OSFI's data modernisation push, a stalled Financial Crimes Agency bill and an incoming FATF verdict put Canada's supervisors on a tighter clock than usual this month.
Canadian financial regulation moved on several fronts at once in September 2026, with the Office of the Superintendent of Financial Institutions (OSFI) pushing its data modernisation programme toward a live launch, a bill to create a federal Financial Crimes Agency still grinding through committee, and an international assessment of Canada’s anti-money-laundering record expected before the end of autumn. Taken together, the month gives banks, insurers, dealers and their compliance teams an unusually dense run of dates to track.
The Canadian items sit inside a wider cluster of activity across the United Kingdom, Australia and New Zealand, where conduct rules, crypto-asset licensing and accountability regimes all hit milestones within the same four weeks. For Canadian institutions with cross-border operations, the overlap matters: several of those foreign deadlines land on affiliates, not just on competitors.
OSFI’s Quarterly Release Day, Industry Day and the September 23 Working Group
OSFI held the third Quarterly Release Day of 2026 on September 10, continuing the fixed-date publication rhythm the regulator has used to bundle guidance, consultations and policy updates into predictable windows rather than releasing them piecemeal. A virtual Industry Day followed on September 24.
Between the two, a working group convened on September 23 to advance OSFI’s Data Collection Modernization programme. That programme is the plumbing behind the public-facing transparency work, and it is aimed at replacing legacy return-filing arrangements with a single, modernised channel for supervisory data.
The regulator’s recent quarterly cycles have also carried substantive policy content, including capital, disclosure and crypto-asset workstreams reported in coverage of the OSFI quarterly release advancing capital, disclosure and crypto policy work. The September sequence continues that pattern of pairing scheduled publication with direct industry engagement.
Why the Regulatory Data Hub Go-Live Matters for Filers
The Data Collection Modernization programme is building toward a Regulatory Data Hub, with go-live now expected in late autumn 2026. For federally regulated financial institutions, a change in how supervisory returns are submitted is not a back-office footnote.
- Filing mechanics change: Submission channels, formats and validation steps typically shift when a regulator consolidates data collection onto a new platform.
- Internal timelines tighten: Finance, risk and regulatory-reporting teams generally need lead time to test submissions before a live cutover.
- Supervisory visibility improves: Centralised collection makes it easier for a regulator to compare institutions and spot outliers across the sector.
The specific technical requirements, transition arrangements and any parallel-run period for the hub were not detailed in the September update, and institutions should treat OSFI’s own published instructions as the authoritative guide rather than working from summaries.
Bill C-29 and the Financial Crimes Agency Remain at Clause-by-Clause
Bill C-29, the legislation that would establish Canada’s Financial Crimes Agency, remains before the House of Commons Standing Committee on Justice and Human Rights, with clause-by-clause consideration ongoing. That is the stage at which the text of a bill is examined line by line and amendments are proposed, accepted or rejected.
Until the committee reports, the agency’s final shape — its powers, its relationship with existing bodies and its operational scope — is not settled. The bill sits at the centre of Ottawa’s broader financial crime reform agenda, which means the committee’s decisions carry weight well beyond the single institution being created.
The FATF Mutual Evaluation Report Due This Autumn
A mutual evaluation report from the Financial Action Task Force (FATF) is due this autumn and is expected to deliver the first authoritative external assessment of Canada’s financial crime reform trajectory. FATF mutual evaluations are peer reviews that examine both a country’s legal framework and how effectively that framework works in practice.
The timing is notable because the reform programme being assessed centres on the very agency Bill C-29 would create. An external verdict arriving while the enabling legislation is still in committee gives parliamentarians, banks and reporting entities a rare read on whether the direction of travel is considered credible internationally. The report’s findings had not been published at the time of writing.
Competition Bureau Cartel Guidelines and the Rest of the Canadian Docket
The Competition Bureau’s consultation on its Cartel Enforcement Guidelines closed on September 13, 2026, having opened on July 15. The guidelines govern how cartel conduct is investigated and prosecuted, so the submissions will feed directly into enforcement practice once assessed.
Several other Canadian files advanced during the month:
- CIRO enforcement: The Canadian Investment Regulatory Organization issued a sanctions decision against Haimeng Wang following an August hearing, and scheduled a settlement hearing for Arthur Silber alongside a motion decision in the Abid Hossain matter.
- CRTC device unlocking: The Canadian Radio-television and Telecommunications Commission ran a show-cause proceeding on device-unlocking practices, with interventions due September 14 and replies due September 24.
- Bill C-22: The Lawful Access Act 2026 passed third reading in the House of Commons on June 18 and awaits Senate consideration, with Parliament returning on September 21.
