Financial advisor marketing compliance in Canada: CIRO, AMF and CASL explained

You wrote a LinkedIn post about RRSP deadlines on Sunday evening, sent it to compliance on Monday, and on Friday it came back with more red than black. So you stopped. Not because a regulator told you to, but because you could not tell which line tripped the wire. A silent profile felt safer than a file with your name on it.

That silence costs you prospects and leaves your calendar running on referrals alone. The rules come from a handful of sources, and once you can see the whole map, review stops being a wall and becomes a step you plan around. This guide lays out that map: who regulates whom, what you can claim, and what CASL and Québec add on top. It ends with a checklist to run before anything goes to review.

A guide from Finnect, a Montréal-based client acquisition agency for Canadian financial advisors.

Financial advisor marketing compliance in Canada depends on your registration category. CIRO (formerly IIROC and the MFDA) supervises dealer reps’ advertising under its Rule 3600 series. Portfolio managers answer directly to their provincial commission under NI 31-103, and insurance advisors answer to FSRA, the AMF or their provincial council. CASL, PIPEDA, and in Québec Law 25 and the Charter of the French Language, apply on top of all of it. Find your category and you know which rules bind you before you write a word.

In this article

1. Who regulates your marketing in Canada?
2. What counts as advertising under CIRO Rule 3600?
3. What can you claim, and what is off limits?
4. What changes on the insurance side?
5. CASL, PIPEDA and Law 25: consent, records and pixels
6. Does Québec’s Charter of the French Language apply to your ads?
7. What does Meta require from financial advertisers?
8. Why per-client agency fees are risky
9. A pre-submission checklist and a review workflow that keeps you publishing
10. Frequently asked questions

Who regulates your marketing in Canada?

You have probably heard three answers to this from three colleagues, each partly right. It depends on what you are registered or licensed to do, and where. There is no single national advisor regulator.

The Canadian Securities Administrators (CSA) is the umbrella of the 13 provincial and territorial securities regulators and writes the National Instruments (NI 31-103, NI 81-102). It does not enforce them itself. CIRO, created on January 1, 2023 by amalgamating IIROC and the MFDA, oversees investment dealers and mutual fund dealers. Insurance is licensed province by province.

Find your row first; it decides which sections below bind your practice and which are context.

The CCIR jurisdictional overview lists every provincial insurance regulator if your province is not in the table. Dual-licensed advisors sit in two rows at once; write to the stricter of the two.

One title note. “Financial advisor” is not a protected title across Canada. Ontario protects “Financial Planner” and “Financial Advisor” under the Financial Professionals Title Protection Act, in force since March 28, 2022, and New Brunswick’s regime took effect on January 1, 2026.

Québec reserves “planificateur financier” for holders of an AMF certificate. Elsewhere, the general rule against misleading communications governs. Your row settles who reads your work; the next rule settles what they call it.

What counts as advertising under CIRO Rule 3600?

If you are a dealing rep, you have probably wondered why a post naming no product still needs a reviewer. Under CIRO’s IDPC Rule 3600 series, almost everything you publish to prospects is an advertisement, sales literature or correspondence. Your dealer must have written policies for reviewing and supervising all three.

Section 3603 of the IDPC Rules puts social media fully in scope: Facebook, X, YouTube, blogs and chat are named in CIRO’s guidelines on advertisements, sales literature and correspondence. Each category has its own review standard and retention period:

• Advertisements. Content you broadcast to the public: ads, sponsored posts, a static LinkedIn or Instagram post, a landing page. These go through the dealer’s review process, and many dealers pre-approve every one.
• Sales literature. Material promoting specific securities or services: brochures, fund one-pagers, seminar decks that recommend a product, market letters. Anything containing performance data, and any market letter, requires pre-approval, and the approver cannot be the author.
• Correspondence. Your one-to-one communication: emails, direct messages, replies. Supervised, typically by sampling after the fact, rather than pre-approved.

Two things are explicitly not sales literature under the guidelines: general market commentary and educational seminars that do not sell specific securities. That carve-out is why educational content is the easiest thing to get approved. For the social-specific version, including which post types need pre-approval, read CIRO social media rules for advisors.

Retention. Advertisements and sales literature must be kept for 2 years, correspondence for 5 years, and general records for 7 years under Rule 3804. For social media, that means your dealer needs an archive of what you posted, when, and who approved it. Most dealers run archiving software; if yours does not, keep dated copies yourself.

