culture of security vigilance and awareness among the following persons:
- (i) persons who are employed at the aerodrome,
- (ii) crew members who are based at the aerodrome, and
- (iii) persons, other than crew members, who require access to the aerodrome in the course of their employment;
- (g) assess risk information and disseminate it within the operator’s organization for the purpose of informed decision-making about aviation security;
- (h) establish and implement a process for receiving, retaining, disclosing and disposing of sensitive information respecting aviation security in order to protect the information from unauthorized access;
- (i) identify sensitive information respecting aviation security and receive, retain, disclose and dispose of sensitive information respecting aviation security in a manner that protects the information from unauthorized access;
- (j) disclose sensitive information respecting aviation security to the following persons if they have been assigned aerodrome-related security roles and responsibilities and require the information to carry out those roles and responsibilities:
- (i) persons who are employed at the aerodrome, and
- (ii) persons who require access to the aerodrome in the course of their employment;
- (k) have a current scale map of the aerodrome that identifies all restricted areas, security barriers and restricted area access points; and
- (l) document how the operator achieves compliance with the aviation security provisions of the Act and the regulatory requirements that apply to the operator.
Other program requirements
(3) The following also form part of the airport security program:
- (a) the security official referred to in section 270;
- (b) the aerodrome security personnel training referred to in sections 271 and 272;
- (c) the security committee or other working group or forum referred to in section 350;
- (d) if applicable, the multi-agency advisory committee referred to in section 353;
- (e) if applicable, the airport security risk assessment referred to in section 354;
- (f) if applicable, the strategic airport security plan referred to in section 359;
- (g) the menu of additional safeguards referred to in section 365;
- (h) the emergency plan referred to in section 367; and
- (i) the security exercises referred to in sections 368 and 369.
Documentation
348. (1) The operator of an aerodrome must
- (a) keep documentation related to its menu of additional safeguards and any amendment to it for at least five years;
- (b) if applicable, keep documentation related to its airport security risk assessment and any review of it for at least five years;
- (c) if applicable, keep documentation related to its strategic airport security plan and any amendment to it for at least five years; and
- (d) keep all other documentation related to its airport security program for at least two years.
Ministerial access
(2) The operator of the aerodrome must make the documentation available to the Minister on reasonable notice given by the Minister.
Requirement to amend
349. The operator of an aerodrome must amend its airport security program if the operator identifies, at the aerodrome, an aviation security risk that is not addressed by the program.
Security Committee
Security committee
350. (1) The operator of an aerodrome must have a security committee or other working group or forum that
- (a) advises the operator on the development of controls and processes that are necessary at the aerodrome in order to comply with the aviation security provisions of the Act and the regulatory requirements that apply to the operator;
- (b) helps coordinate the implementation of the controls and processes that are necessary at the aerodrome in order to comply with the aviation security provisions of the Act and the regulatory requirements that apply to the operator; and
- (c) promotes the sharing of information respecting the airport security program.
Terms of reference
(2) The operator of the aerodrome must manage the security committee or other working group or forum in accordance with written terms of reference that
- (a) identify its membership; and
- (b) define the roles and responsibilities of each member.
Records
(3) The operator of the aerodrome must keep records of the activities and decisions of the security committee or other working group or forum.
Requirements that Apply only if an Amendment to Schedule 2 or a Ministerial Order is made: Multi-agency Advisory Committee; Airport Security Risk Assessments; and Strategic Airport Security Plans
Application
351. (1) Subject to section 352, sections 353 to 364 apply to the operator of an aerodrome if
- (a) the Governor in Council makes an aviation security regulation adding an asterisk in Schedule 2 after the name of the aerodrome; or
- (b) the Minister makes an order stating that sections 353 to 364 apply to the operator.
Minister’s authority
(2) The Minister is authorized to make orders stating that sections 353 to 364 apply to operators of aerodromes listed in Schedule 2.
Transition
352. (1) Sections 353 and 356 do not apply to the operator of an aerodrome until the day that is six months after the earlier of
- (a) the day on which an aviation security regulation adding an asterisk in Schedule 2 after the name of the aerodrome comes into force, and
- (b) the day on which a ministerial order stating that sections 353 to 364 apply to the operator comes into force.
Transition
(2) Sections 354 and 355 do not apply to the operator of an aerodrome until the day that is 10 months after the earlier of
- (a) the day on which an aviation security regulation adding an asterisk in Schedule 2 after the name of the aerodrome comes into force, and
- (b) the day on which a ministerial order stating that sections 353 to 364 apply to the operator comes into force.
Transition
(3) Sections 359 and 361 do not apply to the operator of an aerodrome until the day that is 22 months after the earlier of
- (a) the day on which an aviation security regulation adding an asterisk in Schedule 2 after the name of the aerodrome comes into force, and
- (b) the day on which a ministerial order stating that sections 353 to 364 apply to the operator comes into force.
Multi-agency advisory committee
353. (1) The operator of an aerodrome must have a multi-agency advisory committee.
Membership
(2) The operator of the aerodrome must invite at least the following persons and organizations to be members of the multi-agency advisory committee:
- (a) the Department of Transport;
- (b) CATSA;
- (c) the police service with jurisdiction at the aerodrome;
- (d) the Royal Canadian Mounted Police;
- (e) the Canadian Security Intelligence Service; and
- (f) the Canada Border Services Agency.
Terms of reference
(3) The operator of the aerodrome must manage the multi-agency advisory committee in accordance with written terms of reference.
Objectives
(4) The objectives of the multi-agency advisory committee are
- (a) to advise the operator of the aerodrome on its airport security risk assessment and its strategic airport security plan; and
- (b) to promote the sharing of sensitive information respecting aviation security at the aerodrome.
Records
(5) The operator of the aerodrome must keep records of the activities and decisions of the multi-agency advisory committee.
Airport security risk assessments
354. The operator of an aerodrome must have an airport security risk assessment that identifies, assesses and prioritizes aviation security risks and that includes the following elements:
- (a) a threat assessment that evaluates the probability that aviation security incidents will occur at the aerodrome;
- (b) a criticality assessment that prioritizes the areas, assets, infrastructure and operations at or associated with the aerodrome that most require protection from acts and attempted acts of unlawful interference with civil aviation;
- (c) a vulnerability assessment that considers the extent to which the areas, assets, infrastructure and operations at or associated with the aerodrome are susceptible to loss or damage and that evaluates this susceptibility in the context of the threat assessment; and
- (d) an impact assessment that, at a minimum, measures the consequences of an aviation security incident or potential aviation security incident in terms of
- (i) a decrease in public safety and security,
- (ii) financial and economic loss, and
- (iii) a loss of public confidence.
Submission for approval
355. The operator of an aerodrome must submit its airport security risk assessment to the Minister for approval, and must submit a new airport security risk assessment to the Minister within five years after the date of the most recent approval.
Requirement to consult
356. The operator of an aerodrome must consult its multi-agency advisory committee when the operator is
- (a) preparing its airport security risk assessment for submission to the Minister for approval; and
- (b) conducting a review of its airport security risk assessment.
Airport security risk assessment — annual review
357. (1) The operator of an aerodrome must conduct a review of its airport security risk assessment at least once a year.
Airport security risk assessment — other reviews
(2) The operator of the aerodrome must also conduct a review of its airport security risk assessment if
- (a) a special event that is scheduled to take place at the aerodrome could affect aerodrome security;
- (b) the operator is planning a change to the physical layout or operation of the aerodrome that could affect aviation security at the aerodrome;
- (c) an environmental or operational change at the aerodrome could affect aerodrome security;
- (d) a change in regulatory requirements could affect aerodrome security;
- (e) the operator identifies, at the aerodrome, a vulnerability that is not addressed in the assessment, or the Minister identifies such a vulnerability to the operator; or
- (f) the Minister informs the operator that there is a change in the threat environment that could result in a new or unaddressed medium to high risk.
Equivalency
(3) For greater certainty, a review conducted under subsection (2) counts as a review required under subsection (1).
Documentation
(4) When the operator of the aerodrome conducts a review of its airport security risk assessment, the operator must document
- (a) any decision to amend or to not amend the assessment or the operator’s risk-management strategy;
- (b) the reasons for that decision; and
- (c) the factors that were taken into consideration in making that decision.
Notification
(5) The operator of the aerodrome must notify the Minister if, as a result of a review of its airport security risk assessment, the operator amends the assessment
- (a) to include a new medium to high risk; or
- (b) to raise or lower the level of a risk within the medium to high range.
Approval
358. The Minister must approve an airport security risk assessment submitted by the operator of an aerodrome if
- (a) the assessment meets the requirements of section 354;
- (b) the assessment has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the operator has considered risk information provided by its multi-agency advisory committee;
- (d) the operator has considered all available and relevant information; and
- (e) the operator has not overlooked an aviation security risk that could affect the operation of the aerodrome.
Strategic airport security plans
359. The operator of an aerodrome must establish a strategic airport security plan that
- (a) summarizes the operator’s strategy to prepare for, detect, prevent, respond to and recover from acts or attempted acts of unlawful interference with civil aviation; and
- (b) includes a risk-management strategy that addresses the medium to high aviation security risks identified and prioritized in the operator’s airport security risk assessment.
Requirement to consult
360. The operator of an aerodrome must consult its multi-agency advisory committee when the operator
- (a) establishes its strategic airport security plan; and
- (b) amends its strategic airport security plan under subsection 364(1).
Requirement to submit
361. The operator of an aerodrome must submit its strategic airport security plan to the Minister for approval.
Requirement to implement
362. The operator of an aerodrome must, as soon as its strategic airport security plan is approved, implement its risk-management strategy.
Approval of plan
363. The Minister must approve a strategic airport security plan submitted by the operator of an aerodrome if
- (a) the plan meets the requirements of section 359;
- (b) the plan has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the plan is likely to enable the operator to prepare for, detect, prevent, respond to and recover from acts or attempted acts of unlawful interference with civil aviation;
- (d) the risk-management strategy is in proportion to the risks it addresses;
- (e) the operator has considered the advice of its multi-agency advisory committee;
- (f) the operator has not overlooked an aviation security risk that could affect the operation of the aerodrome; and
- (g) the plan can be implemented without compromising aviation security.
Amendments
364. (1) The operator of an aerodrome may amend its strategic airport security plan at any time, but must do so if
- (a) the plan does not reflect the operator’s airport security risk assessment;
- (b) the Minister informs the operator that there is a change in the threat environment that could result in a new or unaddressed medium to high risk;
- (c) the Minister informs the operator that its risk-management strategy is not in proportion to a medium to high risk set out in the operator’s airport security risk assessment; or
- (d) the operator identifies a deficiency in the plan.
Documentation — risk-management strategy
(2) If the operator of the aerodrome amends its risk-management strategy, the operator must document
- (a) the reason for the amendment; and
- (b) the factors that were taken into consideration in making that amendment.
Documentation — strategic airport security plan
(3) If the operator of the aerodrome amends its strategic airport security plan, the operator must document
- (a) the reason for the amendment; and
- (b) the factors that were taken into consideration in making that amendment.
Submission of amendment
(4) If the operator of the aerodrome amends its strategic airport security plan, the operator must, as soon as possible, submit the amendment to the Minister for approval.
Approval
(5) The Minister must approve an amendment if
- (a) in the case of an amendment to the summary required under paragraph 359(a), the conditions set out in paragraphs 363(a) to (c) have been met; and
- (b) in the case of an amendment to the riskmanagement strategy required under paragraph 359(b), the conditions set out in section 363 have been met.
Implementation
(6) If the operator of the aerodrome amends its risk-management strategy, the operator must implement the amended version of the strategy once it is approved by the Minister.
Menu of Additional Safeguards
Requirement to establish
365. (1) The operator of an aerodrome must establish a menu of additional safeguards that are
- (a) intended to mitigate heightened risk conditions in a graduated manner; and
- (b) consistent with the operator’s legal powers and obligations.
Menu requirements
(2) The menu of additional safeguards must
- (a) describe, by activity type and location, the safeguards in place at the aerodrome in respect of AVSEC level 1 operating conditions;
- (b) allow the rapid selection of additional safeguards by activity type or location; and
- (c) indicate the persons and organizations responsible for implementing each additional safeguard.
Activity types
(3) For the purposes of paragraphs (2)(a) and (b), the activity types must include
- (a) access controls;
- (b) monitoring and patrolling;
- (c) communications; and
- (d) other operational controls.
Locations
(4) For the purposes of paragraphs (2)(a) and (b), the locations must include
- (a) public areas of the aerodrome;
- (b) areas of the aerodrome that are not public areas but are not restricted areas; and
- (c) restricted areas.
Requirement to submit
366. The operator of an aerodrome must submit its menu of additional safeguards to the Minister for approval.
Approval
366.1 The Minister must approve a menu of additional safeguards submitted by the operator of an aerodrome if
- (a) the menu meets the requirements of section 365;
- (b) the menu has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the additional safeguards can be implemented rapidly and consistently;
- (d) the additional safeguards are consistent with existing rights and freedoms; and
- (e) the additional safeguards can be implemented without compromising aviation security.
Amendments
366.2 (1) The operator of an aerodrome may amend its menu of additional safeguards at any time, but must do so if
- (a) the Minister informs the operator that there is a change in the threat environment that requires the addition or deletion of additional safeguards;
- (b) the operator identifies a deficiency in the menu; or
- (c) a change is made in the aviation security provisions of the Act or in regulatory requirements and the change affects the additional safeguards.
Requirement to consult
(2) If applicable, the operator of the aerodrome must consult its multi-agency advisory committee when amending its menu of additional safeguards.
Submission of amendment
(3) If the operator of the aerodrome amends its menu of additional safeguards, the operator must, as soon as possible, submit the amendment to the Minister for approval.
Approval
(4) The Minister must approve the amendment if the conditions set out in section 366.1 continue to be met.
Emergency Plans
Plan requirements
367. (1) The operator of an aerodrome must establish an emergency plan that sets out the response procedures to be followed at the aerodrome for coordinated responses to the following emergencies:
- (a) bomb threats;
- (b) hijackings of aircraft; and
- (c) other acts of unlawful interference with civil aviation.
