OSFI monitors the risk management practices of all portfolios, including credit cards. There are regulations in the act that governs the relationships between banks and credit-card holders. They do not cover all aspects, but they do contain disclosure provisions.
On May 21st, 2020. See this statement in context.