Mutual fund dealing reps used to look to the MFDA’s rulebook. Those rules are being consolidated into CIRO’s rulebook in phases, as BLG’s summary of the consolidation project describes. Until your dealer says otherwise, assume the same review and retention standards apply. The category is half the job; the words inside it are the other half.

What can you claim, and what is off limits?

You have probably had a harmless-looking sentence struck and a risky one waved through. The line is clearer than it feels. You can describe what you do, who you serve, how you work and what you believe. You cannot mislead about your qualifications, present performance outside the prescribed formats, or represent the future value of a security.

Titles and misleading communications: NI 31-103 s.13.18

Since December 31, 2021, section 13.18 of NI 31-103, part of the Client Focused Reforms, prohibits registrants from holding themselves out in a misleading way. That covers your proficiency, experience, qualifications, registration category and services. BLG’s guide to the CFR title requirements spells out two things advisors trip on:

• Titles based on sales or revenue (“President’s Club”) are out.
• Corporate officer titles like “Vice-President” are only allowed if you have actually been appointed to that office.

Performance claims: NI 81-102 Part 15

Any “sales communication” about a public investment fund, and that includes your social post or a banner, must follow Part 15 of NI 81-102. Performance data must use the prescribed periods and calculations, comparisons must include all material facts, and nothing can be misleading. This is why a screenshot of a fund’s one-year return in a story gets rejected: the format is wrong, not the fact.

Portfolio manager marketing notices

Portfolio managers and advising reps have been told what regulators look for. CSA Staff Notice 31-325 and OSC Staff Notice 33-729 flag hypothetical and back-tested performance, composites, benchmark choices and “exaggerated and unsubstantiated claims”. Back-tested data must be labelled, fee-adjusted and accompanied by its limitations.

“Guaranteed” and future-value language

Provincial securities acts prohibit representing the future value or price of a security while promoting it. Section 50 of the BC Securities Act is the BC version; Ontario’s equivalent is s.38(2). The practical rule: never “guaranteed returns”, “no risk” or “beat the market”. Softer cousins (“grow your wealth faster”) read the same way to a reviewer.

The finfluencer notice and testimonials

On December 11, 2025, the CSA and CIRO published Staff Notice 31-369 on working with finfluencers. Its core points:

• Paid promotion of a registrant may be a referral arrangement.
• Firms are responsible for statements made on their behalf.
• Regulators expect due diligence, written agreements, and content that is “fair, balanced, substantiated and not misleading”.
• They also expect ongoing monitoring and conflict disclosure.

If someone says something about you for money, you own it.

Testimonials are the item advisors get wrong most often, usually in the cautious direction. No Canadian securities rule bans client testimonials outright. They are sales communications, subject to the misleading-communication prohibitions and your dealer’s pre-approval. Many dealers restrict them by internal policy, for example by asking advisors to disable LinkedIn recommendations.

The honest answer is “check your dealer’s policy”, not “they are illegal”. The full treatment, including unsolicited Google reviews, is in testimonials and Google reviews for Canadian advisors. If you also hold an insurance licence, a second rulebook reads the same post.

What changes on the insurance side?

If you are dual-licensed, you have probably assumed a dealer approval covers everything. It does not. Insurance marketing is governed provincially, and the standards are about fair dealing and accurate representation of products and capacity rather than a sales-literature regime. The insurance rules apply to your insurance content even after your dealer has approved it.

• Ontario. FSRA’s Unfair or Deceptive Acts or Practices Rule, in force since April 1, 2022, covers misleading advertising and misrepresentation of products or of your capacity. With Ontario title protection, both what you call yourself and what you say about a policy are regulated.
• Québec. The AMF is the single regulator for securities and insurance. Ethics and discipline for insurance-of-persons reps and financial planners has sat with the Chambre de la sécurité financière (CSF). Under Law 16, the CSF and the ChAD merge into the Chambre de l’assurance effective July 4, 2026, the same date CIRO takes over oversight of Québec mutual fund dealer reps. The CSF’s marketing obligations under the Code de déontologie remain the practical reference. Québec advisors get their own guide in marketing for Québec advisors: AMF, CSF and bilingual campaigns.
• BC, Alberta, Saskatchewan, Manitoba. Each council publishes its own code of conduct. Your MGA usually layers a marketing policy on top, and carriers often require approval before their product names or logos appear in your material.

