Personal Financial Dealings (IDPC Rule 3115): Definition + Case Study

Personal Financial Dealings (IDPC Rule 3115)

The CIRO rule prohibiting Approved Persons from personal financial dealings with clients, such as borrowing from or lending to them.

Definition

CIRO IDPC Rule 3115 prohibits employees and Approved Persons of a Dealer Member from engaging, directly or indirectly, in personal financial dealings with clients. These include accepting consideration from anyone other than the dealer for activities done for a client (non-monetary items of minimal value that are infrequent are excluded), settling with a client or paying client losses from personal funds without the dealer's prior written consent, and borrowing from or lending to clients, with narrow exceptions such as a lending institution acting in its normal course of business or a related person where the firm's policies are followed and, for representatives, the dealer approves in writing. A registrant who borrows from a client outside those exceptions, even with the client's consent, is in breach of Rule 3115. NI 31-103 s.13.12 separately restricts registrants from lending money, extending credit or providing margin to clients. Violations can result in suspension, termination of registration, and disgorgement of any financial gain.

Source

CIRO IDPC Rule 3115; NI 31-103 s.13.12

Where this shows up on the CIRE

Outcome 9.1

Test yourself

Two real CIRE-bank questions on this exact outcome. Click to reveal the answer and the rule citation.

1
A registered representative receives a phishing email appearing to come from CIRO requesting that she log in to a portal and verify her account credentials. She clicks the link, enters her username and password, and the next day discovers her access to firm systems has been used to view confidential client data. Under CIRO's cybersecurity and privacy framework, which obligation is most directly triggered?
Outcome 9.1 · click for answer
A.The firm must assess if this is a privacy breach needing client and regulator notice, and notify CIROCorrect
B.The representative must file a large cash transaction report since stolen data could support fraud
C.No obligation exists here because only login credentials were misused, not any client funds
D.The firm only needs to reset the password and log the event for its own internal records
Under PIPEDA (and its provincial equivalents) and CIRO's cybersecurity and recordkeeping obligations, unauthorized access to client personal information constitutes a potential privacy breach that may require notification to affected individuals and the Office of the Privacy Commissioner if there is a real risk of significant harm. CIRO rules also require dealer members to have incident response procedures and to notify CIRO of material cybersecurity events. An attacker gaining access to confidential client data triggers these obligations well before any fund transfer occurs.
2
A registrant's dealer is subject to IDPC Rule 1406 ('most stringent prevails'). A provincial securities regulator publishes a rule requiring a shorter complaint resolution timeline than the timeline specified in IDPC Rule 3700. Which timeline applies?
Outcome 9.1 · click for answer
A.The dealer picks whichever timeline is administratively easier to implement across branches
B.Both timelines apply concurrently, so the dealer reports the complaint separately to each regulator
C.The IDPC Rule 3700 timeline governs because CIRO requirements override provincial rules for members
D.The provincial timeline governs because Rule 1406 requires following the more stringent standardCorrect
IDPC Rule 1406 establishes that where a provincial or territorial requirement is more stringent than the corresponding CIRO requirement, the member must comply with the more stringent standard. CIRO rules set a floor, not a ceiling. If a provincial regulator mandates a shorter complaint resolution period, the dealer must meet that shorter deadline. There is no discretion to choose the less stringent standard, and the rule does not require dual reporting; it simply requires compliance with whichever standard is higher.

AI case study

See how Personal Financial Dealings (IDPC Rule 3115) applies in practice

One named-role scenario with realistic numbers and the rule citation.

Want this kind of explanation on every wrong answer?

The Registrant Prep AI tutor is grounded in the same primary sources cited above. Every wrong practice answer gets the rule that the distractor was testing.

Try the free mock exam See pricing