Response procedures
(2) The response procedures must
- (a) set out in detail the actions to be taken by the employees and contractors of the operator of the aerodrome and identify the responsibilities of all other persons or organizations involved, including, as applicable, the police, emergency response providers, air carriers, emergency coordination centre personnel and control tower or flight service station personnel;
- (b) include detailed procedures for the evacuation of air terminal buildings;
- (c) include detailed procedures for the search of air terminal buildings;
- (d) include detailed procedures for the handling and disposal of a suspected bomb; and
- (e) include detailed procedures for the detention on the ground of any aircraft involved in a bomb threat or hijacking.
Security Exercises
Operations-based security exercise
368. (1) The operator of an aerodrome must, at least once every two years, carry out an operations-based security exercise that
- (a) tests the effectiveness of the operator’s emergency plan in response to an act of unlawful interference with civil aviation and involves the persons and organizations referred to in the plan; and
- (b) tests the effectiveness of additional safeguards that the operator chooses from its menu of additional safeguards.
Equivalency
(2) If, in response to an aviation security incident, the Minister raises the AVSEC level for an aerodrome or any part of an aerodrome, the implementation of additional safeguards by the operator of the aerodrome counts as an operations-based security exercise for the purposes of subsection (1).
Discussion-based security exercise
369. (1) The operator of an aerodrome must, at least once a year, carry out a discussion-based security exercise that
- (a) tests the effectiveness of the operator’s emergency plan in response to an act of unlawful interference with civil aviation and involves the persons and organizations referred to in the plan; and
- (b) tests the effectiveness of additional safeguards that the operator chooses from its menu of additional safeguards.
Exception
(2) Despite subsection (1), the operator of an aerodrome is not required to carry out a discussion-based security exercise in any year in which it carries out an operations-based security exercise.
Notice
370. The operator of an aerodrome must give the Minister 60 days’ notice of any security exercise that the operator plans to carry out.
Records
Additional safeguards
371. (1) Each time additional safeguards are implemented at an aerodrome in order to mitigate heightened risk conditions related to aviation security, the operator of the aerodrome must create a record that includes
- (a) a description of the additional safeguards that were implemented;
- (b) an evaluation of the effectiveness of those additional safeguards; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the implementation of those additional safeguards.
Emergencies
(2) Each time an emergency referred to in subsection 367(1) occurs at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) a description of the emergency;
- (b) an evaluation of the effectiveness of the operator’s emergency plan; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the emergency.
Exercises
(3) Each time a security exercise is carried out at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) an outline of the exercise scenario;
- (b) an evaluation of the effectiveness of the exercise; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the exercise.
Corrective Actions
Corrective actions
372. Subject to section 373, the operator of an aerodrome must immediately take corrective actions to address a vulnerability that contributes to a heightened aviation security risk at the aerodrome and that
- (a) is identified to the operator by the Minister; or
- (b) is identified by the operator.
Corrective action plan
373. If a corrective action to be taken by the operator of an aerodrome under section 372 involves a phased approach, the operator must include in its airport security program a corrective action plan that sets out
- (a) the nature of the vulnerability to be addressed;
- (b) a rationale for the phased approach; and
- (c) a timetable setting out when each phase of the corrective action plan will be completed.
Primary Security Line Partners
Provision of information to operator of aerodrome
374. (1) For the purpose of supporting the establishment and implementation of an airport security program by the operator of an aerodrome, a primary security line partner at the aerodrome must, on reasonable notice given by the operator, provide the operator with
- (a) information respecting the measures, procedures and processes that the partner has in place at the aerodrome to protect the security of restricted areas and to prevent breaches of the primary security line; and
- (b) a document that
- (i) describes each area on the aerodrome’s primary security line that is occupied by the partner,
- (ii) indicates the location of each restricted area access point in those areas, and
- (iii) describes those restricted area access points.
Provision of information to Minister
(2) The primary security line partner must provide the Minister with the information and the document on reasonable notice given by the Minister.
[375 to 379 reserved]
Disclosure of Information
Prohibition
380. A person other than the Minister must not disclose security-sensitive information that is created or used under this Division unless the disclosure is required by law or is necessary to comply or facilitate compliance with the aviation security provisions of the Act, regulatory requirements or the requirements of an emergency direction.
28. Division 3 of Part 6 of the Regulations is replaced by the following:
DIVISION 3
AVSEC LEVELS
Overview
Division overview
415. This Division sets out requirements respecting the implementation of additional safeguards in the event of heightened risk conditions.
AVSEC Level Requirements
Additional safeguards
416. If the AVSEC level is raised or maintained above level 1 for an aerodrome or any part of an aerodrome, the operator of the aerodrome must immediately take the following actions:
- (a) determine which additional safeguards are likely to mitigate the heightened risk condition;
- (b) notify any persons or organizations that have aviation security roles and responsibilities at the aerodrome and are affected by the heightened risk condition;
- (c) implement or continue to implement the additional safeguards; and
- (d) notify the Minister of the additional safeguards that are being or will be implemented.
Notification
417. When the AVSEC level is lowered for an aerodrome or any part of an aerodrome, the operator of the aerodrome must immediately notify the persons and organizations that were notified under paragraph 416(b).
Legal powers and obligations
418. For greater certainty, nothing in these Regulations authorizes the operator of an aerodrome to implement additional safeguards that are inconsistent with the operator’s legal powers and obligations.
[419 and 420 reserved]
29. The heading before section 424 of the Regulations is replaced by the following:
Security Official
30. The reference “[426 to 430 reserved]” after section 425 of the Regulations is replaced by the following:
Aerodrome Security Personnel
Initial training
426. (1) The operator of an aerodrome must ensure that a member of the aerodrome security personnel does not carry out an aerodrome-related security role or responsibility at the aerodrome unless the member has received initial training in relation to that role or responsibility.
Training elements
(2) Initial training for aerodrome security personnel must include instruction and evaluation in relation to the topics set out below that are relevant to the aerodrome-related security roles and responsibilities of the personnel:
- (a) international instruments respecting aviation security, the aviation security provisions of the Act and regulatory requirements;
- (b) the security controls and procedures at the aerodrome where the personnel are employed;
- (c) systems and equipment at the aerodrome;
- (d) an overview of threats to aviation security and acts or attempted acts of unlawful interference with civil aviation;
- (e) the recognition of goods that are listed or described in TP 14628 or that pose an immediate threat to aviation security; and
- (f) the actions to be taken by the personnel in response to a threat to aviation security or an act or attempted act of unlawful interference with civil aviation.
Grandfathering
(3) Aerodrome security personnel who are employed at the aerodrome on the day on which this section comes into force are exempted from initial training in relation to any topic for which they have already received training.
Follow-up training
427. (1) The operator of an aerodrome must ensure that aerodrome security personnel receive follow-up training when any of the following circumstances arise:
- (a) a change is made in the aviation security provisions of the Act or in regulatory requirements and the change is relevant to the aerodrome-related security roles and responsibilities of the personnel;
- (b) a change is made in the security controls and procedures at the aerodrome where the personnel are employed and the change is relevant to the aerodrome-related security roles and responsibilities of the personnel;
- (c) a new or modified action is to be taken by the personnel in response to a threat to aviation security or an act or attempted act of unlawful interference with civil aviation; and
- (d) a significant risk or an emerging trend in aviation security is identified to the operator by the Minister and the risk or trend is relevant to the aerodrome-related security roles and responsibilities of the personnel.
Follow-up training
(2) The operator of an aerodrome must ensure that a member of the aerodrome security personnel receives follow-up training when the Minister or the operator identifies a shortcoming in the member’s performance when the member is carrying out security controls or following security procedures at the aerodrome.
Training elements
(3) Follow-up training must include
- (a) a review of any initial-training element related to the circumstance set out in subsection (1) or (2) that gave rise to the follow-up training; and
- (b) instruction and evaluation in relation to that circumstance.
On-the-job training
428. If, at an aerodrome, the initial or follow-up training of aerodrome security personnel includes on-the-job training, the operator of the aerodrome must ensure that the on-the-job training is provided by a person who has received that same training or has significant experience working as a member of the aerodrome security personnel at an aerodrome listed in Schedule 1, 2 or 3.
Training records
429. (1) The operator of an aerodrome must ensure that, for each individual who receives training in accordance with section 426 or 427, there is a training record that includes
- (a) the individual’s employee group or contractor group, if applicable, and a description of the individual’s aerodrome-related security roles and responsibilities;
- (b) a description of all the training that the individual has received in accordance with section 426 or 427; and
- (c) evaluation results for all the training that the individual has received in accordance with section 426 or 427.
Record keeping
(2) The operator of the aerodrome must keep the training record for at least two years.
Ministerial access
(3) The operator of the aerodrome must make the training record available to the Minister on reasonable notice given by the Minister.
[430 reserved]
31. Sections 432 and 433 of the Regulations are replaced by the following:
Passenger screening facilities
432. The operator of an aerodrome must make facilities available for passenger screening checkpoints and must make at least one facility available for the private screening of passengers.
False declaration notice
433. (1) The operator of an aerodrome must post a notice at each passenger screening checkpoint stating that it is an offence for a person at the aerodrome to falsely declare
- (a) that the person is carrying a weapon, an explosive substance, an incendiary device or any other item that could be used to jeopardize the security of an aerodrome or aircraft, or that such an item is contained in goods in the person’s possession or control or in goods that the person has tendered or is tendering for screening or transportation; or
- (b) that another person who is at an aerodrome or on board an aircraft is carrying a weapon, an explosive substance, an incendiary device or any other item that could be used to jeopardize the security of an aerodrome or aircraft, or that such an item is contained in goods in the other person’s possession or control or in goods that the other person has tendered or is tendering for screening or transportation.
Official languages
(2) The notice must be clearly visible and be in at least both official languages.
32. Section 435 of the Regulations and the heading before it are replaced by the following:
Screening of Checked Baggage
Checked baggage screening facilities
435. The operator of an aerodrome must make facilities available for the screening of checked baggage and baggage intended to be checked baggage.
33. Section 449 of the Regulations is replaced by the following:
Prohibition
449. (1) If a person has been given notice, orally, in writing or by a sign, that access to a part of an aerodrome is prohibited or is limited to authorized persons, the person must not enter or remain in that part of the aerodrome without authorization.
Restricted areas
(2) The operator of an aerodrome may authorize a person to enter or remain in a restricted area if the requirements of Divisions 6 and 7 are met.
Non-public areas other than restricted areas
(3) The operator of an aerodrome may authorize a person to enter or remain in a part of the aerodrome that is not a public area but is not a restricted area if the safety of the aerodrome, persons at the aerodrome and aircraft is not jeopardized.
Non-public areas other than restricted areas
(4) A lessee at an aerodrome who has the use of, or is responsible for, a part of the aerodrome that is not a public area but is not a restricted area may authorize a person to enter or remain in that part of the aerodrome if the safety of the aerodrome, persons at the aerodrome and aircraft is not jeopardized.
34. Subsection 452(2) of the Regulations is replaced by the following:
Pilot’s licence
(2) A pilot’s licence issued under the Canadian Aviation Regulations is a document of entitlement for a restricted area that is used by general aviation, if the holder of the licence also holds a valid medical certificate of a category that is appropriate for that licence and
- (a) is acting in the course of their employment; or
- (b) requires access to an aircraft that they own or operate.
35. Division 8 of Part 6 of the Regulations is replaced by the following:
DIVISION 8
AIRPORT SECURITY PROGRAMS
Overview
Division overview
453. This Division sets out the regulatory framework for promoting a comprehensive, coordinated and integrated approach to airport security. The processes required under this Division are intended to facilitate the establishment and implementation of effective airport security programs that reflect the circumstances of each aerodrome.
Interpretation
Processes and procedures
454. For greater certainty, any reference to a process in this Division includes the procedures, if any, that are necessary to implement that process.
Airport Security Program Requirements
Requirement to establish and implement
455. (1) The operator of an aerodrome must establish and implement an airport security program.
Program requirements
(2) As part of its airport security program, the operator of an aerodrome must
- (a) define and document the aerodrome-related security roles and responsibilities assigned to each of the operator’s employee groups and contractor groups;
- (b) communicate the information referred to in paragraph (a) to the employees and contractors in those groups;
- (c) have a security policy statement that establishes an overall commitment and direction for aerodrome security and sets out the operator’s security objectives;
- (d) communicate the security policy statement in an accessible manner to all persons who are employed at the aerodrome or who require access to the aerodrome in the course of their employment;
- (e) establish and implement a process for responding to aerodrome-related security incidents and breaches in a coordinated manner that is intended to minimize their impact;
- (f) establish and implement a security awareness program that promotes a culture of security vigilance and awareness among the following persons:
- (i) persons who are employed at the aerodrome,
- (ii) crew members who are based at the aerodrome, and
- (iii) persons, other than crew members, who require access to the aerodrome in the course of their employment;
- (g) assess risk information and disseminate it within the operator’s organization for the purpose of informed decision-making about aviation security;
- (h) establish and implement a process for receiving, retaining, disclosing and disposing of sensitive information respecting aviation security in order to protect the information from unauthorized access;
- (i) identify sensitive information respecting aviation security and receive, retain, disclose and dispose of sensitive information respecting aviation security in a manner that protects the information from unauthorized access;
- (j) disclose sensitive information respecting aviation security to the following persons if they have been assigned aerodrome-related security roles and responsibilities and require the information to carry out those roles and responsibilities:
- (i) persons who are employed at the aerodrome, and
- (ii) persons who require access to the aerodrome in the course of their employment;
- (k) have a current scale map of the aerodrome that identifies all restricted areas, security barriers and restricted area access points; and
- (l) document how the operator achieves compliance with the aviation security provisions of the Act and the regulatory requirements that apply to the operator.
Other program requirements
(3) The following also form part of the airport security program:
- (a) the security official referred to in section 425;
- (b) the aerodrome security personnel training referred to in sections 426 and 427;
- (c) the security committee or other working group or forum referred to in section 458;
- (d) if applicable, the airport security risk assessment referred to in section 461;
- (e) if applicable, the strategic airport security plan referred to in section 466;
- (f) the menu of additional safeguards referred to in section 472;
- (g) the emergency plan referred to in section 474; and
- (h) the security exercises referred to in sections 475 and 476.
Documentation
456. (1) The operator of an aerodrome must
- (a) keep documentation related to its menu of additional safeguards and any amendment to it for at least five years;
- (b) if applicable, keep documentation related to its airport security risk assessment and any review of it for at least five years;
- (c) if applicable, keep documentation related to its strategic airport security plan and any amendment to it for at least five years; and
- (d) keep all other documentation related to its airport security program for at least two years.
