Office of the Superintendent of Financial Institutions

Overview

The Office of the Superintendent of Financial Institutions (OSFI), also known as the Bureau du surintendant des institutions financières (BSIF) in French, is Canada's federal prudential regulator responsible for supervising and regulating more than 400 federally regulated financial institutions (FRFIs) and approximately 1,200 federally regulated private pension plans.

OSFI is an independent agency of the Government of Canada reporting to the Minister of Finance. Its mandate is to contribute to public confidence in the Canadian financial system by protecting depositors, policyholders, financial institution creditors, and pension plan members, while allowing financial institutions to operate competitively and take reasonable risks in pursuit of their business objectives.

Regulatory Mandate

OSFI supervises:

• Banks: Federally chartered commercial and savings banks
• Trust Companies: Federal trust and mortgage companies
• Loan Companies: Federal loan companies
• Insurance Companies: Life, health, and property & casualty insurers (primary regulator)
• Pension Plans: Private pension plans under federal jurisdiction

Core Mission

To maintain a sound and efficient Canadian financial system by:

1. Protecting depositors, policyholders, creditors, and pension plan members
2. Monitoring prudential health of regulated institutions
3. Enforcing compliance with applicable laws and regulations
4. Allowing financial institutions to compete and take reasonable risks
5. Contributing to financial system stability

Sources: OSFI Official Website, About OSFI, Canada.ca Organization Profile

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

Supervisory Framework

Framework Overview

Requires verification from official sources OSFI operates under a modernized supervisory framework that was significantly revised in April 2024 - the most comprehensive update in 25 years. The framework is principles-based and proportionate, tailored to the size, complexity, and risk profile of each institution.

Risk Assessment Methodology

Eight-Point Risk Rating Scale (Post-April 2024)

OSFI expanded from a four-point to an eight-point risk assessment scale to provide more granular evaluation:

• Level 1-2: Low Risk - Strong capital, liquidity, and governance
• Level 3-4: Moderate Risk - Generally sound with some areas for improvement
• Level 5-6: Elevated Risk - Significant concerns requiring heightened supervision
• Level 7-8: High Risk - Critical deficiencies requiring immediate intervention

Risk Assessment Categories

1. Business Risk: Market conditions, competitive position, revenue stability
2. Financial Resilience: Capital adequacy, liquidity position, funding stability
3. Operational Resilience: Technology, cybersecurity, business continuity
4. Risk Governance: Board oversight, risk culture, compliance systems
5. Climate Risk Requires verification from official sources: Climate-related financial risks (integrated assessment)

Supervisory Approach

Desk-Based Review

• Continuous monitoring of financial statements and regulatory reports
• Analysis of risk data and management reports
• Quarterly reviews of institution performance

On-Site Examinations

• Scheduled comprehensive reviews of operations
• On-site presence at institution headquarters and branches
• Assessment of internal controls and compliance systems
• Authority to conduct unannounced inspections when concerns arise

Supervisory Intensity Levels

Requires verification from official sources OSFI adjusts supervisory intensity based on institution risk profile:

• Level 1-2 Risk: Standard supervision with annual interactions
• Level 3-4 Risk: Enhanced supervision with quarterly engagement
• Level 5-6 Risk: Heightened supervision with monthly monitoring
• Level 7-8 Risk: Intensive supervision with continuous oversight

Regulatory Expectations

OSFI establishes expectations through:

• Guidelines: Principles-based guidance documents
• Directives: Binding orders on specific issues
• Advisory Letters: Specific guidance on emerging risks
• Standards: Minimum requirements for capital, liquidity, and operations

Sources: OSFI Supervisory Framework, New Supervisory Framework Modernization, OSFI Knowledge Centre

Prudential Requirements

Capital Requirements

Basel III/IV Alignment

OSFI implements capital adequacy standards aligned with the Basel Committee on Banking Supervision framework:

Minimum Capital Ratios for Banks:

1. Common Equity Tier 1 (CET1) Ratio: Minimum 7% of risk-weighted assets
2. Tier 1 Capital Ratio: Minimum 8.5% of risk-weighted assets
3. Total Capital Ratio: Minimum 10.5% of risk-weighted assets

Add-On Requirements:

• Capital Conservation Buffer: 2.5% of risk-weighted assets
• Domestic Systemically Important Bank (D-SIB) Buffer: 1.5% additional for large banks
• Countercyclical Buffer: 0-2.5% activated during credit booms

Requires verification from official sources As of April 2026, OSFI has proposed easing certain capital rules for eligible institutions to promote lending while maintaining prudential soundness.

