Pillar Guide · Bill S-211 · 2026

Bill S-211: Canada's Forced-Labour Law, Explained and Graded

By Mandy-Lynn Aitken, 30 years on both sides of the supply-chain auditPublished July 14, 2026

Short answer: Bill S-211 is the Fighting Against Forced Labour and Child Labour in Supply Chains Act, Canada's forced-labour reporting law. If your organization meets its thresholds, you file a public report every year by May 31, approved and signed by your governing body, covering seven mandatory elements. Penalties run up to $250,000, and directors and officers can face personal liability. And as of 2026, the filings have a grade: the first independent grading of 92 reports from the public registry, the S-211 Report Card, found a national median of 50.5 out of 100. This guide covers who files, what the report must contain, what the deadline really means, how the filings actually grade, and how to build one your leadership can sign without holding their breath.

What is Bill S-211?

Bill S-211 is the working name everyone still uses for the Fighting Against Forced Labour and Child Labour in Supply Chains Act (S.C. 2023, c. 9). It is disclosure legislation: it does not order you to run a due diligence program, it orders you to describe the one you have, in public, every year, over your leadership's signature.

That design is the whole story of the law. The report is filed with Public Safety Canada and published in a permanent public catalogue that now holds 12,599 reports. Anyone can read what you filed: a regulator, a customer, an investor, a journalist. The law created the disclosure. What it never created is the reader, and for the first two reporting cycles, companies filed into a void.

That changed in 2026, when the filings were graded for the first time. The results, a national median of 50.5 out of 100, are covered in the Report Card section below, because you cannot understand what Bill S-211 asks of you without seeing how the country is actually answering.

Who has to file a Bill S-211 report?

Plain language, no legalese. If your organization has a Canada connection and meets at least two of three thresholds, $40 million in revenue, $20 million in assets, or 250 employees, you are likely a reporting entity. Listed on a Canadian exchange? You are in regardless of size. The thresholds, definitions, and mandatory disclosures were clarified for 2026, so last cycle's conclusion about whether you file is worth rechecking, and the official guidance from Public Safety Canada is the place to recheck it.

But the thresholds undersell the law's real reach. Reporting companies have to describe their chains, which means they have to examine the entities in them. When a reporting customer maps its chain past tier one, your company lands on that map, along with your suppliers, and theirs. The examination arrives as questionnaires, attestation requests, and assessment invitations whether or not you ever file a report of your own. Plenty of companies below every threshold are living under Bill S-211 anyway, one customer request at a time.

If that is you, the work is the same either way: know your own chain, examine your own suppliers, and hold evidence you can hand over without a scramble.

What must the report contain? The seven elements of s.11(3)

Section 11(3) of the Act sets out seven mandatory elements. In plain English, the report covers what you did this year: the structure, the risk, the measures, the training, and whether any of it works.

1. s.11(3)(a)Your structure and supply chains. The business and its chains described honestly, including the upstream entities past the tidy tier-one list.
2. s.11(3)(b)Your policies and due diligence. The measures you actually run, not the commitments you restate.
3. s.11(3)(c)Where your risk lives and what you did about it. The parts of the chain that carry forced and child labour risk, and the steps you took.
4. s.11(3)(d)Remediation measures. What happens when something is found, with a pathway a reader can follow.
5. s.11(3)(e)Remediation of income loss. What you did for the vulnerable families affected by your own anti-forced-labour measures. In the 2026 pilot grading, 29.3% of filers skipped this element or scored zero on it.
6. s.11(3)(f)Training. Records a reader can point to, not a slide deck someone remembers presenting.
7. s.11(3)(g)Effectiveness. How you assess whether your own program works. Exactly 2 reports in the 92-filing pilot measured themselves against their own prior year.

Statutory text: the official consolidated Act, s.11(3). Pilot figures: the S-211 Report Card, 92 filings, July 2026.

The report is one page. The proof is the year behind it.

Notice how the seven elements split into two families. Elements about describing yourself, the structure, the policies, the training, are ones filers handle. The elements that require a company to actually see, fix, or measure something, depth past tier one, remediation, effectiveness, are exactly where the graded filings go quiet. Element by element, the standard that separates a defensible report from a decorative one is simple: could you draft this year's report from records, not recollection? The full walkthrough lives in What must a Bill S-211 report contain.

When is it due, and what does getting it wrong cost?

The annual report is due May 31 each year. The next filing lands May 31, 2027, and the year of evidence behind it is accumulating, or failing to accumulate, right now. That is the trap built into the calendar: May 31 feels far away until spring arrives and someone is asked to reconstruct twelve months of supplier examinations, risk decisions, and training records in six weeks.

