Policy Statement to Regulation 21-101 Respecting Marketplace Operation

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 1 Last amendment in force on September 14, 2020 POLICY STATEMENT TO REGULATION 21-101 RESPECTING MARKETPLACE OPERATION PART 1 INTRODUCTION 1.1. Introduction Exchanges, quotation and trade reporting systems and ATSs are marketplaces that provide a market facility or venue on which securities can be traded. The areas of interest from a regulatory perspective are in many ways similar for each of these marketplaces since they may have similar trading activities. The regulatory regime for exchanges and quotation and trade reporting systems arises from the securities legislation of the various jurisdictions. Exchanges and quotation and trade reporting systems are recognized under orders from the Canadian securities regulatory authorities, with various terms and conditions of recognition. ATSs, which are not recognized as exchanges or quotation and trade reporting systems, are regulated under Regulation 21-101 respecting Marketplace Operation (chapter V-1.1, r. 5) (the Regulation) and Regulation 23-101 respecting Trading Rules (chapter V-1.1, r. 6) (Regulation 23-101). The Regulation and Regulation 23-101, which were adopted at a time when new types of markets were emerging, provide the regulatory framework that allows and regulates the operation of multiple marketplaces. The purpose of this Policy Statement is to state the views of the Canadian securities regulatory authorities on various matters related to the Regulation, including: (a) a discussion of the general approach taken by the Canadian securities regulatory authorities in, and the general regulatory purpose for, the Regulation; and (b) the interpretation of various terms and provisions in the Regulation. 1.2. Definition of Exchange-Traded Security Section 1.1 of the Regulation defines an “exchange-traded security” as a security that is listed on a recognized exchange or is quoted on a recognized quotation and trade reporting system or is listed on an exchange or quoted on a quotation and trade reporting system that is recognized for the purposes of the Regulation and Regulation 23-101. If a security trades on a recognized exchange or recognized quotation and trade reporting system on a “when issued” basis, as defined in IIROC’s Universal Market Integrity Rules, the security would be considered to be listed on that recognized exchange

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 2 or quoted on that recognized quotation and trade reporting system and would therefore be an exchange-traded security. If no “when issued” market has been posted by a recognized exchange or recognized quotation and trade reporting system for a security, an ATS may not allow this security to be traded on a “when issued” basis on its marketplace. A security that is inter-listed would be considered to be an exchange-traded security. A security that is listed on a foreign exchange or quoted on a foreign quotation and trade reporting system, but is not listed or quoted on a domestic exchange or quotation and trade reporting system, falls within the definition of “foreign exchange￾traded security”. 1.3. Definition of Foreign Exchange-Traded Security The definition of foreign exchange-traded security includes a reference to ordinary members of the International Organization of Securities Commissions (IOSCO). To determine the current list of ordinary members, reference should be made to the IOSCO website at www.iosco.org. 1.4. Definition of Regulation Services Provider The definition of regulation services provider is meant to capture a third party provider that provides regulation services to marketplaces. A recognized exchange or recognized quotation and trade reporting system would not be a regulation services provider if it only conducts these regulatory services for its own marketplace or an affiliated marketplace. PART 2 MARKETPLACE 2.1. Marketplace (1) The Regulation uses the term “marketplace” to encompass the different types of trading systems that match trades. A marketplace is an exchange, a quotation and trade reporting system or an ATS. Subparagraphs (a)(iii) and (a)(iv) of the definition of “marketplace” describe marketplaces that the Canadian securities regulatory authorities consider to be ATSs. A dealer that internalizes its orders for exchange-traded securities and does not execute and print the trades on an exchange or quotation and trade reporting system in accordance with the rules of the exchange or the quotation and trade reporting system (including an exemption from those rules) is considered to be a marketplace pursuant to paragraph (d) of the definition of “marketplace” and an ATS. (2) Two of the characteristics of a “marketplace” are (a) that it brings together orders for securities of multiple buyers and sellers; and

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 3 (b) that it uses established, non-discretionary methods under which the orders interact with each other. (3) The Canadian securities regulatory authorities consider that a person brings together orders for securities if it (a) displays, or otherwise represents to marketplace participants, trading interests entered on the system; or (b) receives orders centrally for processing and execution (regardless of the level of automation used). (4) The Canadian securities regulatory authorities are of the view that “established, non-discretionary methods” include any methods that dictate the terms of trading among the multiple buyers and sellers entering orders on the system. Such methods include providing a trading facility or setting rules governing trading among marketplace participants. Common examples include a traditional exchange and a computer system, whether comprised of software, hardware, protocols, or any combination thereof, through which orders interact, or any other trading mechanism that provides a means or location for the bringing together and execution of orders. Rules imposing execution priorities, such as time and price priority rules, would be “established, non-discretionary methods.” (5) The Canadian securities regulatory authorities do not consider the following systems to be marketplaces for purposes of the Regulation: (a) A system operated by a person that only permits one seller to sell its securities, such as a system that permits issuers to sell their own securities to investors. (b) A system that merely routes orders for execution to a facility where the orders are executed. (c) A system that posts information about trading interests, without facilities for execution. In the first 2 cases, the criteria of multiple buyers and sellers would not be met. In the last 2 cases, routing systems and bulletin boards do not establish non-discretionary methods under which parties entering orders interact with each other. (6) A person operating any of the systems described in subsection (5) should consider whether the person is required to be registered as a dealer under securities legislation. (7) Inter-dealer bond brokers that conduct traditional inter-dealer bond broker activity have a choice as to how to be regulated under the Regulation and Regulation 23-101. Each inter-dealer bond broker can choose to be subject to IIROC Rule 36 and IIROC Rule 2100, fall within the definition of inter-dealer bond broker in the Regulation and be subject to the transparency requirements of Part 8 of the Regulation. Alternatively, the inter-dealer bond broker can choose to be an ATS and comply with the provisions of the Regulation and Regulation 23-101 applicable to a marketplace and an ATS. An inter-

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 4 dealer bond broker that chooses to be an ATS will not be subject to Rule 36 or IIROC Rule 2100, but will be subject to all other IIROC requirements applicable to a dealer. (8) Section 1.2 of the Regulation contains an interpretation of the definition of “marketplace”. The Canadian securities regulatory authorities do not consider a system that only routes unmatched orders to a marketplace for execution to be a marketplace. If a dealer uses a system to match buy and sell orders or pair orders with contra-side orders outside of a marketplace and route the matched or paired orders to a marketplace as a cross, the Canadian securities regulatory authorities may consider the dealer to be operating a marketplace under subparagraph (a)(iii) of the definition of “marketplace”. The Canadian securities regulatory authorities encourage dealers that operate or plan to operate such a system to meet with the applicable securities regulatory authority to discuss the operation of the system and whether the dealer’s system falls within the definition of “marketplace”. PART 3 CHARACTERISTICS OF EXCHANGES, QUOTATION AND TRADE REPORTING SYSTEMS AND ATSs 3.1. Exchange (1) Securities legislation of most jurisdictions does not define the term “exchange”. (2) The Canadian securities regulatory authorities generally consider a marketplace, other than a quotation and trade reporting system, to be an exchange for purposes of securities legislation, if the marketplace (a) requires an issuer to enter into an agreement in order for the issuer’s securities to trade on the marketplace, i.e., the marketplace provides a listing function; (b) provides, directly, or through one or more marketplace participants, a guarantee of a two-sided market for a security on a continuous or reasonably continuous basis, i.e., the marketplace has one or more marketplace participants that guarantee that a bid and an ask will be posted for a security on a continuous or reasonably continuous basis. For example, this type of liquidity guarantee can be carried out on exchanges through traders acting as principal such as registered traders, specialists or market makers; (c) sets requirements governing the conduct of marketplace participants, in addition to those requirements set by the marketplace in respect of the method of trading or algorithm used by those marketplace participants to execute trades on the system (see subsection (3)); or (d) disciplines marketplace participants, in addition to discipline by exclusion from trading, i.e., the marketplace can levy fines or take enforcement action. (3) An ATS that requires a subscriber to agree to comply with the requirements of a regulation services provider as part of its contract with that subscriber is not setting

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 5 “requirements governing the conduct of subscribers”. In addition, marketplaces are not precluded from imposing credit conditions on subscribers or requiring subscribers to submit financial information to the marketplace. (4) The criteria in subsection 3.1(2) are not exclusive and there may be other instances in which the Canadian securities regulatory authorities will consider a marketplace to be an exchange. 3.2. Quotation and Trade Reporting System (1) Securities legislation in certain jurisdictions contains the concept of a quotation and trade reporting system. A quotation and trade reporting system is defined under securities legislation in those jurisdictions as a person, other than an exchange or registered dealer, that operates facilities that permit the dissemination of price quotations for the purchase and sale of securities and reports of completed transactions in securities for the exclusive use of registered dealers. A person that carries on business as a vendor of market data or a bulletin board with no execution facilities would not normally be considered to be a quotation and trade reporting system. (2) A quotation and trade reporting system is considered to have “quoted” a security if (a) the security has been subject to a listing or quoting process, and (b) the issuer issuing the security or the dealer trading the security has entered into an agreement with the quotation and trade reporting system to list or quote the security. 3.3. Definition of an ATS (1) In order to be an ATS for the purposes of the Regulation, a marketplace cannot engage in certain activities or meet certain criteria such as (a) requiring listing agreements, (b) having one or more marketplace participants that guarantee that a two￾sided market will be posted for a security on a continuous or reasonably continuous basis, (c) setting requirements governing the conduct of subscribers, in addition to those requirements set by the marketplace in respect of the method of trading or algorithm used by those subscribers to execute trades on the system, and (d) disciplining subscribers. A marketplace, other than a quotation and trade reporting system, that engages in any of these activities or meets these criteria would, in the view of the Canadian securities regulatory authorities, be an exchange and would have to be recognized as such in order