Insurance Company Capital Requirements

• Minimum capital requirements based on asset quality and risk profile
• Segregated fund guarantees require specific capital backing
• Requires verification from official sources Temporary adjustments to prudential limits for P&C insurers' investment and lending exposures

Liquidity Requirements

Liquidity Coverage Ratio (LCR)

• Minimum 100% for Large Deposit-Taking Institutions (LDTIs)
• Ensures institutions can meet liquidity needs over 30-day stress scenario

Net Stable Funding Ratio (NSFR)

• Minimum 100% for long-term stability
• Requires institutions to maintain stable funding profiles

Intraday Liquidity Monitoring

Requires verification from official sources OSFI requires real-time monitoring of payment system participation and intraday credit usage.

Risk Management Expectations

Governance Requirements

1. Board Oversight: Board must maintain effective governance and risk oversight
2. Risk Management Framework: Comprehensive policies and procedures
3. Three Lines of Defense: Independent risk management and audit functions
4. Compliance Program: Anti-money laundering, sanctions, and regulatory compliance

Stress Testing

• Annual comprehensive stress tests on capital and liquidity
• Scenario analysis covering economic downturns, credit losses, market shocks
• Results inform capital planning and risk management

Anti-Money Laundering and Know Your Customer (KYC)

• Customer due diligence procedures
• Transaction monitoring and suspicious activity reporting
• Coordination with FINTRAC (Financial Intelligence Unit)

Asset Quality Standards

• Regular assessment of loan portfolios and investments
• Allowance for credit losses based on probability-weighted outcomes
• Concentration limits on single borrowers and related parties
• Restrictions on high-risk asset classes

Sources: Understanding Prudential Regulation in Canada, OSFI Near-Term Plan of Prudential Policy

Supervisory Activities

Continuous Monitoring (Desk-Based)

• Review of quarterly and annual regulatory returns
• Analysis of capital positions, liquidity metrics, and profitability
• Monitoring of regulatory compliance and governance matters
• Assessment of emerging risks and market developments

Scheduled On-Site Examinations

Frequency by Risk Level:

• Low Risk (Levels 1-2): Annual comprehensive examination
• Moderate Risk (Levels 3-4): Semi-annual to annual examination
• Elevated Risk (Levels 5-6): Quarterly examination schedule Requires verification from official sources
• High Risk (Levels 7-8): Continuous on-site presence or monthly review Requires verification from official sources

Examination Scope

1. Governance Assessment: Board composition, committee structure, strategic oversight
2. Risk Management Review: Policies, procedures, compliance with risk limits
3. Financial Analysis: Capital adequacy, liquidity, asset quality, profitability
4. Operational Assessment: Technology systems, business continuity, internal controls
5. Compliance Review: AML/KYC procedures, regulatory compliance, consumer protection

Unannounced Inspections

• OSFI examiners retain authority to conduct surprise inspections
• Triggered by emerging risks, compliance concerns, or supervisory priorities
• Full access to books, records, and personnel

Examination Reports

OSFI issues detailed examination reports detailing:

• Findings on capital, liquidity, and asset quality
• Risk ratings and supervisory assessments
• Required corrective actions and timelines
• Management letter comments on governance and operations

Industry Communication

• Guidance Letters: OSFI issues periodic guidance on emerging issues
• Supervisory Letters: Specific requirements for individual institutions
• Advisory Notices: Industry-wide alerts on risks and expectations
• Speeches and Publications: Superintendent and executive communications

Sources: OSFI Supervisory Framework, OSFI Bank Supervision

OSFI's Role in Consumer Protection

While OSFI focuses on prudential safety and soundness, consumer protection is shared with other regulators:

Primary Consumer Protection Regulator

• Financial Consumer Agency of Canada (FCAC): Independent federal agency mandating consumer compliance supervision
• FCAC examines OSFI-regulated institutions for compliance with:
• Consumer protection regulations
• Code of conduct obligations
• Fair dealing practices
• Dispute resolution requirements

OSFI's Consumer Protection Functions

1. Deposit Protection: Works with CDIC to protect depositor funds
2. Policyholder Protection: Ensures insurance company solvency and claims payment
3. Pension Protection: Ensures federally regulated pension plans meet solvency standards
4. Fair Dealing Requirements: Incorporates fair dealing principles in governance expectations
5. Conflicts of Interest Management: Requires policies to manage conflicts in advisory relationships

Deposit Insurance (CDIC)

Coverage Framework

• Automatic Coverage: Deposits in OSFI-regulated member banks covered by CDIC
• Coverage Limits: Up to CAD 100,000 per depositor, per category
• Coverage Categories: Separate insurance per ownership type (individual, joint, RRSP, TFSA, etc.)
• No Cost: CDIC insurance is automatic and free to depositors

