Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
CSA Pauses Investment KYC Portability Test in Canada
September 9, 2026 | NCFA Insight | Open Banking Open Finance And Data Sharing, Regulation And Policy, Risk Compliance And Regtech
Portable KYC Needs Banking And Securities Rules To Align
On September 8, 2026, the Canadian Securities Administrators published its investment data portability findings after roughly 18 months of work on whether investors could securely reuse electronic Know Your Client information across investment firms and fintech providers. The project received 21 written submissions, drew industry participation in Vancouver and Calgary, included bilateral meetings in Quebec, and stopped short of a planned live testing phase.
Most participants supported the idea. Reusing verified client information could shorten onboarding, make switching firms easier and reduce repeated data collection. Firms still need common rules for consent, security, data standards and what a dealer can rely on once information arrives from another provider.
The CSA is now looking to Canada’s developing Consumer Driven Banking Framework for part of that foundation. Investment portability is therefore becoming an early test of whether Canada can extend consumer controlled data beyond banking without forcing companies to build around separate regulatory systems.
Portable KYC Could Lower Investment Switching Costs
Opening an investment account can require a client to resubmit identity details, contact information, finances, investment objectives and risk information already held elsewhere. Reusing verified factual data could remove some of that repetition and get clients through onboarding faster.
The CSA found investors were generally expected to benefit most. Smaller firms could gain too. Lower onboarding friction gives a younger wealth platform a better chance of converting a customer before that customer abandons the process or stays with an incumbent simply because switching is easier to avoid.
See: The Next Open Banking Battle Is Decision Intelligence
A young firm feels that friction early. It is still building customers, distribution, compliance resources, operating history, capital and industry relationships. Every extra integration, legal interpretation and onboarding process consumes resources before the company has much scale to absorb them.
Canada is already working through many of the same issues in banking. Its consumer driven banking build depends on trusted consent, identity, security, liability and data exchange. Investment firms bring another set of regulatory duties into the same operating environment.
Portability also has limits. Stakeholders were more comfortable moving factual client data such as names, addresses, investment objectives and portfolio information than internal risk ratings, proprietary profiles, suitability assessments or other analysis created by a firm. It's a good boundary to draw. Client supplied facts can support reuse. A dealer’s own analysis remains tied to its methodology, controls and regulatory judgment.
KYC Responsibility Still Belongs To The Receiving Firm
A receiving dealer still has to decide whether transferred information is current, complete and sufficient for its own KYC obligations. Software, questionnaires and outside providers can support the process, but they do not take over the registrant’s responsibility.
Companion Policy 31-103 also calls for meaningful interaction with the client when KYC information is collected or updated. Firms therefore need clearer guidance on how much transferred or prefilled information they can use before fresh client interaction is required.
Consent raises another operating issue. Stakeholders called for revocable permissions, data minimization, clearer controls over when sharing ends and better ways for clients to manage access. Canada’s Privacy Commissioner has raised similar concerns about data scope, security safeguards, accreditation and regulatory coordination in the federal framework. The OPC’s open banking recommendations show how closely investment portability now depends on rules being built outside securities regulation.
The CSA examined direct firm to firm sharing, third party intermediaries, a central utility and centralized repositories. No model won clear support. Firms still need answers on who verifies data, manages consent, carries responsibility when something fails and keeps providers interoperable.
Regulatory Coordination Affects Who Gets To Scale
Most project participants wanted more detail from the federal Consumer Driven Banking Framework before the CSA started live testing. That restraint has a practical benefit. Common consent, authentication, security and technical standards could keep banks, dealers and fintechs from building incompatible systems for similar data sharing problems.
Finance Canada prepublished proposed Consumer Driven Banking Regulations in June 2026 covering accreditation, data scope, participant duties, liability, technical standards and enforcement. The Bank of Canada will supervise participating entities under the Consumer Driven Banking Act and maintain a public registry. NCFA’s Open Banking in Canada Opportunity Brief tracks how those rules connect to competition, new products and the longer term expansion toward open finance.
The Ontario Securities Commission did not participate in the CSA data portability project, and the CSA gives no reason for its absence. Ontario’s position is worth watching because it is Canada’s largest capital market and has separately agreed to join Canada’s securities passport system after years outside the regime.
Both developments point to the same competitive issue. Canadian firms can build nationally only when major jurisdictions and federal regulators give them rules they can operate across. Fragmented implementation forces companies to spend capital and management time reconciling systems before they can spend those resources on customers, product and distribution. That domestic scale is key in the current diversification climate because expanding into global markets adds another layer of operating cost, from compliance and banking relationships to customer acquisition, treasury and product adaptation.
See: NCFA Submission to Ontario Ministry of Finance: Urgent Need for Regulatory Change
Large institutions can absorb more of that cost. Younger companies have to earn the resources to carry it. Data portability is most useful during that stage because easier onboarding and switching can help firms build customer relationships before incumbent scale becomes the deciding advantage.
The global consequence comes later. Canadian fintechs usually need enough domestic scale, operating history and network depth before they can compete abroad. Better regulatory coordination can help more firms reach that point. Delay and duplication shrink the pool earlier in the company lifecycle.
Waiting for the federal framework makes sense if it produces standards that banking and securities firms can share. The CSA began this work in early 2025 and has now completed the research and consultation stages. Once the federal rules are clear enough to test against, live investment portability testing should restart so regulators and firms can learn from real operating conditions.
Talking Point
Canada gets more competitive financial companies when common infrastructure arrives early enough to help them build. Portable KYC could lower onboarding and switching costs while younger firms are still developing customers, capital and distribution.
The policy challenge is whether banking, securities and privacy rules can align early enough to give Canadian firms the operating foundation they need to scale, build capability and compete globally.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
 |  |  |
|---|---|---|
 |  |  |
Leave a Reply