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 6 to carry on business, unless exempted from this requirement by the Canadian securities regulatory authorities. (2) An ATS can establish trading algorithms that provide that a trade takes place if certain events occur. These algorithms are not considered to be “requirements governing the conduct of subscribers”. (3) A marketplace that would otherwise meet the definition of an ATS in the Regulation may apply to the Canadian securities regulatory authorities for recognition as an exchange. 3.4. Requirements Applicable to ATSs (1) Part 6 of the Regulation applies only to an ATS that is not a recognized exchange or a member of a recognized exchange or an exchange recognized for the purposes of the Regulation and Regulation 23-101. If an ATS is recognized as an exchange, the provisions of the Regulation relating to marketplaces and recognized exchanges apply. (2) If the ATS is a member of an exchange, the rules, policies and other similar instruments of the exchange apply to the ATS. (3) Under paragraph 6.1(a) of the Regulation, an ATS that is not a member of a recognized exchange or an exchange recognized for the purposes of the Regulation and Regulation 23-101 must register as a dealer if it wishes to carry on business. Unless otherwise specified, an ATS registered as a dealer is subject to all of the requirements applicable to dealers under securities legislation, including the requirements imposed by the Regulation and Regulation 23-101. An ATS will be carrying on business in a local jurisdiction if it provides direct access to subscribers located in that jurisdiction. (4) If an ATS registered as a dealer in one jurisdiction in Canada provides access in another jurisdiction in Canada to subscribers who are not registered dealers under securities legislation, the ATS must be registered in that other jurisdiction. However, if all of the ATS’s subscribers in the other jurisdiction are registered as dealers in that other jurisdiction, the securities regulatory authority in the other jurisdiction may consider granting the ATS an exemption from the requirement to register as a dealer under paragraph 6.1(a) and all other requirements in the Regulation and in Regulation 23-101 and from the registration requirements of securities legislation. In determining if the exemption is in the public interest, a securities regulatory authority will consider a number of factors, including whether the ATS is registered in another jurisdiction and whether the ATS deals only with registered dealers in that jurisdiction. (5) Paragraph 6.1(b) of the Regulation prohibits an ATS to which the provisions of the Regulation apply from carrying on business unless it is a member of a self-regulatory entity. Membership in a self-regulatory entity is required for purposes of membership in the Canadian Investor Protection Fund, capital requirements and clearing and settlement procedures. At this time, the IIROC is the only entity that would come within the definition.

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 7 (6) Any registration exemptions that may otherwise be applicable to a dealer under securities legislation are not available to an ATS, even though it is registered as a dealer (except as provided in the Regulation), because of the fact that it is also a marketplace and different considerations apply. (7) Subsection 6.7(1) of the Regulation requires an ATS to notify the securities regulatory authority if one of 3 thresholds is met or exceeded. Upon being informed that one of the thresholds is met or exceeded, the securities regulatory authority intends to review the ATS and its structure and operations in order to consider whether the person operating the ATS should be considered to be an exchange for purposes of securities legislation or if additional terms and conditions should be placed on the registration of the ATS. The securities regulatory authority intends to conduct this review because each of these thresholds may be indicative of an ATS having significant market presence in a type of security, such that it would be more appropriate that the ATS be regulated as an exchange. If more than one Canadian securities regulatory authority is conducting this review, the reviewing jurisdictions intend to coordinate their review. The volume thresholds referred to in subsection 6.7(1) of the Regulation are based on the type of security. The Canadian securities regulatory authorities consider a type of security to refer to a distinctive category of security such as equity securities, debt securities or options. (8) Any marketplace that is required to provide notice under section 6.7 of the Regulation will determine the calculation based on publicly available information. PART 4 RECOGNITION AS AN EXCHANGE OR QUOTATION AND TRADE REPORTING SYSTEM 4.1. Recognition as an Exchange or Quotation and Trade Reporting System (1) In determining whether to recognize an exchange or quotation and trade reporting system, the Canadian securities regulatory authorities must determine whether it is in the public interest to do so. (2) In determining whether it is in the public interest to recognize an exchange or quotation and trade reporting system, the Canadian securities regulatory authorities will look at a number of factors, including (a) the manner in which the exchange or quotation and trade reporting system proposes to comply with the Regulation; (b) whether the exchange or quotation and trade reporting system has fair and meaningful representation on its governing body, in the context of the nature and structure of the exchange or quotation and trade reporting system; (c) whether the exchange or quotation and trade reporting system has sufficient financial resources for the proper performance of its functions;

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 8 (d) whether the rules, policies and other similar instruments of the exchange or quotation and trade reporting system ensure that its business is conducted in an orderly manner so as to afford protection to investors; (e) whether the exchange or quotation and trade reporting system has policies and procedures to effectively identify and manage conflicts of interest arising from its operation or the services it provides; (f) whether the requirements of the exchange or quotation and trade reporting system relating to access to its services are fair and reasonable; and (g) whether the exchange or quotation and trade reporting system’s process for setting fees is fair, transparent and appropriate, and whether the fees are equitably allocated among the participants, issuers and other users of services, do not have the effect of creating barriers to access and at the same time ensure that the exchange or quotation and trade reporting system has sufficient financial resources for the proper performance of its functions. 4.2. Process Although the basic requirements or criteria for recognition of an exchange or quotation and trade reporting system may be similar in various jurisdictions, the precise requirements and the process for seeking a recognition or an exemption from recognition in each jurisdiction is determined by that jurisdiction. PART 5 ORDERS 5.1. Orders (1) The term “order” is defined in section 1.1 of the Regulation as a firm indication by a person, acting as either principal or agent, of a willingness to buy or sell a security. By virtue of this definition, a marketplace that displays good faith, non-firm indications of interest, including, but not limited to, indications of interest to buy or sell a particular security without either prices or quantities associated with those indications, is not displaying “orders”. However, if those prices or quantities are implied and determinable, for example, by knowing the features of the marketplace, the indications of interest may be considered an order. (2) The terminology used is not determinative of whether an indication of interest constitutes an order. Instead, whether or not an indication is “firm” will depend on what actually takes place between the buyer and seller. At a minimum, the Canadian securities regulatory authorities will consider an indication to be firm if it can be executed without further discussion between the person entering the indication and the counterparty (i.e. the indication is “actionable”). The Canadian securities regulatory authorities would consider an indication of interest to be actionable if it includes sufficient information to enable it to be executed without communicating with the marketplace participant that entered the order. Such information may include the symbol of the security, side (buy or

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 9 sell), size, and price. The information may be explicitly stated, or it may be implicit and determinable based on the features of the marketplace. Even if the person must give its subsequent agreement to an execution, the Canadian securities regulatory authorities will still consider the indication to be firm if this subsequent agreement is always, or almost always, granted so that the agreement is largely a formality. For instance, an indication where there is a clear or prevailing presumption that a trade will take place at the indicated or an implied price, based on understandings or past dealings, will be viewed as an order. (3) A firm indication of a willingness to buy or sell a security includes bid or offer quotations, market orders, limit orders and any other priced orders. For the purpose of sections 7.1, 7.3, 8.1 and 8.2 of the Regulation, the Canadian securities regulatory authorities do not consider special terms orders that are not immediately executable or that trade in special terms books, such as all-or-none, minimum fill or cash or delayed delivery, to be orders that must be provided to an information processor or, if there is no information processor, to an information vendor for consolidation. (4) The securities regulatory authority may consider granting an exemption from the pre-trade transparency requirements in sections 7.1, 7.3, 8.1 and/or 8.2 of the Regulation to a marketplace for orders that result from a request for quotes or facility that allows negotiation between 2 parties provided that (a) order details are shown only to the negotiating parties, (b) other than as provided by paragraph (a), no actionable indication of interest or order is displayed by either party or the marketplace, and (c) each order entered on the marketplace meets the size threshold set by a regulation services provider as provided in subsection 7.1(2) of the Regulation. (5) The determination of whether an order has been placed does not turn on the level of automation used. Orders can be given over the telephone, as well as electronically. PART 6 MARKETPLACE INFORMATION AND FINANCIAL STATEMENTS 6.1. Forms Filed by Marketplaces (1) The definition of marketplace includes exchanges, quotation and trade reporting systems and ATSs. The legal entity that is recognized as an exchange or quotation and trade reporting system, or registered as a dealer in the case of an ATS, owns and operates the market or trading facility. In some cases, the entity may own and operate more than one trading facility. In such cases the marketplace may file separate forms in respect of each trading facility, or it may choose to file one form covering all of the different trading facilities. If the latter alternative is chosen, the marketplace must clearly identify the facility to which the information or changes apply. (2) The forms filed by a marketplace under the Regulation will be kept confidential. The Canadian securities regulatory authorities are of the view that the forms contain

