CSA Data Portability Report Exposes KYC Fields Advisors Can't Easily Transfer
The client's date of birth moves. The risk tolerance questionnaire moves. The spouse's employment status sits in a PDF that nobody reads. When a Canadian investor leaves one advisory firm for another, numerous distinct Know Your Client data points must be re-entered manually because regulators won't let the receiving firm simply accept what the last advisor already verified.
A recent CSA report on investor data portability identifies KYC verification as a significant obstacle preventing seamless account transfers. The legal duty to independently verify client information, not just copy what's in a file, keeps the switching process locked in a lengthy manual timeline that Open Banking legislation was supposed to fix.
Where the federal framework stops
The federal Consumer-Driven Banking Act (Bill C-69, passed in June 2024) built the plumbing for data sharing in chequing accounts and credit cards. Phase 2 was supposed to cover wealth management. It doesn't yet. The CSA's analysis shows a regulatory gap: securities firms operate under provincial mandates, so even if the federal banking framework goes live, advisors will still be waiting on harmonized provincial rules before they can trust data coming from another firm's system.
The practical result is a compliance shield. Advisors use "we have to do our own KYC" as a reason to make the onboarding process slow enough that some clients give up. Some clients walk away mid-process during transfers because the paperwork exceeds the benefit of switching.
The digital divide between large and small firms
Large institutions have APIs that could handle automated data ingestion if regulators allowed it. Smaller firms don't. The CSA flags this as a competition problem: if portability rules arrive without a transition period, boutique advisors will face a compliance cost they can't absorb, while the big banks will automate the process and pull clients downmarket on convenience alone.
The report suggests standardized data formats similar to the UK's Open Finance model, where a client's entire financial profile can be exported as a structured JSON file. Canada has no equivalent. Transfers today rely on ACATS (for equities) and ATON (for registered accounts), both of which move positions but not the underlying client data that explains why those positions were chosen in the first place.
The trusted-source problem
Even with better pipes, the CSA warns that firms won't adopt automated KYC sharing until regulators define what counts as a "trusted data source." If the previous advisor entered incorrect information, wrong income, outdated employment, overstated net worth, the new advisor becomes legally liable for any unsuitable investments recommended on the basis of that ported data.
That liability question is why the 47 fields stay manual. Birth date and account number are straightforward. Investment objectives, risk capacity, and the narrative notes from discovery meetings require subjective judgment. The CSA report acknowledges that some KYC is inherently subjective and that forcing portability might lead to corner-cutting during onboarding rather than genuine discovery.
Security also remains unresolved. The more nodes a client's data passes through, originating firm, data custodian, receiving firm, the wider the attack surface. The report doesn't propose a technical solution, but it does note that increased portability without updated cybersecurity standards would create new breach risks in an industry already holding trillions in assets.
What changes if this gets fixed
True portability would allow a "financial passport", a single client record that travels with the investor across firms, updated in real time, accessible by any licensed advisor the client authorizes. AI-driven financial planning tools, which need clean historical data to function, would finally have the input layer they require.
The incentive structure would flip. Advisors would compete on the quality of their advice rather than the difficulty of their paperwork. Clients would leave underperforming advisors at the same friction level they currently leave a gym membership.
The CSA hasn't mandated anything yet. The report offers guidance for regulators rather than a binding rule. But the 47 fields are now named, and the gap between what Open Banking promised and what securities regulation actually allows is on the record.
CSA Data Portability Report Exposes KYC Fields Advisors Can't Easily Transfer
The client's date of birth moves. The risk tolerance questionnaire moves. The spouse's employment status sits in a PDF that nobody reads. When a Canadian investor leaves one advisory firm for another, numerous distinct Know Your Client data points must be re-entered manually because regulators won't let the receiving firm simply accept what the last advisor already verified.
A recent CSA report on investor data portability identifies KYC verification as a significant obstacle preventing seamless account transfers. The legal duty to independently verify client information, not just copy what's in a file, keeps the switching process locked in a lengthy manual timeline that Open Banking legislation was supposed to fix.
Where the federal framework stops
The federal Consumer-Driven Banking Act (Bill C-69, passed in June 2024) built the plumbing for data sharing in chequing accounts and credit cards. Phase 2 was supposed to cover wealth management. It doesn't yet. The CSA's analysis shows a regulatory gap: securities firms operate under provincial mandates, so even if the federal banking framework goes live, advisors will still be waiting on harmonized provincial rules before they can trust data coming from another firm's system.
The practical result is a compliance shield. Advisors use "we have to do our own KYC" as a reason to make the onboarding process slow enough that some clients give up. Some clients walk away mid-process during transfers because the paperwork exceeds the benefit of switching.
The digital divide between large and small firms
Large institutions have APIs that could handle automated data ingestion if regulators allowed it. Smaller firms don't. The CSA flags this as a competition problem: if portability rules arrive without a transition period, boutique advisors will face a compliance cost they can't absorb, while the big banks will automate the process and pull clients downmarket on convenience alone.
The report suggests standardized data formats similar to the UK's Open Finance model, where a client's entire financial profile can be exported as a structured JSON file. Canada has no equivalent. Transfers today rely on ACATS (for equities) and ATON (for registered accounts), both of which move positions but not the underlying client data that explains why those positions were chosen in the first place.
The trusted-source problem
Even with better pipes, the CSA warns that firms won't adopt automated KYC sharing until regulators define what counts as a "trusted data source." If the previous advisor entered incorrect information, wrong income, outdated employment, overstated net worth, the new advisor becomes legally liable for any unsuitable investments recommended on the basis of that ported data.
That liability question is why the 47 fields stay manual. Birth date and account number are straightforward. Investment objectives, risk capacity, and the narrative notes from discovery meetings require subjective judgment. The CSA report acknowledges that some KYC is inherently subjective and that forcing portability might lead to corner-cutting during onboarding rather than genuine discovery.
Security also remains unresolved. The more nodes a client's data passes through, originating firm, data custodian, receiving firm, the wider the attack surface. The report doesn't propose a technical solution, but it does note that increased portability without updated cybersecurity standards would create new breach risks in an industry already holding trillions in assets.
What changes if this gets fixed
True portability would allow a "financial passport", a single client record that travels with the investor across firms, updated in real time, accessible by any licensed advisor the client authorizes. AI-driven financial planning tools, which need clean historical data to function, would finally have the input layer they require.
The incentive structure would flip. Advisors would compete on the quality of their advice rather than the difficulty of their paperwork. Clients would leave underperforming advisors at the same friction level they currently leave a gym membership.
The CSA hasn't mandated anything yet. The report offers guidance for regulators rather than a binding rule. But the 47 fields are now named, and the gap between what Open Banking promised and what securities regulation actually allows is on the record.
Sources
Read Next
The OAS Clawback Is 15 Cents Per Dollar, Not 30 or 50
7 streaming services worth paying for in Canada, plus the credit cards that cut your bill
Ontario and B.C. First-Time Buyers Are Borrowing in Pairs, and the Cracks Are Starting to Show
Why Paying Off Your Mortgage First Can Cost You More Than the Interest Rate