Platform Why Features Security Score AI Engine AI Coding KYP Hub Pricing Company About Buckler News Contact Français Book Demo →
Regulatory Basis

The Frameworks

Each country's framework in its own terms, before comparing them.

1
Explicit Rules, Named Steps
The same four obligations, written into the rules for every category of registrant

Canada's KYP requirements sit in parallel rules for each type of registrant, all introduced through the Client Focused Reforms: CIRO's Rule 3300 series for investment dealers, CIRO's Mutual Fund Dealer Rule 2.2.5 for mutual fund dealers, and section 13.2.1 of NI 31-103 for other registered firms, including portfolio managers and exempt market dealers.[1][2] The structure is the same in each. Using CIRO's investment dealer rules as the example:

"A Dealer Member must not make securities or derivatives available to clients unless the Dealer Member has taken reasonable steps to: (i) assess the relevant aspects of the securities or derivatives, including the securities' or derivatives' structure, features, risks, initial and ongoing costs and the impact of those costs, (ii) approve the securities or derivatives to be made available to clients, and (iii) monitor the securities or derivatives for significant changes." CIRO IDPC Rule 3301(1) [1]

Rule 3301(2) then prohibits an Approved Person from buying or recommending securities the firm hasn't approved, and Rule 3302 requires each Approved Person to take steps to understand the securities they deal in, including the same elements.[1] The result is four named obligations - assess, approve, monitor at the firm level, and understand at the individual level.

Joint CSA/CIRO Staff Notice 31-368, published December 10, 2025 after a review of 105 firms, sets out detailed expectations for each obligation: that the depth of assessment should scale with complexity; that approvals must show "meaningful consideration"; that firms should define what a significant change is; that annual monitoring alone was generally not sufficient; that securities transferred in must be assessed and monitored; and what KYP policies and procedures should contain.[2] The firm's system of controls under NI 31-103 section 11.1 and CIRO Rule 3904 must cover KYP.[2]

2
An Obligation Assembled From Several Sources
Different sources for broker-dealers and investment advisers, with FINRA guidance filling in the practice

Regulation Best Interest applies to "a broker, dealer, or a natural person who is an associated person of a broker or dealer, when making a recommendation." The first component of its Care Obligation is product-level:[3]

"Understand the potential risks, rewards, and costs associated with the recommendation, and have a reasonable basis to believe that the recommendation could be in the best interest of at least some retail customers" 17 C.F.R. § 240.15l-1(a)(2)(ii)(A) [3]

Its Compliance Obligation requires the broker-dealer to establish, maintain and enforce written policies and procedures reasonably designed to achieve compliance with the rule.[3] FINRA Rule 3110 separately requires a reasonably designed supervisory system.[6]

What US broker-dealers actually do for product review is shaped less by rules than by FINRA guidance: Notice to Members 05-26 on reviewing new products, including post-approval review;[7] Regulatory Notice 12-03 on complex products;[8] Notice to Members 05-59 on structured products and training;[9] and Regulatory Notices 10-22 and 23-08 on the reasonable investigation of private placements.[10] They describe practices FINRA considers part of a well-designed supervisory system for products.

Registered investment advisers owe a fiduciary duty under the Advisers Act. The SEC's 2019 interpretation says the duty of care requires "a reasonable investigation into the investment sufficient not to base its advice on materially inaccurate or incomplete information."[4] Advisers must also adopt and implement written policies and procedures reasonably designed to prevent violations of the Act, and review them at least annually, under Rule 206(4)-7.[5] There is no product approval requirement for advisers as such; how an adviser evidences its investigation is up to its own procedures.

Analysis

The Comparison

Placed side by side, the two frameworks aim at the same outcome. The differences are in how explicit each step is, and so in what a firm has to be able to show.

