Retail Payment Activities Regulations — 24
 place of business in Canada, all end users; and (b) the currencies in which the applicant held end-user funds for each of the following categories of end users in the previous year — or, if the applicant has not performed any retail payment activities in the previous year, the currencies in which they plan to hold end-user funds for each of those categories of end users in their first year performing retail payment activities — and the share of funds held or to be held in each of those currencies: (i) end users in Canada, and (ii) in the case of an applicant that has a place of business in Canada, all end users. Safeguarding of end-user funds (7) For the purpose of paragraph 29(1)(j) of the Act, the prescribed information consists of (a) a description of all of the means, among those set out in paragraphs 20(1)(a) to (c) of the Act, by which the applicant safeguards or plans to safeguard end-user funds; (b) the name of any entity from which the applicant has obtained or plans to obtain an account referred to in subsection 20(1) of the Act or the insurance or guarantee referred to in paragraph 20(1)(c) of the Act and the name of the regulator responsible for supervising that entity with respect to its adherence to standards in respect of capital, liquidity, governance, supervision and risk management; and (c) if the applicant holds or plans to hold end-user funds other than in accordance with subsection 20(1) of the Act, information establishing that those funds were or will be accepted by the applicant as deposits that are or will be insured or guaranteed under an Act of the province in which they are held. Third-party service provider (8) For the purpose of paragraph 29(1)(k) of the Act, the prescribed information consists of, in respect of each third-party service provider that has or will have a material impact on the applicant’s operational risks or the manner in which the applicant safeguards or plans to safeguard end-user funds, (a) their legal name and any trade names; (b) their civic address — or that of their head office, if applicable — primary mailing address, telephone number, email address and, if applicable, website address; (c) a description of the services in relation to retail payment activities that they provide or will provide to the applicant; and (d) the geographical location of the technologies that they use to provide services in relation to retail payment activities or to store end user data. National security review (9) For the purpose of paragraph 29(1)(p) of the Act, the prescribed information consists of (a) the names of any foreign regulators that supervise the applicant’s retail payment activities in other jurisdictions and the statutes under which that supervision occurs; (b) an indication of whether the applicant is publicly traded and, if so, the name of the exchanges on which it is traded; (c) all countries of residence of the applicant and of any individual or entity with which they are affiliated within the meaning of section 3 of the Act; (d) a corporate organization chart that identifies all individuals or entities that control or are controlled by the applicant within the meaning of section 21 ; (e) the country of residence of each individual or entity that controls the applicant within the meaning of section 21 and, in the case of an individual, their countries of citizenship; (f) if the applicant is a corporation, the name, countries of residence and citizenship, incorporation or other formation, as the case may be, of any individual or entity that holds — or for whose benefit are held — directly or indirectly, otherwise than by way of security only, securities to which are attached 10% or more of the votes that may be cast to elect the applicant’s directors; (g) if the applicant is an entity other than a corporation or limited partnership, the name, countries of residence and citizenship, incorporation or other formation, as the case may be, of any individual or entity that holds — or