10 CPD Topics Canadian CPAs Must Explore in 2027

These are the ten subject areas where Canadian CPAs face the most change in the year ahead — chosen because each one carries a rule, standard or deadline that takes effect between now and the end of 2027, not because they sound current. Continuing Professional Development is how you keep pace with them, and in every Canadian jurisdiction you need 20 hours a year, at least 10 of them verifiable, inside a rolling three-year total of 120 hours of which 60 must be verifiable and 4 must be ethics.

Here is where that time is best spent.

PwC's Sizing the Prize study projects that AI could contribute up to $15.7 trillion to the global economy by 2030. CPD courses focusing on AI implementation help CPAs gain practical insight and stay competitive.

No — not yet. Canada has its own sustainability disclosure standards, CSDS 1 and CSDS 2, issued by the Canadian Sustainability Standards Board and effective for annual reporting periods beginning on or after January 1, 2025. They are voluntary. The CSSB is a standard-setting body and has no authority to mandate disclosure; that power sits with the securities regulators (the CSA) and, for federally regulated financial institutions, OSFI. Any article telling you Canadian ESG reporting is already compulsory is wrong.

That does not make it optional in practice. Investors are asking regardless, and the global picture is unambiguous: the KPMG Survey of Sustainability Reporting 2024 found that sustainability reporting has been adopted by almost all of the world's 250 largest companies and by four-fifths of the N100 group, with 95% of the G250 now publishing carbon targets, up from 80% in 2022.

CPAs should understand the frameworks their clients are actually using. GRI remains the most widely applied — three-quarters of the G250 use it — alongside SASB, and increasingly the ISSB standards that CSDS 1 and CSDS 2 are built on.

Canadian practitioners answer to PIPEDA federally and, in Quebec, to Law 25 — not to GDPR or CCPA, except where they handle data belonging to residents of those jurisdictions. This is worth stating plainly because reform has been stalled: Bill C-27, which would have replaced PIPEDA with the Consumer Privacy Protection Act and introduced an AI statute, died on the order paper in early 2025 when Parliament was dissolved. No successor has been enacted. PIPEDA remains the law you comply with today.

The financial stakes are not shrinking. Cybersecurity Ventures' 2025 Official Cybercrime Report puts the global cost of cybercrime on a path to $12.2 trillion annually by 2031, with growth settling to roughly 2.5% a year after a decade of steep increases.

For CPAs, the useful CPD here is practical rather than theoretical: how the frameworks (ISO 27001, NIST) map onto an accounting workflow, and what you actually do in the first forty-eight hours after a breach.

Two of the live webinars currently scheduled cover this ground directly, each carrying one verifiable CPD hour: Cyber-Enabled Financial Crime: Audit and Investigation Toolkit and Cyber Threats, AI and Modern Financial Investigations.

IFRS 18, Presentation and Disclosure in Financial Statements, replaces IAS 1 and is effective for annual reporting periods beginning on or after January 1, 2027, with earlier application permitted. It is the most consequential reporting change most Canadian CPAs will meet this decade, and it is close enough now that it belongs in this year's learning plan rather than next year's.

Three things change. The statement of profit or loss gains two mandatory subtotals — operating profit, and profit before financing and income taxes — which makes performance comparable across entities in a way it has not been. Entities must disclose management-defined performance measures: the adjusted subtotals management uses in public communications now have to be reconciled and explained inside the statements. And new aggregation and disaggregation principles govern what may be lumped together and what must be shown separately.

The older standards still matter and still reward study — IFRS 16 on leases and IFRS 9 on financial instruments remain the ones most often applied incorrectly — but IFRS 18 is the one with a date attached.

• Explore our Leadership Skills for CPAs package
• Explore our “Leadership and Career Success in Accounting and Finance” course for CPAs

Three changes dominate the Canadian tax landscape going into 2027, and all three are already law.

Pillar Two is in force. Canada's Global Minimum Tax Act imposes a 15% minimum effective rate on multinational groups reporting €750 million or more in at least two of the four preceding fiscal years. The Income Inclusion Rule and the domestic top-up tax apply to fiscal years beginning on or after December 31, 2023; the Undertaxed Profits Rule applies to fiscal years beginning on or after December 31, 2025. The first GMT returns were due June 30, 2026, or fifteen months after the fiscal year end, whichever is later.

