Crypto Law Profile

CSA/IIROC Staff Notice 21-329: Crypto Trading Platform Guidance

Canadian guidance on how securities and derivatives requirements apply to crypto-asset trading platforms, covering registration, marketplace oversight, custody, disclosure, market integrity and retail safeguards. In 2024, regulators said the general interim dealer path would not continue.

Canada Effective Agency guidance

At a glance

Status Current guidance; the general time-limited restricted-dealer pathway was not continued after the August 2024 update.
Scope CTPs trading Security Tokens or Crypto Contracts, including dealer, marketplace and hybrid models serving Canadian clients.
Long-term pathway Investment-dealer registration and CIRO membership are the expected long-term route for covered CTPs.
Publication Issued March 29, 2021 by the CSA and IIROC, the predecessor organization now reflected in CIRO.

Overview

Joint CSA/IIROC Staff Notice 21-329, Guidance for Crypto-Asset Trading Platforms: Compliance with Regulatory Requirements, is Canadian agency guidance published on March 29, 2021. It explains how existing securities and derivatives requirements apply to crypto-asset trading platforms that facilitate trading in crypto assets that are securities (“Security Tokens”) or instruments and contracts involving crypto assets (“Crypto Contracts”). The notice does not create platform-specific rules; it describes how existing registration, marketplace, clearing and conduct requirements may apply or be tailored through terms, conditions and discretionary relief.

As of June 25, 2026, the British Columbia Securities Commission lists Staff Notice 21-329 as current. IIROC later became part of the organization now called the Canadian Investment Regulatory Organization (CIRO). A joint CSA/CIRO update issued on August 6, 2024 changed an important transition point: CSA members said they did not intend to continue the notice’s general time-limited restricted-dealer approach, while expecting covered platforms to prioritize investment-dealer registration and CIRO membership.

Scope of Canada’s crypto trading platform guidance

The regulatory treatment described in Staff Notice 21-329 depends on a platform’s functions and business model. The notice separates covered platforms into two main categories:

  • Dealer Platforms commonly act as counterparty to client trades, facilitate primary distributions, onboard retail clients, act as agent, or provide custody.
  • Marketplace Platforms bring together orders from multiple buyers and sellers using established, non-discretionary methods. A platform may also perform dealer functions and therefore face both marketplace and dealer requirements.

A platform that performs clearing functions may additionally require recognition, registration or exemptive relief as a clearing agency or clearing house. Foreign platforms with Canadian clients are also expected to comply with Canadian securities legislation.

Registration, recognition and market oversight

For Dealer Platforms, the appropriate registration category depends on their activities. A platform limited to exempt distributions or trading of Security Tokens without margin or leverage may fit an exempt-market-dealer or, in some circumstances, restricted-dealer category. Dealer Platforms trading Crypto Contracts for retail individuals were generally expected to pursue investment-dealer registration and IIROC membership, now CIRO membership.

Marketplace Platforms are addressed through concepts drawn from National Instrument 21-101, National Instrument 23-101 and National Instrument 23-103, together with market-integrity requirements based on the Universal Market Integrity Rules. A platform exercising exchange-like regulatory functions may need exchange recognition or an exemption. Tailored requirements or discretionary relief are assessed case by case and may include limits on products, client types, activity or investment amounts.

The original notice contemplated a generally two-year interim route under which certain platforms could operate as restricted dealers or exempt market dealers while transitioning. The August 2024 CSA/CIRO statement means that route should now be treated as historical general policy, although regulators left room for case-specific discussions with applicants already working toward full registration.

