Alert:
For more information on the cybersecurity incident, please visit the cybersecurity incident page.
This Notice replaces Member Regulation Notice MR0281, Guidelines for the Review of Advertisements, Sales Literature and Correspondence (“Notice MR0281”), issued on April 12, 2004, and is effective immediately.
Notice MR0281 provided guidance to Dealer Members in the development and implementation of policies and procedures for the review, supervision and retention of communication materials, such as advertisements, sales literature and correspondence. As such, Notice MR0281 focused on the nature of various communications and not on the methods by which such communications are disseminated. However, the available methods of communication have changed significantly with the increasing use of social media websites, such as Facebook, Twitter, YouTube, blogs, and chat rooms. These changes in available communication methods have led to a number of enquiries by Dealer Members regarding the application of the IIROC Dealer Member Rule 29.7 and Notice MR0281 to newer forms of social media communication as noted above.
All methods used to communicate including, but not limited to, Facebook, Twitter, YouTube, blogs, and chat rooms, are subject to the IIROC Dealer Member Rules. The content of Notice MR0281 has been updated to clarify that regardless of the method by which communication takes place, and however social media websites evolve, Dealer Members must ensure compliance with applicable regulatory requirements and securities legislation. This Notice also addresses the unique compliance and supervisory issues Dealer Members and their Approved Persons must consider when:
Dealer Members’ policies and procedures should contain clear and comprehensive definitions of what constitutes advertising, sales literature and correspondence. Whether materials are classified as advertising or sales literature will generally be determined by their content and purpose rather than by the method of communication used. Accordingly, electronic communication, including social media websites, may constitute advertising, sales literature or correspondence depending upon their content and purpose. Dealer Members should therefore consider the following guidelines when designing policies and procedures:
Pursuant to National Instrument 31-103, Registration Requirements, Exemptions and Ongoing Registrant Obligations (“NI 31-103”), firms must retain records of their business activities, financial affairs, client transactions and communication. Whether a communication is related to the business of the Dealer Member, and therefore captured by this requirement, depends on the content of the communication. The type of device used to transmit the communication or whether it is a firm-issued or personal device is irrelevant. Dealer Members must therefore design systems and programs with compliant record retention and retrieval functionalities for those methods of communication permitted at the firm. For instance, the content posted on social media websites, such as Twitter, Facebook, blogs, chat rooms and all material transmitted through emails, are subject to the above-noted legislative and regulatory requirements. Section 11.5(2) of NI 31-103 requires Dealer Members to maintain transaction related documents entered into on behalf of each client. These documents may include, but are not limited to, trade confirmation statements, emails and notes of oral communications with clients.
The following are considerations for Dealer Members when designing and implementing compliant retention and retrieval practices:
Dealer Members must be mindful of the additional regulatory obligations that may be triggered as a result of the content of a communication delivered to clients. For instance, a “recommendation”, whether delivered via a social media website or by way of written correspondence, must take into consideration the suitability requirements set out in IIROC Dealer Member Rule 1300.1 (“Rule 1300.1”). Dealer Members may also refer to Member Regulation Notice 098, What Constitutes a “Recommendation”? Is a Suitability Determination Required under Regulation 1300.1?, for additional guidance. At the very least, Dealer Members should implement measures to monitor and/or prohibit electronic communications that constitute a recommendation which must comply with IIROC’s suitability rules.
Pursuant to IIROC Dealer Member Rule 29.7(2), Dealer Members must establish policies and procedures that allow them to comply with their supervisory obligations and protect clients from misleading or false statements. Subject to IIROC Dealer Member Rule 29.7(3), it is at the discretion of Dealer Members to determine whether to employ:
as the most effective means of monitoring communications.
When making this determination, Dealer Members should consider the following:
It is the Dealer Member’s responsibility to evaluate the adequacy of their systems to review all forms of communication: incoming, outgoing, printed or electronic. This can be done by providing secure remote access to the Dealer Member’s systems to employees and agents, by prohibiting the sending of business-related communication through sites and devices that are not supervised, or by requiring that copies of all business-related communication be sent to the Dealer Member on a pre/post approval basis. There is also software available that will enable Dealer Members to review outgoing and incoming emails for keywords which highlight communications that require review.
A Dealer Member’s policies and procedures should describe:
for each type of material used by the Dealer Member. Policies and procedures should also provide for cross-supervision; individuals should not be responsible for the supervision or approval of advertising or sales literature which they themselves have prepared, and where specific types of advertising, sales literature or correspondence are prohibited by the Dealer Member, the policies and procedures should explicitly state the prohibition.