Ministerial access
(2) The operator of the aerodrome must make the documentation available to the Minister on reasonable notice given by the Minister.
Requirement to amend
457. The operator of an aerodrome must amend its airport security program if the operator identifies, at the aerodrome, an aviation security risk that is not addressed by the program.
Security Committee
Security committee
458. (1) The operator of an aerodrome must have a security committee or other working group or forum that
- (a) advises the operator on the development of controls and processes that are necessary at the aerodrome in order to comply with the aviation security provisions of the Act and the regulatory requirements that apply to the operator;
- (b) helps coordinate the implementation of the controls and processes that are necessary at the aerodrome in order to comply with the aviation security provisions of the Act and the regulatory requirements that apply to the operator; and
- (c) promotes the sharing of information respecting the airport security program.
Terms of reference
(2) The operator of the aerodrome must manage the security committee or other working group or forum in accordance with written terms of reference that
- (a) identify its membership; and
- (b) define the roles and responsibilities of each member.
Records
(3) The operator of the aerodrome must keep records of the activities and decisions of the security committee or other working group or forum.
Requirements that Apply only if an Amendment to Schedule 3 or a Ministerial Order is made: Airport Security Risk Assessments and Strategic Airport Security Plans
Application
459. (1) Subject to section 460, sections 461 to 471 apply to the operator of an aerodrome if
- (a) the Governor in Council makes an aviation security regulation adding an asterisk in Schedule 3 after the name of the aerodrome; or
- (b) the Minister makes an order stating that sections 461 to 471 apply to the operator.
Minister’s authority
(2) The Minister is authorized to make orders stating that sections 461 to 471 apply to operators of aerodromes listed in Schedule 3.
Transition
460. (1) Sections 461 and 462 do not apply to the operator of an aerodrome until the day that is 10 months after the earlier of
- (a) the day on which an aviation security regulation adding an asterisk in Schedule 3 after the name of the aerodrome comes into force, and
- (b) the day on which a ministerial order stating that sections 461 to 471 apply to the operator comes into force.
Transition
(2) Sections 466 and 468 do not apply to the operator of an aerodrome until the day that is 22 months after the earlier of
- (a) the day on which an aviation security regulation adding an asterisk in Schedule 3 after the name of the aerodrome comes into force, and
- (b) the day on which a ministerial order stating that sections 461 to 471 apply to the operator comes into force.
Airport security risk assessments
461. The operator of an aerodrome must have an airport security risk assessment that identifies, assesses and prioritizes aviation security risks and that includes the following elements:
- (a) a threat assessment that evaluates the probability that aviation security incidents will occur at the aerodrome;
- (b) a criticality assessment that prioritizes the areas, assets, infrastructure and operations at or associated with the aerodrome that most require protection from acts and attempted acts of unlawful interference with civil aviation;
- (c) a vulnerability assessment that considers the extent to which the areas, assets, infrastructure and operations at or associated with the aerodrome are susceptible to loss or damage and that evaluates this susceptibility in the context of the threat assessment; and
- (d) an impact assessment that, at a minimum, measures the consequences of an aviation security incident or potential aviation security incident in terms of
- (i) a decrease in public safety and security,
- (ii) financial and economic loss, and
- (iii) a loss of public confidence.
Submission for approval
462. The operator of an aerodrome must submit its airport security risk assessment to the Minister for approval, and must submit a new airport security risk assessment to the Minister within five years after the date of the most recent approval.
Requirement to consult
463. The operator of an aerodrome must consult its security committee or other working group or forum when the operator is
- (a) preparing its airport security risk assessment for submission to the Minister for approval; and
- (b) conducting a review of its airport security risk assessment.
Airport security risk assessment — annual review
464. (1) The operator of an aerodrome must conduct a review of its airport security risk assessment at least once a year.
Airport security risk assessment — other reviews
(2) The operator of the aerodrome must also conduct a review of its airport security risk assessment if
- (a) a special event that is scheduled to take place at the aerodrome could affect aerodrome security;
- (b) the operator is planning a change to the physical layout or operation of the aerodrome that could affect aviation security at the aerodrome;
- (c) an environmental or operational change at the aerodrome could affect aerodrome security;
- (d) a change in regulatory requirements could affect aerodrome security;
- (e) the operator identifies, at the aerodrome, a vulnerability that is not addressed in the assessment, or the Minister identifies such a vulnerability to the operator; or
- (f) the Minister informs the operator that there is a change in the threat environment that could result in a new or unaddressed medium to high risk.
Equivalency
(3) For greater certainty, a review conducted under subsection (2) counts as a review required under subsection (1).
Documentation
(4) When the operator of the aerodrome conducts a review of its airport security risk assessment, the operator must document
- (a) any decision to amend or to not amend the assessment or the operator’s risk-management strategy;
- (b) the reasons for that decision; and
- (c) the factors that were taken into consideration in making that decision.
Notification
(5) The operator of the aerodrome must notify the Minister if, as a result of a review of its airport security risk assessment, the operator amends the assessment
- (a) to include a new medium to high risk; or
- (b) to raise or lower the level of a risk within the medium to high range.
Approval
465. The Minister must approve an airport security risk assessment submitted by the operator of an aerodrome if
- (a) the assessment meets the requirements of section 461;
- (b) the assessment has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the operator has considered the advice of its security committee or other working group or forum;
- (d) the operator has considered all available and relevant information; and
- (e) the operator has not overlooked an aviation security risk that could affect the operation of the aerodrome.
Strategic airport security plans
466. The operator of an aerodrome must establish a strategic airport security plan that
- (a) summarizes the operator’s strategy to prepare for, detect, prevent, respond to and recover from acts or attempted acts of unlawful interference with civil aviation; and
- (b) includes a risk-management strategy that addresses the medium to high aviation security risks identified and prioritized in the operator’s airport security risk assessment.
Requirement to consult
467. The operator of an aerodrome must consult its security committee or other working group or forum when establishing its strategic airport security plan.
Requirement to submit
468. The operator of an aerodrome must submit its strategic airport security plan to the Minister for approval.
Requirement to implement
469. The operator of an aerodrome must, as soon as its strategic airport security plan is approved, implement its risk-management strategy.
Approval of plan
470. The Minister must approve a strategic airport security plan submitted by the operator of an aerodrome if
- (a) the plan meets the requirements of section 466;
- (b) the plan has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the plan is likely to enable the operator to prepare for, detect, prevent, respond to and recover from acts or attempted acts of unlawful interference with civil aviation;
- (d) the risk-management strategy is in proportion to the risks it addresses;
- (e) the operator has considered the advice of its security committee or other working group or forum;
- (f) the operator has not overlooked an aviation security risk that could affect the operation of the aerodrome; and
- (g) the plan can be implemented without compromising aviation security.
Amendments
471. (1) The operator of an aerodrome may amend its strategic airport security plan at any time, but must do so if
- (a) the plan does not reflect the operator’s airport security risk assessment;
- (b) the Minister informs the operator that there is a change in the threat environment that could result in a new or unaddressed medium to high risk;
- (c) the Minister informs the operator that its risk-management strategy is not in proportion to a medium to high risk set out in the operator’s airport security risk assessment; or
- (d) the operator identifies a deficiency in the plan.
Documentation — risk-management strategy
(2) If the operator of the aerodrome amends its risk-management strategy, the operator must document
- (a) the reason for the amendment; and
- (b) the factors that were taken into consideration in making that amendment.
Documentation — strategic airport security plan
(3) If the operator of the aerodrome amends its strategic airport security plan, the operator must document
- (a) the reason for the amendment; and
- (b) the factors that were taken into consideration in making that amendment.
Submission of amendment
(4) If the operator of the aerodrome amends its strategic airport security plan, the operator must, as soon as possible, submit the amendment to the Minister for approval.
Approval
(5) The Minister must approve an amendment if
- (a) in the case of an amendment to the summary required under paragraph 466(a), the conditions set out in paragraphs 470(a) to (c) have been met; and
- (b) in the case of an amendment to the riskmanagement strategy required under paragraph 466(b), the conditions set out in section 470 have been met.
-
Implementation
(6) If the operator of the aerodrome amends its risk-management strategy, the operator must implement the amended version of the strategy once it is approved by the Minister.
Menu of Additional Safeguards
Requirement to establish
472. (1) The operator of an aerodrome must establish a menu of additional safeguards that are
- (a) intended to mitigate heightened risk conditions in a graduated manner; and
- (b) consistent with the operator’s legal powers and obligations.
Menu requirements
(2) The menu of additional safeguards must
- (a) describe, by activity type and location, the safeguards in place at the aerodrome in respect of AVSEC level 1 operating conditions;
- (b) allow the rapid selection of additional safeguards by activity type or location; and
- (c) indicate the persons and organizations responsible for implementing each additional safeguard.
Activity types
(3) For the purposes of paragraphs (2)(a) and (b), the activity types must include
- (a) access controls;
- (b) monitoring and patrolling;
- (c) communications; and
- (d) other operational controls.
Locations
(4) For the purposes of paragraphs (2)(a) and (b), the locations must include
- (a) public areas of the aerodrome;
- (b) areas of the aerodrome that are not public areas but are not restricted areas; and
- (c) restricted areas.
Requirement to submit
473. The operator of an aerodrome must submit its menu of additional safeguards to the Minister for approval.
Approval
473.1 The Minister must approve a menu of additional safeguards submitted by the operator of an aerodrome if
- (a) the menu meets the requirements of section 472;
- (b) the menu has been reviewed by an executive within the operator’s organization who is responsible for security;
- (c) the additional safeguards can be implemented rapidly and consistently;
- (d) the additional safeguards are consistent with existing rights and freedoms; and
- (e) the additional safeguards can be implemented without compromising aviation security.
Amendments
473.2 (1) The operator of an aerodrome may amend its menu of additional safeguards at any time, but must do so if
- (a) the Minister informs the operator that there is a change in the threat environment that requires the addition or deletion of additional safeguards;
- (b) the operator identifies a deficiency in the menu; or
- (c) a change is made in the aviation security provisions of the Act or in regulatory requirements and the change affects the additional safeguards.
Submission of amendment
(2) If the operator of the aerodrome amends its menu of additional safeguards, the operator must, as soon as possible, submit the amendment to the Minister for approval.
Approval
(3) The Minister must approve the amendment if the conditions set out in section 473.1 continue to be met.
Emergency Plans
Plan requirements
474. (1) The operator of an aerodrome must establish an emergency plan that sets out the response procedures to be followed at the aerodrome for coordinated responses to the following emergencies:
- (a) bomb threats;
- (b) hijackings of aircraft; and
- (c) other acts of unlawful interference with civil aviation.
Response procedures
(2) The response procedures must
- (a) set out in detail the actions to be taken by the employees and contractors of the operator of the aerodrome and identify the responsibilities of all other persons or organizations involved, including, as applicable, the police, emergency response providers, air carriers, emergency coordination centre personnel and control tower or flight service station personnel;
- (b) include detailed procedures for the evacuation of air terminal buildings;
- (c) include detailed procedures for the search of air terminal buildings;
- (d) include detailed procedures for the handling and disposal of a suspected bomb; and
- (e) include detailed procedures for the detention on the ground of any aircraft involved in a bomb threat or hijacking.
Security Exercises
Operations-based security exercise
475. (1) The operator of an aerodrome must, at least once every four years, carry out an operations-based security exercise that
- (a) tests the effectiveness of the operator’s emergency plan in response to an act of unlawful interference with civil aviation and involves the persons and organizations referred to in the plan; and
- (b) tests the effectiveness of additional safeguards that the operator chooses from its menu of additional safeguards.
Equivalency
(2) If, in response to an aviation security incident, the Minister raises the AVSEC level for an aerodrome or any part of an aerodrome, the implementation of additional safeguards by the operator of the aerodrome counts as an operations-based security exercise for the purposes of subsection (1).
Discussion-based security exercise
476. (1) The operator of an aerodrome must, at least once a year, carry out a discussion-based security exercise that
- (a) tests the effectiveness of the operator’s emergency plan in response to an act of unlawful interference with civil aviation and involves the persons and organizations referred to in the plan; and
- (b) tests the effectiveness of additional safeguards that the operator chooses from its menu of additional safeguards.
Exception
(2) Despite subsection (1), the operator of an aerodrome is not required to carry out a discussion-based security exercise in any year in which it carries out an operations-based security exercise.
Notice
477. The operator of an aerodrome must give the Minister 60 days’ notice of any security exercise that the operator plans to carry out.
Records
Additional safeguards
478. (1) Each time additional safeguards are implemented at an aerodrome in order to mitigate heightened risk conditions related to aviation security, the operator of the aerodrome must create a record that includes
- (a) a description of the additional safeguards that were implemented;
- (b) an evaluation of the effectiveness of those additional safeguards; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the implementation of those additional safeguards.
Emergencies
(2) Each time an emergency referred to in subsection 474(1) occurs at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) a description of the emergency;
- (b) an evaluation of the effectiveness of the operator’s emergency plan; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the emergency.
Exercises
(3) Each time a security exercise is carried out at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) an outline of the exercise scenario;
- (b) an evaluation of the effectiveness of the exercise; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the exercise.
Corrective Actions
Corrective actions
479. Subject to section 480, the operator of an aerodrome must immediately take corrective actions to address a vulnerability that contributes to a heightened aviation security risk at the aerodrome and that
- (a) is identified to the operator by the Minister; or
- (b) is identified by the operator.
Corrective action plan
480. If a corrective action to be taken by the operator of an aerodrome under section 479 involves a phased approach, the operator must include in its airport security program a corrective action plan that sets out
- (a) the nature of the vulnerability to be addressed;
- (b) a rationale for the phased approach; and
- (c) a timetable setting out when each phase of the corrective action plan will be completed.
Primary Security Line Partners
Provision of information to operator of aerodrome
481. (1) For the purpose of supporting the establishment and implementation of an airport security program by the operator of an aerodrome, a primary security line partner at the aerodrome must, on reasonable notice given by the operator, provide the operator with
- (a) information respecting the measures, procedures and processes that the partner has in place at the aerodrome to protect the security of restricted areas and to prevent breaches of the primary security line; and
- (b) a document that
- (i) describes each area on the aerodrome’s primary security line that is occupied by the partner,
- (ii) indicates the location of each restricted area access point in those areas, and
- (iii) describes those restricted area access points.
