Bank of Canada Announces Supervisory Framework for Retail Payments Activities Act
By Kevin Landry and Colton Smith
The Bank of Canada (“BoC”) has announced the supervisory framework (the “Framework”) it will use to oversee payment service providers under the Retail Payments Activities Act.
The Retail Payments Activities Act was enacted by the federal government in June 2021 with the objective of regulating retail payment providers in Canada. See our previous update about it here.
The Role of the Bank of Canada
Under the Retail Payments Activities Act, the BoC has been provided a supervisory authority over payment service providers performing retail payment activities. The BoC’s objectives pursuant to the legislation are to (a) supervise payment service providers to determine their compliance with the Retail Payments Activities Act (b) promote the adoption by payment service providers of policies and procedures intended to ensure compliance, and (c) monitor and evaluate developments and issues in the world of retail payment activities.
How the Bank of Canada’s Supervisory Framework is Outlined
The Framework focuses on three activities: (1) registration, (2) risk monitoring, and (3) enforcement. Supervisory expectations will be informed by the Retail Payments Activities Act, its regulations, and additional guidance that is expected to be published by the BoC to help payment services providers understand their obligations.
(1) Registration
Certain individuals or entities will be required to register with the BoC by submitting an application along with a registration fee. Information regarding the BoC’s approach to fees can be found here.
Under the Framework, the criteria for registration are:
- Be a payment service provider;
- Perform a retail payment activity;
- Meet a certain geographic scope; and
- Perform payment functions that are not excluded from the Retail Payments Activities Act and associated regulations.
Under the geographic scope criteria, an individual or entity must either have a place of business in Canada or perform retail payment activities for an end user in Canada and direct retail payment activities at individuals or entities that are in Canada.
Individuals and entities excluded from registration include banks and authorized foreign banks (under the Bank Act), credit unions, insurance companies, trust and loan companies, provincially regulated loan companies, payment service providers agents and mandataries and Payments Canada. Transactions involving automatic teller machines and internal transactions between affiliated entities are also excluded activities under the Retail Payments Activities Act.
The BoC is currently developing a web application allowing payment service providers to register, pay fees, update information, and comply with legislated reporting requirements. Registration decisions will be posted on the BoC website, including those where registration is refused or revoked and the reasons why.
Applicant information of individuals and entities who meet the criteria for registration will be shared with the Department of Finance Canada to conduct a national security review and with Financial Transaction and Reports Analysis Centre of Canada (FINTRAC).
Applicants will be responsible for responding to requests for information during the applications process as well as keeping their information up to date. Once registered, payment service providers are required to comply with the Retail Payments Activities Act and pay an annual assessment fee.
(2) Risk Monitoring
Under the Retail Payments Activities Act, payment service providers must establish, implement and maintain an operational risk management and incident response framework. Additionally, payment service providers have an obligation to implement certain measures to safeguard end-user funds, if applicable.
The BoC will monitor and assess registered payment service providers performance of the above noted obligations. To do so, payment service providers will be required to submit annual reports, significant change or new activity reports, and incident reports. The BoC will use these reports, along with responses to requests submitted to payment service providers, to assess a payment service providers compliance. Assessment may include, desk reviews, on-site visits, or a special audit, each being more onerous than the last.
(3) Enforcement
The BoC will use a variety of tools to address non-compliance with the Retail Payments Activities Act. These include:
- A compliance agreement with a payment service provider to rectify non-compliance;
- A notice of violation accompanied with a monetary penalty;
- A notice of violation accompanied with an offer to enter into a compliance agreement (which would cut the monetary penalty in half);
- A compliance order, ordering a payment service provider to stop an action, refrain from taking an action, or to remedy the situation.
The BoC may also apply for a court order requiring a payment service provider to: 1) stop an action that violates the Retail Payments Activities Act, 2) comply with a provision of the Retail Payments Activities Act, or 3) comply with the terms of a compliance order. If a payment service provider disagrees with a notice of refusal of registration, notice of intent to revoke registration, a notice of violation or a notice of default, the payment service provider may appeal the decision to the Governor. If the Governor upholds the decision, a payment service provider may then appeal to the Federal court.
Anticipated Developments
The BoC notes that it may update the supervisor framework before or after the Retail Payments Activities Act comes into force in order to respond to regulations published by the Department of Finance Canada, changes in the retail payments sector, and to respond to lessons learned through the implementation of the Framework. Draft regulations and further guidance are expected to be published by the Department of Finance Canada in 2023.
This update is intended for general information only. If you have questions about the above, please contact the author(s) to discuss your needs for specific legal advice relating to the particular circumstances of your situation.
Click here to subscribe to Stewart McKelvey Thought Leadership
Archive
DUE DILIGENCE Generally, occupational health and safety legislation in Atlantic Canada, like other jurisdictions, requires employers to take reasonable precautions to ensure the health and safety of workers in their workplace. Read More INCIDENT RESPONSE…
Read MoreThe Cyber-safety Act (“the Act”), excepting Part V (that part amending the Safer Communities and Neighbourhoods Act), was proclaimed August 6, 2013 and is now in effect. As discussed in our May 17, 2013 Client Update and our HRLaw blog The business case…
Read MoreThe Supreme Court of Canada has now released the much anticipated decision in the case of Marine Services International Ltd. v Ryan Estate, 2013 SCC 44. In doing so, the high court has signaled, at least…
Read MoreIn Wood v. Wood et al, 2013 PESC 11, a motion pursuant to Rule 7.08 of the Rules of Civil Procedure for court approval of a settlement involving a minor, Mr. Justice John K. Mitchell approved the settlement among the…
Read MoreClients who sit on boards of corporate employers should take note of recent amendments made to New Brunswick’s Employment Standards Act (the “ESA”) which could increase their exposure to personal liability in connection with claims advanced by…
Read MoreSignificant changes may be coming to the standard automobile policy in PEI, including increases to the accident benefits available under Section B and an increase to the so-called “cap” applicable to claims for minor personal…
Read MoreOn June 17, 2013, pursuant to the recently amended Section 70 of the Labour Relations Act for Newfoundland and Labrador (“NL”), the Government of Newfoundland and Labrador issued three Special Project Orders (“SPOs”) in respect of the…
Read MoreOn June 14, 2013, the Supreme Court of Canada (“the Court”) released the decision that employers across the country were waiting for. In CEP Local 30 v. Irving Pulp & Paper Ltd., 2013 SCC 34, a…
Read MoreThe Government of Newfoundland and Labrador (“NL”) has recently released its “Aboriginal Consultation Policy on Land and Resource Development Decisions” (the “Policy”). A copy of the Policy can be accessed here. This new Policy is the…
Read MoreThe following is a province-by-province update of legislation from a busy 2013 spring session in Atlantic Canada. Watching these developments, we know the new legislation that has passed or could soon pass, will impact our…
Read More