Custody, disclosure and investor-protection expectations

Staff Notice 21-329 organizes its risk guidance around safeguards that regulators may apply through registration, recognition or exemptive-relief terms. Principal areas include:

  • Custody: segregation of client assets and private keys, reliable records, key-management and cold-storage controls, sufficient financial resources and insurance or alternative risk mitigation, custodian due diligence and independent assurance over controls.
  • Systems: resilient trading, surveillance and clearing systems, cybersecurity controls, business-continuity planning and, where applicable, independent systems reviews.
  • Transparency: public information about operations, fees, access, ownership, custody, conflicts, trading rules, token admission or removal, and treatment of forks and airdrops.
  • Market conduct and clients: surveillance for manipulation and deceptive trading, know-your-client and suitability obligations where applicable, anti-money-laundering and counter-terrorist-financing policies, and management and disclosure of conflicts.

Current status and later CSA measures

The notice remains a foundational statement of how Canadian securities regulators analyze crypto trading platforms, but it must be read with later measures. CSA Staff Notice 21-332 added enhanced pre-registration undertaking expectations in 2023, including stronger custody and segregation commitments and a prohibition on margin, credit or leverage for Canadian clients. CSA Staff Notice 21-333 added interim conditions for certain value-referenced crypto assets.

No enacted or statutory effective date applies to Staff Notice 21-329: it is guidance organizing existing requirements, and the BCSC instrument page leaves the effective-date field blank. Its publication date, current listing and the August 2024 transition update are therefore the most useful status markers.

Key provisions

Covered platforms and instruments

Applies to CTPs facilitating Security Tokens or Crypto Contracts. Regulatory treatment depends on dealer, marketplace, exchange and clearing functions.

Regulatory perimeter Source

Dealer registration categories

Registration depends on activities. Retail Crypto Contract platforms were generally directed toward investment-dealer registration and IIROC, now CIRO, membership.

Registration Source

Marketplace and exchange oversight

Marketplace concepts under NI 21-101, NI 23-101 and NI 23-103, plus UMIR-style market-integrity controls, may apply; exchange functions may trigger recognition.

Market structure Source

Custody and asset safeguarding

Expects segregation, reliable records, key and cold-storage controls, adequate resources, insurance or alternative mitigation, custodian diligence and control assurance.

Custody Source

Systems, disclosure and conflicts

Addresses cybersecurity and resilience, public disclosure of operations and risks, and identification, management and disclosure of conflicts of interest.

Consumer protection Source

Retail access, KYC and AML/CFT

Direct-access platforms may face KYC, suitability or appropriateness expectations, AML/CFT policies and conditions on relief for order-execution-only models.

Client protection Source

Market integrity and surveillance

Contemplates trading rules and surveillance against manipulation, deceptive activity, front-running and other conduct, with controls tailored to platform risks.

Market integrity Source

Interim registration transition

The 2021 notice contemplated a generally two-year restricted-dealer route; CSA/CIRO said in 2024 that members did not intend to continue it generally.

Transition Source

Timeline

  1. Staff Notice 21-329 published

    CSA and IIROC publish guidance applying existing securities requirements to covered dealer and marketplace crypto platforms.

    Enacted Source
  2. CSA Staff Notice 21-332 published

    CSA strengthens pre-registration undertaking expectations, including custody, segregation and leverage restrictions.

    Enacted Source
  3. Successor self-regulator adopts CIRO name

    The successor self-regulatory organization formed from IIROC and the MFDA adopts the name CIRO.

    Enacted Source
  4. CSA Staff Notice 21-333 published

    CSA publishes interim terms for certain value-referenced crypto assets offered through registered or undertaking-based CTPs.

    Enacted Source
  5. CSA and CIRO update the transition pathway

    Regulators say the general time-limited restricted-dealer route will not continue and prioritize investment-dealer registration.

    Enacted Source

Who it affects

Actors

Canadian Investment Regulatory Organization, Canadian Securities Administrators, Investment Industry Regulatory Organization of Canada

Asset classes

Crypto assets, Crypto contracts, Security tokens

Official sources

Editorial note

This is non-binding staff guidance, not legislation, and it does not create new CTP-specific rules. References to IIROC should be read in light of its successor, CIRO. On August 6, 2024, CSA and CIRO stated that CSA members did not intend to continue the general time-limited restricted-dealer approach described in the notice.