In forceDeposit-taking institutions: operational riskLast checked 11 November 2026

Operational risk events (L3)

A regulatory return listed by the Office of the Superintendent of Financial Institutions (OSFI), Canada.

Consolidated data on the operational risk events experienced by selected banks, for the fiscal quarter and year to date. OSFI uses it to analyse and monitor those events. Only banks OSFI asks need to file it. Source

Official title: Operational Risk Event Data (L3)

The facts

Who files
OSFI's reporting requirements table lists it for: selected banks. Not required from: trust and loan companies; banks or trust and loan companies that are subsidiaries of banks or of federally incorporated trust and loan companies; foreign bank branches. Source
How often
Each fiscal quarter. Source
Deadline
Within 120 days. Subject to the Late and Erroneous Filing Penalties (LEFP) framework. Source
Format
Excel. Filed through the Regulatory Reporting System (RRS). OSFI publishes the return as an Excel sample. Source
How it is filed
Filing routes recorded for the OSFI: Regulatory Reporting System (RRS); Regulatory Data Hub (RDH). See how firms file with the OSFI.
Status
In forceFiled in the Regulatory Reporting System (RRS). OSFI's Data Collection Modernization initiative will replace RRS with a new platform, the Regulatory Data Hub (RDH); OSFI says the launch is now targeted for spring 2027 and asks filers to keep using RRS until then. Financial filing for banks and trust and loan companies moves to RDH in Release 2; OSFI says more details on financial returns will come in 2027. Source
Group
Deposit-taking institutions: operational risk

Templates (5)

The tables and forms inside the return. Plain name first, the OSFI's code in brackets.

  • Operational risk event data return template (L3)
  • Appendix II: Summary Details (Appendix II - Summary Details)
  • Appendix II: Top 5 (Appendix II - Top 5)
  • Appendix II: Significant Changes (Appendix II - Significant Changes)
  • Appendix II: Additional Information (Appendix II - Additional Information)

The L3 template (dtil3_18.xls) and the four content sheets of Appendix II (dtil3_appII.xls); the Codes sheet is a list. Source

Validation rules

72 rules, as counted from the OSFI's published material. Software can run them exactly as published. Source

How they are written: Excel workbook, one row per rule (Rule ID, Rule Type, Description and a Formula or Expression column in OSFI's RRS rule syntax, for example EqualWithinThreshold([9499], [9490] + [9491] + [9492] + [9493] + [9494] + [9495] + [9496] ...).

The rules, on osfi-bsif.gc.ca

How they were counted

Counted 72 rows with a rule in the 'Validation rules' sheet of l3-validation-en.xlsx (72 error).

Counts are in the OSFI's own unit, so they are not comparable with other regulators' counts.

Public data

No published data from this return was found. The instructions say: "Information from this return is not published." Source

Official documents (6)

The OSFI's own files, with the size and SHA-256 fingerprint of each as downloaded on 11 November 2026, so anyone can tell whether a copy is the same version.

Sources

Every page and document this return's facts were read from.

Knowing exactly what is collected, in what format and under which rules is the first step to real-time supervision. Line4 builds SupTech software for financial regulators that runs checks like these as each return arrives.

Line4's text and records here are free to reuse under CC BY 4.0. Please credit: “Source: Line4 regulatory submissions library (CC BY 4.0), https://www.line4.ai”. The regulators' documents, forms, taxonomies, rules and data belong to them: see OSFI's reuse terms. This describes what regulators publish. It is not legal or regulatory advice: always rely on the regulator's own text.

Last checked 11 November 2026.