Banks & ADIs compliance obligations in Victoria: sole trader
Computed by the Rules Mate applicability engine for a sole trader with no employees, turnover $100K–$1M, in banks & adis, operating in Victoria and selling to consumers and small businesses.
Short answer: 47 obligations
47 obligations apply (23 critical) across 13 regulators, plus 6 to check. Risk rating: high. Licensed or supervised regime: AML/CTF reporting entity, credit provider, APRA-regulated. These carry licence conditions, regulator audit and per-contravention civil penalties.
Sole trader or company: what changes
Compared with the same business run through a Pty Ltd company with no employees in Victoria, 0 obligations apply that did not, and 10 drop away.
- No longer applies: Apply for a Director Identification Number (Director ID)
- No longer applies: Comply with directors' general law and statutory duties
- No longer applies: Prevent insolvent trading (s 588G)
- No longer applies: Pay company PAYG/GST/SG or face Director Penalty Notice (DPN)
- No longer applies: Lodge the ASIC annual company statement and review fee
- No longer applies: Determine large proprietary company status annually
- No longer applies: Apply for a Tax File Number for new entities and partnerships
- No longer applies: Pay ASIC fees + lodge prescribed forms
What switches on when you take on staff
Moving to a sole trader with 1–5 employees, turnover $100K–$1M adds 20 obligations:
- Pay superannuation on every payday (Payday Super)
- Pay employees in accordance with the applicable modern award
- Manage psychosocial hazards at work
- Take reasonable and proportionate measures to prevent sex discrimination, sexual
- Withhold PAYG from employee and contractor payments
- Provide 10 days paid family + domestic violence leave (FDV)
- Document VEVO checks + retain employer records (s 245AYL Migration Act)
- Casual employment definition + conversion (Closing Loopholes 2024)
- Report under Single Touch Payroll Phase 2
- Honour employees' right to disconnect (s 333M)
Victoria law that applies
3 Victoria obligations apply on these facts:
| Obligation | Why it applies |
|---|---|
| Notify VIC WorkSafe of notifiable WHS incidents | Every PCBU must notify the regulator of notifiable incidents (death, serious injury, dangerous incident) · VIC law |
| PCBU primary duty of care (Victoria OHS Act s 21) | Every business is a PCBU — the primary duty of care applies whether or not you employ anyone · VIC law |
| Comply with the General Environmental Duty (VIC) | The Victorian general environmental duty applies to every business activity that could cause harm from pollution or waste · VIC law |
Payroll tax in Victoria (FY2026-27)
VIC: 4.85% on Australian wages above the $1 million tax-free threshold (FY2026-27). On these facts the business is below the Victoria threshold, so payroll tax does not apply yet.
- How the threshold works
- Full threshold below $3M of Australian wages; between $3M and $5M it phases out at 50% of wages over $3M; no threshold above $5M.
- Surcharges
- Above $10M Australian wages: mental health and wellbeing surcharge 0.5% + COVID-19 debt surcharge 0.5%; above $100M a further 0.5% each (2% total).
- Regional concession
- 1.2125% regional employer rate
- Returns
- Monthly by the 7th of the following month; annual reconciliation by 21 July
- Administered by
- SRO Vic
Victoria regulators
Where the obligations sit
| Area | Obligations |
|---|---|
| Privacy | 10 |
| Aml ctf | 8 |
| Credit | 4 |
| Tax | 4 |
| Financial services | 2 |
| Apra | 2 |
| Far | 2 |
| Whs | 2 |
| Cdr | 2 |
| Consumer law | 2 |
Critical obligations on this profile
- Enrol with AUSTRAC as a reporting entity (Authorised deposit-taking institution — AML/CTF reporting entity)
- Maintain a written AML/CTF program (Authorised deposit-taking institution — AML/CTF reporting entity)
- Customer due diligence (KYC) on every customer (Authorised deposit-taking institution — AML/CTF reporting entity)
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC (Authorised deposit-taking institution — AML/CTF reporting entity)
- Notifiable Data Breach (NDB) scheme (AML/CTF reporting entity — covered by the Privacy Act for AML/CTF activities (s 6E(1A)))
- Comply with APRA CPS 234 (Information Security) (ADI — APRA-regulated)
- Comply with NCCP responsible lending obligations (Authorised deposit-taking institution)
- Comply with Design and Distribution Obligations (DDO) (ADI — APRA-regulated)
Check whether these apply
- Mortgage broker best interests duty: only if you are a mortgage broker
- Small Amount Credit Contract + Consumer Lease caps (post-SACC reforms): only if you provide small amount credit contracts or consumer leases
- Wash outbound marketing lists against the Do Not Call Register: only if you make outbound telemarketing calls
- Influencer + ad disclosure under ACL + AANA Code: only if you advertise to consumers or engage influencers
- Pre-2025 ban on unsolicited credit limit increase invitations: only if you issue credit cards
- Comply with AANA Code of Ethics + community guidelines: only if you advertise to consumers or engage influencers
Thresholds to watch
- Lose the Privacy Act small-business exemption at $3M annual turnover (removal of the exemption altogether is proposed, not yet law) (threshold $3M; approaching)
Questions
- How many compliance obligations apply to banks and ADIs in Victoria run as a sole trader with no employees?
- 47 obligations apply (23 critical) across 13 regulators, plus 6 to check. Risk rating: high. Licensed or supervised regime: AML/CTF reporting entity, credit provider, APRA-regulated. These carry licence conditions, regulator audit and per-contravention civil penalties.
- Which Victoria laws apply?
- Notify VIC WorkSafe of notifiable WHS incidents, PCBU primary duty of care (Victoria OHS Act s 21) and Comply with the General Environmental Duty (VIC)
Related
- Banks & ADIs compliance in Victoria
- Banks & ADIs: all obligations
- Compliance obligations by industry, state and size
- Banks & ADIs in VIC: sole trader with employees
- Banks & ADIs in VIC: partnership
- Banks & ADIs in VIC: trading trust
- Banks & ADIs in VIC: no employees
- Banks & ADIs in VIC: 1–5 employees
- Banks & ADIs in VIC: 20–99 employees
- Banks & ADIs in VIC: 100–499 employees
- Banks & ADIs in VIC: 100–499 employees, turnover $100M–$1B
- Banks & ADIs in VIC: 500+ employees, turnover $1B+
- Banks & ADIs in New South Wales: sole trader
- Banks & ADIs in Queensland: sole trader
- Banks & ADIs in Western Australia: sole trader
- Banks & ADIs in South Australia: sole trader
- Banks & ADIs in Tasmania: sole trader
- Banks & ADIs in Northern Territory: sole trader
- Banks & ADIs in Australian Capital Territory: sole trader
- Enrol with AUSTRAC as a reporting entity: does it apply to banks & adis?
- Maintain a written AML/CTF program: does it apply to banks & adis?
- Customer due diligence (KYC) on every customer: does it apply to banks & adis?
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC: does it apply to banks & adis?
Sources
- SRO Vic: payroll tax thresholds and rates
- Notify VIC WorkSafe of notifiable WHS incidents
- PCBU primary duty of care (Victoria OHS Act s 21)
- Comply with the General Environmental Duty (VIC)
- Enrol with AUSTRAC as a reporting entity
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Notifiable Data Breach (NDB) scheme
Computed by the Rules Mate applicability engine from the published obligation corpus; facts last checked 3 October 2026. Rules Mate is not a law firm and this is general information, not legal advice. Confirm your position with the regulator source or a qualified adviser before acting.