Why Do Law Firms Ask for ID? Ontario’s Client Identification Rules, Explained
You reached out to a law firm about a family matter, a will, or a document that needs notarizing. Then came a request you were not expecting: could you please provide identification? If that request made you pause, you are not alone, and your caution is reasonable. Sharing personal documents with anyone deserves a moment of thought.
The short answer is this: Ontario lawyers and paralegals are required by their regulator, the Law Society of Ontario, to know who their clients are. In some situations they must also check identity against reliable documents or data. These rules exist to protect clients and the public from fraud, identity theft, and money laundering. They are not a sign that a firm distrusts you personally, and they do not mean every person who contacts a law firm must hand over documents in every circumstance.
This article explains what the rules actually require, when documents come into it, and how your information should be handled once you provide it.
Two different steps: identification and verification
Ontario’s requirements live in Part III of the Law Society of Ontario’s By-Law 7.1, made under the Law Society Act. The by-law separates two steps that are easy to confuse.
Identification: basic information about every client
Whenever a lawyer or paralegal is retained to provide legal services, they must obtain some basic information about the client: full name, address and contact information, and, for an individual, occupation. For an organization, the firm records details such as the incorporation number, the general nature of the business, and the name and position of the person giving instructions.
Notice what this step does not involve. Identification is about collecting information, not inspecting documents. For many everyday legal matters, telling the firm accurately who you are and how to reach you satisfies this requirement.
Verification: checking identity against independent sources
Verification is a separate and more rigorous step. It means confirming that a client is who they say they are, using documents, data, or information from a reliable and independent source. This is the step where a firm may ask to see photo identification or use another approved checking method.
Crucially, verification is not required for every matter. Under By-Law 7.1, the obligation is generally triggered when the licensee engages in, or gives instructions in respect of, the receiving, paying, or transferring of funds. In plain terms: when money will move through the lawyer’s hands or on the lawyer’s instructions, identity must be checked. When verification applies, the firm must also ask about the source of the funds and keep a copy of each document used.
Even then, the by-law contains exemptions. For example, verification is generally not required where the funds are paid to or received from a financial institution, public body, or reporting issuer; received from another licensee’s trust account; received from a peace officer or other public official acting in an official capacity; paid as a fine, penalty or bail; paid or received for professional fees, disbursements, or expenses; or moved by electronic funds transfer between financial institutions. Certain clients, such as financial institutions and public bodies, are themselves exempt.
So if a firm asks you for photo ID, it usually means your matter involves, or may involve, money moving through the firm, such as trust funds in an estate, or it is a service where confirming identity is central to the task itself. Notarization and independent legal advice are good examples of the latter: the whole point of a notary’s certificate, or an independent legal advice certificate, is that a licensed professional confirmed who signed the document.
Where the rules come from, and why they exist
The Law Society’s requirements are Ontario’s version of model rules developed by the Federation of Law Societies of Canada, the national coordinating body for Canada’s legal regulators. The Federation’s guidance is candid about the reason: legal professionals can be targeted by criminals precisely because a lawyer’s involvement “can give an appearance of legitimacy to a criminal transaction.” Trust accounts, real estate transfers, and corporate structures are attractive tools for laundering money, and lawyers are expected to act as gatekeepers.
There is also an important constitutional backstory. In Canada (Attorney General) v Federation of Law Societies of Canada, 2015 SCC 7, the Supreme Court of Canada held that key parts of the federal anti-money-laundering regime could not constitutionally be applied to lawyers, largely because of solicitor-client privilege and the lawyer’s duty of commitment to the client’s cause. Lawyers and law firms are not subject to the federal FINTRAC reporting regime that applies to banks and many other businesses; instead, the law societies impose their own binding rules, including client identification and verification, restrictions on accepting large amounts of cash, and trust account rules. In other words, the ID request is part of a system designed so that your confidential information stays with your lawyer and the profession’s regulator, rather than being reported to a federal agency.
Beyond money laundering, these checks protect ordinary people. Real estate and estate fraud in Ontario has involved impostors posing as owners, spouses, or beneficiaries. Verifying identity helps ensure that the person instructing a lawyer to move money or sign away rights is genuinely the person entitled to do so. If someone ever tried to impersonate you, these rules are part of what would stand in their way.
How verification works, including for virtual meetings
When verification is required for an individual, the Law Society permits a small number of methods.
Government-issued photo identification
The firm reviews a valid, current photo identification document issued by a federal, provincial, or territorial government, such as a driver’s licence, passport, or provincial photo card. The document must be authentic, valid, and current. When the client is physically present, the licensee views the original in the person’s presence. Under Law Society guidance in force since January 1, 2024, a firm using this method with a client who is not physically present must use authentication technology to check the document’s security features and confirm it is genuine, and then compare the person seen on a live video call with the photo on the authenticated document.
