Bank of Canada Announces Supervisory Framework for Retail Payments Activities Act
By Kevin Landry and Colton Smith
The Bank of Canada (“BoC”) has announced the supervisory framework (the “Framework”) it will use to oversee payment service providers under the Retail Payments Activities Act.
The Retail Payments Activities Act was enacted by the federal government in June 2021 with the objective of regulating retail payment providers in Canada. See our previous update about it here.
The Role of the Bank of Canada
Under the Retail Payments Activities Act, the BoC has been provided a supervisory authority over payment service providers performing retail payment activities. The BoC’s objectives pursuant to the legislation are to (a) supervise payment service providers to determine their compliance with the Retail Payments Activities Act (b) promote the adoption by payment service providers of policies and procedures intended to ensure compliance, and (c) monitor and evaluate developments and issues in the world of retail payment activities.
How the Bank of Canada’s Supervisory Framework is Outlined
The Framework focuses on three activities: (1) registration, (2) risk monitoring, and (3) enforcement. Supervisory expectations will be informed by the Retail Payments Activities Act, its regulations, and additional guidance that is expected to be published by the BoC to help payment services providers understand their obligations.
Certain individuals or entities will be required to register with the BoC by submitting an application along with a registration fee. Information regarding the BoC’s approach to fees can be found here.
Under the Framework, the criteria for registration are:
- Be a payment service provider;
- Perform a retail payment activity;
- Meet a certain geographic scope; and
- Perform payment functions that are not excluded from the Retail Payments Activities Act and associated regulations.
Under the geographic scope criteria, an individual or entity must either have a place of business in Canada or perform retail payment activities for an end user in Canada and direct retail payment activities at individuals or entities that are in Canada.
Individuals and entities excluded from registration include banks and authorized foreign banks (under the Bank Act), credit unions, insurance companies, trust and loan companies, provincially regulated loan companies, payment service providers agents and mandataries and Payments Canada. Transactions involving automatic teller machines and internal transactions between affiliated entities are also excluded activities under the Retail Payments Activities Act.
The BoC is currently developing a web application allowing payment service providers to register, pay fees, update information, and comply with legislated reporting requirements. Registration decisions will be posted on the BoC website, including those where registration is refused or revoked and the reasons why.
Applicant information of individuals and entities who meet the criteria for registration will be shared with the Department of Finance Canada to conduct a national security review and with Financial Transaction and Reports Analysis Centre of Canada (FINTRAC).
Applicants will be responsible for responding to requests for information during the applications process as well as keeping their information up to date. Once registered, payment service providers are required to comply with the Retail Payments Activities Act and pay an annual assessment fee.
(2) Risk Monitoring
Under the Retail Payments Activities Act, payment service providers must establish, implement and maintain an operational risk management and incident response framework. Additionally, payment service providers have an obligation to implement certain measures to safeguard end-user funds, if applicable.
The BoC will monitor and assess registered payment service providers performance of the above noted obligations. To do so, payment service providers will be required to submit annual reports, significant change or new activity reports, and incident reports. The BoC will use these reports, along with responses to requests submitted to payment service providers, to assess a payment service providers compliance. Assessment may include, desk reviews, on-site visits, or a special audit, each being more onerous than the last.
The BoC will use a variety of tools to address non-compliance with the Retail Payments Activities Act. These include:
- A compliance agreement with a payment service provider to rectify non-compliance;
- A notice of violation accompanied with a monetary penalty;
- A notice of violation accompanied with an offer to enter into a compliance agreement (which would cut the monetary penalty in half);
- A compliance order, ordering a payment service provider to stop an action, refrain from taking an action, or to remedy the situation.
The BoC may also apply for a court order requiring a payment service provider to: 1) stop an action that violates the Retail Payments Activities Act, 2) comply with a provision of the Retail Payments Activities Act, or 3) comply with the terms of a compliance order. If a payment service provider disagrees with a notice of refusal of registration, notice of intent to revoke registration, a notice of violation or a notice of default, the payment service provider may appeal the decision to the Governor. If the Governor upholds the decision, a payment service provider may then appeal to the Federal court.
The BoC notes that it may update the supervisor framework before or after the Retail Payments Activities Act comes into force in order to respond to regulations published by the Department of Finance Canada, changes in the retail payments sector, and to respond to lessons learned through the implementation of the Framework. Draft regulations and further guidance are expected to be published by the Department of Finance Canada in 2023.
This update is intended for general information only. If you have questions about the above, please contact the author(s) to discuss your needs for specific legal advice relating to the particular circumstances of your situation.
Click here to subscribe to Stewart McKelvey Thought Leadership
By Kim Walsh and Olivia Bungay Canadian sanctions targeting Russia in relation to Russia’s ongoing invasion of Ukraine were significantly expanded over the past year. The Special Economic Measures (Russia) Regulations impose sanctions on individuals…Read More
Federal Government introduces amendments to expand the mandates of the two historic Atlantic Accord Acts to include offshore wind energy
David Randell, Sadira Jan, Robert Grant, K.C., Greg Moores, G. John Samms, and James Gamblin The recent tabling of federal legislation is an important step for offshore wind development in the offshore areas of Nova…Read More
Newfoundland and Labrador adopts virtual Alternate Witnessing of Documents Act – for good this time!
By Joe Thorne and Megan Kieley Background During the COVID-19 public health emergency order in Newfoundland and Labrador, the government passed the Temporary Alternate Witnessing of Documents Act, which (as the name implies) temporarily permitted…Read More
By Daniela Bassan, K.C. Daniela Bassan, K.C. is a Partner and Practice Group Chair at the law firm of Stewart McKelvey (Canada) where she focuses on intellectual property and complex, multi-jurisdictional dispute resolution. The premise…Read More
By Conor O’Neil and Maria Cummings On May 9, 2023, two bills were introduced in the New Brunswick Legislature that could have material affects on the construction industry. Bills 41 and 42, of the current…Read More
Author Sara Espinal Henao, an Immigration Lawyer in our Halifax office, will be speaking on a related panel, Labour Market Impact Assessments Overview and Current Trends, at the upcoming CBA Immigration Law Conference in Ottawa,…Read More
Author Brendan Sheridan, an Immigration Lawyer in our Halifax Office, will be running a related webinar on May 30, 2023, Avoiding immigration bloopers: A webinar for the film & television industry, in partnership with Screen…Read More
Whose information is it anyway? Implications of the York University decision on public and private sector privacy and confidentiality
Included in Discovery: Atlantic Education & the Law – Issue 12 By Charlotte Henderson Privacy and confidentiality requirements are some of the most important responsibilities of organizations today. An organization’s ability to properly manage information,…Read More
Included in Discovery: Atlantic Education & the Law – Issue 12 By Hilary Newman & Jacob Zelman A non-disclosure agreement, or “NDA”, is a legal contract in which two or more persons agree to keep the…Read More
By Graham Haynes & Isaac McLellan Introduction The Canadian federal budget was unveiled on Tuesday, March 28, 2023 (“Budget 2023”)1 , and proposes significant changes to the General Anti-Avoidance Rule (the “GAAR”) in Canadian tax…Read More