Last updated: December 12, 2024
Get an overview of what to expect as we prepare for the implementation of the Retail Payment Activities Act.
Timeline
Legislation
The Retail Payment Activities Act (RPAA) establishes the legal framework for us to supervise payment service providers (PSPs), including its scope and powers. It was approved by Parliament on June 29, 2021, and is expected to come into force in stages, as described below.
Regulations
Regulations to help clarify the details of the legislation to support the RPAA. Regulations, like legislation, have the force of law.
- Drafting: While the Department of Finance Canada drafted regulations, we engaged with stakeholders and provided technical expertise and advice as required.
- Approving: The Department of Finance Canada submitted the regulations to the Treasury Board—the committee of ministers that oversees the Government of Canada’s spending and operations—for approval.
- Publishing: Proposed regulations were published for public comment in Part I of the Canada Gazette.
- Reviewing and republishing: The Government of Canada reviewed comments on the proposed regulations. A final version of the regulations was published in Part II of the Canada Gazette on November 22, 2023.
Consultation
From February 2024, we consulted industry and stakeholders over a 90-day period to receive their feedback on four guidelines related to:
- operational risk and incident response
- safeguarding end-user funds
- significant change reporting
- incident notification
In the second half of 2024 we published final versions of these guidelines.
Registration pilot
In the first half of 2024, we tested our registration process to identify areas of improvement before provisions of the RPAA come into force.
Supervisory policies and guidelines
Now that final regulations are published, we have started to issue supervisory policies related to registration. We will continue to issue supervisory policies and guidelines on specific topics related to the RPAA and the final regulations.
Supervisory policies
These documents clarify what we will do to carry out our supervisory role, including registration and enforcement activities.
Guidelines
In addition, we have issued guidelines on the legislation and final regulations. These clarify the standards and practices we expect PSPs to incorporate into their business operations to meet requirements on:
- managing operational risks
- safeguarding end-user funds
- notifying the Bank of significant changes and new activities
- reporting on incidents
Coming into force
The registration provisions of the RPAA began on November 1, 2024. Individuals and entities must submit a registration application by November 15, 2024.
The requirements to establish risk management and funds safeguarding frameworks will come into force on September 8, 2025.
Stay informed
For updates, subscribe to the retail payments supervision newsletter.
If you have questions about retail payments supervision or have any comments on this topic, contact us.