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 10 proprietary financial, commercial and technical information and that the interests of the filers in non-disclosure outweigh the desirability of adhering to the principle that the forms be available for public inspection. (3) While initial Forms 21-101F1 and 21-101F2 and amendments thereto are kept confidential, certain Canadian securities regulatory authorities may publish a summary of the information included in the forms filed by a marketplace, or information related to significant changes to the forms of a marketplace, where the Canadian securities regulatory authorities are of the view that a certain degree of transparency for certain aspects of a marketplace would allow investors and industry participants to be better informed as to how securities trade on the marketplace. (4) Under subsection 3.2(1) of the Regulation, a marketplace is required to file an amendment to the information provided in Form 21-101F1 or Form 21-101F2, as applicable, at least 45 days prior to implementing a significant change. The Canadian securities regulatory authorities consider a significant change to be a change that could significantly impact a marketplace, its systems, its market structure, its marketplace participants or their systems, investors, issuers or the Canadian capital markets A change would be considered to significantly impact the marketplace if it is likely to give rise to potential conflicts of interest, to limit access to the services of a marketplace, introduce changes to the structure of the marketplace or result in costs, such as implementation costs, to marketplace participants, investors or, if applicable, the regulation services provider. The following types of changes are considered to be significant changes as they would always have a significant impact: (a) changes in the structure of the marketplace, including procedures governing how orders are entered, displayed (if applicable), executed, how they interact, are cleared and settled; (b) new or changes to order types, and (c) changes in the fees and the fee model of the marketplace. The following may be considered by the Canadian securities regulatory authorities as significant changes, depending on whether they have a significant impact: (d) new or changes to the services provided by the marketplace, including the hours of operation; (e) new or changes to the means of access to the market or facility and its services; (f) new or changes to types of securities traded on the marketplace;

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 11 (g) new or changes to types of securities listed on exchanges or quoted on quotation and trade reporting systems; (h) new or changes to types of marketplace participants; (i) changes to the systems and technology used by the marketplace that support order entry, order routing, execution, trade reporting, trade comparison, data feeds, co-location and, if applicable, market surveillance and trade clearing, including those affecting capacity; (j) changes to the corporate governance of the marketplace, including changes to the composition requirements for the board of directors or any board committees and changes to the mandates of the board of directors or any board committees; (k) changes in control over marketplaces; (l) changes in affiliates that provide services to or on behalf of the marketplace; (m) new or changes in outsourcing arrangements for key marketplace services or systems; and (n) new or changes in custody arrangements. (5) Changes to information in Form 21-101F1 or Form 21-101F2 that (a) do not have a significant impact on the marketplace, its market structure, marketplace participants, investors, issuers or the Canadian capital markets, or (b) are housekeeping or administrative changes such as (i) changes in the routine processes, policies, practices, or administration of the marketplace, (ii) changes due to standardization of terminology, (iii) corrections of spelling or typographical errors, (iv) necessary changes to conform to applicable regulatory or other legal requirements, (v) minor system or technology changes that would not significantly impact the system or its capacity, and (vi) changes to the list of marketplace participants and the list of all persons or entities denied or limited access to the marketplace, would be filed in accordance with the requirements outlined in subsection 3.2(3) of the Regulation.

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 12 (6) As indicated in subsection (4) above, the Canadian securities regulatory authorities consider a change in a marketplace’s fees or fee model to be a significant change. However, the Canadian securities regulatory authorities recognize that in the current, competitive multiple marketplace environment, which may at times require that frequent changes be made to the fees or fee model of marketplaces, marketplaces may need to implement fee changes within tight timeframes. To facilitate this process, subsection 3.2(2) of the Regulation provides that marketplaces may provide information describing the change in fees or fee model in a shorter timeframe, at least 15 business days before the expected implementation date of the change in fees or fee model. (7) For the changes referred to in subsection 3.2(3) of the Regulation, the Canadian securities regulatory authorities may review these filings to ascertain the appropriateness of the categorization of such filings. The marketplace will be notified in writing if there is disagreement with respect to the categorization of the filing. (8) The Canadian securities regulatory authorities will make best efforts to review amendments to Forms 21-101F1 and 21-101F2 within the timelines specified in subsections 3.2(1) and (2) of the Regulation. However, where the changes are complex, raise regulatory concerns, or when additional information is required, the period for review may exceed these timeframes. The Canadian securities regulatory authorities will review changes to the information in Forms 21-101F1 and 21-101F2 in accordance with staff practices in each jurisdiction. (8.1) In order to ensure records regarding the information in a marketplace’s Form 21-101F1 or Form 21-101F2 are kept up to date, subsection 3.2(4) of the Regulation requires the chief executive officer of a marketplace to certify, within 30 days after the end of each calendar year, that the information contained in the marketplace’s Form 21-101F1 or Form 21-101F2 as applicable, is true, correct and complete and the marketplace is operating as described in the applicable form. This certification is required at the same time as the updated and consolidated Form 21-101F1 or Form 21-101F2, as applicable, is required to be filed pursuant to subsection 3.2(5) of the Regulation. The certification under subsection 3.2(4) is also separate and apart from the form of certification in Form 21-101F1 and Form 21-101F2. (8.2) The Canadian securities regulatory authorities expect that the certifications provided pursuant to subsection 3.2(4) of the Regulation will be preserved by the marketplace as part of its books and records obligation under Part 11 of the Regulation. (9) Section 3.3 of the Regulation requires a marketplace to file Form 21-101F3 by the following dates: April 30 (for the calendar quarter ending March 31), July 30 (for the calendar quarter ending June 30), October 30 (for the calendar quarter ending September 30) and January 30 (for the calendar quarter ending December 31). 6.2. Filing of Financial Statements Part 4 of the Regulation sets out the financial reporting requirements applicable to marketplaces. Subsections 4.1(2) and 4.2(2) respectively require an ATS to file audited

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 13 financial statements initially, together with Form 21-101F2, and on an annual basis thereafter. These financial statements may be in the same form as those filed with IIROC. The annual audited financial statements may be filed with the Canadian securities regulatory authorities at the same time as they are filed with IIROC. Section 4.3 requires recognized exchanges and recognized quotation and trade reporting systems to file interim financial reports within 60 days after the end of each interim period. In the view of the Canadian securities regulatory authorities, the term interim period means a period commencing on the first day of the recognized exchange’s or quotation and trade reporting system’s financial year and ending 9, 6 or 3 months before the end of the same financial year. The Canadian securities regulatory authorities expect that financial statements and reports filed under subsections 4.2 and 4.3 should disclose the accounting principles used to prepare them. For clarity, financial statements and reports should include: (a) in the case of annual financial statements, an unreserved statement of compliance with IFRS; (b) in the case of an interim financial report, an unreserved statement of compliance with International Accounting Standard 34 Interim Financial Reporting. PART 7 ARKETPLACE REQUIREMENTS 7.1. Access Requirements (1) Section 5.1 of the Regulation sets out access requirements that apply to a marketplace. The Canadian securities regulatory authorities note that the requirements regarding access for marketplace participants do not restrict the marketplace from maintaining reasonable standards for access. The purpose of these access requirements is to ensure that rules, policies, procedures, and fees, as applicable, of the marketplace do not unreasonably create barriers to access to the services provided by the marketplace. (2) For the purposes of complying with the order protection requirements in Part 6 of Regulation 23-101, a marketplace should permit fair and efficient access to (a) a marketplace participant that directly accesses the marketplace, (b) a person that is indirectly accessing the marketplace through a marketplace participant, or (c) another marketplace routing an order to the marketplace. The reference to “a person” in paragraph (b) includes a system or facility that is operated by a person and a person.

