READING PROGRESS
ELEMENT 1 OF 9 · RETAIL SECURITIES EXAM · CIRO

Know-Your-Client
& Suitability

A Registered Representative's relationship with their client is the foundation of ethical practice. This element covers KYC processes, risk profiling, account types, the trusted contact person framework, and suitability obligations.

11 LEARNING OUTCOMES CFR COMPLIANT · 2025 50 PRACTICE QUESTIONS CIRO IDPC RULES 3200–3400
1.1

The Firm–Client Relationship

CLIENT RELATIONSHIP MODEL · TRUST · AGENCY · FOREIGN CLIENTS

The Client Relationship Model (CRM)

The Client Relationship Model is a set of regulatory reforms introduced by the Canadian Securities Administrators (CSA) and enforced through CIRO that fundamentally changed how investment dealers must interact with clients. CRM introduced clear rules around pre-trade disclosure, account statements, performance reporting, and fee transparency.

Under CRM, a Registered Representative (RR) must, before or at account opening:

  • Disclose the nature of the relationship — Is the firm acting as an agent or a principal? What services are offered?
  • Disclose all fees, charges, and compensation — including commissions, trailer fees, charges, and account fees.
  • Describe all conflicts of interest — including proprietary products, referral arrangements, and compensation structures.
  • Provide ongoing reporting — annual performance reports, cost reports, and regular account statements.
CRM — Key Pillars
📋 Pre-Relationship
  • Relationship Disclosure Information (RDI)
  • Services offered
  • Fee schedule
  • Conflict of interest disclosure
🔄 Ongoing
  • KYC reviews (min. every 36 months for advisory; annually for managed)
  • Trade confirmations
  • Quarterly account statements
  • Suitability reviews at triggering events
📊 Annual Reporting
  • Annual performance report (money-weighted return)
  • Annual fee and charges report
  • Relationship disclosure updates if material changes occur
📌 EXAM FOCUS

The exam tests whether you understand what CRM requires to be disclosed, when, and who is responsible. Remember: the Relationship Disclosure Information (RDI) must be provided before or at account opening, not after. If material changes occur, the RDI must be updated.

Trust, Agency, and Conflicts of Interest

Trust

The client–RR relationship is built on trust. Clients entrust their financial futures to their advisors. This creates both a legal duty of care and an ethical obligation to act in the client's best interest — not just to recommend suitable products, but to put the client's interest first (the enhanced suitability standard introduced by the Client Focused Reforms, effective June 2021).

Agency

When an RR acts as an agent, they are acting on behalf of the client to execute trades in the market. The dealer does not own the securities being bought or sold — they facilitate the transaction. This is the typical relationship in an advisory account.

When a dealer acts as a principal, the firm is buying from or selling to the client directly from its own inventory. This is common in fixed income (bond) trading. When acting as principal, the dealer must disclose this and ensure the price is fair.

RoleDescriptionExampleDisclosure Required?
AgentRR acts on client's behalf; executes in marketBuying 100 shares of RY on TSX for clientYes — commission
PrincipalFirm sells from own inventory to clientSelling a bond to client from dealer's bookYes — markup/markdown

Conflicts of Interest (COI)

A conflict of interest exists whenever the interests of the RR or firm could interfere with their duty to act in the client's best interest. Under the Client Focused Reforms (CFRs), firms must identify, address, and disclose all material conflicts.

  • Identify: Proactively look for situations where interests diverge — e.g., recommending a proprietary fund that pays higher trailer fees.
  • Address: Determine how to resolve the conflict in the client's favour. Not all conflicts can be disclosed away — some must be avoided entirely.
  • Disclose: If the conflict cannot be avoided, it must be clearly explained to the client in a way they can understand.
⚠️ KEY DISTINCTION

The CFRs created a hierarchy: Avoid → Address → Disclose. Disclosure alone is not sufficient if the conflict can be avoided or addressed. This "address first" approach is tested frequently on the exam.

Common examples of conflicts of interest:

  • Recommending proprietary mutual funds that generate higher revenue for the dealer
  • Referring clients to affiliated companies (insurance, mortgage) for referral fees
  • Selling securities from the firm's inventory (acting as principal)
  • Receiving gifts or entertainment from product manufacturers
  • Being personally invested in a security recommended to clients

Clients Residing in the United States — Snowbirds & Foreign Jurisdictions

Canadian RRs are not automatically permitted to deal with clients who reside outside of Canada. Serving US-resident clients raises cross-border regulatory issues governed by both CIRO rules and US securities law (primarily the Securities Exchange Act of 1934 and FINRA rules).

The "Snowbird" Issue

A snowbird is a Canadian who spends part of the year in the US (typically winters in Florida, Arizona, etc.) but is not a US resident for regulatory purposes. The key question is: where does the client legally reside?