Key Canadian Dates in the September Cycle
| Date | Development |
|---|---|
| September 10, 2026 | OSFI’s third Quarterly Release Day of 2026 |
| September 13, 2026 | Competition Bureau cartel enforcement guidelines consultation closes |
| September 14 / 24, 2026 | CRTC device-unlocking proceeding: interventions, then replies |
| September 21, 2026 | Parliament returns; Bill C-22 awaits Senate consideration |
| September 23, 2026 | Working group convenes on OSFI Data Collection Modernization |
| September 24, 2026 | OSFI virtual Industry Day |
| Late autumn 2026 | Regulatory Data Hub go-live expected; FATF mutual evaluation report due |
| Ongoing | Bill C-29 clause-by-clause consideration at Justice and Human Rights Committee |
The UK’s Misconduct Rules and Crypto Gateway Set a Reference Point
Two UK milestones bracket the month. The Financial Conduct Authority’s non-financial misconduct rules took effect on September 1, 2026, extending conduct-rule coverage under the Code of Conduct sourcebook to bullying, harassment or violence with a work-related link to an individual’s regulatory role. The change reaches roughly 37,000 additional firms that have no prior experience operating under formal conduct-rule obligations.
At the other end of September, the FCA’s crypto-asset authorisation gateway opened on September 30, following final rules published on June 30, with the full regime commencing from October 25, 2027. How quickly the FCA clears an initial wave of applications will be watched as a test of authorisation capacity — a question Canadian firms weighing digital-asset expansion abroad will recognise, and one that runs parallel to OSFI’s own crypto-asset policy work.
Australia’s Digital Asset Grace Period Lapses as New Zealand Consolidates Conduct Oversight
In Australia, the Australian Securities and Investments Commission’s sector-wide no-action position for digital asset businesses lapsed on September 30, 2026, after being extended once from an original June 30 deadline and widened to cover authorised representative and intermediary arrangements. Providers that had not lodged an Australian financial services licence application face civil and criminal penalty exposure now that the grace period has ended.
Elsewhere in the Australian file, APRA imposed licence conditions and additional capital and liquidity requirements on ING Bank Australia Limited after material breaches of minimum liquidity requirements, while APRA and ASIC opened a joint consultation on streamlining the Financial Accountability Regime — proposing to drop key-functions requirements and the reporting of accountable persons’ direct reports, changes APRA estimates would cut obligations for about 4,500 accountable people, targeted for early 2027. David Bradbury commenced as APRA deputy chair the same week. AUSTRAC, meanwhile, opened an investigation into Western Union on September 1 and issued notices to non-enrolled businesses in late August as its Tranche 2 obligations bed in.
New Zealand’s Financial Markets Authority passed its second month as the country’s single conduct regulator after absorbing consumer credit regulation from the Commerce Commission on July 1, bringing conduct oversight of banks, insurers and lenders under one roof. The Reserve Bank of New Zealand also raised its Official Cash Rate to 2.75% on September 2 — a divergence worth noting for Canadian readers tracking the Bank of Canada’s extended run of rate holds.
What Canadian Compliance Teams Should Take From the Month
The practical signal for Canadian institutions is sequencing. OSFI is publishing on a fixed calendar while rebuilding its data pipes underneath, which means firms can plan around release dates but still need internal readiness work for the hub cutover. On the financial crime side, the legislative timetable and the external evaluation are now running close together, and both feed the same reform narrative.
Credit conditions form the backdrop to all of it. Supervisory attention to loan quality has sharpened as impaired loans at the Big Six climbed sharply, making better and faster regulatory data collection more than an administrative convenience for OSFI.
Readers should note that dates and expected timelines described here reflect the regulatory positions reported in early September 2026; consultation outcomes, committee progress and go-live schedules can move, and official regulator notices remain the definitive record.
Frequently Asked Questions
What stage has Bill C-29 reached?
The bill, which would establish Canada’s Financial Crimes Agency, is before the Standing Committee on Justice and Human Rights at clause-by-clause consideration. No royal assent date was specified.
Why does the FATF mutual evaluation report matter?
It is expected to give the first authoritative external assessment of Canada’s financial crime reform programme, including the agency Bill C-29 would create. The report is due this autumn.
Does the FCA’s crypto gateway apply to Canadian firms?
Only to firms seeking authorisation in the United Kingdom. The gateway opened on September 30, 2026, with the full UK regime commencing from October 25, 2027.
What changed for digital asset businesses in Australia?
ASIC’s sector-wide no-action position lapsed on September 30, 2026, so providers without a lodged Australian financial services licence application face civil and criminal penalty exposure.