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 14 (3) The reference to “services” in section 5.1 of the Regulation means all services that may be offered to a person and includes all services relating to order entry, trading, execution, routing, data and includes co-location. (4) Marketplaces that send indications of interest to a selected smart order router or other system should send the information to other smart order routers or systems to meet the fair access requirements of the Regulation. (5) Marketplaces are responsible for ensuring that the fees they set are in compliance with section 5.1 of the Regulation. In assessing whether its fees unreasonably condition or limit access to its services, a marketplace should consider a number of factors, including (a) the value of the security traded, (b) the amount of the fee relative to the value of the security traded, (c) the amount of fees charged by other marketplaces to execute trades in the market, (d) with respect to market data fees, the amount of market data fees charged relative to the market share of the marketplace, and, (e) with respect to order-execution terms, including fees, whether the outcome of their application is consistent with the policy goals of order protection. The Canadian securities regulatory authorities will consider these factors, among others, in determining whether the fees charged by a marketplace unreasonably condition or limit access to its services. With respect to trading fees, it is the view of the Canadian securities regulatory authorities that a trading fee equal to or greater than the minimum trading increment as defined in IIROC’s Universal Market Integrity Rules, as amended, would unreasonably condition or limit access to a marketplace’s services as it would be inconsistent with the policy goals of order protection. Trading fees below the minimum trading increment may also unreasonably condition or limit access to a marketplace’s services when taking into account factors including those listed above. 7.2. Public Interest Rules Section 5.3 of the Regulation sets out the requirements applicable to the rules, policies and similar instruments adopted by recognized exchanges and recognized quotation and trade reporting systems. These requirements acknowledge that recognized exchanges and quotation and trade reporting systems perform regulatory functions. The Regulation does not require the application of these requirements to an ATS’s trading requirements. This is because, unlike exchanges, ATSs are not permitted to perform regulatory functions, other than setting requirements regarding conduct in respect of the trading by subscribers on the marketplace, i.e. requirements related to the method of trading or algorithms used by their subscribers to execute trades on the system. However, it is the expectation of the Canadian securities regulatory authorities that the requirement

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 15 in section 5.7 of the Regulation that marketplaces take reasonable steps to ensure they operate in a manner that does not interfere with the maintenance of fair and orderly markets, applies to an ATS’s requirements. Such requirements may include those that deal with subscriber qualification, access to the marketplace, how orders are entered, interact, execute, clear and settle. 7.3. Compliance Rules Section 5.4 of the Regulation requires a recognized exchange and recognized quotation and trade reporting system to have appropriate procedures to deal with violations of rules or other similar instruments of the exchange or quotation and trade reporting system. This section does not preclude enforcement action by any other person, including the Canadian securities regulatory authorities or the regulation services provider. 7.4. Filing of Rules Section 5.5 of the Regulation requires a recognized exchange and recognized quotation and trade reporting system to file all rules, policies and other similar instruments and amendments as required by the securities regulatory authority. Initially, all rules, policies and other similar instruments will be reviewed before implementation by the exchange or quotation and trade reporting system. Subsequent to recognition, the securities regulatory authority may develop and implement a protocol that will set out the procedures to be followed with respect to the review and approval of rules, policies and other similar instruments and amendments. 7.5. Review of Rules The Canadian securities regulatory authorities review the rules, policies and similar instruments of a recognized exchange or recognized quotation and trade reporting system in accordance with the recognition order and rule protocol issued by the jurisdiction in which the exchange or quotation and trade reporting system is recognized. The rules of recognized exchanges and quotation and trade reporting systems are included in their rulebooks, and the principles and requirements applicable to these rules are set out in section 5.3 of the Regulation. For an ATS, whose trading requirements, including any trading rules, policies or practices, are incorporated in Form 21-101F2, any changes would be filed in accordance with the filing requirements applicable to changes to information in Form 21-101F2 set out in subsections 3.2(1) and 3.2(3) of the Regulation and reviewed by the Canadian securities regulatory authorities in accordance with staff practices in each jurisdiction. 7.6. Fair and Orderly Markets (1) Section 5.7 of the Regulation establishes the requirement that a marketplace take reasonable steps to ensure it operates in a way that does not interfere with the maintenance of fair and orderly markets. This applies both to the operation of the

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 16 marketplace itself and to the impact of the marketplace’s operations on the Canadian market as a whole. (2) This section does not impose a responsibility on the marketplace to oversee the conduct of its marketplace participants, unless the marketplace is an exchange or quotation and trade reporting system that has assumed responsibility for monitoring the conduct of its marketplace participants directly rather than through a regulation services provider. However, marketplaces are expected in the normal course to monitor order entry and trading activity for compliance with the marketplace’s own operational policies and procedures. They should also alert the regulation services provider if they become aware that disorderly or disruptive order entry or trading may be occurring, or of possible violations of applicable regulatory requirements. (3) Part of taking reasonable steps to ensure that a marketplace’s operations do not interfere with fair and orderly markets necessitates ensuring that its operations support compliance with regulatory requirements including applicable rules of a regulation services provider. This does not mean that a marketplace must system-enforce all regulatory requirements. However, it should not operate in a manner that to the best of its knowledge would cause marketplace participants to breach regulatory requirements when trading on the marketplace. 7.7. Confidential Treatment of Trading Information (0.1) The Canadian securities regulatory authorities are of the view that it is in the public interest for capital markets research to be conducted. Since marketplace participants’ order and trade information may be needed to conduct this research, subsection 5.10(1.1) of the Regulation allows a marketplace to release a marketplace participant’s order or trade information without obtaining its written consent, provided this information is used solely for capital markets research and only if certain terms and conditions are met. Subsection 5.10(1.1) is not intended to impose any obligation on a marketplace to disclose information if requested by a researcher and the marketplace may choose to maintain its marketplace participants’ order and trade information in confidence. However, if the marketplace decides to disclose this information, it must ensure that certain terms and conditions are met to ensure that the marketplace participant’s information is not misused. (0.2) In order for a marketplace to disclose a marketplace participant’s order or trade information, subparagraphs 5.10(1.1)(a)-(b) of the Regulation require a marketplace to reasonably believe that the information will be used by the recipient solely for the purposes of capital markets research and to reasonably believe that if information identifying, directly or indirectly, a marketplace participant, or a client of the marketplace participant is released, the information is necessary for the research and that the purpose of the research is not intended to identify the marketplace participant or client or to identify a trading strategy, transactions, or market positions of the marketplace participant or client. The Canadian securities regulatory authorities expect that a marketplace will make sufficient inquiries of the recipient of the information in order for the marketplace to sustain a reasonable belief that the information will be used by the recipient only for capital

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 17 markets research. Where the information to be released to the recipient could identify a marketplace participant or a client of a marketplace participant, the Canadian securities regulatory authorities also expect the marketplace to make sufficient inquiries of the recipient in order for the marketplace to sustain a reasonable belief that the information identifying, directly or indirectly, a marketplace participant or its client is required for purposes of the research and that the purpose of the research is not to identify a particular marketplace participant or a client of the marketplace participant or to identify a trading strategy, transactions, or market positions of a particular marketplace participant or a client of the marketplace participant. (0.3) In considering releasing order or trade information, the Canadian securities regulatory authorities expect a marketplace to exercise caution regarding information that could disclose the identity of a marketplace participant or client of the marketplace participant. In particular, a marketplace may only release information in any order entry field that would identify the marketplace participant or client, using a broker number, trader ID, or DEA client identifier, if it reasonably believes that this information is required for the research. (0.4) Subparagraph 5.10(1.1)(c) of the Regulation requires a marketplace that intends to provide its marketplace participants’ order and trade information to a researcher to enter into a written agreement with each person that will receive such information. Subparagraph 5.10(1.1)(c)(i) of the Regulation requires the agreement to provide that the person agrees to use the order and trade information only for capital markets research purposes. In the view of the Canadian securities regulatory authorities, commercialization of the information by the recipient, for example by using the information for the purposes of trading, advising others to trade or for reverse engineering a trading strategy, would not constitute use of the information for capital markets research purposes. (0.5) Subparagraph 5.10(1.1)(c)(i) of the Regulation provides that the agreement must also prohibit the recipient from sharing the marketplace participants’ order and trade data with any other person, such as a research assistant, without the marketplace’s consent. The marketplace will be responsible for determining what steps are necessary to ensure the other person receiving the marketplace participants’ data is not misusing this data. For example, the marketplace may enter into a similar agreement with each individual or company that has access to the data. (0.6) To protect the identity of particular marketplace participants or their customers, subparagraph 5.10(1.1)(c)(i) of the Regulation requires the agreement to provide that recipients will not publish or disseminate data or information that discloses, directly or indirectly, a trading strategy, transactions, or market positions of a marketplace participant or its clients. Also, to protect the confidentiality of the data, the agreement must require that the order and trade information is securely stored at all times and that the data is kept for no longer than a reasonable period of time following the completion of the research and publication process. (0.7) The agreement must also require that the marketplace be notified of any breach or possible breach of the confidentiality of the information. Marketplaces are required to

