Everything covered in this course so far assumes a client is willing to answer honest, specific questions about their finances. That willingness rests on a foundation that has to be established before the substantive conversation goes very far: the client needs to understand what's being collected, why, and what happens to it afterward. Skipping this step doesn't just create a compliance gap — it also tends to produce worse discovery, because a client who isn't sure why you're asking something, or where the answer is going, is a more guarded client.
This module isn't a full treatment of Canadian privacy and anti-money-laundering law — that's covered in depth in Treadstone's Compliance: FINTRAC, PIPEDA & CASL course. What belongs here is the practical version: the specific things that have to happen at the intake stage, in the conversation itself, before you move on to collecting documents.
Canada's federal private-sector privacy law, the Personal Information Protection and Electronic Documents Act, requires the knowledge and consent of the individual for the collection, use, or disclosure of their personal information, with narrow exceptions that don't typically apply to an ordinary mortgage file. In practice, that means a client needs to understand, before you start gathering income documents, credit information, and identification, what's being collected and roughly what it's going to be used for — including that it will be shared with a lender, and potentially with an underwriter, insurer, or an outsourced processor working on the file.
Meaningful consent doesn't require a lengthy legal document read aloud at the start of every conversation. It can be built into how the intake conversation itself is framed: telling a client plainly, early on, that the details they share will be used to build their application and shared with the lender and anyone directly involved in assessing it, and confirming they're comfortable proceeding on that basis. What matters is that the client understands this before the file moves forward, not as a formality after the fact.
A credit bureau authorization is a separate, specific consent from general privacy consent, and it deserves to be explained as such rather than bundled into a stack of paperwork a client signs without much attention. Pulling a credit report is a distinct act with its own consequences — most notably, that a credit inquiry can itself appear on the client's credit file — and a client is entitled to understand that before agreeing to it, particularly if they're shopping between brokers or lenders and don't want multiple inquiries showing up in a short window.
Explaining this in plain language at the point of asking for the authorization — “I need your permission to pull your credit report, which is a standard part of building your file, and it will show as an inquiry on your report” — takes one sentence and prevents a much more awkward conversation later if a client is surprised to see an inquiry they don't remember agreeing to.
Since October 2024, mortgage brokers, brokerages, administrators, and lenders are reporting entities under Canada's anti-money-laundering law, which means client identity verification is a regulatory requirement, not just good practice. FINTRAC recognizes several ways to verify a client's identity, including examining current, government-issued photo identification, using the credit file method (matching a client's name, address, and date of birth against an established credit file), or the dual-process method, which combines two independent, reliable sources of information rather than relying on a single document.
The practical point for intake is timing: identification belongs at the start of the relationship, alongside the other consent steps, not as something collected partway through once a lender asks for it. Building it into the same conversation where you're already explaining privacy consent and the credit authorization keeps it from feeling like a separate, later hurdle, and it means the file has a complete identification record from day one rather than a gap that has to be filled in retroactively.
By the end of a well-run intake conversation, a broker should have more than a mental impression of the client — there should be a written record that captures the goal, the timeline, everyone on the file and their income and credit picture, the funding source for the down payment or equity, any of the four categories from Module 03 that came up, the risks flagged and communicated to the client, and confirmation that privacy consent, credit authorization, and identity verification are all on file. That record is what makes the rest of the file — document collection, underwriting, submission — move quickly, because nothing has to be re-derived from memory or re-asked of the client.
Treat that record as the actual output of discovery, not the conversation itself. A broker who has a great conversation but no written record to show for it hasn't finished the job this course describes — the conversation is only useful once it's captured somewhere the rest of the file can build on.
A broker has a client sign a bundle of forms — privacy consent, credit authorization, and identification — at the very end of a long first meeting, without explaining what each one actually covers. What's the main problem with this approach?
Meaningful consent under PIPEDA turns on the client actually understanding what's being collected and why — a signature alone on an unexplained form is a weak foundation, and it sets up exactly the kind of unpleasant surprise (an unexpected credit inquiry, confusion about who information was shared with) that good intake is meant to prevent. Timing at the start versus the end of a meeting matters less than whether the client actually understood what they signed; and all three consents — not just identification — carry real substance that deserves a plain-language explanation.
Lender policies change without notice. Confirm current guidelines directly with the lender or insurer before relying on them for a live file.
The intro and first module are free to read. Add your name and email once and the rest of this course opens — along with every other course on the site. No card, no trial.
Already unlocked on another device?