CASL, PIPEDA and Law 25: consent, records and pixels

Everything above governs what you say. You have probably spent less time on the three laws governing who you may contact and what you may collect; they apply to every advisor in Canada regardless of registration.

CASL: three requirements and two kinds of consent

Canada’s Anti-Spam Legislation has been in force since July 1, 2014 and is enforced by the CRTC. According to the CRTC’s CASL FAQ, a commercial electronic message needs consent, sender identification with contact information, and a working unsubscribe. The unsubscribe must stay functional for 60 days and be honoured within 10 business days.

• Express consent is an opt-in the person actively gives (no pre-checked boxes). It does not expire. An unticked “send me your newsletter” box on your webinar form, ticked by the prospect, is express consent.
• Implied consent covers an existing business relationship: 2 years after a purchase or contract, 6 months after an inquiry. It also covers a conspicuously published business address, if your message relates to the person’s role. Implied consent runs out; express consent does not.

You bear the burden of proving consent, so log the date, the source and the wording each person saw. Penalties run to $1 million per violation for individuals and $10 million for organizations, as Gowling WLG’s CASL guide sets out. Seminar and nurture-sequence scenarios are worked through in CASL for financial advisors: consent, seminars and email follow-up.

PIPEDA

PIPEDA is the federal private-sector privacy law, built on 10 fair-information principles and enforced by the Privacy Commissioner. For marketing, the principles that bite are identifying purposes, consent and limiting collection: your lead form should collect only what its stated purpose needs.

Québec Law 25: pixels, cookies and a privacy officer

Law 25 came into force in phases between September 2022 and September 2024. Three obligations reach directly into your marketing, as McCarthy Tétrault’s analysis of Law 25 and cookies explains:

1. Designate a privacy officer. It defaults to the person with the highest authority (in a practice, usually you), and the name and contact must be published.
2. Publish a plain-language privacy policy, and run a privacy impact assessment for certain projects and for transfers outside Québec, which most CRM and ad platforms involve.
3. Section 8.1: tracking technology. Inform users about any technology that identifies, locates or profiles them, and how to activate it. The Commission d’accès à l’information reads this as opt-in for non-essential tracking. A Meta pixel that fires before the visitor consents is the most common Law 25 problem on advisor sites.

Breaches must be reported to the CAI. Administrative penalties go up to $10 million or 2% of worldwide turnover, penal fines up to $25 million or 4%. The cookie-banner obligation is the same for a two-person practice in Laval, where the language on the page is regulated too.

Does Québec’s Charter of the French Language apply to your ads?

Yes, if the ad, page or post is aimed at Québec, and that includes your English ad into Montréal. Section 52 of the Charter of the French Language, strengthened by Bill 96, covers commercial publications regardless of medium. Smart & Biggar’s summary of the Charter reforms sets out the practical requirements:

• Websites and commercial social posts aimed at Québec need a French version of equal quality and prominence. An English-only landing page behind a French ad does not meet this.
• Commercial advertising and public signs require French to be markedly predominant.
• A customer who writes to you in French must be answered in French.
• Fines run $700 to $7,000 for individuals and $3,000 to $30,000 for legal persons, and firms with 25 or more employees must register with the OQLF.

For a Montréal advisor, the workable pattern is two parallel funnels. A French ad goes to a French page and booking flow, an English ad to an English page, each targeted by language in Meta. A last-minute translation reads translated, which costs conversions as well as compliance. The platform those ads run on adds rules of its own.

What does Meta require from financial advertisers?

You have probably seen an audience option greyed out in Ads Manager and not known why. Meta treats financial services as a restricted category, and two layers apply on top of everything a regulator asks.

The financial-services policy. Meta’s financial products and services policy, updated May 1, 2026, says financial advertisers may be required to verify business or individual identity and demonstrate authorization from the relevant regulator. Ads must comply with legal disclosure requirements, may not request financial information directly, and must not make misleading claims.

Credit, loan and insurance ads must target 18 and over. Meta may require identity or regulatory verification from you specifically, so keep your registration details ready before launch.