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 18 notify the appropriate securities regulatory authorities of the breach or possible breach and have the right to take all reasonable steps necessary to prevent or address a breach or possible breach of the agreement or of the confidentiality of the information provided. In the view of the Canadian securities regulatory authorities, reasonable steps in the event of an actual or apparent breach of the agreement or of the confidentiality of the information may include the marketplace seeking an injunction preventing any unauthorized use or disclosure of the information by a recipient. (0.8) Subparagraph 5.10(1.1)(c)(ii) of the Regulation provides for a limited carve-out from the restraints on the use and disclosure of the information by a recipient for purposes of allowing those conducting peer reviews of the research to have access to the data to verify the research prior to the publication of the results of the research. In particular, clause 5.10(1.1)(c)(ii)(C) requires a marketplace to enter into a written agreement with a person receiving order or trade information from the marketplace that provides that the person may disclose information used in connection with research submitted to a publication so long as the person obtains a written agreement from the publisher and anyone involved in the verification of the research that provides for certain restrictions on the use and disclosure of the information by the publisher or the other person. A marketplace may consider requiring a person that proposes to disclose order or trade information pursuant to subparagraph 5.10(1.1)(c)(ii) to acknowledge that it has obtained the agreement required by clause 5.10(1.1)(c)(ii)(C) at the time that it notifies the marketplace prior to disclosing the information for verification purposes, as required by clause 5.10(1.1)(c)(ii)(B). (1) Subsection 5.10 (2) of the Regulation provides that a marketplace must not carry on business as a marketplace unless it has implemented reasonable safeguards and procedures to protect a marketplace participant’s trading information. These include (a) limiting access to the trading information of marketplace participants, such as the identity of marketplace participants and their orders, to those employees of, or persons retained by, the marketplace to operate the system or to be responsible for its compliance with securities legislation; and (b) having in place procedures to ensure that employees of the marketplace cannot use such information for trading in their own accounts. (2) The procedures referred to in subsection (1) should be clear and unambiguous and presented to all employees and agents of the marketplace, whether or not they have direct responsibility for the operation of the marketplace. (3) Nothing in section 5.10 of the Regulation prohibits a marketplace from complying with Regulation 54-101 respecting Communication with Beneficial Owners of Securities of a Reporting Issuer (chapter V-1.1, r. 29). This statement is necessary because an investment dealer that operates a marketplace may be an intermediary for the purposes of Regulation 54-101, and may be required to disclose information under that Regulation.

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 19 7.8. Management of Conflicts of Interest (1) Marketplaces are required under section 5.11 of the Regulation to maintain and ensure compliance with policies and procedures that identify and manage conflicts of interest arising from the operation of the marketplace or the services it provides. These may include conflicts, actual, potential or perceived, related to the commercial interest of the marketplace, the interests of its owners or its operators, including partners, directors, officers, or employees of the marketplace’s owners, referral arrangements and the responsibilities and sound functioning of the marketplace. For an exchange and quotation and trade reporting system, they may also include potential conflicts between the operation of the marketplace and its regulatory responsibilities. (2) The marketplace’s policies should also take into account conflicts for owners that are marketplace participants. These may include inducements to send order flow to the marketplace to obtain a larger ownership position or to use the marketplace to trade against their clients’ order flow. These policies should be disclosed as provided in paragraph 10.1(e) of the Regulation. 7.9. Outsourcing Section 5.12 of the Regulation sets out the requirements that marketplaces that outsource any of their key services or systems to a service provider, which may include affiliates or associates of the marketplace, must meet. Generally, marketplaces are required to establish policies and procedures to evaluate and approve these outsourcing agreements. Such policies and procedures would include assessing the suitability of potential service providers and the ability of the marketplace to continue to comply with securities legislation in the event of the service provider’s bankruptcy, insolvency or termination of business. Marketplaces are also required to monitor the ongoing performance of the service provider to which they outsourced key services, systems or facilities. The requirements under section 5.12 of the Regulation apply regardless of whether the outsourcing arrangements are with third-party service providers, or with affiliates of the marketplaces. 7.10. Access Arrangements with a Service Provider If a third party service provider provides a means of access to a marketplace, section 5.13 of the Regulation requires the marketplace to ensure the third party service provider complies with the written standards for access the marketplace has established pursuant to paragraph 5.1(2)(a) of the Regulation when providing access services. A marketplace must establish written standards for granting access to each of its services under paragraph 5.1(2)(a) and the Canadian securities regulatory authorities are of the view that it is the responsibility of the marketplace to ensure that these written standards are complied with when access to its platform is provided by a third party.

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 20 PART 8 RISK DISCLOSURE TO MARKETPLACE PARTICIPANTS 8.1. Risk disclosure to marketplace participants Subsections 5.9(2) and 6.11(2) of the Regulation require a marketplace to obtain an acknowledgement from its marketplace participants. The acknowledgement may be obtained in a number of ways, including requesting the signature of the marketplace participant or requesting that the marketplace participant initial an initial box or check a check-off box. This may be done electronically. The acknowledgement must be specific to the information required to be disclosed under the relevant subsection and must confirm that the marketplace participant has received the required disclosure. The Canadian securities regulatory authorities are of the view that it is the responsibility of the marketplace to ensure that an acknowledgement is obtained from the marketplace participant in a timely manner. PART 9 INFORMATION TRANSPARENCY REQUIREMENTS FOR EXCHANGE-TRADED SECURITIES 9.1. Information Transparency Requirements for Exchange-Traded Securities (1) Subsection 7.1(1) of the Regulation requires a marketplace that displays orders of exchange-traded securities to any person to provide accurate and timely information regarding those orders to an information processor as required by the information processor or, if there is no information processor, to an information vendor that meets the standards set by a regulation services provider. The Canadian securities regulatory authorities consider that a marketplace that sends information about orders of exchange￾traded securities, including indications of interest that meet the definition of an order, to a smart order router is “displaying” that information. The marketplace would be subject to the transparency requirements of subsection 7.1(1) of the Regulation. The transparency requirements of subsection 7.1(1) of the Regulation do not apply to a marketplace that displays orders of exchange-traded securities to its employees or to persons retained by the marketplace to assist in the operation of the marketplace, as long as these orders meet a minimum size threshold set by the regulation services provider. In other words, the only orders that are exempt from the transparency requirements are those meeting the minimum size threshold. Section 7.2 requires a marketplace to provide accurate and timely information regarding trades of exchange-traded securities that it executes to an information processor as required by the information processor or, if there is no information processor, to an information vendor that meets the standards set by a regulation services provider. Some marketplaces, such as exchanges, may be regulation services providers and will establish standards for the information vendors they use to display order and trade information to ensure that the information displayed by the information vendors is timely, accurate and promotes market integrity. If the marketplace has entered into a contract with a regulation services provider under Regulation 23-101,

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 21 the marketplace must provide information to the regulation services provider and an information vendor that meets the standards set by that regulation services provider. (2) In complying with sections 7.1 and 7.2 of the Regulation, any information provided by a marketplace to an information processor or information vendor must include identification of the marketplace and should contain all relevant information including details as to volume, symbol, price and time of the order or trade. (2.1) Subsections 7.1(3) and 7.2(2) prohibit a marketplace from making available order and trade information to any person before it makes the information available to the information processor or, if there is no information processor, to an information vendor. The Canadian securities regulatory authorities acknowledge that there may be differences between the time at which a marketplace participant that takes in market data directly from a marketplace receives the order and trade information and the time at which a marketplace participant that takes in market data from the information processor receives the information. However, in complying with subsections 7.1(3) and 7.2(2) of the Regulation, the Canadian securities regulatory authorities expect that marketplaces will release the order and trade information simultaneously to both the information processor and to persons that may receive order and trade information directly from the marketplace. (3) (paragraph revoked). (4) (paragraph revoked). (5) It is expected that if there are multiple regulation service providers, the standards of the various regulation service providers must be consistent. In order to maintain market integrity for securities trading in different marketplaces, the Canadian securities regulatory authorities will, through their oversight of the regulation service providers, review and monitor the standards established by all regulation service providers so that business content, service level standards, and other relevant standards are substantially similar for all regulation service providers. PART 10 INFORMATION TRANSPARENCY REQUIREMENTS FOR UNLISTED DEBT SECURITIES 10.1. Information Transparency Requirements for Unlisted Debt Securities (1) The requirements for pre-trade transparency of orders for unlisted debt securities set out in sections 8.1 and 8.2 of the Regulation have not been implemented by reason of the exception provided for in section 8.6 of the Regulation and the fact that no pre￾trade requirements have been set by an information processor for corporate debt securities. (2) The requirements for post-trade transparency of trades in unlisted debt securities are set out in sections 8.1 and 8.2 of the Regulation. The detailed reporting requirements, determined by the Canadian securities regulatory authorities and implemented through

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 22 the information processor, such as who must report information, deadlines for reporting, delays in publication of information and caps on displayed volume are articulated in this Policy Statement and in Form 21-101F5. (3) Sections 8.1 and 8.2 of the Regulation require persons executing trades in unlisted debt securities by or through that person to report these trades to the information processor. Specifically, such persons are currently marketplaces, dealers, inter-dealer bond brokers and banks listed in Schedule I, II and III of the Bank Act (S.C., 1991, c. 46). (4) The detailed reporting requirements for trades in unlisted debt securities include, but are not limited to details as to the type of issuer, coupon and maturity, last traded price, last traded yield, date and time of execution, settlement date, the type of transaction, the volume transacted (subject to volume caps), as required by the information processor. (5) Details of the volume transacted will be subject to volume caps as follows: (a) If the total par value of a trade of an investment grade corporate debt security is greater than $2 million, the information processor will display it as “$2 million+”. If the total par value of a trade of a non-investment grade corporate debt security is greater than $200,000, the information processor will display it as “$200,000+”. (b) For government debt securities the volume transacted will be displayed by the information processor in accordance with the chart below: $10M $5M $2M 250K Government of Canada Bills (GoC Bills) Government of Canada nominal bonds with over 10 years remaining to maturity (GoC>10) All provincial debt securities including Real Return Bonds, Strip Coupons and Residuals Québec municipal debt securities Government of Canada nominal bonds with 10 or less years remaining to maturity (GoC <=10) All municipal debt securities, except those issued in Québec All other agency debt securities All Canada Mortgage Bonds (CMB) Government of Canada Real Return Bonds Government of Canada Strip Coupons and Residuals (6) The information processor may propose changes to its transparency requirements by filing an amendment to Form 21-101F5 with the Canadian securities regulatory authorities pursuant to subsection 14.2(1) of the Regulation. The Canadian securities regulatory authorities will review the amendment to Form 21-101F5 to determine whether

