Last updated: April 9, 2024
Get an overview of what to expect as we prepare for the implementation of the Retail Payment Activities Act.
Timeline
Legislation
The Retail Payment Activities Act (RPAA) establishes the legal framework for us to supervise payment service providers (PSPs), including its scope and powers. It was approved by Parliament on June 29, 2021, and is expected to come into force in stages, as described below.
Regulations
Regulations to help clarify the details of the legislation to support the RPAA. Regulations, like legislation, have the force of law.
- Drafting: While the Department of Finance Canada drafted regulations, we engaged with stakeholders and provided technical expertise and advice as required.
- Approving: The Department of Finance Canada submitted the regulations to the Treasury Board—the committee of ministers that oversees the Government of Canada’s spending and operations—for approval.
- Publishing: Proposed regulations were published for public comment in Part I of the Canada Gazette.
- Reviewing and republishing: The Government of Canada reviewed comments on the proposed regulations. A final version of the regulations was published in Part II of the Canada Gazette on November 22, 2023.
Supervisory policies and guidelines
Now that final regulations are published, we have started to issue supervisory policies related to registration. In 2024, we will continue to issue supervisory polices and guidelines on specific topics related to the RPAA and the final regulations.
Supervisory policies
These documents clarify what we will do to carry out our supervisory role, including registration and enforcement activities.
Guidelines
In addition, we will issue guidelines on the legislation and final regulations. These will clarify the standards and practices we expect PSPs to incorporate into their business operations to meet requirements on:
- managing operational risks
- safeguarding end-user funds
- reporting on incidents
Consultation
We are now consulting with industry and stakeholders on guidelines related to:
- operational risk and incident response
- safeguarding end-user funds
- significant change reporting
- incident notification
In the second half of 2024, we will publish final versions of these guidelines.
Registration pilot
In the first half of 2024, we will test our registration process and identify areas of improvement before provisions of the RPAA come into force.
Coming into force
The registration provisions of the RPAA will begin to take effect on November 1, 2024. Individuals and entities must submit a registration application by November 15, 2024.
The requirements to establish risk management and funds safeguarding frameworks will come into force on September 8, 2025.
Stay informed
For updates, subscribe to the retail payments supervision newsletter.
If you have questions about retail payments supervision or have any comments on this topic, contact us.