Private health insurers compliance obligations in Australian Capital Territory: 20–99 employees
Computed by the Rules Mate applicability engine for a Pty Ltd company with 20–99 employees, turnover $3M–$10M, in private health insurers, operating in Australian Capital Territory and selling to consumers and small businesses.
Short answer: 59 obligations
59 obligations apply (24 critical) across 24 regulators, plus 9 to check. Risk rating: high. Licensed or supervised regime: APRA-regulated. These carry licence conditions, regulator audit and per-contravention civil penalties.
What changes at 20–99 employees
Compared with a private health insurers business with 6–19 employees in Australian Capital Territory, 9 obligations apply that did not, and 1 drops away.
- Applies: Notifiable Data Breach (NDB) scheme
- Applies: Publish a Privacy Policy that meets APP 1
- Applies: Provide an APP 5 collection notice at or before collection
- Applies: APP 12 & APP 13 access and correction requests
- Applies: APP 7 direct marketing: consent, opt-out & when you can't message (2026)
- Applies: Pay redundancy under NES (s 119 FW Act)
- Applies: Privacy Act Reform — information controllers regime (proposed Tranche 2)
- Applies: Report ransomware and cyber extortion payments within 72 hours
- Applies: APP 2 — anonymity + pseudonymity for individuals
What switches on at 100–499 employees
Moving to a Pty Ltd company with 100–499 employees, turnover $10M–$100M adds 3 obligations:
Australian Capital Territory law that applies
3 Australian Capital Territory obligations apply on these facts, and 1 more is worth checking:
| Obligation | Why it applies |
|---|---|
| PCBU primary duty of care (ACT WHS Act s 19) | Every business is a PCBU — the primary duty of care applies whether or not you employ anyone · ACT law |
| Industrial manslaughter offence (ACT WHS Act s 34A) | Applies to every PCBU and its officers — a death caused by reckless or negligent breach of a WHS duty is a crime · ACT law |
| Comply with Workplace Privacy Act 2011 (ACT) | You have employees (20–99) · ACT law |
| Pay ACT payroll tax when threshold met | Check: applies only if your annual Australian wages (grouped) exceed $1.75M |
Payroll tax in Australian Capital Territory (FY2026-27)
ACT: 6.75% on Australian wages above the $1.75 million tax-free threshold (FY2026-27). On these facts it may apply: 20–99 employees in ACT — enter annual payroll to confirm; it applies only if your annual Australian wages (grouped) exceed $1.75M.
- How the threshold works
- Flat tax-free threshold, apportioned by days employed and the ACT share of Australia-wide wages.
- Returns
- Monthly by the 7th of the following month; annual reconciliation by 28 July
- Administered by
- ACT Revenue Office
Australian Capital Territory regulators
Where the obligations sit
| Area | Obligations |
|---|---|
| Privacy | 9 |
| Workplace | 8 |
| Tax | 7 |
| Directors | 4 |
| Whs | 4 |
| Super | 2 |
| Cyber | 2 |
| Financial services | 2 |
| Apra | 2 |
| Far | 2 |
Critical obligations on this profile
- Notifiable Data Breach (NDB) scheme (Annual turnover over $3M — an APP entity under the Privacy Act (s 6D))
- Apply for a Director Identification Number (Director ID) (Incorporated company (Corporations Act))
- Comply with directors' general law and statutory duties (Incorporated company (Corporations Act))
- Prevent insolvent trading (s 588G) (Incorporated company (Corporations Act))
- Pay superannuation on every payday (Payday Super) (You have employees (20–99))
- Pay employees in accordance with the applicable modern award (You have employees (20–99))
- Manage psychosocial hazards at work (You have employees (20–99))
- Take reasonable and proportionate measures to prevent sex discrimination, sexual (You have employees (20–99))
Check whether these apply
- Lodge an FBT return and pay FBT by 21 May: only if you provide fringe benefits (cars, entertainment, loans) to employees
- Wash outbound marketing lists against the Do Not Call Register: only if you make outbound telemarketing calls
- Pay ACT payroll tax when threshold met: only if your annual Australian wages (grouped) exceed $1.75M
- Influencer + ad disclosure under ACL + AANA Code: only if you advertise to consumers or engage influencers
- Track eligibility for the electric car FBT exemption: only if you provide electric vehicles to employees
- Comply with AANA Code of Ethics + community guidelines: only if you advertise to consumers or engage influencers
- Enforce + manage post-employment restraints — current state: only if your contracts contain restraint of trade clauses
- Child Support — employer deductions: only if Services Australia serves you a child support deduction notice
Thresholds to watch
- WGEA gender pay gap reporting becomes mandatory (threshold 100 employees; very close)
Questions
- How many compliance obligations apply to private health insurers in Australian Capital Territory with 20–99 employees?
- 59 obligations apply (24 critical) across 24 regulators, plus 9 to check. Risk rating: high. Licensed or supervised regime: APRA-regulated. These carry licence conditions, regulator audit and per-contravention civil penalties.
- Which Australian Capital Territory laws apply?
- PCBU primary duty of care (ACT WHS Act s 19), Industrial manslaughter offence (ACT WHS Act s 34A) and Comply with Workplace Privacy Act 2011 (ACT)
Related
- Private health insurers compliance in Australian Capital Territory
- Private health insurers: all obligations
- Compliance obligations by industry, state and size
- Private health insurers in ACT: sole trader
- Private health insurers in ACT: sole trader with employees
- Private health insurers in ACT: partnership
- Private health insurers in ACT: trading trust
- Private health insurers in ACT: no employees
- Private health insurers in ACT: 1–5 employees
- Private health insurers in ACT: 100–499 employees
- Private health insurers in ACT: 500+ employees
- Private health insurers in ACT: 20–99 employees, turnover $1M–$3M
- Private health insurers in ACT: 6–19 employees, turnover $3M–$10M
- Private health insurers in ACT: 100–499 employees, turnover $100M–$1B
- Private health insurers in ACT: 500+ employees, turnover $1B+
- Private health insurers in New South Wales: 20–99 employees
- Private health insurers in Victoria: 20–99 employees
- Private health insurers in Queensland: 20–99 employees
- Private health insurers in Western Australia: 20–99 employees
- Private health insurers in South Australia: 20–99 employees
- Private health insurers in Tasmania: 20–99 employees
- Private health insurers in Northern Territory: 20–99 employees
- Comply with APRA CPS 234 (Information Security): does it apply to private health insurers?
- Comply with Design and Distribution Obligations (DDO): does it apply to private health insurers?
- Comply with APRA CPS 230 (Operational Risk Management): does it apply to private health insurers?
- Comply with Financial Accountability Regime (FAR) accountability obligations: does it apply to private health insurers?
Sources
- ACT Revenue Office: payroll tax thresholds and rates
- PCBU primary duty of care (ACT WHS Act s 19)
- Industrial manslaughter offence (ACT WHS Act s 34A)
- Comply with Workplace Privacy Act 2011 (ACT)
- Notifiable Data Breach (NDB) scheme
- Apply for a Director Identification Number (Director ID)
- Comply with directors' general law and statutory duties
- Prevent insolvent trading (s 588G)
Computed by the Rules Mate applicability engine from the published obligation corpus; facts last checked 3 October 2026. Rules Mate is not a law firm and this is general information, not legal advice. Confirm your position with the regulator source or a qualified adviser before acting.