Doing business with a foreign state-owned entity could soon trigger new public registration requirements in Canada. As FITAA moves toward implementation, organizations should understand who must register, what must be disclosed, and the consequences of non-compliance.
In January 2026, the Canadian government published its first proposed regulations under the Foreign Influence Transparency and Accountability Act (FITAA) in Canada Gazette, Part I, initiating a public consultation window that closed on February 2, 2026. FITAA was originally enacted in June 2024 as part of Bill C-70 to introduce a comprehensive public registry designed to enhance transparency around foreign political and governmental engagement in Canada. With the release of these draft regulations and the scheduled August 2026 opening of the Office of the Foreign Influence Transparency Commissioner, the compliance framework is nearing implementation. Unlike traditional lobbying legislation, the proposed regime establishes broad reporting requirements that may apply to commercial, professional, and advisory arrangements undertaken on behalf of a foreign principal in relation to Canadian political or governmental processes.
The Act, together with the proposed regulations, establishes registration obligations for any Canadian individual, business, or professional services firm, including banks, accounting firms, public relations agencies, management consultants, and legal counsel, that meets three cumulative statutory criteria:
Want daily regulatory updates delivered straight to your inbox? Subscribe to the Reg Compliance Hub here.
The draft regulations establish strict, time-sensitive compliance timelines for disclosing arrangements to the Commissioner once the regime formally takes effect. Rather than annual reporting, the framework imposes continuous reporting obligations:
The proposed framework creates a two-tiered reporting structure, separating information that will be published on the publicly accessible Foreign Influence Transparency Registry from sensitive data that will be retained confidentially by the Commissioner and authorized government institutions.
Publicly accessible registry filings must include the legal and operational names of the registrant, a link to the foreign principal’s website, the statutory basis for the client's status as a foreign principal, the start and end dates of the arrangement, the specific political or governmental process involved, the stated objective of the foreign principal, and the identity of the target audience or public office holders being influenced. Crucially, the public filing must also disclose the full names of all individuals within the registering organization who participate in the influence activities "in a significant manner."
In contrast, the draft regulations require registrants to submit certain sensitive information on a confidential basis. This private disclosure tier includes personal residential addresses, dates of birth, citizenship details, and specific financial compensation or benefit amounts received by the registrant from the foreign principal under the arrangement.
A key takeaway for compliance officers and legal counsel is that the proposed regulations largely preserve the Act's broad statutory framework rather than significantly narrowing its scope. They do not create broad new exemptions for commercial, legal, or advisory services beyond those already contained in the Act. Notably, the regulations leave the phrase "in a significant manner" undefined, meaning additional administrative guidance from the Foreign Influence Transparency Commissioner will likely be needed to clarify when individual participants must be publicly identified. For organizations providing professional services, the disclosure requirements also warrant careful consideration of solicitor-client privilege, confidentiality obligations, and internal governance processes.
Failure to comply with the registration requirements, update obligations, or reporting requirements, or knowingly providing false or misleading information, may result in significant enforcement consequences. The Act and the proposed regulations establish a graduated administrative monetary penalty (AMP) framework for compliance violations, with penalties ranging from C$50 to C$1 million for corporations. In more serious cases involving intentional concealment, obstruction, or knowing non-compliance, the Act also authorizes criminal prosecution, with penalties of up to C$5 million on indictment (or C$200,000 on summary conviction) and imprisonment for up to five years.
Disclaimer: This article does not constitute legal advice. Readers should seek legal or tax advice from their professional advisers regarding their specific regulatory and legal obligations.
Want daily regulatory updates delivered straight to your inbox? Subscribe to the Reg Compliance Hub here.