Client TypeRegulatory StatusCanadian RR Can Serve?Key Consideration
Canadian temporarily in US (snowbird)Canadian resident — accounts remain Canadian✅ Generally yesNo change to account; normal KYC applies
Canadian who has relocated to USBecomes a US resident⚠️ Restricted — special rules applyMust comply with SEC/FINRA; many Canadian dealers restrict service
US Citizen living in CanadaCanadian resident but US citizen✅ Can serve, but extra obligationsFATCA reporting; US tax obligations follow citizens globally
Non-resident client (other jurisdictions)Foreign resident⚠️ Case-by-caseLocal securities laws of that country may apply

Serving US-Resident Clients

To legally deal with US-resident clients, a Canadian dealer typically must either:

  • Be registered with the SEC or FINRA in the US, OR
  • Qualify for the International Dealer Exemption (available in some US states for dealing with major institutional clients), OR
  • Rely on firm-specific policies that restrict what products/services can be offered to US residents.
🔴 REGULATORY NOTE

Most Canadian retail dealers choose to restrict or close accounts when a client permanently relocates to the US, rather than navigating dual registration requirements. The RR must immediately notify their compliance department when a client indicates a change in residency to the US.

Considerations for Changes in Residence

When a client changes their province or country of residence, the RR must take specific steps:

  • Update KYC immediately — Change of address, tax residency, and applicable provincial securities laws must be updated promptly.
  • Reassess account suitability — Provincial rules can differ (e.g., Québec has different regulations via the AMF). Some products may not be eligible for sale in the new province.
  • Notify compliance — Any cross-border relocation (especially to the US) must be reported to the compliance department, as it may trigger a restriction or closure of the account.
  • Tax residency changes — A change of country may affect withholding taxes, RRSP contribution room (non-residents lose RRSP contribution room), and TFSA eligibility (non-residents cannot contribute to TFSAs).
💡 PRACTICAL TIP

If a client moves to Québec, their account must comply with both CIRO rules and the Autorité des marchés financiers (AMF) rules. Some products may not be registerable in Québec. Always flag this to compliance.

1.2

KYC Information — Content & Importance

FINANCIAL CIRCUMSTANCES · RISK PROFILE · INVESTMENT OBJECTIVES · CONSTRAINTS

Know-Your-Client (KYC) is the cornerstone of the advisory relationship. Without a thorough understanding of the client, no meaningful suitability assessment can be made. CIRO rules require RRs to collect and maintain a comprehensive picture of each client's unique situation. The KYC obligation is specific to each individual client — you cannot attribute a spouse's characteristics (income, experience, risk tolerance) to the other spouse.

Financial Circumstances

Income

Income is the client's regular flow of money — salary, business income, pension, CPP/OAS, rental income, dividends, etc. Understanding income helps assess:

  • Whether the client can sustain ongoing contributions to their portfolio
  • How dependent they are on investment returns to fund their lifestyle
  • Their marginal tax bracket (which affects product selection — e.g., Canadian dividends are tax-advantaged for higher earners)

Liquidity Needs

Liquidity refers to how quickly a client may need to convert investments to cash. A client with high liquidity needs (upcoming tuition, home purchase, medical expenses) should hold more liquid assets and should not be placed in illiquid investments like limited partnerships, private equity, or long-term locked-in GICs.

Financial Assets

This includes the total value of all investment accounts — RRSP, TFSA, non-registered, RESP, pension plans, company stock options, business interests, real estate (non-primary), GICs, and any other investable assets. This provides the full investment picture and is essential for portfolio construction and asset allocation.

Liabilities

Liabilities include mortgages, car loans, credit card debt, student loans, margin loans, business debt, and personal guarantees. High liabilities relative to assets reduce risk capacity and liquidity. An RR must understand the complete debt picture to avoid recommending investments that could be jeopardized by debt servicing obligations.

Net Worth

Net worth = Total Assets − Total Liabilities. Net worth is a key indicator of financial stability and risk capacity. A client with high net worth can generally absorb more investment loss without it materially affecting their lifestyle.

Net Worth Calculation — Example
✅ Assets
  • RRSP: $180,000
  • TFSA: $45,000
  • Non-registered portfolio: $90,000
  • Primary residence: $750,000
  • Savings account: $20,000
  • Total Assets: $1,085,000
❌ Liabilities
  • Mortgage: $380,000
  • Car loan: $22,000
  • Credit card: $5,000
  •  
  • Total Liabilities: $407,000
  • Net Worth: $678,000

Borrowing to Invest (Leveraged Investing)

If a client is borrowing money to invest (using a margin account, home equity line of credit, or investment loan), this creates significant additional risk. The RR must:

  • Specifically document that the client is borrowing to invest
  • Assess whether this is suitable given the client's risk profile
  • Ensure the client understands that losses are amplified when leverage is used — they must still repay the loan even if the investment loses value
  • Recommend only investments with sufficient expected return to justify the borrowing cost
🔴 IMPORTANT RULE

Borrowing to invest is not suitable for all clients. It is generally only appropriate for clients with high income, high net worth, long time horizons, and high risk tolerance and capacity. CIRO requires specific KYC documentation when leverage is involved.