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 23 the proposed changes are contrary to the public interest, to ensure fairness and to ensure that there is an appropriate balance between the standards of transparency and market quality (defined in terms of market liquidity and efficiency) in each area of the market. Any initial transparency requirements and any proposed changes will be subject to consultation with market participants through a notice and comment process, prior to approval by the Canadian securities regulatory authorities. 10.2. (Repealed) 10.3. Consolidated Feed Section 8.3 of the Regulation requires the information processor to produce accurate consolidated information on a timely basis showing the information provided to the information processor under sections 8.1 and 8.2 of the Regulation. The Canadian securities regulatory authorities have determined that information about trades in unlisted debt securities should be displayed by the information processor at 5:00 pm the day after the trade was executed by or through a person (T+1 at 5:00 pm ET). PART 11 MARKET INTEGRATION 11.5. Market Integration Although the Canadian securities regulatory authorities have removed the concept of a market integrator, we continue to be of the view that market integration is important to our marketplaces. We expect to achieve market integration by focusing on compliance with fair access and best execution requirements. We will continue to monitor developments to ensure that the lack of a market integrator does not unduly affect the market. PART 12 TRANSPARENCY OF MARKETPLACE OPERATIONS 12.1. Transparency of Marketplace Operations (1) Section 10.1 of the Regulation requires that marketplaces make publicly available certain information pertaining to their operations and services. While section 10.1 sets out the minimum disclosure requirements, marketplaces may wish to make publicly available other information, as appropriate. Where this information is included in a marketplace’s rules, regulations, policies and procedures or practices that are publicly available, the marketplace need not duplicate this disclosure. (2) Paragraph 10.1(a) requires marketplaces to disclose publicly all fees, including listing, trading, co-location, data and routing fees charged by the marketplace, an affiliate or by a third party to which services have been directly or indirectly outsourced or which directly or indirectly provides those services. This means that a marketplace is expected to publish and make readily available the schedule(s) of fees charged to any and all users of these services, including the basis for charging each fee (e.g., a per share basis for

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 24 trading fees, a per subscriber basis for data fees, etc.) and would also include any fee rebate or discount and the basis for earning the rebate or discount. With respect to trading fees, it is not the intention of the Canadian securities regulatory authorities that a commission fee charged by a dealer for dealer services be disclosed in this context. (3) Paragraph 10.1(b) requires marketplaces to disclose information on how orders are entered, interact and execute. This would include a description of the priority of execution for all order types and the types of crosses that may be executed on the marketplace. A marketplace should also disclose whether it sends information regarding indications of interest or order information to a smart order router. (4) Paragraph 10.1(e) requires a marketplace to disclose its conflict of interest policies and procedures. For conflicts arising from the ownership of a marketplace by marketplace participants, the marketplace should include in its marketplace participant agreements a requirement that marketplace participants disclose that ownership to their clients at least quarterly. This is consistent with the marketplace participant’s existing obligations to disclose conflicts of interest under Regulation 31-103 respecting Registration Requirements, Exemptions and Ongoing Registrant Requirements (chapter V-1.1, r. 10). A marketplace should disclose if a marketplace or affiliated entity of a marketplace intends to trade for its own account on the marketplace against or in competition with client orders. (5) Paragraph 10.1(f) requires marketplaces to disclose a description of any arrangements where the marketplace refers its participants to the services of a third-party provider where the marketplace receives some benefit (fee rebate, payment, etc.) if the marketplace participant uses the services of the third-party service provider, and has a potential conflict of interest. (6) Paragraph 10.1(g) requires marketplaces that offer routing services to disclose a description of how routing decisions are made. The subsection applies whether routing is done by a marketplace-owned smart order router, by an affiliate of a marketplace, or by a third-party to which routing was outsourced. (7) Paragraph 10.1(h) applies to marketplaces that disseminate indications of interest or any information in order to attract order flow. The Regulation requires that these marketplaces make publicly available information regarding their practices regarding the dissemination of information. This would include a description of the type of information included in the indication of interest displayed, and the types of recipients of such information. For example, a marketplace would describe whether the recipients of an indication of interest are the general public, all of its subscribers, particular categories of subscribers or smart order routers operated by their subscribers or by third party vendors. PART 13 RECORDKEEPING REQUIREMENTS FOR MARKETPLACES 13.1. Recordkeeping Requirements for Marketplaces Part 11 of the Regulation requires a marketplace to maintain certain records. Generally, under provisions of securities legislation, the securities regulatory authorities

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 25 can require a marketplace to deliver to them any of the records required to be kept by them under securities legislation, including the records required to be maintained under Part 11. 13.2. Synchronization of Clocks Subsections 11.5(1) and (2) of the Regulation require the synchronization of clocks with a regulation services provider that monitors the trading of the relevant securities on marketplaces, and by, as appropriate, inter-dealer bond brokers or dealers. The Canadian securities regulatory authorities are of the view that synchronization requires continual synchronization using an appropriate national time standard as chosen by a regulation services provider. Even if a marketplace has not retained a regulation services provider, its clocks should be synchronized with any regulation services provider monitoring trading in the particular securities traded on that marketplace. Each regulation services provider will monitor the information that it receives from all marketplaces, dealers and, if appropriate, inter-dealer bond brokers, to ensure that the clocks are appropriately synchronized. If there is more than one regulation services provider, in meeting their obligation to coordinate monitoring and enforcement under section 7.5 of Regulation 23- 101, regulation services providers are required to agree on one standard against which synchronization will occur. In the event there is no regulation services provider, a recognized exchange or recognized quotation and trade reporting system are also required to coordinate with other recognized exchanges or recognized quotation and trade reporting systems regarding the synchronization of clocks. PART 14 MARKETPLACE SYSTEMS AND BUSINESS CONTINUITY PLANNING 14.1. Systems Requirements This section applies to all the systems of a particular marketplace that are identified in the introduction to section 12.1 of the Regulation whether operating in-house or outsourced. (1) Paragraph 12.1(a) of the Regulation requires the marketplace to develop and maintain adequate internal controls over the systems specified. As well, the marketplace is required to develop and maintain adequate general computer controls. These are the controls which are implemented to support information technology planning, acquisition, development and maintenance, computer operations, information systems support, cyber resilience, and security. Recognized guides as to what constitutes adequate information technology controls may include guidance, principles or frameworks published by the Chartered Professional Accountants of Canada (CPA Canada), American Institute of Certified Public Accountants (AICPA), Information Systems Audit and Control Association (ISACA), International Organization for Standardization (ISO) or the National Institute of Standards and Technology (U.S. Department of Commerce) (NIST). (2) Capacity management requires that a marketplace monitor, review, and test (including stress test) the actual capacity and performance of its systems on an ongoing

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 26 basis. Accordingly, paragraph 12.1(b) of the Regulation requires a marketplace to meet certain systems capacity, processing capability and disaster recovery standards. These standards are consistent with prudent business practice. The activities and tests required in this paragraph are to be carried out at least once every 12 months. In practice, continuing changes in technology, risk management requirements and competitive pressures will often result in these activities being carried out or tested more frequently. (2.1) Paragraph 12.1(c) of the Regulation requires a marketplace to promptly notify the regulator or, in Québec, the securities regulatory authority of any systems failure, malfunction, delay or security incident that is material. A failure, malfunction, delay or security incident is considered “material” if the marketplace would, in the normal course of operations, escalate the matter to or inform senior management ultimately accountable for technology. Such events would not generally include those that have or would have little or no impact on the marketplace’s operations or on participants. Non-material events may become material if they recur or have a cumulative effect. (2.2) For purposes of paragraph 12.1(c) of the Regulation, a security incident is considered to be any event that actually or potentially jeopardizes the confidentiality, integrity or availability of any of the systems that support the functions listed in section 12.1 or any system that shares network resources with one or more of these systems or the information the system processes, stores or transmits, or that constitutes a violation or imminent threat of violation of security policies, security procedures or acceptable use policies. Any security incident that requires non-routine measures or resources by the marketplace would be considered material and thus reportable to the regulator or, in Québec, the securities regulatory authority. The onus would be on the marketplace to document the reasons for any security incident it did not consider material. Marketplaces should also have documented criteria to guide the decision on when to publicly disclose a security incident. The criteria for public disclosure of a security incident should include, but not be limited to, any instance in which client data could be compromised. Public disclosure should include information on the types and number of participants affected. (2.3) With respect to the prompt notification requirement in paragraph 12.1(c), the Canadian securities regulatory authorities expect that a marketplace will provide notification of a systems failure, malfunction, delay or security incident that is material, orally or in writing, upon escalating the matter to its senior management. It is expected that, as part of the required notification, the marketplace will provide updates on the status of the failure, malfunction, delay or incident and the resumption of service. The marketplace should also have comprehensive and well-documented procedures in place to record, report, analyze, and resolve all incidents. In this regard, the marketplace should undertake a “post-incident” review to identify the causes and any required improvement to the normal operations or business continuity arrangements. Such reviews should, where relevant, include the marketplace’s participants. The results of such internal reviews are required to be communicated to the regulator or, in Québec, the securities regulatory authority as soon as practicable. We note that CSA Staff Notice 21-326 Guidance for Reporting Material Systems Incidents provides marketplaces with additional guidance and a comprehensive set of guidelines for reporting material systems incidents under paragraph 12.1(c).

