Back to News
PolicyAI Understanding briefing

Ontario regulator flags governance gaps in securities industry AI use

The Ontario Securities Commission's annual report reveals that an initial review of securities firms found a lack of documented AI policies, limited oversight of third-party tools, and unsubstantiated marketing claims regarding AI capabilities.

4 min readRead the linked source
Source-page capture accompanying Ontario regulator flags governance gaps in securities industry AI use
Source referenceSource recorded
Publisher
investmentexecutive.com
Source type
Linked source — primary-source status has not been established.
ContextUnderstand this in 60 seconds

Key terms

AI Governance
Policies, standards, and oversight mechanisms that guide how AI is developed and used in society.
Test yourselfAI Ethics Quiz

What happened

The Ontario Securities Commission (OSC) reported that its initial review of the securities industry's use of AI tools identified significant governance and control deficiencies. Following a late 2025 industry-wide survey, the regulator began reviewing specific firms in January 2026. The OSC's Registration, Inspections and Examinations (RIE) division noted a lack of documented policies and procedures for AI use, limited or no oversight of third-party AI tools, and instances where marketing materials made unsubstantiated claims about AI usage. The regulator plans to publish a detailed report on these findings this fall.

The Ontario Securities Commission (OSC) released its latest annual report from the Registration, Inspections and Examinations (RIE) division, which includes findings from an initial review of how securities industry firms use AI tools. The review was initiated after an industry-wide survey conducted in late 2025, with specific firm reviews beginning in January 2026 based on survey responses.

The OSC identified several key issues during this initial phase. The report noted a widespread lack of documented policies and procedures governing AI use within firms. Additionally, the regulator found that many firms had no or limited oversight of third-party AI tools they were utilizing. A further concern was the presence of marketing materials that made statements about AI use which could not be substantiated by the firms.

The OSC stated that it plans to publish a more detailed report detailing the full findings from this work later this fall. In the interim, the RIE division's report serves as a preliminary signal of the regulatory stance on in the securities sector. The review aimed to provide the regulator with insight into due diligence processes, oversight structures, and training related to AI adoption.

Alongside the AI review, the report mentioned ongoing examinations of sales practices at banks' fund dealer divisions, focusing on compensation and incentive practices and related controls for conflicts of interest. These examinations are expected to be completed later in 2026. The report also flagged other compliance issues, such as concerns about leverage use, alternative investments, management fee disclosure, and understaffing at portfolio managers.

Source details: investmentexecutive.com ↗

Why it matters

This regulatory action highlights the growing scrutiny of in the financial sector, where opaque or poorly controlled AI use can lead to compliance failures and investor harm. By identifying specific gaps in policy documentation and third-party oversight, the OSC is signaling that firms must establish robust internal controls for AI adoption. This move sets a precedent for how regulators will evaluate AI risk management in financial services, potentially influencing industry standards and compliance requirements beyond Ontario. It underscores that AI is not just a technical upgrade but a regulatory and operational risk that requires explicit governance frameworks.

The OSC's findings indicate that the financial industry's adoption of AI is outpacing the development of adequate governance frameworks. The absence of documented policies and limited oversight of third-party tools suggests that many firms are deploying AI without clear internal controls, which poses risks to compliance and investor protection.

The identification of unsubstantiated marketing claims regarding AI use is particularly significant, as it suggests potential misleading conduct in how firms present their technological capabilities to clients. This could lead to regulatory enforcement actions if the detailed report confirms widespread issues.

This regulatory focus on in the securities industry may influence broader industry standards. As the OSC prepares to publish its detailed findings, other regulators and industry bodies may look to these results to shape their own expectations for AI risk management in financial services.

For firms operating in the securities industry, this report serves as a warning that AI adoption requires rigorous documentation, oversight, and transparency. Firms that fail to address these governance gaps may face increased regulatory scrutiny and potential penalties.

Interactive Mechanism

Interactive Mechanism: How It Actually Works

Explore the underlying technology behind this development interactively.

Agent Lifecycle Stage:
1
User Intent & Planning: "Audit customer refund request #4092 and settle payment."
2
Tool Calling: Emits structured JSON call crm_get_transaction(id='4092').
3
Guardrail & Verification:🛡️ Paused: High-value action requires human operator sign-off.
4
Final Settlement: Refund recorded, email receipt dispatched, and audit log stored.
Core takeaway: An AI agent is not just a language model—it is a closed loop of planning, tool invocation, and environment feedback. Production systems require self-healing retries and strict human approval guardrails.
Interactive Concept Check+10 Points
AI Ethics Quiz

Why can ethical evaluation not be reduced to one model score?

What to watch next

Investors and industry participants should monitor the OSC's upcoming detailed report scheduled for release this fall, which will provide specific findings from the firm-level reviews. Additionally, watch for how other financial regulators respond to these findings, as they may adopt similar examination priorities for . Firms in the securities industry should also prepare for increased scrutiny on their AI documentation and third-party vendor management practices.

The OSC's detailed report on AI use in the securities industry, scheduled for release this fall, will provide specific findings and potentially identify firms with significant governance deficiencies. This report will be a key document for understanding the regulator's expectations for .

Industry responses to the OSC's findings will be important to monitor. Firms may update their AI policies and procedures in response to the report, and industry associations may issue guidance on best practices for in the securities sector.

The potential for regulatory enforcement actions based on the OSC's findings should be watched. If the detailed report confirms widespread issues with , the OSC may take enforcement action against firms that fail to meet regulatory expectations.

The impact of the OSC's AI review on other regulatory jurisdictions should be monitored. Other regulators may adopt similar examination priorities for in financial services, leading to a broader shift in regulatory expectations.

Related guides & quizzes

Found this useful?