Personal Circumstances

Personal circumstances include all non-financial details that affect the client's investment needs and suitability. Key factors include:

Age & Life Stage
A 28-year-old has a different investment horizon and risk profile than a 68-year-old. Life stage (starting career, family formation, pre-retirement, retirement) heavily shapes investment strategy.
Employment Status
Employed, self-employed, retired, or unemployed. Stability of income affects risk capacity and liquidity needs.
Family Situation
Single, married, divorced, dependents (children, elderly parents). A client with dependents may need life insurance, education savings (RESP), and more conservative investments.
Tax Situation
Marginal tax rate, registered account room (RRSP contribution room, TFSA room), capital loss carryforwards, US person status (FATCA). Tax considerations influence account type and product selection.
Health
A client with a serious illness may have a much shorter effective time horizon and higher liquidity needs for medical expenses.
Expected Inheritance / Windfall
An expected large inheritance could reduce the need for aggressive growth investing.

Investment Knowledge

Investment knowledge assesses how well the client understands financial products, markets, and risk. CIRO typically categorizes knowledge as:

  • None / Limited: Little to no investing experience; needs full explanation of all products and risks
  • Good: Some experience, understands basic concepts (stocks, bonds, mutual funds, risk/return)
  • Sophisticated: Experienced investor who understands complex products including options, derivatives, leveraged ETFs

Investment knowledge is separate from risk tolerance. A client can have low knowledge but a high risk tolerance (which actually increases suitability risk) or vice versa. The RR must not assume that a client who is willing to take risk also understands the risks they're taking.

Investment Objectives, Constraints, & Time Horizon

Investment Objectives

Investment objectives describe what the client wants to achieve with their portfolio. The most common objectives are:

ObjectiveDescriptionTypical ProductsRisk Level
Safety of CapitalPreserve principal above all else; cannot afford to lose moneyGICs, T-bills, money market funds, government bondsVery Low
IncomeGenerate regular cash flow from investmentsBonds, dividend stocks, REITs, preferred sharesLow–Medium
GrowthIncrease portfolio value over time; some income acceptableBalanced funds, blue-chip equities, ETFsMedium–High
Aggressive GrowthMaximum capital appreciation; willing to accept high volatilitySmall caps, emerging markets, sector ETFs, optionsHigh–Very High
SpeculationWilling to risk loss of capital for potentially large gainsJunior miners, crypto, options, futuresVery High

Investment Constraints & Restrictions

Clients may have specific restrictions on what they want or are willing to hold. The Client Focused Reforms now explicitly require RRs to consider these:

Equity, Diversity & Inclusion (EDI) Considerations

Some clients may wish to invest in companies or funds that prioritize diversity in leadership, equitable employment practices, and inclusive business models. While not strictly ESG (which is environmental/social/governance), EDI focuses specifically on workforce and governance diversity metrics.

Environmental, Social & Governance (ESG) Criteria

ESG investing has grown dramatically in Canada. Clients may wish to exclude certain sectors (fossil fuels, tobacco, weapons) or specifically include companies with high ESG ratings. The RR must document these preferences and apply them to product selection. Key points:

  • ESG preferences are not a replacement for financial suitability — an ESG-screened portfolio must still meet the client's risk, return, and liquidity objectives
  • There is no single universal ESG standard — different ratings agencies (MSCI, Sustainalytics) use different methodologies
  • Greenwashing is a compliance risk — do not describe products as "ESG" without substantiation
  • SRI (Socially Responsible Investing) and ESG are related but not identical terms

Other Personal Preferences

A client may have religious investing constraints (e.g., Shariah-compliant investing which prohibits interest-bearing instruments and certain industries), ethical preferences, or cultural values that shape their investment decisions. These must be documented and respected.

Investment Time Horizon

The time horizon is the period over which the client expects to keep their money invested before needing it. Time horizon is one of the most critical factors in suitability because it directly affects how much short-term volatility the portfolio can absorb.

Time HorizonDurationGeneral Implication
Short< 3 yearsLow risk tolerance required; protect capital; liquidity important
Medium3–10 yearsBalanced approach; can accept moderate volatility for growth
Long> 10 yearsHigher risk acceptable; time to recover from market downturns
📌 EXAM FOCUS

A client with a 3-year time horizon who says they want aggressive growth presents a conflict — the time horizon does not support aggressive growth. The RR must resolve this conflict by educating the client and documenting the discussion. The final risk profile should reflect the lower of risk tolerance and risk capacity.