Where a Dealer Member is organized in two or more separate business units or divisions, the Dealer Member may assign a Supervisor for each business unit or division responsible for ensuring the business unit’s or division’s compliance with IIROC Dealer Member Rule 29.7. The designated Supervisor should ensure that policies and procedures are:
The designated Supervisor should also ensure that any individuals assigned specific responsibilities under the policies and procedures are aware of their duties and are properly fulfilling them.
With regard to social media websites used for business purposes, such as blogs, LinkedIn, Twitter, YouTube, chat rooms and Facebook, Dealer Members are faced with supervisory challenges. Specifically, IIROC staff has received a number of enquiries relating to interactive versus static content as well as password protected versus accessible websites. Static content, such as a profile, background or wall information, usually considered an ‘original template advertisement’, must be pre-approved pursuant to IIROC Dealer Member Rule 29.7(3) and is generally accessible to anyone. An interactive electronic forum, such as Facebook or Twitter, on the other hand, includes real time discussions and although it does not require prior approval, must be supervised to ensure compliance with IIROC Dealer Member Rules and securities legislation. In the event that interactive content becomes static, for example by posting the real-time interactive content in a static forum such as a blog, this static content must be pre-approved if it is captured under IIROC Dealer Member Rule 29.7(3).
Whether a social media website is password protected or accessible to all does not determine whether or not it is an acceptable method of communicating with clients. As long as websites are adequately supervised and do not violate any regulatory or legislative requirements, for example, record retention, Dealer Members and their representatives are permitted to use these sites and/or technology to communicate with clients and the public for business purposes. Having said that, it is improper and a violation of IIROC Dealer Member Rule 29.1 for Approved Persons to make anonymous representations or recommendations using any method of communication.
The following are considerations for Dealer Members when designing and implementing compliant supervisory practices:
Acceptance of orders communicated via email, voice mail, or any other electronic means, other than a dedicated order-entry system, creates a number of risks, such as delays in opening and executing instructions or inadequate instructions being provided by the client. Clients and registered representatives should be strongly discouraged from communicating order instructions via email or voice-mail. Having said that, if they choose to use these methods of communication, clients should be warned of the risks described above.
Dealer Members should exercise extreme caution when engaging in third-party communications, such as permitting third parties to comment or post on a Dealer Member’s website or providing links on a Dealer Member’s website to a third party website. Third-party posts may be attributed to or considered an endorsement by the Dealer Member, thereby triggering regulatory and legislative requirements. For example, re-tweeting a client’s post or providing a “thumbs-up” may be considered an endorsement. Whether or not a third-party communication will be considered to be the Dealer Member’s communication will depend on the facts and circumstances of each case. Dealer Members should consider the use of disclaimers, the nature of their involvement in the preparation of the communication prior to posting and any evidence of explicit or implicit endorsement or approval of the post to help determine whether or not the third-party post reflects the views of the firm. Dealer Members should note that the use of disclaimers will not necessarily relieve Dealer Members’ of their responsibility for third-party posts.
The following are suggested best practices relating to third-party communications:
Third party research is not governed by IIROC Dealer Member Rule 29.7, but is dealt with under IIROC Dealer Member Rule 3400. However, material provided by a party not at arm’s length to the issuer, such as an investor relations firm, would constitute sales literature if disseminated by a Dealer Member. Furthermore, registered representatives who are not employed as research analysts, as defined under IIROC Dealer Member Rule 3400, but who nonetheless issue their own reports and recommendations that resemble research reports are governed by IIROC Dealer Member Rule 29.7. Pursuant to IIROC Dealer Member Rule 29.7(3), such research reports, as well as market letters and any materials used to solicit clients and that contain performance reports or summaries must be approved prior to publication. Such reports must also be reviewed for, among other things, disclosure of relevant conflicts of interest, using applicable regulatory and legislative requirements. Whereas market letters include information on market conditions, the author’s expectations, economic forecasts and other factors which may have an impact on security prices and investor profits, materials similar to research reports generally contain recommendations of securities. Dealer Members are advised to exercise caution when drafting sales and marketing materials in order to ensure compliance with their regulatory requirements.
Dealer Members’ policies and procedures should be designed to ensure that all advertisements, sales literature and correspondence comply with applicable regulatory and legislative requirements, including IIROC Dealer Member Rule 29.7(1). Other notable requirements include, but are not limited to, the following:
Welcome to CIRO.ca!
You can find the Canadian Investment Regulatory Organization (CIRO) at CIRO.ca with our fresh look and feel.