← All terms
Regulatory

NI 31-103 Section 13.5 (Prohibition on Personal Financial Dealings)

The NI 31-103 provision prohibiting registrants from engaging in personal financial dealings with clients that could exploit or harm the client.

Take the free diagnostic

Definition

Section 13.5 of NI 31-103 prohibits registered individuals from engaging in personal financial dealings with clients if doing so creates a conflict of interest that cannot be managed in the client's best interest. Specific prohibited activities include: borrowing money from clients, accepting gifts or benefits from clients beyond a nominal value (typically interpreted as $100 or less per occurrence), and entering into investment arrangements or partnerships with clients outside the dealer's normal business. The companion policy (31-103CP) notes that the power imbalance inherent in the registrant-client relationship makes it difficult for clients to give truly free consent to arrangements that benefit the registrant. A registrant who borrows from a client, even with the client's consent, is almost certainly in breach of s.13.5. CIRO IDPC Rules contain parallel provisions. Violations can result in suspension, termination of registration, and disgorgement of any financial gain.

Source

National Instrument 31-103 s.13.5; Companion Policy 31-103CP s.13.5

Where this shows up on the CIRE

  • Outcome 9.1

Test yourself

Two real CIRE-bank questions on this exact outcome. Click to reveal the answer and the rule citation.

  1. 1

    A registered representative receives a phishing email appearing to come from CIRO requesting that she log in to a portal and verify her account credentials. She clicks the link, enters her username and password, and the next day discovers her access to firm systems has been used to view confidential client data. Under CIRO's cybersecurity and privacy framework, which obligation is most directly triggered?

    Outcome 9.1 · click for answer

    A.The representative must file a large cash transaction report because client data may have been used for financial gain.
    B.The dealer member must assess whether the incident constitutes a privacy breach requiring notification to affected clients and potentially to the Office of the Privacy Commissioner, in addition to notifying CIRO of the cybersecurity incident per applicable CIRO requirements.Correct
    C.No regulatory obligation arises unless the attacker actually transfers client funds.
    D.The obligation is limited to resetting the representative's password and documenting the incident internally.

    Under PIPEDA (and its provincial equivalents) and CIRO's cybersecurity and recordkeeping obligations, unauthorized access to client personal information constitutes a potential privacy breach that may require notification to affected individuals and the Office of the Privacy Commissioner if there is a real risk of significant harm. CIRO rules also require dealer members to have incident response procedures and to notify CIRO of material cybersecurity events. An attacker gaining access to confidential client data triggers these obligations well before any fund transfer occurs.

  2. 2

    A registrant's dealer is subject to IDPC Rule 1406 ('most stringent prevails'). A provincial securities regulator publishes a rule requiring a shorter complaint resolution timeline than the timeline specified in IDPC Rule 3700. Which timeline applies?

    Outcome 9.1 · click for answer

    A.The IDPC Rule 3700 timeline applies because CIRO rules supersede provincial rules for its members.
    B.Both timelines apply simultaneously, requiring dual reporting to CIRO and the provincial regulator.
    C.The dealer may choose either timeline at its discretion.
    D.The provincial rule applies because it is more stringent, and IDPC Rule 1406 requires compliance with whichever requirement is most stringent.Correct

    IDPC Rule 1406 establishes that where a provincial or territorial requirement is more stringent than the corresponding CIRO requirement, the member must comply with the more stringent standard. CIRO rules set a floor, not a ceiling. If a provincial regulator mandates a shorter complaint resolution period, the dealer must meet that shorter deadline. There is no discretion to choose the less stringent standard, and the rule does not require dual reporting; it simply requires compliance with whichever standard is higher.

Related terms in Regulatory

AI case study

See how NI 31-103 Section 13.5 (Prohibition on Personal Financial Dealings) applies in practice

One named-role scenario with realistic numbers and the rule citation.

Want this kind of explanation on every wrong answer?

The Ciroexam AI tutor is grounded in the same primary sources cited above. Every wrong practice answer gets the rule that the distractor was testing.

Take the free diagnosticSee pricing