1.3

Risk Profile Assessment

RISK TOLERANCE · RISK CAPACITY · RISK NEED · CONFLICT RESOLUTION

Under the Client Focused Reforms, the risk profile is no longer a simple "low/medium/high" checkbox. RRs must understand and document three distinct but related dimensions of risk: tolerance, capacity, and need. The final overall risk profile should represent a thoughtful assessment of all three.

The Three Dimensions of Risk — Framework
⚡ Risk Tolerance

Willingness to accept risk
(Psychological/behavioural)

Driven by: personality, past experience, investment knowledge, emotional response to loss

💪 Risk Capacity

Ability to endure loss
(Financial/objective)

Driven by: income, net worth, liquidity needs, time horizon, other assets

🎯 Risk Need

Risk required to meet goals
(Goal-based)

Driven by: target return, retirement income goals, consequence of shortfall

Overall Risk Profile = Thoughtful integration of all three, resolving conflicts in client's best interest

Risk Tolerance — Willingness to Accept Risk

Risk tolerance is a psychological construct — it measures how emotionally and mentally comfortable a client is with the possibility of losing money or seeing their portfolio decline in value. It is influenced by:

Preference
What does the client prefer? Some clients genuinely prefer stability and sleep better with lower-risk portfolios, even if they could financially absorb losses.
Knowledge & Experience
A client who lived through the 2008 financial crisis and held steady is likely more risk tolerant than one who panic-sold. Past investment behavior is an important indicator.
Emotional Reaction to Loss
How does the client react when their portfolio drops 15%? Do they call the RR in a panic, or do they stay calm? This "gut check" behaviour is a key risk tolerance signal.
Behavioural Biases
Clients may suffer from loss aversion (losses feel worse than equivalent gains feel good), overconfidence in bull markets, or anchoring to past portfolio highs. RRs should identify these tendencies.
⚠️ IMPORTANT

Risk tolerance can change with market conditions. A client who says they're "high risk" in a bull market may panic in a correction. The RR must probe deeper — ask about past experience during downturns, not just current preferences.

Risk Capacity — Ability to Endure Financial Loss

Risk capacity is the objective, financial measurement of how much loss a client can actually afford to sustain without material impact on their life goals or financial obligations. Unlike risk tolerance (which is psychological), risk capacity is determined by hard financial facts:

  • Financial situation: Net worth, income stability, and existing assets. A client with $2M in assets who needs $50K/year to live has more capacity to absorb losses than one with $150K who needs $60K/year.
  • Current investments: Is the portfolio being assessed the client's only savings, or one of many? A concentrated bet in a single account is riskier when no other assets exist.
  • Investment horizon: Longer time horizons = higher capacity, because markets tend to recover over time. Short horizons dramatically reduce capacity.
  • Need for liquidity: If the client may need the money back quickly, capacity for risk is reduced. Illiquid or volatile investments are inappropriate.
🔴 REGULATORY RULE — CRITICAL

CIRO rules require that when risk tolerance and risk capacity conflict, the overall risk profile must reflect the lower of the two. Example: A client says they want high-risk investments (high tolerance) but their financial situation shows they cannot afford significant losses (low capacity) — the profile must be set to low risk and the conflict must be documented and explained to the client.

Risk Need — How Much Risk Is Required to Meet Goals

Risk need asks the question: What rate of return does the client need to achieve their financial goals, and how much risk must they take to potentially achieve that return?

Required Rate of Return
If a client needs 8% annual returns to retire comfortably, a low-risk GIC portfolio at 4% will not be sufficient. The required return implies a minimum level of risk that must be accepted.
Market Risk Environment
In a low-interest-rate environment, achieving target returns may require moving further out on the risk spectrum than previously necessary. The current market context matters.
Consequence of Failure
If the client must hit their return target (e.g., to fund retirement or a child's education), the consequence of falling short is severe. But if there's flexibility (they could work longer, spend less), the risk profile can be more conservative.

Resolving Conflicts Between Client Expectations and Risk Profile

It is common for a client's stated wishes to conflict with their assessed risk profile. For example:

  • Client says "I want 20% returns" but has a short time horizon and low net worth (expectations vs. capacity conflict)
  • Client wants to avoid all risk but needs 7% returns to meet retirement goals (tolerance vs. need conflict)
  • Client checks "high risk" on questionnaire but panics at the first 10% drawdown (stated vs. revealed preference conflict)

The RR's obligations when conflicts arise:

Step 1: Identify the conflict clearly
Step 2: Educate the client — explain the conflict and its implications
Step 3: Set the profile at the more conservative level (lower of tolerance/capacity)
Step 4: Document everything — the conflict, the discussion, and the resolution
1.4

Business Structures & Investment Opportunities

SOLE PROPRIETOR · PARTNERSHIP · CORPORATION · CO-OPERATIVE

When opening accounts for non-individual clients, the RR must understand the legal structure of the entity. The structure affects who can authorize trades, what documentation is required, what investment opportunities are available, and how the entity is taxed.

SOLE PROPRIETORSHIP

A business owned and operated by one individual. There is no legal separation between the owner and the business.