OSFI-CDIC Coordination

• OSFI examines banks for prudential safety
• CDIC insurance backstops depositor losses
• Joint coordination on bank problems and resolutions
• Sharing of supervisory information

Fair Dealing and Disclosure

OSFI expectations for consumer protection include:

• Know Your Client (KYC): Financial institutions must understand customer needs and risk tolerance
• Suitability: Recommendations must align with customer circumstances
• Clear Disclosure: Plain language disclosure of fees, risks, and terms
• Conflict Management: Policies to identify and manage conflicts of interest
• Complaints Handling: Effective internal and external complaint resolution

Vulnerable Consumer Protection

Requires verification from official sources OSFI includes in its supervisory expectations:

• Protections for elderly and vulnerable customers
• Standards for trust and estates management
• Fair practices in mortgage lending
• Clear terms for deposit products

Sources: CDIC - What's Covered, Canada Deposit Insurance Corporation, Financial Consumer Agency of Canada, Who OSFI Works With

Regulatory Powers

Corrective Action Framework

The Superintendent may issue directives and take corrective measures when institutions fail to comply with laws or prudential requirements:

Level 1: Informal Actions

• Supervisory recommendations and requests
• Management letters identifying concerns
• Supervisory agreements on remediation timelines
• Enhanced monitoring and reporting

Level 2: Formal Directives

The Superintendent may issue a Directive under the Bank Act when an institution:

• Fails to comply with prudential requirements
• Fails to follow Superintendent guidance
• Is not in sound financial condition
• Does not have adequate risk management

Directive Authority:

• Require capital increases
• Restrict dividend payments and share buybacks
• Limit asset growth or business activities
• Require changes in governance or risk management
• Impose business restrictions

Level 3: Senior Management Changes

• Appointment of additional board members
• Removal of directors and senior officers for cause
• Suspension or cancellation of officer licensing
• Mandatory replacement of Chief Risk Officer or Chief Executive Officer

Level 4: Intensive Supervision or Takeover

For critical situations:

• Court-ordered seizure and liquidation
• Appointment of OSFI-supervised administrator
• Suspension of operations
• Merger or acquisition of failed institution

Emergency Powers

Requires verification from official sources In systemic risk situations, the Superintendent may:

• Take temporary control of a financial institution
• Restrict the institution's operations
• Require merger or restructuring
• Coordinate with Bank of Canada and CDIC on resolution

Penalties and Sanctions

• Requires verification from official sources Administrative monetary penalties (amounts TBD)
• Criminal referrals to law enforcement for violations
• Suspension or cancellation of banking license
• Public notices of non-compliance

Escalation Framework

OSFI escalates enforcement based on:

1. Severity of violation or risk
2. Duration of non-compliance
3. Management responsiveness
4. Systemic impact

Sources: Bank Act Enforcement Powers, OSFI Supervisory Framework

Regulatory Role and Function

Legal Foundation

Governing Statutes

OSFI derives its authority from multiple federal statutes:

Primary Legislation

1. Office of the Superintendent of Financial Institutions Act, 1987

• Establishes OSFI as an independent agency
• Created by merger of the Department of Insurance and the Office of the Inspector General of Banks
• Grants Superintendent powers to supervise and regulate federally regulated financial institutions

1. Bank Act

• Primary law governing federally chartered banks
• Defines banking operations, prudential requirements, and Superintendent's examination authority
• Incorporates OSFI's regulatory standards through reference

1. Insurance Companies Act

• Governs federally regulated insurance companies
• Establishes solvency, capital, and operational requirements
• Grants OSFI primary regulatory authority

1. Pension Benefits Standards Act, 1985

• Governs private pension plans under federal jurisdiction
• Establishes contribution and benefit requirements
• OSFI supervises funding and solvency

1. Trust and Loan Companies Act

• Establishes requirements for federal trust and loan companies
• Governs deposit-taking and lending operations
• Provides supervisory framework

Superintendent's Authority

The Superintendent of Financial Institutions is the chief executive officer of OSFI and holds significant statutory powers:

• Examination and Inspection: Authority to examine institutions' books, records, and operations
• Regulatory Directives: Power to issue binding directives requiring compliance
• Capital and Liquidity Requirements: Authority to establish minimum prudential standards
• Enforcement Actions: Power to issue warnings, prohibitions, and take corrective actions
• Appointment and Removal: Authority to remove officers and directors in certain circumstances