Provision of information to Minister
(2) The primary security line partner must provide the Minister with the information and the document on reasonable notice given by the Minister.
[482 and 483 reserved]
Disclosure of Information
Prohibition
484. A person other than the Minister must not disclose security-sensitive information that is created or used under this Division unless the disclosure is required by law or is necessary to comply or facilitate compliance with the aviation security provisions of the Act, regulatory requirements or the requirements of an emergency direction.
36. Section 508 of the Regulations is replaced by the following:
Application
508. This Division applies in respect of aerodromes that are not listed in Schedules 1, 2 or 3 and that serve air carriers.
37. Sections 516 to 519 of the Regulations are replaced by the following:
Application
516. This Division applies in respect of aerodromes that are not listed in Schedules 1, 2 or 3 and that serve
- (a) air carriers that conduct scheduled or non-scheduled services to or from an air terminal building at any of those aerodromes; or
- (b) air carriers that conduct scheduled international services from any of those aerodromes.
Emergency Plans and Security Exercises
Plan requirements
517. (1) The operator of an aerodrome must establish an emergency plan that sets out the response procedures to be followed at the aerodrome for coordinated responses to the following emergencies:
- (a) bomb threats; and
- (b) hijackings of aircraft.
Response procedures
(2) The response procedures must
- (a) set out in detail the actions to be taken by the employees and contractors of the operator of the aerodrome and identify the responsibilities of all other persons or organizations involved, including, as applicable, the police, emergency response providers, air carriers, emergency coordination centre personnel and control tower or flight service station personnel;
- (b) include, if applicable, detailed procedures for the evacuation of air terminal buildings;
- (c) include, if applicable, detailed procedures for the search of air terminal buildings;
- (d) include detailed procedures for the handling and disposal of a suspected bomb; and
- (e) include detailed procedures for the detention on the ground of any aircraft involved in a bomb threat or hijacking.
Discussion-based security exercise
518. The operator of an aerodrome must, at least once a year, carry out a discussion-based security exercise that tests the effectiveness of the operator’s emergency plan in response to a bomb threat or a hijacking of an aircraft and involves the persons and organizations referred to in the plan.
Record of emergencies
519. (1) Each time an emergency referred to in subsection 517(1) occurs at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) a description of the emergency;
- (b) an evaluation of the effectiveness of the operator’s emergency plan; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the emergency.
Record of exercises
(2) Each time a security exercise is carried out at an aerodrome, the operator of the aerodrome must create a record that includes
- (a) an outline of the exercise scenario;
- (b) an evaluation of the effectiveness of the exercise; and
- (c) a description of any actions that are planned in order to address deficiencies identified during the exercise.
Ministerial access
(3) The operator of an aerodrome must make the records referred to in subsections (1) and (2) available to the Minister on reasonable notice given by the Minister.
38. Subsection 527(1) of the Regulations is replaced by the following:
Transport of loaded firearms
527. (1) An air carrier must not knowingly allow a person, other than a Canadian in-flight security officer who is acting in the course of their duties, to transport a loaded firearm on board an aircraft.
39. (1) Paragraph 531(a) of the English version of the Regulations is replaced by the following:
- (a) the peace officer, while acting in the course of their duties, requires access to the firearm immediately before, during or immediately after the flight;
(2) Section 531 of the Regulations is amended by striking out “and” at the end of paragraph (d), by adding “and” at the end of paragraph (e) and by adding the following after paragraph (e):
- (f) the air carrier provides the peace officer with the original or a copy of the completed form referred to in paragraph (d).
40. Paragraphs 532(1)(a) and (b) of the Regulations are replaced by the following:
- (a) inform the pilot-in-command of the aircraft by means of the original or a copy of the completed form referred to in paragraph 531(d); and
- (b) subject to subsection (2), inform the crew members assigned to the flight or the aircraft and any other peace officer on board the aircraft.
41. The heading before section 766 of the Regulations is replaced by the following:
DIVISION 1
IDENTITY VERIFICATION SYSTEM
42. The reference “[768 to 796 reserved]” after section 767 of the Regulations is replaced by the following:
[768 to 777 reserved]
DIVISION 2
AVSEC LEVELS
Application
778. This Division applies in respect of aerodromes listed in Schedules 1 to 3 or in respect of any part of those aerodromes.
Level 1
779. Unless it is raised, lowered or maintained in accordance with this Division, the AVSEC level for an aerodrome or any part of an aerodrome is level 1. At that level, normal operating conditions apply.
Level 2
780. The Minister must raise or lower to level 2 the AVSEC level for an aerodrome or any part of an aerodrome if
- (a) the Minister is made aware of a heightened risk condition related to an elevated risk; and
- (b) it is likely, based on available information, that additional safeguards at the aerodrome or a part of the aerodrome will mitigate the heightened risk condition.
Level 3
781. The Minister must raise to level 3 the AVSEC level for an aerodrome or any part of an aerodrome if
- (a) the Minister is made aware of a heightened risk condition related to a critical or imminent risk; and
- (b) it is likely, based on available information, that additional safeguards at the aerodrome or a part of the aerodrome will mitigate the heightened risk condition.
Requirement to lower level
782. The Minister must, as soon as a heightened risk condition no longer applies, lower to level 1 an AVSEC level that has been raised for an aerodrome or any part of an aerodrome.
Maintaining a level
783. The Minister is authorized to maintain an AVSEC level that has been raised for an aerodrome or any part of an aerodrome if the criteria for raising the AVSEC level continue to apply.
Notification
784. If the Minister raises, lowers or maintains the AVSEC level for an aerodrome or any part of an aerodrome, the Minister must immediately notify the operator of the aerodrome. The notice must
- (a) include information about the heightened risk condition; and
- (b) specify a date on which the AVSEC level is likely to return to level 1.
Multiple aerodromes
785. For greater certainty, nothing in this Division prohibits the Minister from raising, lowering or maintaining the AVSEC level for more than one aerodrome at a time.
[786 to 796 reserved]
43. Section 800 of the Regulations is replaced by the following:
Notice requirements
800. A notice referred to in subsection 7.7(1) of the Act must
- (a) be in writing;
- (b) set out the particulars of the alleged contravention;
- (c) state that the person on whom the notice is served or to whom it is sent has the option of paying the amount specified in the notice or filing with the Tribunal a request for a review of the alleged contravention or the amount of the penalty;
- (d) state that payment of the amount specified in the notice will be accepted by the Minister in satisfaction of the amount of the penalty for the alleged contravention and that no further proceedings under Part I of the Act will be taken against the person on whom the notice in respect of that contravention is served or to whom it is sent;
- (e) state that the person on whom the notice is served or to whom it is sent will be provided with an opportunity consistent with procedural fairness and natural justice to present evidence before the Tribunal and make representations in relation to the alleged contravention if the person files a request for a review with the Tribunal; and
- (f) state that the person on whom the notice is served or to whom it is sent will be deemed to have committed the contravention set out in the notice if the person fails to pay the amount specified in the notice and fails to file a request for a review with the Tribunal within the prescribed period.
44. Part 15 of the Regulations is replaced by the following:
PART 15
TRANSITIONAL PROVISIONS
CLASS 1 AERODROMES
Operators
801. (1) Sections 196 and 199 do not apply to the operator of an aerodrome until December 15, 2014.
Operators
(2) Sections 197 and 198 do not apply to the operator of an aerodrome until March 15, 2015.
Operators
(3) The following provisions do not apply to the operator of an aerodrome until April 15, 2015:
- (a) sections 115 to 118; and
- (b) paragraph 206(1)(c).
Operators
(4) Sections 202 and 204 do not apply to the operator of an aerodrome until February 15, 2016.
Operators
(5) The following provisions do not apply to the operator of an aerodrome until May 15, 2016:
- (a) sections 97 and 98;
- (b) section 205;
- (c) paragraph 207(1)(b); and
- (d) paragraph 208(1)(b).
CLASS 2 AERODROMES
Operators
802. (1) The following provisions do not apply to the operator of an aerodrome until April 15, 2015:
- (a) sections 271 to 274; and
- (b) paragraph 367(1)(c).
Operators
(2) Sections 365 and 366 do not apply to the operator of an aerodrome until April 15, 2016.
Operators
(3) The following provisions do not apply to the operator of an aerodrome until September 15, 2016:
- (a) sections 261 and 262;
- (b) paragraph 368(1)(b); and
- (c) paragraph 369(1)(b).
CLASS 3 AERODROMES
Operators
803. (1) The following provisions do not apply to the operator of an aerodrome until April 15, 2015:
- (a) sections 426 to 429; and
- (b) paragraph 474(1)(c).
Operators
(2) Sections 472 and 473 do not apply to the operator of an aerodrome until September 15, 2016.
Operators
(3) The following provisions do not apply to the operator of an aerodrome until March 15, 2017:
- (a) sections 416 and 417;
- (b) paragraph 475(1)(b); and
- (c) paragraph 476(1)(b).
45. Schedule 1 to the Regulations is amended by replacing the section references after the heading “SCHEDULE 1” with the following:
(Paragraph 2(d) and sections 3, 6, 82, 83, 117, 273, 428, 505, 506, 508, 516 and 778)
46. Schedule 2 to the Regulations is amended by replacing the section references after the heading “SCHEDULE 2” with the following:
(Paragraph 2(e), sections 3, 246, 247 and 273, paragraph 351(1)(a), subsection 351(2), paragraphs 352(1)(a) and (2)(a) and sections 428, 505, 506, 508, 516 and 778)
47. Schedule 2 to the English version of the Regulations is amended by replacing the reference “Saskatoon (John D. Diefenbaker International)” opposite the reference “CYXE” with “Saskatoon (John G. Diefenbaker International)”.
48. Schedule 2 to the Regulations is amended by replacing the reference “Whitehorse (Erik Neilsen International)” opposite the reference “CYXY” with “Whitehorse (Erik Nielsen International)”.
49. Schedule 3 to the Regulations is amended by replacing the section references after the heading “SCHEDULE 3” with the following:
(Paragraph 2(f), sections 401, 402, and 428, paragraph 459(1)(a), subsection 459(2), paragraphs 460(1)(a) and (2)(a) and sections 505, 506, 508, 516 and 778)
50. Schedule 4 to the Regulations is amended by adding the following after the reference “Section 95”:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Division 3 — AVSEC Levels | ||
Section 97 | 25,000 | |
Section 98 | 10,000 |
51. The references “Subsection 114(1)” and “Subsection 114(2)” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in column 3 are replaced by the following:
Column 1 Designated Provision |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|
Subsection 115(1) | 25,000 |
Subsection 116(1) | 25,000 |
Subsection 116(2) | 25,000 |
Section 117 | 25,000 |
Subsection 118(1) | 10,000 |
Subsection 118(2) | 10,000 |
Subsection 118(3) | 10,000 |
52. The references “Subsection 121(1)” and “Section 122” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in column 3 are replaced by the following:
Column 1 Designated Provision |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|
Section 121 | 25,000 |
Subsection 122(1) | 25,000 |
53. The reference “Subsection 125(1)” in column 1 of Schedule 4 to the Regulations and the corresponding amount in column 3 are replaced by the following:
Column 1 Designated Provision |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|
Section 125 | 25,000 |
54. Schedule 4 to the Regulations is amended by adding the following after the reference “Subsection 155(1)”:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Subsection 155(1.1) | 25,000 |
55. The reference “Section 167” in column 1 of Schedule 4 to the Regulations and the corresponding amount in column 2 are replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
---|---|
Subsection 167(1) | 5,000 |
Subsection 167(2) | 5,000 |
56. The reference “Section 174” in column 1 of Schedule 4 to the Regulations and the corresponding amount in column 3 are repealed.
57. The references “Paragraph 191(2)(m)” to “Subsection 212(1)” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in columns 2 and 3 are replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Paragraph 193(1)(a) | 25,000 | |
Paragraph 193(1)(b) | 25,000 | |
Paragraph 193(1)(c) | 10,000 | |
Subsection 193(2) | 25,000 | |
Section 194 | 25,000 | |
Subsection 195(1) | 10,000 | |
Subsection 195(2) | 10,000 | |
Subsection 195(3) | 10,000 | |
Section 197 | 25,000 | |
Section 198 | 25,000 | |
Subsection 200(1) | 25,000 | |
Subsection 200(2) | 25,000 | |
Subsection 200(3) | 25,000 | |
Subsection 200(4) | 25,000 | |
Subsection 200(5) | 25,000 | |
Subsection 202(1) | 25,000 | |
Section 204 | 25,000 | |
Section 205 | 25,000 | |
Subsection 205.2(1) | 25,000 | |
Subsection 205.2(2) | 25,000 | |
Subsection 205.2(3) | 25,000 | |
Subsection 205.2(5) | 25,000 | |
Subsection 206(1) | 25,000 | |
Subsection 207(1) | 25,000 | |
Subsection 208(1) | 25,000 | |
Section 209 | 10,000 | |
Subsection 210(1) | 10,000 | |
Subsection 210(2) | 10,000 | |
Subsection 210(3) | 10,000 | |
Section 211 | 25,000 | |
Section 212 | 25,000 |
58. The references “Paragraph 225(a)” to “Subsection 235(1)” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in columns 2 and 3 are replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Subsection 226(1) | 5,000 | 25,000 |
Subsection 226(2) | 5,000 | 25,000 |
Paragraph 227(a) | 5,000 | 25,000 |
Paragraph 227(b) | 5,000 | 25,000 |
Paragraph 227(c) | 5,000 | 25,000 |
Paragraph 227(d) | 5,000 | 25,000 |
Paragraph 227(e) | 5,000 | 25,000 |
Paragraph 227(f) | 5,000 | 25,000 |
Paragraph 227(g) | 5,000 | 25,000 |
Subsection 231(1) | 5,000 | 25,000 |
Subsection 231(2) | 5,000 | 25,000 |
Subsection 234(1) | 5,000 | 25,000 |
Subsection 234(2) | 5,000 | 25,000 |
Section 235 | 5,000 | 25,000 |
Section 235.1 | 5,000 | 25,000 |
59. Schedule 4 to the Regulations is amended by adding the following after the reference “Section 259”:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Division 3 — AVSEC Levels | ||
Section 261 | 25,000 | |
Section 262 | 10,000 |
60. Schedule 4 to the Regulations is amended by adding the following after the reference “Subsection 270(2)”:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Subsection 271(1) | 25,000 | |
Subsection 272(1) | 25,000 | |
Subsection 272(2) | 25,000 | |
Section 273 | 25,000 | |
Subsection 274(1) | 10,000 | |
Subsection 274(2) | 10,000 | |
Subsection 274(3) | 10,000 |
61. The references “Subsection 277(1)” and “Section 278” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in column 3 are replaced by the following:
Column 1 Designated Provision |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|
Section 277 | 25,000 |
Subsection 278(1) | 25,000 |
62. The reference “Subsection 281(1)” in column 1 of Schedule 4 to the Regulations and the corresponding amount in column 3 are replaced by the following:
Column 1 Designated Provision |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|
Section 281 | 25,000 |
63. The portion of column 2 of Schedule 4 to the Regulations opposite the references “Subsection 290(1)” and “Subsection 290(2)” in column 1 is replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
---|---|
Subsection 290(1) | 5,000 |
Subsection 290(2) | 5,000 |
64. Schedule 4 to the Regulations is amended by adding the following after the reference “Subsection 311(1)”:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Subsection 311(1.1) | 25,000 |
65. The reference “Section 323” in column 1 of Schedule 4 to the Regulations and the corresponding amount in column 2 are replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
---|---|
Subsection 323(1) | 5,000 |
Subsection 323(2) | 5,000 |
66. The reference “Section 330” in column 1 of Schedule 4 to the Regulations and the corresponding amount in column 3 are repealed.