✓ KEY FEATURES

• Business income taxed as personal income
• Owner has unlimited personal liability
• Account opened under owner's personal SIN
• Only one authorized trader

⚠ KYC NOTES

• Must obtain business registration documents
• Personal KYC of the owner required
• No corporate tax structure

PARTNERSHIP

Two or more individuals or entities sharing ownership of a business.

✓ TYPES

General Partnership: All partners have unlimited liability and share management
Limited Partnership (LP): General partners manage; limited partners have liability limited to their investment
LLP: Used by professionals (lawyers, accountants)

⚠ KYC NOTES

• Partnership agreement required
• KYC for all general partners
• All authorized partners must be documented
• Partnership income flows through to partners' personal taxes

CORPORATION

A separate legal entity from its owners (shareholders). Provides limited liability protection.

✓ PRIVATE vs. PUBLIC

Private Corporation: Shares not publicly traded; maximum 50 shareholders (federally); eligible for Small Business Deduction on first $500K of active business income (15% federal rate)

Public Corporation: Shares listed on stock exchange; subject to continuous disclosure obligations; different tax treatment

⚠ KYC NOTES

• Certificate of incorporation required
• Corporate resolution authorizing account opening
• List of directors and signing officers
• Beneficial ownership info (25%+ owners)
• Must identify ultimate beneficial owner (UBO)

CO-OPERATIVE

An organization owned and democratically operated by its members for their mutual benefit.

✓ KEY FEATURES

• One member, one vote (regardless of capital contribution)
• Surpluses distributed to members as patronage dividends
• Common in agricultural (FCC), financial (credit unions), and housing sectors
• Distinct legal entity with limited liability

⚠ KYC NOTES

• Co-operative incorporation documents required
• Board resolution needed for account opening
• Identify signing officers and authorized individuals
• Different investment restrictions may apply

📌 EXAM FOCUS

Key exam distinctions: (1) Only a corporation provides separate legal personality and limited liability to all owners. (2) A private corporation cannot have more than 50 shareholders (federally) and restricts share transfers. (3) AML/KYC requirements for corporations require identifying the ultimate beneficial owner — individuals who directly or indirectly own or control 25% or more of the entity.

1.5

Documentation of Client Discussions

ACCURACY · CLIENT CONFIRMATION · RECORD-KEEPING

Accurate documentation is one of the most important—and most tested—obligations of a Registered Representative. CIRO rules require that discussions with clients be documented promptly, accurately, and completely. Documentation is both a regulatory requirement and your best protection in the event of a client dispute.

What Must Be Documented?

  • All KYC information collected or updated, with date and method of collection (in-person, phone, email)
  • Investment objectives and constraints discussed with the client
  • Suitability assessments — the rationale for why a recommended product is suitable for that specific client
  • Conflicts identified and resolved — e.g., when a client's stated risk tolerance exceeds their capacity
  • Client instructions — particularly for unsolicited trades and any client overrides of RR recommendations
  • Trusted Contact Person discussions — including if the client refuses to provide one
  • Changes to KYC information — whenever client circumstances change

Client Confirmation of KYC Accuracy

After collecting or updating KYC information, the RR must have the client confirm the accuracy of the information on file. This is typically done through a KYC update form or account statement that shows the KYC details, which the client must sign (wet or electronic signature).

🔴 KEY RULE

An RR must never manipulate or alter KYC information to make an unsuitable investment appear suitable. This is a serious regulatory violation that can result in registration suspension or cancellation. Equally, an RR cannot accept client instructions to "just put anything" in the risk tolerance field — the RR has an independent duty to ensure KYC information is accurate.

💡 PRACTICAL GUIDANCE

The standard in CIRO reviews is: "If it's not documented, it didn't happen." Verbal discussions, even if they occurred, are of limited evidentiary value without contemporaneous notes. Always make call notes immediately after client conversations.

1.6

The Trusted Contact Person (TCP)

ESTABLISH · PERMITS · REFUSAL · FINANCIAL EXPLOITATION · TEMPORARY HOLDS

The Trusted Contact Person (TCP) framework was introduced to protect vulnerable clients — particularly seniors and those who may be experiencing cognitive decline or financial exploitation. It is one of the most heavily tested areas in Element 1.