The exposure has three layers. A violation can mean a fine of up to $250,000. Directors and officers can face personal liability, because the report must be approved by your governing body and signed by one or more of its members: the law was written so that a real person, at the top, owns the answer. And the layer that outlasts both: the report is public forever. Long before any prosecutor cares, your customers and your competitors can lay your filings side by side and read the gap between what you promised and what you did, in your own words.

None of this requires panic. It requires a calendar. Teams that hold up begin evidence and supplier outreach 60 to 90 days ahead of the deadline, so the report becomes an act of assembly instead of archaeology. The people carrying these files are not careless; most were handed a legal deadline without a diligence system. The fix is the system.

The S-211 Report Card: how Canada's filings actually grade

Until 2026, none of the 12,599 reports in the registry had ever been publicly graded. The S-211 Report Card changed that: 100 filings pulled from the registry, 92 graded line by line against a 100-point rubric built from two sources only, the Act's own text and a published 5-Step due diligence methodology, with every score backed by a verbatim quote from the filing it grades.

The S-211 Report Card · Pilot, July 2026

Source: the S-211 Report Card pilot, 92 filings graded line by line against the Act and XFACTOR's published 5-Step methodology, every score backed by the filing's own words.

The single biggest scoring gap in the entire dataset sits between reports that show numbers and reports that show adjectives. The three dimensions that require a company to actually see, fix, or measure something, supply-chain depth, remediation, and effectiveness, each scored a median of exactly one third of the available marks. Reports go quiet precisely where the work would have to exist. And this is not a villain story: 13.0% of filers openly stated they have no program, in a public document, over a director's signature. People do not confess in writing when they are hiding something. They confess when they are overwhelmed.

The full Report Card carries the honor roll, the five graded dimensions, the exact methodology, and what happens when the grading extends to the full registry in fall 2026, ahead of the public edition in April 2027.

How to comply with Bill S-211

Strip away the legal language and the Act asks one question: do you actually know, and can you actually prove, who is in your chain and how they operate? Four disciplines answer it.

Map past tier one. A documented chain map with the upstream entities named, not assumed. Forced labour risk does not live in your direct suppliers; it lives upstream, in entities no one in your building has ever listed. Discovery is the step that finds them: each supplier names their own sub-suppliers, carriers, and staffing providers, and the map grows to the truth. How due diligence works beyond tier 1 walks through it.

Examine, do not survey. A questionnaire nobody verified is not an examination. Coercion is coached, and rehearsed answers pass checklists, which is why the assessment has to read how a supplier answers, not just what they answer. The method is covered in the 5-Step risk assessment guide and the human factor.

Fix what you find, on the record. Every gap becomes a finding with an owner, a deadline, and a signature on the fix. A gap you found and fixed is evidence of diligence. A gap you found and filed away is evidence for the other side.

Use the work you have already done. Any of C-TPAT, PIP, or AEO satisfies Bill S-211 due diligence. This is the single biggest piece of leverage in the reporting cycle, and most teams never use it: a chain examined to trusted-trader standards has already produced the mapping, the examinations, and the dated evidence trail the annual report needs to cite. One caution for exporters: an S-211 report does not clear the US border. UFLPA is a different regime, even though the underlying work serves both.

Do you need Bill S-211 compliance software?

You need a system; whether you buy one is a staffing question. The reporting year produces mapping, supplier examinations, findings, remediation records, and training logs, and someone has to hold all of it in a form the May 31 report can cite. Companies that run it on spreadsheets rebuild the map every spring. Whatever you use, hold it to five tests:

• It discovers the chain past tier one, instead of only tracking the suppliers you can already name.
• It examines suppliers rather than surveying them, so a rehearsed answer does not grade like a verified one.
• Every gap becomes a finding with an owner, a deadline, and a signature on the fix.
• The evidence trail is dated, so the annual report is drafted from records, not recollection.
• One body of evidence carries every program you hold: C-TPAT, PIP, AEO, ESG, and the S-211 report, without re-answering what last year already answered.

That five-test list is exactly what XFACTOR VERIFIED's Bill S-211 program was built to be: one live assessment per supplier, mapped to every program at once, with the evidence accumulating all year. To be equally clear about what it is not: XFACTOR is not a certification body and does not file your report for you. It builds the mapping, the evidence, and the due diligence underneath your signature, so it holds. For the wider field, the July 2026 review of compliance platforms available in Canada compares the options on public pricing and program coverage.

Bill S-211: frequently asked questions

The reading continues between editions in On the Hook, the bi-weekly intelligence briefing for the executive on the hook for their supply chain. One real failure per issue, and the regulation reality behind it.

Go deeper: The S-211 Report Card · The Bill S-211 program · Report requirements · Forced-labour due diligence · UFLPA for Canadian exporters