International Legal Framework Alignment

OSFI commits to implementing recommendations from:

• Basel Committee on Banking Supervision: Capital adequacy standards (Basel III/IV)
• International Association of Insurance Supervisors (IAIS): Insurance prudential standards
• Financial Stability Board (FSB): International regulatory standards and best practices
• Committee on Payments and Market Infrastructures (CPMI): Payment system standards

Sources: OSFI Act (Justice Laws Website), Bank Act, OSFI Guidance - Acts and Regulations

Licensing and Authorization Relevance

OSFI's Approach to Innovation

OSFI recognizes the importance of financial innovation while managing associated risks:

Core Principle

Fintech and digital banking should operate under the same regulatory framework as traditional financial institutions. "Same risk, same regulation."

Crypto-Asset Guidance

2025 Crypto-Asset Guidelines (Final)

OSFI released final guidelines on February 20, 2025, effective January 1, 2026:

Capital and Liquidity Treatment of Crypto-Asset Exposures (Banking) Guideline

• Sets capital requirements for bank crypto holdings
• Applies to Bitcoin, Ethereum, and other approved cryptocurrencies

Capital Treatment of Crypto-Asset Exposures (Insurance) Guideline

• Establishes capital requirements for insurer crypto holdings
• Aligned with banking framework

Exposure Limits

October 2025 Updated Framework:

• Banks and insurers may hold up to 5% of Tier 1 capital in certain crypto assets (Group 2 assets)
• Increased from previous 1% cap
• Group 2 assets include: Bitcoin, Ethereum, and other cryptocurrencies meeting OSFI criteria
• Subject to risk management and governance requirements

Risk Management Requirements

• Robust governance and oversight of crypto activities
• Risk measurement and monitoring systems
• Liquidity risk assessment and management
• Custody and operational risk controls
• Compliance with AML/KYC requirements
• Regular stress testing of crypto exposures

Stablecoin Considerations

Requires verification from official sources OSFI has indicated that stablecoin exposures will be treated separately from volatile crypto assets, with potential for different capital treatment based on backing and regulatory status.

Fintech Licensing and Charter Framework

Targeted Fast-Track Approvals Framework (Planned June 2026)

OSFI is implementing a streamlined approval process for eligible innovative entrants:

Eligible Applicants:

• Fintech companies
• Crypto-asset custodians
• Digital banking platforms
• Other innovative financial institutions

Fast-Track Benefits:

• Expedited review timeline
• Clearer, more predictable approval criteria
• Reduced compliance burden for early-stage firms
• Support for scaling to full federal license

Standard Requirements Still Apply:

• Capital requirements
• Governance standards
• AML/KYC compliance
• Consumer protection measures
• Risk management frameworks

Digital Banking and Payments Innovation

OSFI supervises digital banking activities including:

• Mobile and online banking platforms
• Open banking and API standards
• Payment innovation and real-time payments
• Cybersecurity and operational resilience
• Third-party service provider risks

Regulatory Sandbox Considerations

Requires verification from official sources OSFI has not formally established a regulatory sandbox but provides:

• Pre-application guidance for innovative business models
• Dialogue with innovators on regulatory approach
• Case-by-case assessment of novel activities
• Proportionate regulatory framework

Sources: OSFI Digital and Crypto Risks, Crypto-Asset Guideline (Banking), Letter to Industry - Changes to Crypto-Asset Treatment, OSFI's Fast-Track Approvals Pilot, Norton Rose Fulbright - Crypto-Asset Guidelines

Payments and Money Movement Relevance

The Core Identity has the following relevance to payments and money movement in Canada:

Payment Systems Governed or Overseen

The Core Identity has the following relationship to payment infrastructure in Canada:

This entity's role in payment systems is primarily regulatory and supervisory rather than operational. It does not directly operate national payment infrastructure but contributes to the regulatory framework governing payment activities in Canada.

Relationship to Other Regulators

Basel Committee on Banking Supervision

OSFI is an active member of the Basel Committee on Banking Supervision and participates in:

• Basel III/IV Implementation: Adoption of capital adequacy standards
• Capital Frameworks: Development of risk-weighted asset calculations
• Liquidity Standards: LCR and NSFR requirements
• Stress Testing Standards: Regulatory stress test methodologies
• Climate Risk Task Force: Developing climate-related financial risk standards

Financial Stability Board (FSB)

Both the Bank of Canada and OSFI are members of the FSB:

• Standing Committee Participation: OSFI Superintendent is member of FSB's Standing Committee on Supervisory and Regulatory Cooperation
• Regulatory Standard Implementation: FSB compendium of standards adoption
• International Coordination: Cross-border supervisory cooperation
• Emerging Risk Monitoring: Financial stability assessments and monitoring