How to Establish a Trusted Contact Person

At or before account opening, the RR must make reasonable efforts to have the client name a trusted contact person. The TCP is not required — but the RR must attempt to obtain one and document the attempt. To establish a TCP:

  • Explain to the client what a TCP is and why it is beneficial
  • Request the TCP's full name, relationship to the client, and contact information (phone number, email)
  • Have the client consent in writing to the TCP designation
  • Record the TCP information in the client file

What a TCP Permits — and What It Does NOT Permit

TCP — Permitted vs. Not Permitted
✅ A TCP PERMITS
  • Confirming the client's current contact information
  • Confirming the client's health status (if relevant)
  • Confirming the name and contact info of the client's legal representative, power of attorney, or trusted family member
  • Discussing concerns about possible financial exploitation of the client
  • Discussing concerns about the client's mental capacity to make financial decisions
❌ A TCP DOES NOT PERMIT
  • The TCP to give investment instructions on behalf of the client
  • The TCP to access account information
  • The TCP to authorize trades or withdrawals
  • The TCP to override the client's own instructions
  • The RR to share detailed account information with the TCP without client consent
📌 EXAM FOCUS — CRITICAL DISTINCTION

A TCP is NOT a power of attorney and is NOT an authorized trader. Contacting the TCP does not give them any control over the account. The TCP is strictly a point of contact for welfare and exploitation concerns only. This distinction is heavily tested.

If the Client Refuses to Provide a TCP

If a client refuses to provide a trusted contact person, the RR:

  • Must not deny account opening or service solely because the client refused
  • Must document the refusal in the client file (this becomes a "record of trusted contact person refusal")
  • Should attempt again at the next KYC review

When to Contact the Trusted Contact Person

The TCP should be contacted when the RR has reasonable grounds to believe one of the following:

  • The client may be experiencing financial exploitation (e.g., unusual large withdrawals, pressure from a third party, suspicious transaction requests)
  • There are concerns about the client's mental capacity to make financial decisions (cognitive decline, dementia, confusion)
  • The client cannot be reached and there is concern for their well-being

Recognizing Financial Exploitation & Capacity Concerns

Red Flags for Financial Exploitation

  • Sudden large, unusual withdrawals especially to third parties
  • A third party appearing to control or direct client decisions
  • Client appears fearful, confused, or under duress when giving instructions
  • Client requests to transfer funds to someone claiming to be a government official, CRA, or law enforcement
  • Account activity inconsistent with the client's established patterns
  • Requests for gift cards, cryptocurrency, or wire transfers to unfamiliar accounts

Red Flags for Capacity Concerns

  • Client forgets recent discussions or instructions they gave
  • Client makes inconsistent or contradictory decisions
  • Client appears confused about the nature or value of their accounts
  • Noticeable deterioration in the client's ability to understand financial concepts they previously understood
  • Third party begins attending all meetings and answering on behalf of the client

Temporary Holds

A temporary hold allows an RR (or the dealer) to temporarily delay processing a transaction or disbursement when there are reasonable grounds to believe that the client is being financially exploited or lacks the capacity to make the decision. Key conditions:

RequirementDetail
Reasonable GroundsMust have specific, documented reasons to believe exploitation or incapacity — not just a "feeling." Red flags must be present.
DurationCIRO rules allow a hold for a reasonable period while the situation is investigated — typically up to 30 days depending on circumstances
NotificationThe client must be notified of the hold (unless notification would cause further harm). The TCP may be contacted.
Supervisory ApprovalA temporary hold typically requires supervisor approval and must be escalated through proper internal channels
DocumentationAll steps taken, reasons, parties contacted, and outcomes must be fully documented
OutcomeEither the hold is lifted (transaction proceeds) or it is escalated to compliance/legal/law enforcement
🔴 IMPORTANT

A temporary hold is a protective measure — it does not permanently freeze the account. It buys time to investigate. If the RR wrongly delays a legitimate transaction, this could also create liability — documentation of the specific red flags is essential.

1.7

Primary Responsibility & Prohibition on KYC Delegation

NON-DELEGABLE DUTY · KEEPING KYC CURRENT · REVIEW TIMELINES

Who Is Responsible for KYC?

The primary responsibility for collecting, maintaining, and acting on KYC information rests with the Registered Representative and the Investment Dealer. This responsibility cannot be delegated to the client, to a third party, or to a junior employee who is not registered.

🔴 NON-DELEGABLE OBLIGATION

An RR cannot say "the client filled out their own KYC form so it's their responsibility." The RR must independently verify and assess the accuracy of all KYC information. If an RR accepts KYC information they know (or should know) to be inaccurate, they are in violation of CIRO rules.

Keeping KYC Information Current — Review Timelines

KYC is not a one-time collection exercise. It must be actively maintained and updated throughout the client relationship. CIRO requires KYC to be reviewed:

Triggering EventKYC Review Required?
At account opening✅ Always — full KYC collection
Regularly scheduled reviews✅ At minimum every 36 months for advisory accounts; annually for managed accounts
Client informs RR of life change (marriage, divorce, job loss, retirement, inheritance)✅ Immediate update required
Significant market event affecting suitability✅ Review and document suitability assessment
Client requests change in investment objectives✅ Update KYC; reassess suitability
Change in residence (province or country)✅ Immediate update required
Client turns a significant age (e.g., 65, 71 — RRSP conversion to RRIF)✅ Review required; objectives and needs change

Additionally, when the RR has a reasonable basis to believe KYC has changed, they must update the records even if the client has not directly informed them.

