On June 9, FirstOntario Credit Union went live on open banking, becoming one of the first credit unions in Canada to activate consent-based financial data sharing under the Consumer-Driven Banking Act. The announcement is significant for one specific reason: this is a Canadian lender that selected its partners 18 months before the rule required it and was production-ready on the day the framework came into force. Most institutions are still drafting strategy decks. FirstOntario's members are already using the capability.
Last week, FINTRAC's public penalty against VersaBank set the calibration for what procedural rigour now costs under Bill C-12. This week, the federal government tabled Bill C-29, the Financial Crimes Agency Act, creating a dedicated federal investigator for financial crime. Read together, the two bills (and OSFI's April 14 Annual Risk Outlook) complete a three-layer regulatory stack that has been signaled for several budgets and is now operational.
On May 5, FINTRAC published its first public penalty against a federally regulated bank in months: a $42,075 administrative monetary penalty against VersaBank, the London, Ontario Schedule I bank. The figure is modest enough that the headline coverage moved past it inside a news cycle. For Canadian AML and risk leaders, that would be the wrong place to leave it.
.png)
Federal economic updates are usually a fiscal exercise. The April 28 release is something different. Layered inside the headline numbers ($37.5B in net new spending, $11.5B improvement to the 2025-26 deficit) sits the most coordinated rewrite of the Canadian financial-services operating environment since the post-financial-crisis Bank Act revisions.
This week, a fee that has quietly extracted hundreds of millions of dollars from some of Canada's most financially stretched households got a hard ceiling.