67. The references “Paragraph 347(2)(m)” to “Section 373” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in columns 2 and 3 are replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Paragraph 348(1)(a) | 25,000 | |
Paragraph 348(1)(b) | 25,000 | |
Paragraph 348(1)(c) | 25,000 | |
Paragraph 348(1)(d) | 10,000 | |
Subsection 348(2) | 25,000 | |
Section 349 | 25,000 | |
Subsection 350(1) | 10,000 | |
Subsection 350(2) | 10,000 | |
Subsection 350(3) | 10,000 | |
Section 354 | 25,000 | |
Section 355 | 25,000 | |
Subsection 357(1) | 25,000 | |
Subsection 357(2) | 25,000 | |
Subsection 357(3) | 25,000 | |
Subsection 357(4) | 25,000 | |
Subsection 357(5) | 25,000 | |
Section 359 | 25,000 | |
Section 361 | 25,000 | |
Section 362 | 25,000 | |
Subsection 364(1) | 25,000 | |
Subsection 364(2) | 25,000 | |
Subsection 364(3) | 25,000 | |
Subsection 364(4) | 25,000 | |
Subsection 364(6) | 25,000 | |
Subsection 365(1) | 25,000 | |
Section 366 | 25,000 | |
Subsection 366.2(1) | 25,000 | |
Subsection 366.2(2) | 25,000 | |
Subsection 366.2(3) | 25,000 | |
Subsection 367(1) | 25,000 | |
Subsection 368(1) | 25,000 | |
Subsection 369(1) | 25,000 | |
Section 370 | 10,000 | |
Subsection 371(1) | 10,000 | |
Subsection 371(2) | 10,000 | |
Subsection 371(3) | 10,000 | |
Section 372 | 25,000 | |
Section 373 | 25,000 |
68. Schedule 4 to the Regulations is amended by adding the following after the reference “Section 414”:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Division 3 — AVSEC Levels | ||
Section 416 | 25,000 | |
Section 417 | 10,000 |
69. Schedule 4 to the Regulations is amended by adding the following after the reference “Subsection 425(2)”:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Subsection 426(1) | 25,000 | |
Subsection 427(1) | 25,000 | |
Subsection 427(2) | 25,000 | |
Section 428 | 25,000 | |
Subsection 429(1) | 10,000 | |
Subsection 429(2) | 10,000 | |
Subsection 429(3) | 10,000 |
70. The references “Subsection 432(1)” and “Section 433” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in column 3 are replaced by the following:
Column 1 Designated Provision |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|
Section 432 | 25,000 |
Subsection 433(1) | 25,000 |
71. The reference “Subsection 435(1)” in column 1 of Schedule 4 to the Regulations and the corresponding amount in column 3 are replaced by the following:
Column 1 Designated Provision |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|
Section 435 | 25,000 |
72. The references “Paragraph 455(2)(m)” to “Section 480” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in columns 2 and 3 are replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Paragraph 456(1)(a) | 25,000 | |
Paragraph 456(1)(b) | 25,000 | |
Paragraph 456(1)(c) | 25,000 | |
Paragraph 456(1)(d) | 10,000 | |
Subsection 456(2) | 25,000 | |
Section 457 | 25,000 | |
Subsection 458(1) | 10,000 | |
Subsection 458(2) | 10,000 | |
Subsection 458(3) | 10,000 | |
Section 461 | 25,000 | |
Section 462 | 25,000 | |
Subsection 464(1) | 25,000 | |
Subsection 464(2) | 25,000 | |
Subsection 464(3) | 25,000 | |
Subsection 464(4) | 25,000 | |
Subsection 464(5) | 25,000 | |
Section 466 | 25,000 | |
Section 468 | 25,000 | |
Section 469 | 25,000 | |
Subsection 471(1) | 25,000 | |
Subsection 471(2) | 25,000 | |
Subsection 471(3) | 25,000 | |
Subsection 471(4) | 25,000 | |
Subsection 471(6) | 25,000 | |
Subsection 472(1) | 25,000 | |
Section 473 | 25,000 | |
Subsection 473.2(1) | 10,000 | |
Subsection 473.2(2) | 25,000 | |
Subsection 474(1) | 25,000 | |
Subsection 475(1) | 25,000 | |
Subsection 476(1) | 25,000 | |
Section 477 | 10,000 | |
Subsection 478(1) | 10,000 | |
Subsection 478(2) | 10,000 | |
Subsection 478(3) | 10,000 | |
Section 479 | 25,000 | |
Section 480 | 25,000 |
73. The portion of columns 2 and 3 of Schedule 4 to the Regulations opposite the reference “Section 518” in column 1 is replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Section 518 | 3,000 | 10,000 |
74. The reference “Section 519” in column 1 of Schedule 4 to the Regulations and the corresponding amounts in columns 2 and 3 are replaced by the following:
Column 1 Designated Provision |
Column 2 Maximum Amount Payable ($) Individual |
Column 3 Maximum Amount Payable ($) Corporation |
---|---|---|
Subsection 519(1) | 3,000 | 10,000 |
Subsection 519(2) | 3,000 | 10,000 |
Subsection 519(3) | 3,000 | 10,000 |
75. The Regulations are amended by replacing “security personnel” with “aerodrome security personnel” in the following provisions:
- (a) section 108;
- (b) section 266; and
- (c) section 421.
COMING INTO FORCE
76. These Regulations come into force on the day on which they are registered.
REGULATORY IMPACT ANALYSIS STATEMENT
(This statement is not part of the Regulations.)
Executive summary
Issues: Aviation security is a dynamic field in which threats and risks are constantly evolving. Inflexible security processes and practices may become predictable and, therefore, less effective. Security regulation must adopt a systemic approach to achieve effective and efficient aviation security. To be most effective in this dynamic environment, regulation must allow for proactive approaches to aviation security through coordination of security mandates and formalized information sharing, appropriate training of specified personnel, standardized risk assessment and security planning that includes preparing rapid short-term responses in anticipation of heightened levels of threat and risk. Canada must also continue to align its aviation security framework with international standards. With these amendments, Transport Canada is continuing its revitalizing of the Canadian Aviation Security Regulations, 2012 to further enhance airport security programs and increase regulatory efficiency.
Description: The Amendments complete the introduction of aviation security programs for Canada’s airports designated for security screening, introducing enhanced requirements that include establishing a national aviation security “AVSEC” level system to communicate a change in the level of risk to industry and to require a short-term, graduated and scalable/adaptable response from airport operators to align to this escalation in risk.
The Amendments also introduce core elements of a security program for airports, such as
- airport security risk assessments to identify and prioritize risks;
- strategic airport security plans detailing how identified risks will be managed;
- additional safeguards proactively developed by operators in order to prepare for changes in the AVSEC levels system;
- training requirements for security personnel that further reflect international recommended practices;
- enhanced emergency plans and security exercise requirements to further build readiness and capacity; and
- implementation of multi-agency advisory committees at Canada’s largest airports to facilitate aviation security information sharing.
The Amendments also address issues of clarity, consistency and duplication.
Cost-benefit statement: The Amendments are estimated to result in $11.6 million in costs (present value) over 25 years, in addition to any potential, unknown costs that could arise based on the outcomes of the security assessment and the resulting implementation of strategic airport security plans. If the Amendments prevent just one significant act of unlawful interference with civil aviation, however, they could result in benefits as high as $223 billion. Under the Amendments, significant costs will only be incurred where there are significant risks and when they enable airports to manage these risks in an as effective and efficient manner as possible. It is therefore expected that the Amendments will result in a net benefit to Canadians.
“One-for-One” Rule and small business lens: The “One-for-One” Rule applies with the annualized administrative cost to be offset estimated at $198 among 89 airports. In application of the small business lens, Transport Canada has chosen a targeted option that aligns compliance costs with underlying risk, and this has resulted in a reduction of the overall burden on small businesses being reduced by more than 80% from what was originally proposed.
Domestic and international coordination and cooperation: Canada is a member state of the International Civil Aviation Organization and is committed to meet international standards, one of which is to embed aviation security program requirements into domestic legislation. This proposal, combined with the foundational aviation security program requirements for airports introduced in the new Canadian Aviation Security Regulations, 2012 in January 2012, will allow Canada to further meet and exceed this international standard.
Background
Transport Canada and its aviation security partners continually work to maintain and improve one of the most secure and efficient aviation systems in the world. While aviation security requirements largely evolved in reaction to specific aviation security incidents, it is time to set in place regulations that enable more proactive management of aviation security. Since 2009, Transport Canada has consulted extensively, and developed a plan to streamline, rationalize and modernize the aviation security regulatory framework, to increase international credibility, and reduce compliance burden on regulated entities by simplifying and clarifying regulatory objectives. Due to the complexities of such a plan and based on requests from industry, this review work has been divided into a number of amendments packages including this one, which represents the second set of amendments to the Canadian Aviation Security Regulations, 2012.
Aviation security must be adaptable and proactive in the face of evolving threats and risks. The design and performance of aviation security regulation does not take place in a static threat or technological environment. Consequently, regulation needs to promote a programs-based approach to aviation security in Canada in order to further build the capacity to respond to new and emerging threats and risks while avoiding reactive regulation that leads to cumulative compliance burden and regulatory complexity. This approach is apparent in security programming requirements for operators for their areas of responsibility, and can be achieved through management-based regulation, or performance-based regulation. Each intends to foster innovation and efficiency by prescribing either the implementation of a system for industry management of security (management-based regulation) or by prescribing the desired security objective in regulatory requirements (performancebased regulation). However, such regulation does not prescribe how the regulated entity must achieve that system or objective.
Third-party reports and independent audits have recommended that Canada further harmonize its Regulations with Annex 17 to the Convention on International Civil Aviation (Chicago Convention). The International Civil Aviation Organization calls on member states to set requirements for their aviation industry to establish, implement and maintain written aviation security programs pursuant to Annex 17.
Regulated airport security programs have been undertaken in two phases after extensive consultation with stakeholders in order to facilitate compliance and ease compliance burden. While airport security program requirements form the most significant portion of this regulatory amendment package, other regulatory enhancements are included as part of Transport Canada’s continued work to rationalize and modernize its regulations. Furthermore, following the publication of foundational elements of airport security programs and their primary security line partners in the Canadian Aviation Security Regulations, 2012 on January 4, 2012, certain clarifications and improvements have been made to the Regulations and these Amendments form the last part of this package of regulations.
Issues
As an important member state of the International Civil Aviation Organization, Canada is committed to aligning its domestic legislation with the International Civil Aviation Organization’s standard of having documented operator-led security programs. These aviation security program requirements applying to airports, combined with those introduced in the new Canadian Aviation Security Regulations, 2012 in January 2012, will allow Canada to better meet international standards and expectations. Moreover, domestic independent third party reviews and audits of Canada’s aviation security regulatory framework (e.g. the Five Year Review of the Canadian Air Transport Security Authority Act) have resulted in recommendations regarding information sharing mechanisms and formalized risk management that will bring Canada to exceed international standards and practices.
Given the evolving and adaptive nature of aviation security threats, a modern aviation security regulatory framework must enable a more proactive, prepared, nimble, and risk-based approach underpinned by comprehensive, integrated systems for sharing information among security partners. This has been an ongoing message in the third party recommendations. Transport Canada recognizes that operators’ ability to be proactive and adaptable needs to be enabled through regulation where appropriate, particularly when rapid responses are necessary to mitigate and manage evolving or sudden changes to aviation security risks. Addressing this concern is an integral component of Transport Canada’s ongoing modernization of its aviation security regulatory framework.
While core aspects for strategic airport security plans have been introduced, additional elements are required to respond to international and domestic recommendations. Outstanding elements include formalized risk assessments, formalized information sharing through the establishment of multi-agency advisory committees, and risk management strategies (to be included in strategic airport security plans) for the highest volume airports in the country (Class 1 aerodromes). All designated airports require approved menus of safeguards and training requirements to increase preparedness, security awareness, and enhance security management.
Finally, as the Regulations continue to be carefully reviewed and revised, issues of clarity, consistency and duplication have been raised that need to be addressed. A portion of these Amendments are intended to update and help clarify certain terms and definitions, ensure consistent use of language between the English and the French, as well as clarify or delete certain provisions that have been deemed confusing, duplicative, or no longer necessary. Amendments to airport security program requirements for airports and their primary security line partners are included to further clarify regulatory objectives and facilitate compliance.
