1. Scope

This Guidance Note applies only to OEO Dealers, and only to the account opening approval process for trading accounts that do not allow:

• trading in contracts-for-differences or over-the-counter derivatives
• options trading strategies other than low-risk strategies based on long calls, long puts, covered calls, or protective (long) puts (referred to in this Guidance Note as permitted accounts).

In addition, this Guidance Note is limited to automation that is rules based and does not have intelligent decision-making capability based on machine learning or other software tools using artificial intelligence techniques.

1. Use of automation in the account opening approval process

2. Supervisor Approval Requirement

Subsection 3214(3) of the IIROC Rules1  provides that the applicable Supervisor must approve each new account no later than one business day after completing the initial trade for the account (Supervisor Approval Requirement). The Supervisor Approval Requirement does not expressly prohibit the use of automation or the delegation of tasks.

While delegation of tasks related to the Supervisor Approval Requirement is allowed unless otherwise stated, the applicable Supervisor cannot delegate the responsibility for those tasks, and remains responsible for meeting the Supervisor Approval Requirement. Consequently, the applicable Supervisor needs to understand how the automation process works and what the Supervisor’s role and responsibilities are. In some cases, more than one Supervisor may be involved. For example, in the case of permitted accounts using option trading strategies described above, the Designated Options Supervisor has responsibility for the oversight of the options trading component, and so needs to understand how the automation process works, and what the Designated Options Supervisor’s role and responsibilities are.

We view the use of automation to review and approve new permitted account applications at OEO Dealers – i.e. without the applicable Supervisor manually reviewing and approving each application – to be consistent with the Supervisory Approval Requirement, in the circumstances discussed in this Guidance Note, and where the OEO Dealer has appropriate compensating controls, and policies and procedures, in place.

1. Automation process

Generally, the new account application process requires collection of the same information from the applicant whether it is a manual or an automated process. In the automated process, the algorithm compares the applicant’s information to the OEO Dealer’s account application criteria (we expect the criteria would be the same whether a manual or an automated process is used). If there are no inconsistencies between the information collected and the criteria, or there are no other relevant factors (discussed below) that arise, the application is approved. If there are inconsistencies between the information collected and the criteria, or other relevant factors arise, that the automated process cannot resolve, the application is flagged and sent to the applicable Supervisor(s) for manual review and approval.

In designing its automated process, an OEO Dealer should take into account its business model and product offerings, and factors relating to an applicant that would give rise to a manual review.

Examples of factors that could give rise to a manual review include:

• the applicant not being an individual, or the age of majority
• a trading authorization being used
• an applicant applying to use options trading strategies and not having an appropriate level of knowledge and trading experience
• the applicant being an insider.

1. Compensating controls, and policies and procedures

We expect an OEO Dealer to have compensating controls, and policies and procedures2 , which ensure that:

1. the automated process is designed to identify inconsistencies and other relevant factors in the information provided in an application and, if such issues cannot be resolved through the automated process, route the application for manual review and approval
2. factors that trigger a manual review are clearly articulated
3. the automated process is functioning as designed by implementing appropriate periodic testing and audit procedures to confirm that, among other things, accounts approved through the automated process would have been approved if subject to manual approval
4. if using an automated system provided by a third party provider, the OEO Dealer documents the testing it did, and its oversight of the third party service provider
5. all necessary information required for all applicable client identification regulatory requirements – i.e. know-your-client and anti-money laundering – is collected, complete and accurate
6. the automated process is updated as appropriate and issues requiring compliance and technical input or oversight are identified and resolved
7. the role and responsibilities of the applicable Supervisor are clearly set out, and the Supervisor is properly trained on the function and use of (this does not mean the coding and technology behind) the automated process
8. the applicable Supervisor approves the automation process and any changes to it, and retains responsibility under the Supervisory Approval Requirement whether automation is used or not.

As always, when assessing the adequacy and appropriateness of its compensating controls and policies and procedures, each OEO Dealer should consider its business model, the types of products it offers, and the nature of its clients.

We do not expect OEO Dealers to make a business model change submission to us concerning the use of automation that is within the scope of this Guidance Note. We ask OEO Dealers considering the use of automation in the account opening approval process that fall outside the scope of this Guidance to speak with us.3  The Business Conduct and Compliance team will be reviewing automated processes as part of regular OEO Dealer examinations, in order to ensure compliance with the Supervisor Approval Requirement.

1. Other relevant guidance

We refer OEO Dealers to other IIROC guidance that may assist them in their compliance activities including:

• GN-3400-21-003 – Guidance on Order Execution Only Services and Activities,
• Notice 12-0379 - The Role of Compliance and Supervision, and
• Notice 10-0060 – Reporting of Changes to Business Models.

1. Applicable Rules

IIROC Rules this Guidance Note relates to:

• section 3904, and
• subsection 3214(3).

1. Previous Guidance Note

This Guidance Note replaces Notice 19-0153 – Order Execution Only Dealers and the use of automation in the account opening approval process (August 28, 2019).

1. Related documents

This Guidance Note was published under Notice 21-0190 - IIROC Rules, Form 1 and Guidance.

1. Questions

For more information, please contact the Business Conduct Compliance relationship manager assigned to your firm.

• 1In this Guidance, all references will be to the IIROC Rules unless otherwise noted.
• 2See section 3904. 
• 3We intend to publish in the future updated guidance directed at all Dealers concerning reporting changes to business models, the introduction of new business lines and processes, and the use of automation more broadly.