1.8

Types of Client Account Records

IDENTITY VERIFICATION · KYC · DISCLOSURES · DOCUMENTATION

CIRO requires dealers to maintain a complete and accurate set of records for every client account. These records form the audit trail for regulatory examinations and are essential for compliance. There are five primary categories:

Client Account Record — Five Components
1. Verification of Identity
Government-issued photo ID (passport, driver's licence). Two pieces of ID or dual-process verification. For corporations: incorporation documents + verification of directors/UBOs. Required under PCMLTFA (anti-money laundering legislation).
2. Account Appropriateness Assessment
A separate assessment of whether the account type (e.g., margin, options) is appropriate for this client, based on their KYC information. This is distinct from suitability of individual securities — it assesses whether the account itself is suitable.
3. KYC Information
The full KYC file — financial circumstances, personal circumstances, investment knowledge, risk profile, investment objectives, constraints, and time horizon. Must be complete, accurate, and current. Client must confirm accuracy.
4. Acknowledgement of Disclosures
Signed client acknowledgement that they received and understood: Relationship Disclosure Information (RDI), fee schedules, conflicts of interest disclosure, margin agreement (if applicable), options agreement (if applicable).
5. Record of TCP Refusal
If the client refused to provide a trusted contact person, this refusal must be specifically documented. This protects the dealer and demonstrates that the RR made the required effort to obtain a TCP.
💡 IDENTITY VERIFICATION — METHOD DETAILS

CIRO and FINTRAC (under PCMLTFA) require client identity verification. Acceptable methods include:
(1) Government photo ID method: One piece of government-issued photo ID (passport, driver's licence, health card in some provinces).
(2) Dual-process method: Two pieces of ID from different sources (e.g., credit card + utility bill) — used when photo ID is unavailable.
(3) Credit file method: Verification using a credit bureau check.
(4) Attestation method: A commissioner of oaths or guarantor attests to the identity — for non-face-to-face accounts.
Identity must be re-verified when there is doubt about accuracy of prior verification.

1.9

Account Appropriateness Obligation

ACCOUNT-LEVEL SUITABILITY · APPLYING TO SCENARIOS

Account appropriateness is a separate obligation from securities suitability introduced more clearly under the Client Focused Reforms. While suitability asks "is this specific trade suitable for this client?", account appropriateness asks "is this type of account appropriate for this client's overall objectives and circumstances?"

Key Principles of Account Appropriateness

  • An options account is not appropriate for a client with no investment knowledge, low risk tolerance, and a capital preservation objective — even if the client requests it.
  • A margin account is not appropriate for a retiree on fixed income who cannot afford to meet a margin call.
  • A discretionary account requires specific written authorization and is only appropriate when the client has explicitly agreed to give the dealer full discretion over trading decisions.
  • Account appropriateness must be assessed at account opening AND must be reassessed periodically or when circumstances change.

Scenario Application

ScenarioAccount Appropriate?Reasoning
60-year-old retiree with $80K savings wants a margin account to "boost returns"❌ Not appropriateCannot sustain margin calls; income-focused objectives; approaching retirement
35-year-old software engineer, $250K savings, high income, sophisticated knowledge requests options account✅ Potentially appropriateFinancial capacity, knowledge, and long time horizon support it; must document suitability of each options strategy
A small holding company with passive income wants a non-registered investment account✅ Appropriate with proper documentationCorporate account with appropriate authority documentation is standard
Client with gambling history and impulsive investment decisions wants a discretionary account⚠️ Requires careful assessmentDiscretionary account removes client control — this can actually protect against impulsive behaviour if the PM is disciplined
1.10

Types of Client Accounts

ADVISORY · MANAGED · DISCRETIONARY · CASH vs. MARGIN

Advisory (Non-Managed) Accounts

In an advisory account, the RR provides recommendations and advice, but the client makes all final investment decisions. The RR does not have discretion to trade without client approval for each transaction.

Fee-Based Advisory Accounts

Instead of charging a commission per trade, the client pays a flat percentage fee (typically 1–2% of assets under management annually). This aligns the RR's compensation with account growth rather than trading volume.

  • Advantage: Reduces conflict of interest (RR not incentivized to churn the account)
  • Advantage: Predictable cost for clients who trade frequently
  • Disadvantage: Can be expensive for clients who rarely trade or hold long-term static portfolios
  • Disadvantage: Even in flat/down markets, the fee is still charged

Commission-Based Advisory Accounts

The RR earns a commission for each transaction executed. The commission must be disclosed and is typically a percentage of the trade value or a flat fee per trade.

  • Advantage: Client only pays when transactions occur; better for buy-and-hold investors
  • Disadvantage: Creates conflict of interest — RR may be incentivized to trade more (churning)
  • Regulatory safeguard: Excessive trading (churning) is prohibited and results in regulatory action

Managed Accounts

A managed account is one where a Portfolio Manager (PM) or registered individual has been granted authority to make investment decisions without requiring client approval for each trade. This is a higher level of service typically for clients with larger portfolios.