The special ad category. Advertisers targeting Canada with financial products or services must self-declare, and the restrictions reshape targeting:

• Age locked to 18 to 65+, with no gender exclusion.
• No postal-code targeting and no location exclusions.
• Limited detailed targeting and no Lookalike audiences.

Since September 2, 2025, Meta also blocks custom and lookalike audiences that imply financial status such as income, net worth or credit score.

For compliance, your ad creative still needs your dealer’s or MGA’s approval like any other advertisement. Your landing page and lead form need to satisfy CASL and, for Québec traffic, Law 25 and the Charter. The mechanics are in Facebook and Instagram ads for financial advisors in Canada. One question sits outside the ad account: how you pay whoever runs it.

Why per-client agency fees are risky

You have probably been pitched a deal where the agency is paid per client signed or takes a slice of assets. Read it twice. Paying an unregistered marketing agency per client acquired, or as a share of assets, can make the arrangement a referral arrangement under NI 31-103.

That brings written-agreement, disclosure and conflict obligations, and makes your firm responsible for the agency’s statements. The agency’s pricing model is a compliance question, not just a budgeting one.

Sections 13.7 to 13.10 of NI 31-103 say a registered firm may pay a referral fee only under a written agreement, and must verify the referrer’s qualifications. It must also give the client written disclosure before services begin: parties, purpose, terms, conflicts, fee calculation and registration categories. A 2018 proposal to cap referral fees was dropped; referral arrangements are instead treated as material conflicts to be addressed in the client’s best interest. Staff Notice 31-369 extends the same logic to paid promoters.

A flat fee for marketing services, not contingent on clients signed or assets gathered, is the usual way to keep an agency relationship outside the referral regime. No regulator has said “flat fees are fine”, so treat this as established practice rather than a bright line, and put the agreement in front of compliance before you sign. The same rules govern advisor-to-advisor and COI referrals; the referral strategy guide covers the written-agreement side.

A pre-submission checklist and a review workflow that keeps you publishing

You have probably noticed the same three comments on every submission. Most rejections are predictable. Run this checklist on every piece before it goes to compliance, and most of what comes back will be typo-level.

1. Category. Advertisement, sales literature or correspondence? Any performance data or a specific security? If yes, it needs pre-approval, and not by you.
2. Titles. Every title is one you hold, not sales-based, and permitted in your province. “Financial planner” or “financial advisor” appears only where you hold the required credential (Ontario, New Brunswick, Québec).
3. Claims. No future-value language: no “guaranteed”, “no risk”, “beat”, “outperform”. Every superlative has a source your firm accepts, or it is gone.
4. Performance. Any return figure is in the NI 81-102 or 31-325 format, with periods, fees and limitations. If unsure, remove the number.
5. Third parties. Every testimonial, review, quote or paid promotion has written permission, a dealer-policy check and, if paid, a written agreement.
6. Insurance. Carrier names used with permission. Capacity (independent or captive) stated accurately.
7. CASL. Every email has sender identification and a working unsubscribe. The list is express-consent or inside the implied-consent window, and you can show the record.
8. Privacy. The form collects only what the stated purpose needs. For Québec traffic: privacy officer named, policy published, pixels behind opt-in consent.
9. Language. Anything aimed at Québec has a French version of equal quality and prominence.
10. Paid ads. Special ad category declared. No financial-status audiences. Landing page and creative both in the approval package.
11. Records. Final version, approval and date archived somewhere that will still exist in 7 years.

How to structure the review workflow

The advisors who publish every week do not have softer dealers; they share three habits.

• They batch: a month of posts, two emails and one ad set go to compliance as one package on a fixed day.
• They keep an approved-content library, each item stored with its approval reference, so an educational post on TFSA limits can be reused next year with only the numbers updated.
• They get evergreen content approved in advance, so the calendar never depends on a same-week turnaround.

Here is what that looks like over six months.

If you are building the strategy this compliance layer sits under, start with the complete guide to financial advisor marketing in Canada.

Frequently asked questions

This article is general information for Canadian financial advisors, not legal, compliance or investment advice. Your registration category, your firm’s policies and your provincial regulator govern what applies to you. Figures are illustrative unless a source is cited.

Put this into practice: paid ads & lead generation · marketing funnels
Related reading: CIRO social media rules for advisors · CASL for financial advisors: consent, seminars and email follow-up