Objectives
An aviation security program is intended to help an organization manage and support aviation security in a way that is comprehensive, integrated, coordinated and risk-based. It is comprised of elements, such as policies, processes, procedures and practices that are focused on security detection, prevention, preparedness, response and recovery to safeguard civil aviation against acts or attempted acts of unlawful interference. These elements are documented, implemented and maintained. The immediate outcomes expected by the implementation of the proposed Amendments, particularly with respect to the core airport security program elements applying to airports are
- operators and their security partners have increased security awareness through training, exercises, the assessment of risk, and security planning;
- increased sharing of aviation security information among security partners at airports; and
- key aviation security partners at airports work towards the adoption of a more coordinated, comprehensive and integrated approach to managing security, with greater capacity to detect, prevent, prepare, respond and recover from acts or attempted acts of unlawful interference.
In the longer term, requiring aviation security programs for airports is expected to increase the capacity and preparedness of operators and their tenants to address security threats, risks and incidents through improved detection, prevention, preparedness, response and recovery; make more informed risk-based decisions about aviation security issues based on information shared among security partners; be more proactively engaged in addressing security risks; and manage aviation security in a more comprehensive, coordinated and integrated manner. As aviation security programs are an international standard under the International Civil Aviation Organization’s Annex 17, these Amendments further enable Canadian airport operators to operate in a manner that is consistent with international aviation security practices and standards. The regulatory updates and clarifications that are also part of these Amendments will also further facilitate compliance and improve regulatory efficiency.
Description
Airport security programs
The regulatory package consists of two groups of amendments: enhanced airport security program requirements, and further revision and clarification of certain aspects of the Canadian Aviation Security Regulations, 2012, including both older, more complex issues and issues raised since publication of the first phase of aviation security program requirements.
The airport security program amendments that would apply to all designated airports include
- Establishing an AVSEC level system to institute a formal structure to communicate a change in the level of risk to aviation beyond normal circumstances. This will then trigger requirements for operators to take necessary actions above baseline requirements. These actions will be developed proactively by operators in order to effectively address the short-term or immediate risks. The system will consist of three AVSEC levels, with level 1 being the baseline. AVSEC level 2 (elevated) and AVSEC level 3 (critical or imminent) will communicate heightened risk conditions as well as the expectation that certain operators will need to respond with safeguard actions accordingly. The proposed AVSEC level system, however, will not provide operators with any additional authority beyond what they are already empowered to do.
- Having operators develop menus of additional safeguards detailing actions that already exist at the aerodromes as well as those that could be taken to address heightened risk conditions in response to raised AVSEC levels. These menus of safeguards for rapid response to AVSEC levels will be documented and submitted to Transport Canada for approval (note that for Class 1 airports, the additional safeguards will form part of the strategic airport security plan requirement discussed below). A phased implementation is being proposed (detailed in the “Implementation, enforcement and service standards” section). The approval of the list of safeguards will acknowledge the planned response activities by the operator in the event of heightened risk, but will not provide operators with authority to conduct those activities until such time as a heightened AVSEC level is reached.
- Implementing training requirements for airport security personnel that will include the following subject areas: international and national aviation security requirements, security controls and processes at the airport, recognition of goods that pose an immediate threat to aviation security, actions to be taken by personnel in response to a threat, applicable aviation security equipment and systems, as well as follow-up training on any changes to security requirements, controls, processes or trends and issues.
- Enhancing the requirements for emergency plans and security exercises for greater response capacity and preparedness. The Amendments update emergency plan requirements to include response procedures for “other acts of unlawful interference with civil aviation”. (see footnote 2) As a result, exercises will test the broadened emergency plan as well as the menus of additional safeguards. The Amendments also increase the frequency of what is now being termed “operations-based” exercises to every two years for Class 1 and 2 aerodromes, and every four years for Class 3 aerodromes. The previous requirements required live exercises every three years for Class 1 aerodromes and every five years for Class 2 and 3 aerodromes. The new frequency aligns with International Civil Aviation Organization standards.
In the case of Class 1 airports, operators will also be required to establish the following additional elements:
- Security risk assessments to identify, analyse, and prioritize risks at the airport based on a threat assessment, a criticality assessment, a vulnerability assessment and impact assessment. Security risk assessments will be submitted to Transport Canada for approval based on criteria set out in the Amendments.
- Strategic airport security plans that will detail efforts to mitigate and manage the medium to high risks identified and prioritized in the security risk assessment. Strategic airport security plans will also include menus of additional safeguards specifying short-term security activities that could be taken in response to changing AVSEC levels. Security plans will be submitted to Transport Canada for approval based on criteria set out in the proposed Amendments.
- Multi-agency advisory committees, to act as formalized consultative bodies for the airport operators, composed of law enforcement and security agencies present at the airport. The multi-agency advisory committees will facilitate information sharing, best practices and particular expertise related to aviation security threats and vulnerabilities for the purpose of assisting an airport operator in carrying out an informed security risk assessment, as well as reviewing those assessments and security plans.
Under the Amendments, Class 2 and Class 3 airport operators will not be required to conduct security risk assessments or develop a resultant strategic airport security plan for approval, but such operators could be ordered by the Minister to implement these elements. For example, a ministerial order may be required if there is a sudden change in an airport’s characteristics (such as an increase in volume of international or transborder flights) that results in a higher risk than is generally associated with that class of airport.
Rationalization of the regulatory framework
Several issues have been identified by stakeholders internally and externally during the course of the Aviation Security Regulatory Review and are being addressed as solutions are developed. In addition, certain issues have been raised since the publication of the Canadian Aviation Security Regulations, 2012. For this set of Amendments, the following changes are being proposed:
- The definition of “restricted area” is amended to more clearly distinguish it from non-public and non-restricted areas in an airport.
- Parts 4, 5, and 6 of the Canadian Aviation Security Regulations, 2012 are amended to reflect the fact that explosives detection screening checkpoints are locations where passenger, non-passenger and checked baggage screening are integrated.
- Sections 139, 295, and 449 are amended to clarify requirements for an airport operator to allow a person to enter or remain in a restricted area.
- A condition is added to subsections 142(2), 298(2), and 452(2) to broaden the circumstances under which general aviation pilots can gain access to their aircraft in restricted areas.
- A requirement is added under sections 167 and 323 for a person to visibly display their temporary pass on their outer clothing at all times.
- Sections 155 and 311 are amended to require an operator of an airport to inform the Canadian Air Transport Security Authority generally of the reason for requesting the deactivation of a restricted area identity card. This amendment will then remove the requirement for an operator of an airport to notify the Canadian Air Transport Security Authority when a card is specifically reported as stolen or lost under sections 174 and 330.
- Section 79 and subsection 527(1) are amended to clarify when a Canadian in-flight security officer may transport a loaded firearm.
- Sections 8, 531 and 532 are amended to require peace officers to present an authorization form, which has been issued by the air carrier, for carrying or needing access to an unloaded firearm on board an aircraft.
- In Schedule 4, the amount of $5,000 is added as the maximum amount payable for an administrative monetary penalty for an individual for subsections 290(1) and (2) as primary security line partners/lessees. This designated provision also applies to individuals and not only to corporations.
- All Class 1 primary security line partners’ requirements have been sequenced under Division 11 of the Canadian Aviation Security Regulations, 2012 to simplify compliance. The following amendments will also be made: section 227 is amended to include documenting the roles and responsibilities of contractor groups as well as employees; language has been clarified to promote effective implementation of primary security line partners security programs; and an information management requirement is included to further align primary security line partners’ requirements with requirements for airports.
Regulatory and non-regulatory options considered
Regulated requirements for operators to identify their risks, document, coordinate, and oversee security operations at airports, including risk mitigation efforts, were considered the most appropriate and effective approach. This will promote accountability and timely cooperation in the management of unforeseeable aviation security threats and incidents; continued alignment with international standards and expectations; and greater harmonization with the practices of international partners. Although voluntary security assessments, plans, and menus of safeguards could have been an option, there would be no assurance that security systems and processes would be optimally managed, coordinated, and prepared to mitigate risk. Uncoordinated and unaccountable security management would compromise the safety and security of the airport community and the traveling public.
Additionally, the approach taken to the Amendments focuses on efficiency, capacity, and proportionality. Various options have been considered, but rather than electing to use regulations in every case, some initial proposals are now being addressed through guidance where most feasible. For example, rather than regulating the use of a specific methodology, the Regulations set the elements expected in a risk assessment. Transport Canada will provide a sample methodology in guidance material, without prescribing the steps to be taken with a specific methodology. Also, a management and performance-based approach has been taken to these proposed requirements, with the Regulations requiring either systems or setting specific outcomes rather than prescribing requirements for “how” the objectives of aviation security programs should be achieved. In an effort to minimize the burden on stakeholders, while continuing alignment with international expectations and practices, as well as enhancing security, some elements, such as the requirement to complete a security assessment and the resultant security plan for Transport Canada approval, will only apply to the higher risk and higher volume Class 1 airports.
Benefits and costs
In accordance with the Cabinet Directive on Regulatory Management, Transport Canada has conducted an analysis of the benefits and costs of the proposed airport security program requirements described above. (see footnote 3) Benefits associated with the rationalization of the regulatory framework are expected to include increased regulatory clarity and coherence, and have not been estimated.
Benefits
The airport security program amendments will
- Improve coordination and integration among aviation security stakeholders and promote more proactive, efficient and flexible risk management by airports through security risk assessments and the resultant security plans at Class 1 airports, as well as the preparation and exercise of additional safeguards in response to heightened risk conditions at Class 1, 2 and 3 airports;
- Reduce the likelihood and impact of acts or attempted acts of unlawful interference thus, over time, saving lives and protecting property. Beneficiaries could include passengers, airline crews, airports, air carriers, affiliated businesses, local communities, and Canadians; and
- Maintain and increase confidence in the security of air transportation, and prevent further loss of life and property, as well as damage that would result from a shift to more dangerous modes of transportation. (see footnote 4)
Attempts to measure the impact of significant acts of terrorism (aviation and other) have been undertaken as a means of identifying the order of magnitude of possible impacts. These scenario estimates show that the benefits of preventing just one imminent attack could be significant (as high as $223 billion) and could be interpreted as the upper bound of plausible benefits.
Given the significant impacts of acts or attempted acts of unlawful interference with civil aviation, the analysis also considered what impacts would need to be prevented in order for the benefits of the proposed Amendments to exceed the costs. The benefits would need to exceed $11.6 million over 25 years in addition to any costs of implementing strategic airport security plans, which could not be estimated. Alternatively, the Amendments would need to save fewer than two human lives (see footnote 5) over 25 years to break even, excluding the aforementioned plan-induced costs.
Compliance costs
The Amendments were designed to align regulatory costs with the risks and/or impacts of acts or attempted acts of unlawful interference with civil aviation. As a result, airport implementation and administration costs were estimated, but costs that could be triggered by the assessments and plans were not. For these unknown costs, Transport Canada conducted a “what if” analysis and determined that worst case scenario costs would still not result in significant impacts on airports or passengers.
Airport implementation and administration costs
Using airport financial statements, input assumptions developed internally with significant input and feedback from airports of all sizes and from all regions, and an internal forecast of airport passenger volumes, the costs associated with nine provisions of the proposed Amendments were estimated. Record-keeping, reporting, and notification costs were treated separately.
The Amendments are expected to result in implementation and administration costs for airports of $7,922,585 over 25 years. Transport Canada owns eight Class 3 airports. Implementation and administration costs for these airports are included in the Class 3 column of Table 1 and are estimated to be $178,287 over 25 years. In the cost-benefit statement, these costs are grouped with other costs to Government, and costs to Class 3 airports have been reduced accordingly (from $1,510,055 to $1,331,768).
Class 1 airport security risk assessment, assessment review and strategic airport security plan costs account for 57.2% of total airport costs; security exercises for all classes account for 22.4%; and security personnel training costs account for 14.6%. Other provisions account for the remaining 5.8% (see Table 1).
Table 1: Estimated costs, airport implementation and administration, by provision, 2015 to 2039
Proposed Regulatory Provision | Class 1 (PV) (see footnote 6) | Class 2 (PV) | Class 3 (PV) | Total (PV) | Share of total |
---|---|---|---|---|---|
Airport security risk assessment | $1,452,791 | N/A | N/A | $1,452,791 | 18.3% |
Airport security risk assessment review | 1,955,921 | N/A | N/A | 1,955,921 | 24.7% |
Strategic airport security plan | 1,128,353 | N/A | N/A | 1,128,353 | 14.2% |
Menu of safeguards | (included in the strategic airport security plan) | 101,322 | 164,683 | 266,006 | 3.4% |
AVSEC levels | 0 | 0 | 0 | 0 | 0% |
Security exercises | 435,636 | 975,276 | 363,118 | 1,774,029 | 22.4% |
Multi-agency advisory committee | 0 | N/A | N/A | N/A | 0% |
Security personnel training | 14,907 | 287,801 | 852,639 | 1,155,348 | 14.6% |
Emergency plans | 0 | 0 | 0 | 0 | 0% |
Record-keeping, reporting and notification | 0 | 60,522 | 129,615 | 190,137 | 2.4% |
Total (all airports) | $4,987,609 | $1,424,921 | $1,510,055 | $7,922,585 | |
Total (non Transport Canada airports) | $4,987,609 | $1,424,921 | $1,331,768 | $7,744,298 | |
Total per airport | 623,451 | 71,246 | 25,611 | ||
Annualized cost (see footnote 7) | $467,233 | $133,485 | $141,460 | $742,178 | |
Annualized cost per airport | 58,404 | 6,674 | 2,358 |
Government costs
Transport Canada has conducted an analysis of expected costs to Government resulting from the proposed Amendments, including
- incremental costs associated with Transport Canada to support assessment and planning activities, and exercise/execute the coordination and integration function (e.g. maintain databases of assessments, plans and menus of safeguards);
- supporting airports during the development of initial assessments and plans;
- reviewing and approving assessments, plans, and menus of safeguards on an ongoing basis;
- conducting internal and external AVSEC level exercises;
- incremental Transportation Security Inspector inspection activities while airports implement the proposed Amendments; and
- other government agency costs.
The proposed Amendments are expected to result in costs to Government of $3,905,558 over 25 years. Costs associated with supporting and planning account for 45.2% of total government costs, approvals of assessments, plans, and menus of safeguards account for 27.5%, Aviation Security Level exercises account for 9.4%, and assessment and plan development support accounts for 6.1%. Other activities account for the remaining 11.8% (see Table 2).
