Compliance frameworks, security audits, and quality certifications this company maintains.
Regulatory
Bank Secrecy Act / AML
In ProgressFollowing TD Bank's October 2024 guilty plea to BSA violations and $3.09B in US regulatory penalties, TD is under court-supervised compliance monitorship and implementing a comprehensive AML remediation program across its US retail banking operations, including new transaction monitoring systems, enhanced customer due diligence controls, and significant AML compliance staffing increases.
Regulatory
OSFI B-10 Third-Party Risk
CompliantTD Bank Group complies with OSFI Guideline B-10 governing the management of third-party and outsourcing risks across its Canadian operations, maintaining a rigorous vendor due diligence framework for the technology, data processing, and financial services providers that support TD's banking infrastructure.
Privacy
PIPEDA / Bill C-27
CompliantTD Bank complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and is implementing controls aligned with Canada's proposed Bill C-27 privacy reform legislation, governing the collection, use, and disclosure of personal financial and transactional data for 15M+ Canadian banking customers.
TD Bank's technology and digital banking platforms maintain SOC 2 Type II certification, validating the security, availability, and confidentiality controls governing TD's online and mobile banking infrastructure serving 14M+ active digital banking customers in Canada and the United States.
TD Bank Group maintains ISO 27001 information security management certification across its enterprise technology operations, providing an internationally recognized framework for protecting customer financial data, transaction records, and proprietary banking systems across TD's Canadian, US, and international business units.
TD Bank complies with PCI DSS standards for the handling, storage, and transmission of cardholder data across TD Credit Cards, TD Visa, and TD's merchant services business, ensuring that payment card transactions processed through TD's acquiring and issuing operations meet global payment security standards.
Regulatory
OSFI Stress Testing (DFAST/ICAAP)
CompliantTD Bank Group participates in OSFI-mandated stress testing and Internal Capital Adequacy Assessment Process (ICAAP) reviews, demonstrating that TD's capital reserves are sufficient to absorb severe macroeconomic shocks including housing market corrections and recession scenarios in Canada and the United States.
Regulatory
FATCA / CRS Reporting
CompliantTD Bank complies with US FATCA (Foreign Account Tax Compliance Act) and the OECD Common Reporting Standard, automatically reporting account information for US persons and foreign account holders to the IRS and CRA respectively — critical given TD's large cross-border Canadian-American customer base.
Accessibility
WCAG 2.1 Accessibility
CompliantTD Bank's digital banking platforms — including TD app, EasyWeb online banking, and TD Direct Investing — comply with WCAG 2.1 AA accessibility standards, ensuring that customers with visual, hearing, and cognitive disabilities can access TD's full range of banking products and services through accessible digital interfaces.
Regulatory
Basel III / OSFI CAR Guidelines
CompliantTD Bank Group maintains capital ratios in compliance with Basel III international banking standards as implemented through OSFI's Capital Adequacy Requirements guidelines, with a Common Equity Tier 1 (CET1) ratio of approximately 13.1% — well above the OSFI regulatory minimum — demonstrating TD's financial resilience despite $3.09B in AML penalties absorbed in fiscal 2024.