Key Features of Managed Accounts:

  • Client signs an Investment Policy Statement (IPS) setting out objectives, risk profile, and constraints
  • The PM has full discretion within the IPS parameters
  • KYC must be reviewed annually (more frequently than advisory accounts)
  • Performance reporting is on a money-weighted return (MWR) basis
  • Higher regulatory obligations on the PM (portfolio manager registration required)

Discretionary Accounts

A discretionary account is one where the RR or dealer has been given written authority by the client to make investment decisions without consulting the client for each trade. This is similar to a managed account but the term is sometimes used more broadly in the industry.

🔴 KEY RULE

Discretionary trading requires explicit written client authorization. A verbal agreement is NOT sufficient. Without this written authorization, executing trades without client approval for each trade constitutes unauthorized trading — a serious violation. Supervisors must also approve the discretionary arrangement.

Cash Accounts vs. Margin Accounts

FeatureCash AccountMargin Account
FundingClient must pay full value of securities at settlementClient can borrow from dealer to purchase securities (leverage)
Short Selling❌ Not permitted✅ Permitted (with restrictions)
SettlementMust settle by standard settlement date (T+1 for equities in Canada)Securities can be held as collateral; more flexibility
RiskLoss limited to amount investedLosses can exceed initial investment; margin calls possible
InterestNo interest chargesInterest charged on borrowed amount (the debit balance)
Margin CallN/AIf account value falls below maintenance margin, dealer can demand additional cash or sell securities
SuitabilityAppropriate for all investorsOnly appropriate for investors who understand leverage and can afford to meet margin calls

How Margin Works — Example

💡 MARGIN EXAMPLE

Client wants to buy $10,000 of Royal Bank (RY) shares. With a 50% initial margin requirement:

• Client must deposit: $5,000 (50% of $10,000)
• Dealer lends: $5,000
• If RY falls 30% → portfolio is worth $7,000
• Loan is still $5,000 → Client's equity = $2,000 (only 28.6%)
• If maintenance margin is 30%, client receives a margin call → must deposit cash or securities
• If client cannot meet margin call → dealer can sell securities without client approval

1.11

Account-Related Documentation & Account Opening

BUSINESS MODEL · PRODUCT OFFERINGS · MULTIPLE ACCOUNTS

The documentation collected at account opening must be calibrated to the dealer's business model, the products and services offered, and the nature of the client relationship. There is no one-size-fits-all documentation approach — CIRO's guidance recognizes that different dealers have different business models that may require different documentation.

Investment Dealer's Business Model

The documentation and depth of KYC collection will vary based on:

  • Full-service dealer: Offers broad investment advice; requires comprehensive KYC including full financial picture, ESG preferences, detailed objectives
  • Discount / Self-directed dealer: Minimal advice; client makes own decisions; documentation is lighter but still requires identity verification, basic KYC, and account appropriateness for specialized accounts (margin, options)
  • Online / Robo-advisor: May use algorithm-driven KYC questionnaires; must still meet CIRO minimum KYC requirements

Relationship with Clients & Products Offered

The documentation must reflect what products and services the dealer offers. A dealer that offers only mutual funds has a different documentation obligation than one that offers equities, fixed income, derivatives, and alternative investments.

Conditions for One Set of KYC for Multiple Accounts

A client may have multiple accounts at the same dealer (e.g., RRSP + TFSA + Non-registered). CIRO permits a single set of KYC information to apply to multiple accounts when:

  • The same individual is the account holder for all accounts
  • The same KYC information applies across all accounts (same objectives, same risk profile, same constraints)
  • The client has explicitly confirmed the KYC information is accurate for all accounts
  • The accounts share the same investment mandate and objectives
⚠️ EXCEPTION

A single KYC cannot be used when accounts have different mandates. For example, if a client's RRSP is "growth-oriented" but their non-registered account is set up for "income" purposes — separate KYC must reflect the specific objectives of each account. Similarly, if one account is managed and another is advisory, they have different regulatory requirements and separate documentation is needed.

Joint Accounts

Joint accounts require KYC for each account holder. The RR cannot assume that all joint holders have identical financial situations, risk tolerances, or objectives. The RR must:

  • Collect full KYC for each individual on the account
  • Clarify whether the account is "joint with right of survivorship" (JTWROS) or "tenants in common" (TIC) — this affects estate planning
  • Determine who is the authorized person to give trade instructions
  • Identify any conflicts in objectives between joint holders and document resolution
Practice Exam — 50 Questions
ELEMENT 1: KNOW-YOUR-CLIENT & SUITABILITY · EXAM-LEVEL DIFFICULTY
50Total Questions
0Answered
0Correct
Score

out of 50 correct