Table 2: Estimated costs to Government, by activity, 2015 to 2039
Transport Canada activity | Cost (PV) | Annualized Cost | Share of Total |
---|---|---|---|
TC Coordination/support | $1,766,110 | $165,447 | 45.2% |
Assessment and plan development support | 236,638 | 22,168 | 6.1% |
Initial and subsequent aviation security risk assessment approval | 114,131 | 10,692 | 2.9% |
Strategic airport security plan approval | 33,176 | 3,108 | 0.9% |
Plan amendment approval | 174,321 | 16,330 | 4.5% |
Initial menu of safeguards approval | 127,428 | 11,937 | 3.3% |
Menu of safeguards amendment approval | 622,372 | 58,303 | 15.9% |
AVSEC level exercises | 365,523 | 34,242 | 9.4% |
Incremental inspection time/cost | 247,571 | 23,192 | 6.3% |
Other government agencies | 40,000 | 3,747 | 1% |
TC airport implementation and administration | 178,287 | 16,702 | 4.5% |
Total government costs (without TC airports) | $3,727,272 | $349,166 | |
Total government costs (with TC airports) | $3,905,558 | $365,868 |
Costs for Canadians
In the event that Class 2 and Class 3 airports can “pass on” regulatory costs to passengers (e.g. through increased fees), these costs are estimated to be less than $0.05 per passenger, per flight. For Class 1 airports, much would depend on the magnitude of any plan-induced costs. Under a worst-case scenario, should significant induced costs be passed on to passengers at Class 1 airports, they are estimated to be no more than $0.22 per passenger, per flight. Incremental induced costs are expected to be much lower than this worst-case scenario. Given the overall cost of air travel to passengers, including ticket prices, other fees, and taxes, these potential incremental costs would not likely have a significant impact on the cost of flying or the demand for air travel. Thus, the impacts on consumers, competition, and domestic and international trade are expected to be negligible (see Table 3).
Table 3: Cost-benefit statement
Costs, benefits and distribution | 2015 to 2017 average | 2039 | Total (present value) | Annualized | |
---|---|---|---|---|---|
A. Quantified impacts (in dollars) | |||||
Benefits | Canadians | The benefits of the proposed Amendments are expected to significantly exceed the break-even level of $11.6 million in addition to any assessment- or plan-induced costs that could not be estimated. If the proposed Amendments prevent just one significant act of unlawful interference, it could result in benefits as high as $223 billion. | |||
Costs | Class 1 airports | $639,355 | $333,479 | $4,987,609 | $467,233 |
Class 2 airports | 71,776 | 34,866 | 1,424,921 | 133,485 | |
Class 3 airports (excluding Transport Canada airports) | 152,256 | 79,197 | 1,331,768 | 124,758 | |
Government | 358,676 | 333,343 | 3,727,272 | 349,166 | |
Transport Canada airports | 19,577 | 10,523 | 178,287 | 16,702 | |
Total costs | $1,241,640 | $791,407 | $11,649,857 | $1,091,344 | |
Net benefits | Greater than $0 | ||||
B. Qualitative impacts | |||||
Benefits |
|
||||
Costs |
|
“One-for-One” Rule
Transport Canada has considered the potential impacts of all provisions of the proposed Amendments on administrative burden, and has determined that the “One-for-One” Rule applies. Some administrative burden will be required in order that the Amendments could be enforced, specifically for incremental employee time required to
- 1. submit airport security risk assessments and strategic airport security plans (8 Class 1 airports);
- 2. submit menus of additional safeguards (80 Class 2 and 3 airports); and
- 3. store employee training records (80 Class 2 and 3 airports).
Other provisions would either serve a function beyond administration (e.g. preparing assessments and plans), or only be required in the event of a security incident, and not as part of regular business practices (see Table 4).
Table 4
Administrative burden (IN) | Description | Total administrative cost (present value) (see footnote 8) | Annualized cost |
---|---|---|---|
Submission of airport security risk assessments | Staff time required to physically package and submit the assessments after completion. 0.3 hours × once in years 0, 5 and 10 × 8 airports × loaded wage rate of $28.56. | $152 | $22 |
Submission of strategic airport security plans | Staff time required to physically package and submit the plans after completion. 0.3 hours × once in years 0, 5 and 10 × 8 airports × loaded wage rate of $28.56. | 152 | 22 |
Submission of menus of additional safeguards | Staff time required to physically package and submit the menus after completion. 0.3 hours × once in year 0 × 80 airports × loaded wage rate of $28.56. | 686 | 98 |
Storage of employee training records* | Manager time to electronically update employee training record spreadsheet. 1 minute per employee record × 4.5 employees × once in years 0, 5 and 10 × 80 airports × $28.56. | 402 | 57 |
Total (IN) | $1,392 | $198 |
* Class 1 airports already carry out the practice of maintaining training records.
Transport Canada has considered the potential impacts of all provisions of the proposed Amendments on administrative burden, and has determined that the “One-for-One” Rule applies with the annualized administrative cost estimated at $198. Key industry stakeholders were given the opportunity to comment on the provision-specific cost assumptions during the development of the cost-benefit analysis, and their views are reflected in these calculations of administrative burden. Transport Canada subsequently solicited industry feedback on the administrative cost assumptions specifically and no comments have been made at this time.
Small business lens
The proposed Amendments were designed to align compliance costs with underlying risks and so that costs disproportionate to risk were not imposed on small businesses (i.e. 20 Class 2 and 60 Class 3 airports). (see footnote 9)
Transport Canada initially considered a proposal (the initial option) that would require all 89 airports designated for security screening (Class 1, 2, 3) to conduct security risk assessments, review those assessments, prepare plans and maintain multi-agency advisory committees. Preliminary consultations and analyses indicated that this approach would impose a burden disproportionate with the risk associated with small airports, with costs significantly in excess of those reported above. The burden of these provisions may be acute between 2015 and 2016, when initial assessment and planning costs are assumed to be incurred, resulting in annual costs in those years above the average presented in the Table below. In response, Transport Canada developed a more targeted option (the proposed Amendments), whereby more complex provisions would not apply to small airports, while lower cost provisions would be retained to ensure that coordination and integration objectives would still be met. This way, compliance costs would be aligned with underlying risks, and the overall burden on small businesses would be reduced by more than 80%.
Subsequent consultations and cost-benefit analysis costing exercises focused on this targeted option. Assuming that the cost of implementing these additional provisions for Class 2 airports would be between 50% and 75% of the applicable Class 1 airport costs, and costs for Class 3 airports would be between 30% and 60% of the applicable Class 1 airport costs, Transport Canada has provided an illustrative comparison of the two options in Table 5.
Table 5
Initial option | Targeted option | |||
---|---|---|---|---|
Short description | Most provisions apply to all airports | The proposed Amendments | ||
Number of small businesses impacted | 80 | 80 | ||
Average annual ($) | Present value (see footnote 10) ($) | Average annual ($) | Present value ($) | |
Total costs (all small businesses) | 1,870,440 | 19,966,531 | 274,945 | 2,934,976 |
20 Class 2 airports | 788,097 | 8,412,763 | 133,485 | 1,424,921 |
60 Class 3 airports | 1,082,343 | 11,553,768 | 141,460 | 1,510,055 |
Total cost per small business | ||||
20 Class 2 airports | 39,405 | 420,638 | 6,674 | 71,246 |
60 Class 3 airports | 18,039 | 192,563 | 2,358 | 25,168 |
Risk considerations |
Consultation
The Amendments were developed using feedback and input from extensive consultations with stakeholders over several years. Key participants in the consultation process included airport operators, air carriers, the Canadian Air Transport Security Authority, other government departments and agencies, NAV CANADA, industry associations, labour groups and other organizations and businesses operating on security boundary lines at airports that have aviation security roles and responsibilities.
Specific stakeholder groups have been consulted through various mechanisms, including face-to-face meetings, pilot project activities and tabletop exercises, information sessions and direct mail consultations. Transport Canada’s official forum for this regulatory proposal, the Aviation Security Regulatory Review Technical Committee, was engaged throughout the development of the Amendments. Key participants represented on the Technical Committee include the following: Greater Toronto Airports Authority, Aéroports de Montréal, Ottawa International Airport Authority, Kelowna International Airport, Yellowknife Airport, Toronto City Centre Airport, Victoria Airport Authority, West Kootenay Regional (Castlegar) Airport, Air Canada, WestJet, Air Transat, First Air, Canadian Owners and Pilots Association, Air Line Pilots Association, Air Canada Pilots Association, International Air Transport Association, Air Transport Association of Canada, Canadian Airports Council, Canadian Business Aviation Association, Northern Air Transport Association, Regional Community Airports Coalition of Canada, Conseil des aéroports du Québec, National Airlines Council of Canada, Canadian Union of Public Employees, Teamsters Canada, Canadian Labour Congress, Gate Gourmet Canada, Purolator Courier Ltd., Federal Express Canada Ltd., DHL Express (Canada) Ltd., Canadian Air Transport Security Authority, and the Government of the Northwest Territories.
As part of Transport Canada’s preliminary consultations, a notice of intent was published in the Canada Gazette on March 27, 2010, requesting comments from the public on the intention to amend the Canadian Aviation Security Regulations including, among other things, requirements for airport security programs. The notice provided an overview of the regulatory principles being considered by the Department.
These and other consultations have resulted in airport security program regulations being published and implemented in two phases. Foundational elements comprised the first phase and were introduced as part of the newly restructured Canadian Aviation Security Regulations, 2012, which came into force on January 1, 2012. This package will amend the Canadian Aviation Security Regulations, 2012 to include the second phase of regulations for airport security programs, and was posted in August 2011 on Transport Canada’s Security Regulatory Advisory System for a 30-day period during which Technical Committee members were invited to comment. During the comment period from August to September 2011, Transport Canada received comments from four stakeholders on the draft Regulations. Also, two additional Technical Committee meetings were held, one in November 2011 and another in June 2012 in which the Amendments were discussed. Transport Canada has taken all pertinent comments from these consultations into consideration when revising the Regulations.
Consultations following prepublication in the Canada Gazette, Part I
The regulatory package was published in the Canada Gazette, Part I, on April 27, 2013, followed by a 30-day comment period. Transport Canada informed the Aviation Security Regulatory Review Technical Committee, whose role it is to discuss issues related to the review and renewal of aviation security instruments, of the publication of these Amendments and held a Technical Committee meeting on May 28, 2013. Stakeholders were provided an additional two weeks for comments based on what had been discussed at the meeting.
Written submissions were received from six stakeholders (Canadian Airports Council, Greater Toronto Airports Authority, Regional Community Airports Coalition of Canada, Conseils des aéroports du Québec, Aéroports de Montréal, Canadian Air Transport Security Authority) who were largely supportive of the initiative. All of the comments were from the aviation industry and demonstrated strong engagement with the process and the Amendments. In November 2013, Transport Canada posted a change table and an excerpt of the revised regulatory language on Transport Canada’s Security Regulatory Advisory System to solicit additional feedback from stakeholders. On November 20, 2013, Transport Canada held a Technical Committee meeting and generally reviewed the comments received and Transport Canada’s response. In addition, Transport Canada also provided Committee Members an additional 10 days subsequent to the meeting to make any final comments. Transport Canada also provided a detailed response to each stakeholder who submitted written comments.
Transport Canada reviewed all comments and carefully considered the consultations and comments as it revised the Regulations. In order to provide further clarity on the concepts and expectations of the Regulations, Transport Canada has developed preliminary guidance for industry in consultation with airports, including examples and samples to assist operators. Transport Canada has committed to continue working collaboratively with the aviation industry to build tools for ease of implementation and compliance.
Among the comments, some were out of scope, some were comments in support, while many were seeking clarification and/or were suggesting minor changes. These changes were all considered and made where possible. A number of stakeholders raised the implementation and application timelines and sought more time based on budget cycles and/or implementation of other Transport Canada regulations. Transport Canada has modified the timelines as a result and added specific dates of application into the Regulations for ease of compliance (see Table 6).
Regulatory cooperation
Canada, as a member state of the International Civil Aviation Organization, is obligated to meet the international standard of having documented operator-led aviation security programs and to bring this requirement into its domestic legislation. This proposal will improve the manner in which Canada meets this international standard.
Rationale
Transport Canada is moving away, where appropriate, from regulating in reaction to past security incidents in a prescriptive manner that typically defines the specific actions operators are required to take in order to achieve security objectives. This can lead to constraining, inflexible requirements in the face of new and emerging threats and risks. It may also lead to a cumulative compliance burden for operators, as requirements are continually developed in an action-reaction cycle.
In order to promote greater effectiveness and efficiency, increased focus is being placed on regulatory requirements specifically designed to promote adoption of proactive security management through ongoing threat, risk and vulnerability assessment, implementation of tailored risk mitigation and management strategies, as well as documenting the coordination and accountabilities of aviation security partners. As aviation security threats and security innovations are constantly evolving, it is important that the aviation security regulatory environment be nimble to encourage continuous improvement and adaptation to evolving security threats. These Amendments to enhance aviation security programs for airports will encourage more innovative and efficient compliance with requirements in an evolving aviation security environment. Formalized security risk assessments, developing and implementing resultant security plans and increased information sharing for the highest volume airports, as well as requirements for all airports to prepare additional safeguards that can be implemented when immediate risks are identified by the Minister, and requirements to train security personnel are necessary to enable and promote accountable, effective, flexible and innovative aviation security.
These airport security program requirements will include security risk assessments for Class 1 operators to identify and prioritize aviation security risks to the airport and enable the most appropriate and effective risk mitigation strategies to be developed, documented and implemented when necessary in a security plan. Airport operators will be required to consult with key security partners at the airport, including the Canadian Air Transport Security Authority, the Canada Border Services Agency, the Royal Canadian Mounted Police, and the police of local jurisdiction, when conducting their security risk assessment and developing and implementing their strategic airport security plan in order to increase information sharing and coordination of effort. The security plan will be based on the results of the security risk assessment, documenting a risk mitigation and management strategy that addresses the high to medium risks identified and prioritized in the security risk assessment.
In the case of Class 1 airports, the strategic airport security plan will also detail additional safeguards for effective responses to immediate risks in exceptional circumstances that will cause the Minister to raise the AVSEC level from the baseline of AVSEC level 1 to an elevated AVSEC level 2 or imminent or critical AVSEC level 3. In the absence of a requirement for a strategic airport security plan, a separate menu of safeguards will be required for all other designated airports. In addition, exercises of the strategic airport security plan (or menu of safeguards — depending on the class of airport) will enhance preparedness, coordination, and foster continuous improvement.