1
Side by Side
The elements of a KYP program, and where each one comes from in each country
Element Canada US Broker-Dealer US Investment Adviser
Assess the product Explicit rule: structure, features, risks, initial and ongoing costs and their impact Understand risks, rewards and costs (Reg BI Care Obligation) Reasonable investigation into the investment (fiduciary duty of care)
Approve for the shelf Explicit rule; individuals may only recommend approved securities No rule; new product review is a FINRA-described practice No requirement
Monitor for change Explicit rule: monitor for significant changes Implied by the need to understand at each recommendation; post-approval review in FINRA guidance Implied by the duty of care
Individual obligation Separate rule for each registered individual to understand the product Reg BI applies to associated natural persons as well as the firm Fiduciary duty applies to the adviser; supervised persons covered by its policies
Depth of review Scaled to complexity and risk (31-368) Heightened for complex products (FINRA 12-03) Heightened scrutiny for high-risk products (IA-5248)
Written policies Detailed KYP policy content described in 31-368 Reg BI Compliance Obligation; FINRA 3110 procedures Rule 206(4)-7, reviewed at least annually
Training Required on KYP obligations (NI 31-103 s.11.1(2)) Expected in FINRA guidance; required for variable annuities (Rule 2330) Through compliance program
Transfers-in Must be assessed within a reasonable time and monitored No specific requirement No specific requirement
Detailed regulator guidance Joint Staff Notice 31-368 (2025), CIRO 09-0086 and 20-0238 FINRA Notices 05-26, 05-59, 10-22, 12-03, 23-08 SEC interpretation IA-5248 (2019)
2
Where They Differ
Five differences that change what a firm has to do or show
1. Approval Is a Rule in Canada, a Practice in the US

A Canadian dealer must approve what it makes available, and its registered individuals can only recommend approved securities.[1] A US broker-dealer has no equivalent rule; many operate a product approval process along the lines FINRA's guidance describes,[7] but the obligation is the firm's own procedures. A US adviser has no approval requirement at all. For a cross-border firm, the Canadian approval record is the higher bar.

2. Monitoring Is Explicit in Canada, Implied in the US

Canadian rules require monitoring for significant changes in terms, and the notice expects a written definition of what a significant change is.[1][2] In the US, ongoing product monitoring follows from the need to understand a product at the time of each recommendation, and from FINRA's post-approval review guidance, but no rule names it. See Material Change: When to Reopen a KYP Assessment for how each country's approach translates into triggers.

3. The Individual Obligation Is Framed Differently

Canada gives each registered individual a separate KYP rule of their own.[1] Reg BI reaches the same people by applying directly to associated natural persons making recommendations.[3] The practical effect is similar - individuals are personally accountable for understanding what they recommend - but the Canadian notice goes further in describing what firms should provide to support it, including access to the firm's KYP information, training and tools.[2]

4. Canada Reaches Beyond the Shelf

The Canadian notice expects securities transferred in, or acquired through client-directed trades, to be assessed within a reasonable time and brought into monitoring, and expects monitoring to cover securities held in client accounts even after they leave the shelf.[2] There is no specific US counterpart. A cross-border firm's monitored population should be defined by the Canadian standard.

5. Canada Tells Firms What to Write Down

The 31-368 notice lists what KYP policies and procedures should contain, down to describing automated processes in detail and naming who is responsible for each step.[2] US rules require written policies reasonably designed to achieve compliance,[3][5] but leave their content largely to the firm. Canadian documentation is the more prescriptive template.

3
Terminology
The same ideas under different names
Concept Canadian Term US Term
Understanding the product Know-Your-Product (KYP) Reasonable diligence to understand risks, rewards and costs (Reg BI); reasonable investigation (advisers)
Deciding what can be offered Approval; making securities available to clients New product review; product approval
A change that requires another look Significant change (older guidance: material change) No single term; post-approval review, periodic reassessment
The individual who recommends Registered individual; Approved Person (CIRO) Associated person; registered representative; investment adviser representative
Detailed regulatory expectations Staff notices and guidance Regulatory Notices, Notices to Members, Commission interpretations
Application

Cross-Border Firms

A firm operating in both countries can run two KYP programs or one. One program, built to whichever standard is more demanding on each element, is simpler to operate and easier to evidence.

1
Designing to the Higher Standard
Taking the more demanding requirement on each element

On most elements the Canadian framework is the more explicit, so it usually sets the design: a documented approval for every product, a written definition of significant change, a monitored population that includes transfers-in and off-shelf holdings, and detailed written procedures. The US adds specific expectations in some areas - FINRA's guidance on complex products, structured products and private placements, and training rules for variable annuities - that should be layered in for the products they cover.

What the Firm Needs to Do
  • Map both frameworks. Record which rule and guidance applies to each product and each business line in each country.
  • Approve everything. Apply a documented approval to every product offered in either country, meeting the Canadian "meaningful consideration" standard.[2]
  • Define significant change once. One written definition per product type, used in both countries.
  • Monitor the wider population. Include transfers-in and securities no longer on the shelf, in both countries.
  • Add US product guidance. Apply FINRA's complex product, structured product and private placement expectations where they go further.
  • Write detailed procedures. Use the 31-368 policy content as the template, and meet Reg BI, FINRA 3110 and Rule 206(4)-7 in the same documents.
  • Keep one record. A single KYP file per product that serves examiners in both countries.
What the Individual Advisor Needs to Do
  • Understand every product they recommend. Its structure, features, risks and costs, in either country.[1][3]
  • Offer only approved products. Treat the firm's approved list as binding in both countries.
  • Complete product training. Including specific training required for complex products or variable annuities.
  • Know their registrations. Recommend products only in the jurisdictions and categories in which they are registered or licensed.
2
Documentation
A written KYP framework for a firm operating in both countries

The example below shows what a cross-border firm's KYP framework document might cover. It is illustrative; each firm's framework should reflect its registrations, products and legal advice in each jurisdiction.