International Association of Insurance Supervisors (IAIS)

OSFI participates in:

• Insurance Core Principles: Implementation of IAIS standards for insurance regulation
• Solvency Standards: Insurance company capital and funding requirements
• Cross-Border Issues: Coordination on international insurance groups
• Policyholder Protection: Standards for deposit and insurance fund protection

Network for Greening the Financial System (NGFS)

Requires verification from official sources OSFI joined the NGFS in recognition of climate-related financial risks:

• Climate Risk Framework: Development of climate risk supervisory standards
• Disclosure Standards: Support for TCFD and enhanced climate disclosure
• Green Financing: Encouragement of sustainable finance initiatives
• Stress Testing: Climate scenario analysis and stress testing

Committee on Payments and Market Infrastructures (CPMI)

OSFI coordinates with CPMI on:

• Payment System Standards: Real-time payment systems and infrastructure
• Market Infrastructure Resilience: Settlement system robustness
• Systemic Risk Monitoring: Financial infrastructure oversight

G20 Coordination

Canada, through OSFI and the Bank of Canada, coordinates with G20 on:

• Financial Sector Reform: Implementation of post-2008 crisis reforms
• Capital Adequacy Standards: Global standards harmonization
• Climate-Related Risks: G20 financial stability priorities
• Emerging Technology Risks: Digital asset and fintech regulation

Bilateral Supervisory Cooperation

OSFI maintains bilateral relationships with:

• U.S. Regulators: Federal Reserve, OCC, FDIC (Canadian banks operating in U.S.)
• UK Regulators: FCA, PRA (Prudential Regulation Authority)
• EU Regulators: ECB, EBA (Canadian branches in Europe)
• Relevant Home Country Supervisors: For foreign banks operating in Canada

Information Sharing and Memoranda of Understanding

• Supervisory Information Sharing: Coordination on institution examination findings
• Crisis Management: Joint protocols for handling institution failures
• AML/CFT Coordination: Cross-border anti-money laundering cooperation
• Regulatory Coordination: Harmonization of standards where feasible

Sources: Financial Stability Board Members, OSFI Joins NGFS, Who OSFI Works With

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Head Office

Mailing Address:

Office of the Superintendent of Financial Institutions

255 Albert Street, 12th Floor

Ottawa, Ontario K1A 0H2

Canada

Telephone: 1-800-385-8647 (Toll-Free, Canada)

International: +1-613-990-5591

Fax: 613-990-5591

Email: [email protected]

Senior Leadership

Superintendent of Financial Institutions

• Peter Routledge (Appointed June 29, 2021)
• Title: Superintendent
• Appointed by: Governor in Council

Requires verification from official sources Senior Deputy Superintendent (Contact OSFI for current name)

Requires verification from official sources Deputy Superintendents (Multiple positions for Banks, Insurance, Pension Plans)

Key Resources

Official OSFI Portals

• Main Website: https://www.osfi-bsif.gc.ca
• Guidance Library: https://www.osfi-bsif.gc.ca/en/guidance/guidance-library
• Supervisory Framework: https://www.osfi-bsif.gc.ca/en/supervision/supervisory-practices/supervisory-framework-0
• News and Speaking Engagements: https://www.osfi-bsif.gc.ca/en/news

Regulatory Authority References

• OSFI Act: https://laws-lois.justice.gc.ca/eng/acts/o-2.7/index.html
• Bank Act: https://laws-lois.justice.gc.ca/eng/acts/b-1.01/
• Insurance Companies Act: [UNVERIFIED - refer to Justice Laws Website]

Related Regulatory Agencies

• Bank of Canada: https://www.bankofcanada.ca (Monetary policy and payment systems)
• CDIC (Canada Deposit Insurance Corporation): https://www.cdic.ca
• FINTRAC (Financial Intelligence Unit): https://www.fintrac-gafi.gc.ca
• Financial Consumer Agency of Canada: https://www.canada.ca/en/financial-consumer-agency
• Department of Finance Canada: https://www.canada.ca/en/department-finance

Guidance Documents and Circulars

• OSFI Capital Adequacy Guidelines
• OSFI Liquidity Adequacy Requirements
• Guidelines on Governance
• Risk Management Guidelines
• AML/KYC Expectations
• Crypto-Asset Exposure Guidelines
• Insurance Company Capital Requirements
• Pension Plan Funding Requirements

Sources: OSFI Contact Us, OSFI News - Superintendent, OSFI Guidance Library

Notes on Naming and Language