In the rare event of a heightened risk situation, there are often additional actions that could be taken to enhance security to address the heightened risk. Security levels or alert levels are common tools used by governments to communicate a change in the level of risk, and incite action from those in a position to increase security. The number of levels proposed aligns with the number of levels in the recently updated Department of Homeland Security’s National Terrorism Advisory System in the United States, and the current Transport Canada MARSEC levels system. With industry more prepared to deal with situations of heightened risk, Transport Canada expects that industry could have a more rapid response to heightened risk.
The sharing of aviation security-related information is a key component of comprehensive, coordinated and proactive aviation security. The Regulations will enhance information sharing and coordination of security efforts at Class 1 airports through the introduction of multi-agency advisory committees. The International Civil Aviation Organization cites the exchange of information and intelligence as essential to effective aviation security programs, enabling airport operators to adjust their programs in response to changing threat conditions. The orderly dissemination of such information is vital to the success of aviation security programs.
Implementation, enforcement and service standards
Transport Canada’s philosophy on the enforcement of the Canadian Aviation Security Regulations, 2012 stresses promoting compliance as the preferred means of achieving a secure aviation environment. Where compliance with the Amendments will not be achieved on a voluntary basis or where there are flagrant violations, enforcement action could be taken in the form of administrative monetary penalties pursuant to sections 7.6 to 8.2 of the Aeronautics Act, judicial sanctions per subsection 7.3(3) of the Act, or the suspension or cancellation of a Canadian aviation document under section 6.9 of the Act.
However, in order to successfully implement the proposed airport security program Regulations, Transport Canada has committed resources for aviation industry and departmental readiness. The regulatory requirements will have a staggered application after coming into force to allow time for preparation and to facilitate implementation. Specific dates have been included in the Regulations to provide clarity on timing.
Similar to its approach taken during the introduction of airport security program foundational elements, Transport Canada is developing non-regulatory elements such as guidance material and best practices in consultation with industry to support these proposed airport security program Amendments. Transport Canada is committed to developing materials in collaboration with industry to facilitate implementation and compliance. Transport Canada has been working with aviation security stakeholders to increase awareness of the proposed Regulations, and is proposing a staggered implementation period between the publishing of the Regulations and the coming into force of the Regulations. Furthermore, the 11 months between the deadline for security assessments and resultant security plans should allow sufficient time for implementation and coordination with other aviation industry groups.
For internal readiness, Transport Canada is working to develop inspector guidance, training and standard operating procedures for inspectors. Approval processes are also being developed to establish the internal mechanisms needed for a nationally consistent review and approval of airport security risk assessments, strategic airport security plans and proposed safeguards for AVSEC levels. Transport Canada will develop communication products to encourage industry awareness of the amendments.
Transport Canada continues to believe that service standards are an essential public commitment to a measurable level of regulatory performance. Therefore, to help clarify service expectations and to help ensure accountability for service performance, Transport Canada commits to making a determination regarding approvals of security risk assessments, strategic airport security plans, and menus of additional safeguards within 90 calendar days of receipt of a complete submission.
Table 6: Application and enforceability of proposed Phase 2 elements
Proposed Phase 2 elements of airport security program regulations | Application | Enforceability following Canada Gazette, Part II, publication | ||
---|---|---|---|---|
Class 1 | Class 2 | Class 3 | ||
Training requirements for security personnel | Class 1, 2 and 3 airports | Apr 15, 2015 | Apr 15, 2015 | Apr 15, 2015 |
Enhanced Emergency Plans | Class 1, 2 and 3 airports | Apr 15, 2015 | Apr 15, 2015 | Apr 15, 2015 |
Security Exercises (related to menus [AVSEC levels] | Class 1, 2 and 3 airports | May 15, 2016 | Sep 15, 2016 | Mar 15, 2017 |
Multi-Agency Advisory Committee* | Class 1 airports *Class 2 airports only if ordered by the Minister | Dec 15, 2014 | 6 months following an order by Minister | N/A |
Security Risk assessment* | Class 1 airports *Class 2 and 3 airports only if ordered by Minister | Mar 15, 2015 | 10 months following order by Minister | 10 months following order by Minister |
Strategic Airport Security plan* | Class 1 airports *Class 2 and 3 airports only if ordered by Minister | Feb 15, 2016 | 22 months following order by Minister | 22 months following order by Minister |
Implementation of Strategic Airport Security Plan | Class 1 airports *Class 2 and 3 airports only if ordered by Minister | May 15, 2016 | ||
Menu of safeguards to respond to change in AVSEC Levels** | Class 2 and 3 airports | **Part of Class 1 Strategic airport security plan | Apr 15, 2016 | Sep 15, 2016 |
AVSEC Levels | Class 1, 2 and 3 airports | May 15, 2016 | Sep 15, 2016 | Mar 15, 2017 |
Performance measurement and evaluation
While Transport Canada recognizes that the results of security regulations are difficult to measure because their success results in no measurable activity or outcome, improvements in security performance should be evident following implementation of security programs due to enhanced collaborative working relationships and a more proactive approach to achieving security objectives. Additionally, Transport Canada will be looking to the airport community to provide further information on whether these Amendments have made noticeable improvements to security at their facilities.
A Performance Measurement and Evaluation Plan has been developed to verify whether all airport security program regulations, both current requirements and the enhancements in these proposed Amendments, meet their policy objectives on an ongoing basis. (see footnote 11) Accordingly, a logic model has been developed to map the flow from development to implementation of the Regulations to verify that expected results are continually achieved. In the model, the development of airport security program regulations is the main activity, along with the development and delivery of education and outreach for airport operators and primary security line partners, the conduct of inspector training as well as inspections themselves, and approval processes supporting the main activities of this initiative for Transport Canada. The outcomes in the logic model are those listed in the “Objectives” section above. Because it is expected that the successful application of the provisions by the operators should lead to the achievement of the outcomes outlined in the logic model, the indicators for the outcomes are closely linked to the provisions.
Transport Canada will be conducting inspections to verify compliance with aviation security program requirements for airports within the Canadian Aviation Security Regulations, 2012. These inspections will be conducted by trained inspectors at all applicable airports. Inspection data is entered into a Transport Canada database. The structure for the aviation security program inspection data is being defined to facilitate reporting on the three immediate outcomes listed in the logic model outlined above.
As with any regulations, the objective is to achieve 100% compliance and effective outcomes as a result of this compliance. In addition, Transport Canada intends to analyze the inspection data to determine the effectiveness of the new aviation security program Regulations for airports.
Contact
Wendy Nixon
Director
Aviation Security Program Development
Transport Canada
112 Kent Street, 4th floor
Ottawa, Ontario
K1A 0N5
Telephone: 613-990-1282
Fax: 613-949-9199
Email: wendy.nixon@tc.gc.ca
Small Business Lens Checklist
1. Name of the sponsoring regulatory organization:
2. Title of the regulatory proposal:
3. Is the checklist submitted with a RIAS for the Canada Gazette, Part I or Part II?
Canada Gazette, Part I Canada Gazette, Part II
A. Small business regulatory design
I | Communication and transparency | Yes | No | N/A |
---|---|---|---|---|
1. | Are the proposed Regulations or requirements easily understandable in everyday language? | |||
Text in the Regulations has been drafted to be as clear as possible. Where possible, plain language guidance documents are being developed in order to clearly communicate what is required. | ||||
2. | Is there a clear connection between the requirements and the purpose (or intent) of the proposed Regulations? | |||
As described in the RIAS, and as also previously communicated in consultations, there are clear reasons for the amendments being made. | ||||
3. | Will there be an implementation plan that includes communications and compliance promotion activities, that informs small business of a regulatory change and guides them on how to comply with it (e.g. information sessions, sample assessments, toolkits, Web sites)? | |||
The proposed amendments do not require completing specific forms although samples/examples will be available to operators. They are not required to complete specific forms nor use a specific methodology. The amendments, where possible, are performance-based. | ||||
4. | If new forms, reports or processes are introduced, are they consistent in appearance and format with other relevant government forms, reports or processes? | |||
II | Simplification and streamlining | Yes | No | N/A |
1. | Will streamlined processes be put in place (e.g. through BizPaL, Canada Border Services Agency single window) to collect information from small businesses where possible? | |||
Due to security sensitivity of information such tools will not be leveraged for collection of information, and our stakeholders have been consulted with respect to this. | ||||
2. | Have opportunities to align with other obligations imposed on business by federal, provincial, municipal or international or multinational regulatory bodies been assessed? | |||
These Amendments further enable Canadian airport operators to operate in a manner that is consistent with International Civil Aviation Organization’s Annex 17 security practices and standards. | ||||
3. | Has the impact of the proposed Regulations on international or interprovincial trade been assessed? | |||
There is no expected impact on international or interprovincial trade as a result of these Regulations. | ||||
4. | If the data or information, other than personal information, required to comply with the proposed Regulations is already collected by another department or jurisdiction, will this information be obtained from that department or jurisdiction instead of requesting the same information from small businesses or other stakeholders? (The collection, retention, use, disclosure and disposal of personal information are all subject to the requirements of the Privacy Act. Any questions with respect to compliance with the Privacy Act should be referred to the department’s or agency’s ATIP office or legal services unit.) | |||
The information required under these amendments is not collected by other departments or jurisdictions. | ||||
5. | Will forms be pre-populated with information or data already available to the department to reduce the time and cost necessary to complete them? (Example: When a business completes an online application for a licence, upon entering an identifier or a name, the system pre-populates the application with the applicant’s personal particulars such as contact information, date, etc. when that information is already available to the department.) | |||
6. | Will electronic reporting and data collection be used, including electronic validation and confirmation of receipt of reports where appropriate? | |||
Information being submitted is security sensitive and therefore electronic reporting will not be used in this instance. | ||||
7. | Will reporting, if required by the proposed Regulations, be aligned with generally used business processes or international standards if possible? | |||
These Amendments further enable Canadian airport operators to operate in a manner that is consistent with International Civil Aviation Organization’s Annex 17 security practices and standards. | ||||
8. | If additional forms are required, can they be streamlined with existing forms that must be completed for other government information requirements? | |||
The proposed Amendments do not require completing specific forms although samples/examples will be available to operators. They are not required to complete specific forms nor use a specific methodology. The Amendments, where possible, are performance-based. | ||||
III | Implementation, compliance and service standards | Yes | No | N/A |
1. | Has consideration been given to small businesses in remote areas, with special consideration to those that do not have access to high-speed (broadband) Internet? | |||
2. | If regulatory authorizations (e.g. licences, permits or certifications) are introduced, will service standards addressing timeliness of decision making be developed that are inclusive of complaints about poor service? | |||
3. | Is there a clearly identified contact point or help desk for small businesses and other stakeholders? |
B. Regulatory flexibility analysis and reverse onus
IV | Regulatory flexibility analysis | Yes | No | N/A |
---|---|---|---|---|
1. | Does the RIAS identify at least one flexible option that has lower compliance or administrative costs for small businesses in the small business lens section? Examples of flexible options to minimize costs are as follows:
|
|||
See the Small business lens section of the RIAS. | ||||
2. | Does the RIAS include, as part of the Regulatory Flexibility Analysis Statement, quantified and monetized compliance and administrative costs for small businesses associated with the initial option assessed, as well as the flexible, lower-cost option?
|
|||
3. | Does the RIAS include, as part of the Regulatory Flexibility Analysis Statement, a consideration of the risks associated with the flexible option? (Minimizing administrative or compliance costs for small business cannot be at the expense of greater health, security or safety or create environmental risks for Canadians.) | |||
4. | Does the RIAS include a summary of feedback provided by small business during consultations? | |||
V | Reverse onus | Yes | No | N/A |
1. | If the recommended option is not the lower-cost option for small business in terms of administrative or compliance costs, is a reasonable justification provided in the RIAS? | |||
Transport Canada selected the lowest cost option. The proposed Amendments were designed to align compliance costs with underlying risks so that costs disproportionate to risk were not imposed on small businesses (see the Small business lens section of the RIAS). |
- Footnote a
R.S., c. 33 (1st Supp.), s. 1 - Footnote b
S.C. 2004, c. 15, s. 5 - Footnote c
S.C. 1992, c. 4, s. 7 - Footnote d
S.C. 2004, c. 15, s. 18 - Footnote e
S.C. 2004, c. 15, s. 18 - Footnote f
S.C. 2001, c. 29, s. 39 - Footnote g
R.S., c. A-2 - Footnote 1
SOR/2011-318 - Footnote 2
ICAO gives examples of other act of unlawful interference with civil aviation, including the use of an aircraft in service for the purpose of causing death, serious bodily injury, or serious damage to property or the environment. - Footnote 3
The full cost-benefit analysis report is available upon request via the contact information at the end of this Regulatory Impact Analysis Statement (RIAS). - Footnote 4
For instance, up to 2 170 traffic deaths in the United States may have been due to mode shifting in the aftermath of 9/11, a cost of over $15 billion (in 2010 Canadian dollars). See Blalock, Garrick, Vrinda Kadiyali, and Daniel Simon (2009). “Driving Fatalities After 9/11: A Hidden Cost of 9/11,” Applied Economics 41(14): 1717–1729. - Footnote 5
Assuming the value of a statistical life is $7 million (2010 Canadian dollars). - Footnote 6
(PV) Present Value is the estimated current value of a future cost or benefit (or stream of costs and benefits), taking into consideration the time value of money, as represented by the discount rate (8%). - Footnote 7
Annualized Cost = , as indicated above the discount rate is 8% and the periode of analysis is 25 years. - Footnote 8
Calculation of administrative burden for the purposes of the “One-for-One” Rule uses a discount rate of 7% over 10 years. - Footnote 9
For the purposes of the small business lens, it is assumed that all 20 Class 2 and 60 Class 3 airports are small businesses. A review of airport annual reports indicated that, although many Class 2 airports have revenue in excess of $5 million, they qualify as small businesses as they have fewer than 100 direct employees. - Footnote 10
Discount rate of 8%, based on a period of analysis of 25 years. - Footnote 11
The full document is available upon request via the contact information above.