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 27 (2.4) Paragraph 12.1(d) of the Regulation requires a marketplace to keep a record of any systems failure, malfunction, delay or security incident and identify whether or not it is material. We note that a marketplace may be asked to provide the regulator or, in Québec, the securities regulatory authority, with additional information, such as but not limited to reports, logs or other documents related to a systems failure, malfunction, delay, security incident or any other system or process-related data. (2.5) A marketplace should also refer to the guidance in (2.2), (2.3) and (2.4) regarding security incidents that arise in connection with a marketplace’s auxiliary systems under section 12.1.1 of the Regulation. A marketplace may be asked to provide the regulator or, in Québec, the securities regulatory authority, with additional information, such as but not limited to reports, logs or other documents related to a security incident. (3) Subsection 12.2(1) of the Regulation requires a marketplace to engage one or more qualified external auditors to conduct an annual independent systems review to assess the marketplace’s compliance with paragraph 12.1(a), section 12.1.1 and section 12.4 of the Regulation. The review must be conducted and reported on at least once in each 12-month period by a qualified external auditor in accordance with established audit standards and best industry practices. We consider that best industry practices include the “Trust Services Criteria” developed by the American Institute of CPAs and CPA Canada. The focus of the assessment of any systems that share network resources with trading-related systems required under paragraph 12.2(1)(b) would be to address potential threats from a security incident that could negatively impact a trading-related system. For purposes of subsection 12.2(1), we consider a qualified external auditor to be a person or a group of persons with relevant experience in both information technology and in the evaluation of related internal controls in a complex information technology environment. Before engaging a qualified external auditor to conduct the independent systems review, a marketplace is expected to discuss its choice of external auditor and the scope of the systems review mandate with the regulator or, in Québec, the securities regulatory authority. We further expect that the report prepared by the external auditor include, to the extent applicable, an audit opinion that (i) the description included in the report fairly presents the systems and controls that were designed and implemented throughout the reporting period, (ii) the controls stated in the description were suitably designed, and (iii) the controls operated effectively throughout the reporting period. (3.1) Section 12.1.2 of the Regulation requires a marketplace to engage one or more qualified parties to perform appropriate assessments and testing to identify security vulnerabilities and measure the effectiveness of information security controls. We would expect a marketplace to implement appropriate improvements where necessary. For the purposes of section 12.1.2, we consider a qualified party to be a person or a group of persons with relevant experience in both information technology and in the evaluation of related internal systems or controls in a complex information technology environment. We consider that qualified parties may include external auditors or third party information system consultants, as well as employees of the marketplace or an affiliated entity of the marketplace but may not be persons responsible for the development or operation of the systems or capabilities being tested. The regulator or, in Québec, the securities regulatory

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 28 authority may, in accordance with securities legislation, require the marketplace to provide a copy of any such assessment. (4) (paragraph repealed). (5) Under section 15.1 of the Regulation, the regulator or, in Québec, the securities regulatory authority may consider granting a marketplace an exemption from the requirements to engage one or more qualified external auditors to conduct an annual independent systems review and prepare a report under subsection 12.2(1) of the Regulation provided that the marketplace prepare a control self-assessment and file this self-assessment with the regulator or, in Québec, the securities regulatory authority. The scope of the self-assessment would be similar to the scope that would have applied if the marketplace underwent an independent systems review. Reporting of the self￾assessment results and the timeframe for reporting would be consistent with that established for an independent systems review. In determining if the exemption is in the public interest and the length of the exemption, the regulator or, in Québec, the securities regulatory authority may consider a number of factors including: the market share of the marketplace, the timing of the last independent systems review, changes to systems or staff of the marketplace and whether the marketplace has experienced material systems failures, malfunction or delays. 14.2. Marketplace Technology Specifications and Testing Facilities (1) Subsection 12.3(1) of the Regulation requires marketplaces to make their technology requirements regarding interfacing with or accessing the marketplace publicly available in their final form for at least 3 months. If there are material changes to these requirements after they are made publicly available and before operations begin, the revised requirements should be made publicly available for a new 3 month period prior to operations. The subsection also requires that an operating marketplace make its technology specifications publicly available for at least 3 months before implementing a material change to its technology requirements. The Canadian securities regulatory authorities consider a material change to a marketplace’s technology requirements to include a change that would require a person interfacing with or accessing the marketplace to incur a significant amount of systems￾related development work or costs in order to accommodate the change or to fully interact with the marketplace as a result of the change. Such material changes could include changes to technology requirements that would significantly impact a marketplace participant’s trading activities, such as the introduction of an order type, or significant changes to a regulatory feed that a regulation services provider takes in from the marketplace. (2) Subsection 12.3(2) of the Regulation requires marketplaces to provide testing facilities for interfacing with or accessing the marketplace for at least 2 months immediately prior to operations once the technology requirements have been made publicly available. Should the marketplace make its specifications publicly available for

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 29 longer than 3 months, it may make the testing available during that period or thereafter as long as it is at least 2 months prior to operations. If the marketplace, once it has begun operations, proposes material changes to its technology systems, it is required to make testing facilities publicly available for at least 2 months before implementing the material systems change. (2.1) Paragraph 12.3(3)(c) of the Regulation prohibits a marketplace from beginning operations before the chief information officer of the marketplace, or an individual performing a similar function, has certified in writing that all information technology systems used by the marketplace have been tested according to prudent business practices and are operating as designed. This certification may be based on information provided to the chief information officer from marketplace staff knowledgeable about the information technology systems of the marketplace and the testing that was conducted. (2.2) In order to help ensure that appropriate testing procedures for material changes to technology requirements are being followed by the marketplace, subsection 12.3(3.1) of the Regulation requires the chief information officer of the marketplace, or an individual performing a similar function, to certify to the regulator or securities regulatory authority, as applicable, that a material change has been tested according to prudent business practices and is operating as designed. This certification may be based on information provided to the chief information officer from marketplace staff knowledgeable about the information technology systems of the marketplace and the testing that was conducted. (3) Subsection 12.3(4) of the Regulation provides that if a marketplace must make a change to its technology requirements regarding interfacing with or accessing the marketplace to immediately address a failure, malfunction or material delay of its systems or equipment, it must immediately notify the regulator or, in Québec, the securities regulatory authority, and, if applicable, its regulation services provider. We expect the amended technology requirements to be made publicly available as soon as practicable, either while the changes are being made or immediately after. 14.2.1. Uniform Test Symbols (1) Section 12.3.1 of the Regulation requires a marketplace to use uniform test symbols for the purpose of performing testing in its production environment. In the view of the Canadian securities regulatory authorities, the use of uniform test symbols is in furtherance to a marketplace’s obligations at section 5.7 of the Regulation to take all reasonable steps to ensure that its operations do not interfere with fair and orderly markets. (2) The use of uniform test symbols is intended to facilitate the testing of functionality in a marketplace’s production environment; it is not intended to enable stress testing by marketplace participants. The Canadian securities regulatory authorities are of the view that a marketplace may suspend access to a test symbol where its use in a particular circumstance reasonably represents undue risk to the operation or performance of the marketplace’s production environment. The Canadian securities regulatory authorities also note that misuse of the test symbols by marketplace participants could amount to a

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 30 breach of the fair and orderly markets provisions of Regulation 23-103 respecting Electronic Trading and Direct Electronic Access to Marketplaces (chapter V-1.1, r. 7.1). 14.3. Business Continuity Planning (1) Business continuity management is a key component of a marketplace’s operational risk-management framework. Section 12.4 of the Regulation requires that marketplaces develop and maintain reasonable business continuity plans, including disaster recovery plans. Business continuity planning should encompass all policies and procedures to ensure uninterrupted provision of key services regardless of the cause of potential disruption. In fulfilling the requirement to develop and maintain reasonable business continuity plans, the Canadian securities regulatory authorities expect that marketplaces are to remain current with best practices for business continuity planning and to adopt them to the extent that they address their critical business needs. (2) Paragraph 12.4(1)(b) of the Regulation also requires a marketplace to test its business continuity plans, including disaster recovery plans, according to prudent business practices on a reasonably frequent basis and, in any event, at least annually. (3) Section 12.4 of the Regulation also establishes requirements for marketplaces meeting a minimum threshold of total dollar value of trading volume, recognized exchanges or quotation and trade reporting systems that directly monitor the conduct of their members, and regulation services providers that have entered into a written agreement with a marketplace to conduct market surveillance to establish, implement, and maintain policies and procedures reasonably designed to ensure that critical systems can resume operation within certain time limits following the declaration of a disaster. In fulfilling the requirement to establish, implement and maintain the policies and procedures prescribed by section 12.4, the Canadian securities regulatory authorities expect that these policies and procedures will form part of the entity’s business continuity and disaster recovery plans and that the entities subject to the requirements at subsections 12.4(2) to (4) of the Regulation will be guided by their own business continuity plans in terms of what constitutes a disaster for purposes of the requirements. 14.4. Industry-Wide Business Continuity Tests Section 12.4.1 of the Regulation requires a marketplace, recognized clearing agency, information processor, and participant dealer to participate in all industry-wide business continuity tests, as determined by a regulation services provider, regulator, or in Québec, the securities regulatory authority. The Canadian securities regulatory authorities expect that marketplaces will make their production environments available for purposes of all industry-wide business continuity tests.

