OSFI sets operational-risk capital rules for Canadian institutions

The Office of the Superintendent of Financial Institutions’ (OSFI) Capital Adequacy Requirements Guideline (2027), published on 10 September, sets effective dates in November 2026 and January 2027 for Canadian deposit-taking institutions.

The publication is a guideline, issued across nine separate chapters for banks, including federal credit unions, bank holding companies, federally regulated trust companies and federally regulated loan companies.

Operational-risk methods carry different requirements

The guideline permits two operational-risk methods: the Standardized Approach (SA) and the Simplified Standardized Approach (SSA). Institutions using the SSA must hold operational-risk capital equal to 15% of average annual Adjusted Gross Income over the previous 12 fiscal quarters.

Institutions using the SA must use loss data directly in their operational-risk capital calculations. If they do not meet the applicable loss-data standards, they must hold capital at least equal to 100% of the business indicator component.

They must also publicly disclose the exclusion of internal loss data and any resulting adjustment to the internal loss multiplier. The requirement makes loss-data governance part of both the calculation and the disclosure record for SA institutions.

The guideline identifies the relevant methodology-specific control points. SSA institutions need the income history and calculation process supporting the 15% formula. SA institutions need to test compliance with the loss-data standards, document any exclusions and prepare the associated public disclosure.

Reporting timetable and framework

OSFI’s guideline sets out the CAR framework in nine chapters covering capital definitions, operational risk, credit risk, securitisation, settlement and counterparty risk, credit valuation adjustment risk and market risk. It says regulatory capital consists of Common Equity Tier 1, Additional Tier 1 and Tier 2 capital, net of regulatory adjustments, with total regulatory capital being the sum of those categories.

The publication also identifies related reporting materials, including the Basel Capital Adequacy Reporting Manual (2027) and implementation material for institutions using internal ratings-based approaches. The supplied record does not establish a comparison with the previous guideline, so it does not support describing the capital provisions as revised.

A previous version of the guideline remains available for reporting before 31 January 2027. OSFI identifies the effective dates as November 2026 and January 2027, but does not assign each reporting component to a separate transition phase.

Institutions should identify their operational-risk methodology, test the applicable loss-data standards and monitor the CAR chapters and reporting manual against those dates. The supplied publication identifies no further scheduled docket or transition event; the official record to monitor is OSFI’s CAR guideline and related reporting material.