Crypto reporting has arrived. Canada's Crypto-Asset Reporting Framework took effect on January 1, 2026, with first reporting in 2027 covering the 2026 calendar year. It applies to Canadian-resident crypto-asset service providers and to certain non-resident providers carrying on business in Canada.

And the perennial work remains: recent Canadian amendments, trust reporting, cross-border transactions and treaty interpretation.

If you want this covered as a block rather than course by course, the CPA Technical Update Package for 2026 runs to eight courses and 20 verifiable hours.

Ethics is the one CPD topic with a hard quota attached: at least 4 verifiable ethics hours in every rolling three-year cycle. A wide range of subject matter counts — independence and conflict of interest, ethical decision-making, anti-money laundering, whistle-blowing and bribery, corporate social responsibility, equity, diversity and inclusion — and the four hours can be accumulated across several activities rather than taken in one sitting.

The pressure is real and measurable. ACCA's study of more than 1,100 accountants across 135 countries found that 64% say ethical dilemmas have become harder to resolve over the past three years, with leadership and culture named as the single largest source of difficulty. The hard cases are rarely about not knowing the right answer.

For a live session, Eyes Wide Shut: Navigating Ethical Blindness in Fraud Investigations covers how competent, honest professionals fail to see what is in front of them — one verifiable CPD hour.

Valuation is the part you can train for directly, and it is also the part most often done badly. Data science has started to change how it is practised — comparable selection, multiple regression against transaction databases, and sensitivity testing that would have been impractical by hand a decade ago.

Explore our CPD courses on valuation for M&A:

• How Much is My Business REALLY Worth? Business Valuation Fundamentals
• Valuation Analytics: Data Science in Business Valuation
• Firm Valuation and ROE Analysis

Crypto stops being invisible to the CRA. Canada's Crypto-Asset Reporting Framework came into effect on January 1, 2026, and the first information reports land in 2027, covering the 2026 calendar year. Canadian-resident crypto-asset service providers — and certain non-resident providers carrying on business here — must run due diligence on their users, collect self-certifications, and report.

For a CPA, that reframes the whole topic. The question a client brings you is no longer “do I have to declare this?” but “what has already been reported about me, and does my return agree with it?” Understanding the accounting treatment of crypto-assets, the tax consequences of disposition and staking, and what CARF actually captures is the difference between a straightforward filing and a reassessment.

Four of these ten topics now carry a fixed date: IFRS 18 on January 1, 2027, the UTPR from December 31, 2025, CARF reporting in 2027, and the ethics quota that runs continuously through your three-year cycle. Those are the ones to schedule first, because they arrive whether or not you have prepared for them.

The other six are where you build advantage rather than avoid exposure.

If you would rather cover a full year's requirement in one purchase than assemble it course by course, the 20 Verifiable CPD Hours package covers the annual minimum across twelve courses. Otherwise, browse the full CPD course catalogue and build your own plan.

Frequently Asked Questions

How many CPD hours do Canadian CPAs need each year?
Twenty hours per calendar year, of which at least 10 must be verifiable. Over each rolling three-year period you need 120 hours in total, at least 60 verifiable, including at least 4 verifiable hours of professional ethics.

Is ESG or sustainability reporting mandatory in Canada?
No. CSDS 1 and CSDS 2 took effect for annual reporting periods beginning on or after January 1, 2025, but they are voluntary. The Canadian Sustainability Standards Board that issued them cannot mandate disclosure; that authority rests with the CSA and, for federally regulated financial institutions, OSFI.

When does IFRS 18 take effect and what does it change?
IFRS 18 applies to annual reporting periods beginning on or after January 1, 2027, with early application permitted. It replaces IAS 1, introduces two mandatory subtotals in the statement of profit or loss (operating profit, and profit before financing and income taxes), requires disclosure of management-defined performance measures, and sets new principles for aggregation and disaggregation.

When does crypto reporting to the CRA start?
Canada's Crypto-Asset Reporting Framework came into effect on January 1, 2026. The first reports are filed in 2027 and cover the 2026 calendar year. Reporting obligations fall on Canadian-resident crypto-asset service providers and certain non-resident providers carrying on business in Canada.

Which privacy law applies to a Canadian accounting practice?
PIPEDA at the federal level, and Quebec's Law 25 for organisations operating in Quebec. Bill C-27, which would have replaced PIPEDA with the Consumer Privacy Protection Act, died when Parliament was dissolved in early 2025 and has not been re-enacted. GDPR and CCPA apply only where you handle data belonging to residents of those jurisdictions.