10.2 Control Systems for Disclosure, Leverage Disclosure, and Client Information

10.2 Control Systems for Disclosure, Leverage Disclosure, and Client Information

Quick Answer: Rules on paper do nothing without control systems that make them happen and prove they happened. MFD Rule 2.9 requires every Member to maintain adequate internal controls, and Rule 2.5 requires records of all supervisory activity. For the branch, the key systems are those that ensure: the right documents reach clients at the right time (RDI, Fund Facts, pre-trade charges, conflicts); leverage is disclosed and flagged; new client information is complete and accurate before and after account approval; client reports (confirmations, statements, annual reports) are accurate and actually received; and client information is updated periodically and when it changes.

Internal Controls and Standards of Supervision

MFD Rule 2.9 requires adequate internal controls as CIRO prescribes. Rule 400 defines internal control as the policies and procedures management maintains to ensure, as far as practical, the orderly and efficient conduct of the business, and it distinguishes two kinds:

• Preventive controls stop errors or fraud before they happen: system blocks on unapproved products, mandatory fields, and hard stops when the representative is not registered in the client's province.
• Detective controls find problems afterwards so they can be corrected: daily trade review, exception reports, statement reconciliations and branch reviews.

High-risk areas such as client cash call for strong preventive controls, and a detective control is acceptable in their place only if it guarantees prompt detection and near-certain recovery. The overall standards of supervision come from MFD Rule 2.5: a supervisory system designed to achieve compliance, branch managers who supervise account opening and trading, records of all supervisory activity, and no delegation of supervisory or compliance responsibility except as the Rules expressly permit.

1. Control System for Disclosure

2. Control System for Leverage Disclosure

• Trigger tracking: The system records when the MFD Rule 2.6 leverage disclosure was delivered: at account opening and at each leverage recommendation or awareness, with a check that blocks repeat deliveries only within the six-month window.
• Leveraged flag: Any account where leverage is recommended or known to fund purchases is flagged as leveraged (Rule 200), so that its trades appear on the branch's daily minimum review (leveraging outside RRSPs and RESPs) and head office's review of leverage over $5,000.
• Rule 200 criteria worksheet: An automated or manual check of the six leverage criteria (knowledge, risk profile below medium, age 60+, horizon under 5 years, leverage over 30% of net worth, debt and lease payments over 35% of income) with a required rationale when any is triggered.
• Loan documentation: Copies or details of the loan (rate, repayment terms, balance), compared with the KYC; a recorded advisory if the client refuses to give details.
• Transfers in: Assets bought with borrowed money that come into the dealer trigger a suitability review no later than the next trade.

3. Control System for Complete and Accurate New Client Information

• Account set-up: Account numbers are assigned only with the client's proper name and address (MFD Rule 2.2.2(a)), and the NAAF, or NAAF plus a separate KYC form, is signed and dated by the client.
• Mandatory fields: All six KYC elements, identity verification, insider status, the trusted contact person request, and beneficial ownership (more than 25%) for entities.
• Approval timing: An exception report lists accounts not approved within one business day after the initial transaction (MFD Rule 2.2.3). New registrants' accounts are pre-approved during their first 90 days.
• Incomplete documents: The account is restricted to liquidating trades until a fully completed NAAF is received (Rule 200).
• Accuracy checks: Branch reviews confirm that KYC information in the back-office system matches the signed documents (MFD Rule 500) and flag inconsistencies such as income too low for the stated net worth.

4. Control System for Reporting and Compliance on Client Account Information

• Confirmations: Sent promptly after each trade (MFD Rule 5.4), or relying on the fund manager's confirmation where permitted. Automatic plans need a confirmation only for the initial transaction.
• Statements: Produced at least every three months (MFD Rule 5.3.1), showing holdings, market values, cost, transactions, investor protection eligibility and holdings that may be subject to a DSC, with the CIRO logo (Rule 2.13).
• Annual reports: The charges and compensation report (including fund expenses since 2026) and the investment performance report, for the same 12-month period, delivered with or within 10 days after a statement.
• Returned mail and undeliverable email: Tracked and investigated. A pattern can point to address manipulation or a client who has lost contact.
• Reconciliation: Client records at the dealer are reconciled with fund company records so statements are accurate.

5. Control System for Periodically Updating Client Information

A BCO who can show these controls working, through exception reports, sign-offs and follow-up notes, can show CIRO examiners and internal branch reviewers that supervision is real.