Example: Cross-Border KYP Framework
Illustrative
1
Scope. Applies to every product made available by the firm's Canadian and US entities, and to every security held in client accounts in either country.
2
Regulatory map. Compliance maintains a map of the KYP requirements that apply to each entity and product type, including CIRO and NI 31-103 rules, Reg BI, the Advisers Act, FINRA rules and relevant guidance.
3
Standard. Where requirements differ, the more demanding requirement applies across both countries unless a documented exception is approved by the Chief Compliance Officers of both entities.
4
Assessment and approval. Every product receives a documented assessment of structure, features, risks and costs, scaled to complexity, and a documented approval showing the key elements considered.
5
Product-specific requirements. Complex products, structured products, private placements and variable annuities follow the additional procedures set out in their product appendices, reflecting FINRA guidance and rules.
6
Monitoring. One written definition of significant change per product type applies in both countries. Monitoring covers the shelf, transfers-in and off-shelf holdings.
7
Individuals. Registered individuals in both countries may recommend only approved products, must complete required product training, and receive notice of significant changes with the updated assessment.
8
Review. The framework is reviewed at least annually, meeting the Rule 206(4)-7 annual review requirement, and whenever either country issues new KYP rules or guidance.
Five Questions to Test a Cross-Border KYP Program
  1. Does every product offered in either country have a documented approval?
  2. Is there one written definition of significant change per product type, used in both countries?
  3. Does US monitoring cover transfers-in and off-shelf holdings, as Canadian guidance expects?
  4. Are FINRA's product-specific expectations applied to the relevant products in Canada as well?
  5. Could the same KYP file for a product answer an examiner in either country?
A note on scope: This paper compares Know-Your-Product and product due diligence obligations under regulatory requirements and published guidance in Canada and the United States as of its publication date. It does not address client-level obligations. It is general information, not legal or compliance advice; cross-border firms should obtain advice on the requirements that apply to each of their registrations. The comparisons and example framework are illustrations, not prescribed requirements. Where rules and guidance are quoted, the quotation is from the source cited.
References
  1. CIRO. Investment Dealer and Partially Consolidated Rules, Rule 3300 series (Product Due Diligence and Know-Your-Product), Rules 3301 and 3302. Parallel requirements: CIRO Mutual Fund Dealer Rule 2.2.5; NI 31-103, section 13.2.1. Source document (PDF)
  2. Joint CSA/CIRO Staff Notice 31-368, Client Focused Reforms: Review of Registrants' Know Your Client, Know Your Product and Suitability Determination Practices and Additional Guidance, December 10, 2025. KYP sections, pp.9-19; compliance system, training and KYP policies, pp.32-34. Source document (PDF)
  3. U.S. Securities and Exchange Commission. Regulation Best Interest, 17 C.F.R. § 240.15l-1, paragraphs (a)(1), (a)(2)(ii)(A) and (a)(2)(iv); effective June 30, 2020. Source document (PDF)
  4. U.S. Securities and Exchange Commission. Commission Interpretation Regarding Standard of Conduct for Investment Advisers, Release No. IA-5248, June 5, 2019. Source document (PDF)
  5. U.S. Securities and Exchange Commission. Rule 206(4)-7 under the Investment Advisers Act of 1940, Compliance procedures and practices, 17 C.F.R. § 275.206(4)-7. Source document
  6. FINRA. FINRA Rules, Rule 3110 (Supervision). Source document
  7. FINRA (then NASD). Notice to Members 05-26, NASD Recommends Best Practices for Reviewing New Products, April 2005. Source document
  8. FINRA. Regulatory Notice 12-03, Heightened Supervision of Complex Products, January 2012. Source document
  9. FINRA (then NASD). Notice to Members 05-59, Structured Products, September 2005. Source document
  10. FINRA. Regulatory Notice 10-22, Obligation of Broker-Dealers to Conduct Reasonable Investigations in Regulation D Offerings, April 2010; and Regulatory Notice 23-08, FINRA Reminds Members of Their Obligations When Selling Private Placements, May 2023. Source document