Credit file method
The firm consults a Canadian credit file that has existed for at least three years and matches the client’s name, address, and date of birth. This is an information check, done at the time of verification, and does not require an in-person meeting.
Dual process method
The firm reviews two independent, reliable sources of information, for example one confirming name and address and another confirming name and date of birth, or name and a financial account. This method also works at a distance.
Firms may also use a trusted agent under a written agreement, and organizations are verified through government registries or constating documents. For a virtual-first practice, the credit file and dual process methods, and technology-assisted review of photo ID, are how identity is checked without a face-to-face meeting.
Can a law firm ask for your Ontario health card?
This is worth getting exactly right, because health cards are a common piece of wallet ID and the rules around them are specific.
Ontario’s Personal Health Information Protection Act, 2004 (section 34) provides, subject to narrow health-related exceptions, that no person may require the production of another person’s health card, and people outside the health system generally may not collect or use another person’s health number. Ontario’s Information and Privacy Commissioner explains the practical effect: only providers of provincially funded health services, such as hospitals and physicians’ offices, can require you to produce your health card, and organizations outside the health system are not permitted to record your health number even if you show the card voluntarily.
Consistent with that, the Law Society of Ontario’s current client verification guidance excludes health cards from the list of acceptable government-issued photo identification. The by-law itself also excludes ID issued by a municipal government. So an Ontario law firm should not require your health card, and you should not feel you need to offer it. If you are ever asked for identification, a driver’s licence, passport, Ontario photo card, or permanent resident card is the kind of document that fits the rules. If you do not hold photo ID at all, say so; the credit file and dual process methods exist for exactly that kind of situation, and a firm can discuss which approach suits your circumstances.
How your ID information should be handled
Once you provide identification information, two sets of obligations govern what happens to it.
First, the Law Society’s rules require licensees to keep a record of the information and documents used, and to retain those records for the longer of the duration of the lawyer-client relationship or six years after the work is completed. These are regulatory records, kept so the licensee can demonstrate compliance.
Second, federal privacy law applies. The Personal Information Protection and Electronic Documents Act, PIPEDA, requires private-sector organizations to limit collection of personal information to what is necessary for identified purposes, to limit its use, disclosure, and retention, to protect it with appropriate safeguards, and to be open about their practices. You are entitled to ask any organization, including a law firm, what it collects, why, how it is stored, and who can access it. On top of privacy law, lawyers owe a duty of confidentiality that covers nearly everything a client shares.
An ID request is not the same as a conflicts check
You may also hear that a firm needs names before it can even book a consultation. That is usually a conflicts check, and it is a different thing. Lawyers must avoid acting where there is a conflict of interest, so before opening a file a firm screens the names of prospective clients and opposing parties against its records. A conflicts check needs accurate names; it does not need documents. Documentary verification, by contrast, is the anti-fraud step described above, and it arises only in the circumstances the by-law sets out. Knowing the difference can make an early request for your full name, or the other party’s name, feel much less mysterious.
Questions you can ask any law firm
There is nothing wrong with asking a firm about its process before you share documents. Reasonable questions include:
- Why do you need identification for my particular matter?
- Which verification method will you use, and what will you record?
- How will my documents be stored, and who at the firm can access them?
- How long will you keep this information, and what happens to it afterward?
- What are my options if I do not have photo identification?
A professional firm will welcome these questions and answer them plainly.
How Mida Law handles ID and conflict checks
At Mida Law, we ask everyone who requests a consultation for two items at the start: a valid government-issued photo ID, and the names of any opposing or related parties, if known. This is our own intake practice, not a Law Society rule for every first contact. Party names let us check for conflicts of interest before we proceed; a conflicts check works from names, not documents. ID helps us confirm who we are speaking with, avoid mix-ups between people with similar names, and move a request forward more quickly.
We ask for both items when you submit a request. Our office may follow up about anything missing before deciding whether, and how, to proceed. Providing ID does not make you a client, and it is not the formal verification the Law Society may require later if we act for you on a matter involving funds. You can provide ID through our secure upload page, where copies are encrypted, available only to our office, and deleted within 7 days if we do not go on to act for you, or by emailing clear scans to admin@midalaw.ca. You can read more in our privacy policy.
This article is general information, not legal advice. Rules and guidance change over time, and how they apply depends on your specific circumstances. For advice about your situation, speak with a licensed legal professional.