Change theme
Change theme

Retail payments supervision: Key milestones

Last updated: May 22, 2024

Get an overview of what to expect as we prepare for the implementation of the Retail Payment Activities Act.



The Retail Payment Activities Act (RPAA) establishes the legal framework for us to supervise payment service providers (PSPs), including its scope and powers. It was approved by Parliament on June 29, 2021, and is expected to come into force in stages, as described below.


Regulations to help clarify the details of the legislation to support the RPAA. Regulations, like legislation, have the force of law.

  • Drafting: While the Department of Finance Canada drafted regulations, we engaged with stakeholders and provided technical expertise and advice as required.
  • Approving: The Department of Finance Canada submitted the regulations to the Treasury Board—the committee of ministers that oversees the Government of Canada’s spending and operations—for approval.
  • Publishing: Proposed regulations were published for public comment in Part I of the Canada Gazette.
  • Reviewing and republishing: The Government of Canada reviewed comments on the proposed regulations. A final version of the regulations was published in Part II of the Canada Gazette on November 22, 2023.


From February 2024, we consulted industry and stakeholders over a 90-day period to receive their feedback on four guidelines related to:

  • operational risk and incident response
  • safeguarding end-user funds
  • significant change reporting
  • incident notification

In the second half of 2024 we will publish final versions of these guidelines.

Supervisory policies and guidelines

Now that final regulations are published, we have started to issue supervisory policies related to registration. In 2024, we will continue to issue supervisory polices and guidelines on specific topics related to the RPAA and the final regulations.

Supervisory policies   

These documents clarify what we will do to carry out our supervisory role, including registration and enforcement activities.


In addition, we will issue guidelines on the legislation and final regulations. These will clarify the standards and practices we expect PSPs to incorporate into their business operations to meet requirements on:

  • managing operational risks
  • safeguarding end-user funds
  • notifying the Bank of significant changes and new activities
  • reporting on incidents

Registration pilot

In the first half of 2024, we will test our registration process and identify areas of improvement before provisions of the RPAA come into force.

Coming into force

The registration provisions of the RPAA will begin to take effect on November 1, 2024. Individuals and entities must submit a registration application by November 15, 2024.

The requirements to establish risk management and funds safeguarding frameworks will come into force on September 8, 2025.

Stay informed

For updates, subscribe to the retail payments supervision newsletter.

If you have questions about retail payments supervision or have any comments on this topic, contact us.

On this page
Table of contents