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 31 PART 15 CLEARING AND SETTLEMENT 15.1. Clearing and Settlement Subsection 13.1(1) of the Regulation requires all trades executed through a marketplace to be reproted and settled through a clearing agency. Subsections 13.1(2) and (3) of the Regulation require that an ATS and its subscriber enter into an agreement that specifies which entity will report and settle the trades of securities. If the subscriber is registered as a dealer under securities legislation, the ATS, the subscriber or an agent for the subscriber that is a member of a clearing agency may report and settle trades. If the subscriber is not registered as a dealer under securities legislation, either the ATS or an agent for the subscriber that is a clearing member of a clearing agency may report and settle trades. The ATS is responsible for ensuring that an agreement with the subscriber is in place before any trade is executed for the subscriber. If the agreement is not in place at the time of the execution of the trade, the ATS is responsible for clearing and settling that trade if a default occurs. 15.2. Access to Clearing Agency of Choice As a general proposition, marketplace participants should have a choice as to the clearing agency that they would like to use for the clearing and settlement of their trades, provided that such clearing agency is appropriately regulated in Canada. Subsection 13.2(1) of the Regulation thus requires a marketplace to report a trade in a security to a clearing agency designated by a marketplace participant. The Canadian securities regulatory authorities are of the view that where a clearing agency performs only clearing services (and not settlement or depository services) for equity or other cash-product marketplaces in Canada, it would need to have access to the existing securities settlement and depository infrastructure on non-discriminatory and reasonable commercial terms. Subsection 13.2(2) of the Regulation provides that subsection 13.2(1) does not apply to trades in standardized derivatives or exchange-traded securities that are options. PART 16 INFORMATION PROCESSOR 16.1. Information Processor (1) The Canadian securities regulatory authorities believe that it is important for those who trade to have access to accurate information on the prices at which trades in particular securities are taking place (i.e., last sale reports) and the prices at which others have expressed their willingness to buy or sell (i.e., orders). (2) An information processor is required under subsection 14.4(2) of the Regulation to provide timely, accurate, reliable and fair collection, processing, distribution and publication of information for orders for, and trades in, securities. The Canadian securities

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 32 regulatory authorities expect that in meeting this requirement, an information processor will ensure that all persons that are required to provide information are given access to the information processor on fair and reasonable terms. In addition, it is expected that an information processor will not give preference to the information of any person when collecting, processing, distributing or publishing that information. (3) An information processor is required under subsection 14.4(5) of the Regulation to provide prompt and accurate order and trade information, and to not unreasonably restrict fair access to the information. As part of the obligation relating to fair access, an information processor is expected to make the disseminated and published information available on terms that are reasonable and not discriminatory. For example, an information processor will not provide order and trade information to any single person or group of persons on a more timely basis than is afforded to others, and will not show preference to any single person or group of persons in relation to pricing. 16.2. Selection of an Information Processor (1) The Canadian securities regulatory authorities will review Form 21-101F5 to determine whether it is contrary to the public interest for the person who filed the form to act as an information processor. The Canadian securities regulatory authorities will look at a number of factors when reviewing the form filed, including, (a) the performance capability, standards and procedures for the collection, processing, distribution, and publication of information with respect to orders for, and trades in, securities; (b) whether all marketplaces may obtain access to the information processor on fair and reasonable terms; (c) personnel qualifications; (d) whether the information processor has sufficient financial resources for the proper performance of its functions; (e) the existence of another entity performing the proposed function for the same type of security; (f) the systems report referred to in paragraph 14.5(c) of the Regulation. (2) The Canadian securities regulatory authorities request that the forms and exhibits be filed in electronic format, where possible. (3) The forms filed by an information processor under the Regulation will be kept confidential. The Canadian securities regulatory authorities are of the view that they contain intimate financial, commercial and technical information and that the interests of the filers in non-disclosure outweigh the desirability of adhering to the principle that all forms be available for public inspection.

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 33 (4) The specific authority of securities regulatory authorities to allow a person to act as an information processor for the purposes of the Regulation may differ, depending on the relevant legislative framework. For instance, in Québec, a person may carry on the activity of an information processor, only if it is recognized or exempted by the securities regulatory authority. In certain other jurisdictions, a person may be designated an information processor, subject to the relevant requirements in securities legislation or may otherwise be allowed to act as an information processor, if it is in the public interest. 16.3. Change in Information Under subsection 14.2(1) of the Regulation, an information processor is required to file an amendment to the information provided in Form 21-101F5 at least 45 days before implementing a significant change involving a matter set out in Form 21-101F5, in the manner set out in Form 21-101F5. The Canadian securities regulatory authorities would consider significant changes to include: (a) changes to the governance of the information processor, including the structure of its board of directors and changes in the board committees and their mandates; (b) changes in control over the information processor; (c) changes affecting the independence of the information processor, including independence from the persons that provide their data to meet the requirements of the Regulation; (d) changes to the services or functions performed by the information processor; (e) changes to the data products offered by the information processor; (f) changes to the fees and fee structure related to the services provided by the information processor; (g) changes to the revenue sharing model for revenues from fees related to services provided by the information processor; (h) changes to the systems and technology used by the information processor, including those affecting its capacity; (i) new arrangements or changes to arrangements to outsource the operation of any aspect of the services of the information processor; (j) changes to the means of access to the services of the information processor; and

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 34 (k) in the case of an information processor for corporate debt securities or government debt securities, changes to the information referred to in paragraph 14.8(b) of the Regulation. These would not include housekeeping or administrative changes to the information included in Form 21-101F5, such as changes in the routine processes, practice or administration of the information processor, changes due to standardization of terminology, or minor system or technology changes that do not significantly impact the system of the information processor or its capacity. Such changes would be filed in accordance with the requirements outlined in subsection 14.2(2) of the Regulation. 16.3.1. Filing of Financial Statements Subsection 14.4(6) of the Regulation requires an information processor to file annual audited financial statements within 90 days after the end of its financial year. However, where an information processor is operated as a division or unit of a person, which may be a marketplace, clearing agency, issuer or any other person, the person must file an income statement, a statement of cash flow and any other information necessary to demonstrate the financial condition of the information processor. In this case, the income statement, statement of cash flow and other necessary financial information pertaining to the operation of the information processor may be unaudited. 16.4. System Requirements The guidance in section 14.1 of this Policy Statement applies to the systems requirements for an information processor. Decision 2001-C-0410, 2001-08-28 Bulletin hebdomadaire: 2001-08-31, Vol. XXXII n° 35 Décision 2007-PDG-0057, 2007-03-15 Bulletin de l'Autorité: 2007-03-23, Vol. 4 n° 12 Amendments Decision 2008-PDG-0196, 2008-07-18 Bulletin de l'Autorité: 2008-09-05, Vol. 5 n° 35 Decision 2009-PDG-0196, 2009-12-23 Bulletin de l'Autorité : 2009-01-29, Vol. 7 n° 4 Decision 2012-PDG-0084, 2012-05-08 Bulletin de l’Autorité: 2012-06-28, Vol. 9, n° 26 Decision 2013-PDG-0069, 2013-04-24 Bulletin de l’Autorité: 2013-05-30, Vol. 10, n° 21 Decision 2014-PDG-0145, 2014-11-14 Bulletin de l’Autorité: 2014-12-18, Vol. 11, n° 50

Policy Statement to Regulation 21-101 September 14, 2020 PAGE 35 Decision 2015-PDG-0126, 2015-08-11 Bulletin de l’Autorité: 2015-09-24, Vol. 12, n° 38 Decision 2018-PDG-0037, 2018-05-02 Bulletin de l’Autorité: 2018-06-07, Vol. 15, n° 22 Decision 2020-PDG-0047, 2020-06-23 Bulletin de l’Autorité: 2020-08-27, Vol. 17, n° 34 Decision 2020-PDG-0049, 2020-07-02 Bulletin de l’Autorité: 2020-08-27, Vol. 17, n° 34