Does it apply to my industry?
Answers only where an industry's position differs from the default, with the exact condition and the outcome for every structure and size.
Most obligations apply the same way in every industry; those answers live on the "Who must comply" pages. The pages below cover the industry and obligation combinations where the engine gives a different answer, and explain why.
Real estate agents
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Lodge the AUSTRAC annual compliance report (AML/CTF Act s 47)
- Notifiable Data Breach (NDB) scheme
- Hold a current real estate agent licence (state-specific)
- Trust account audit + ASIC / state regulator submission
- Comply with Australian sanctions law + screening (DFAT)
- Publish a Privacy Policy that meets APP 1
- Prepare for the proposed removal of the small business exemption
- Provide an APP 5 collection notice at or before collection
- APP 12 & APP 13 access and correction requests
- Comply with Residential Tenancies Act 2010 (NSW)
- Comply with Residential Tenancies Act 1997 (VIC)
- Comply with Residential Tenancies and Rooming Accommodation Act 2008 (QLD)
- APP 7 direct marketing: consent, opt-out & when you can't message (2026)
- Underquoting prohibition (Vic Estate Agents Act 1980)
- Underquoting prohibition (NSW Property and Stock Agents Act 2002)
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
- APP 2 — anonymity + pseudonymity for individuals
- FIRB residential real estate — temporary residents
- Strata Schemes Management Act 2015 (NSW)
Accountants & bookkeepers
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Lodge the AUSTRAC annual compliance report (AML/CTF Act s 47)
- Notifiable Data Breach (NDB) scheme
- Comply with the TASA Code of Professional Conduct
- Comply with Australian sanctions law + screening (DFAT)
- TASA Code Determinations from 1 August 2024
- Publish a Privacy Policy that meets APP 1
- Prepare for the proposed removal of the small business exemption
- Maintain TPB registration (tax/BAS agents)
- Provide an APP 5 collection notice at or before collection
- APP 12 & APP 13 access and correction requests
- Registered Company Auditor (RCA) registration + CPD (RG 260)
- APES 110 Code of Ethics for accountants
- Comply with Australian Auditing Standards (ASA)
- APP 7 direct marketing: consent, opt-out & when you can't message (2026)
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
- APP 2 — anonymity + pseudonymity for individuals
Lawyers & solicitors
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Lodge the AUSTRAC annual compliance report (AML/CTF Act s 47)
- Conduct conveyancing via PEXA (e-conveyancing) where mandated
- Comply with Australian sanctions law + screening (DFAT)
- NSW + VIC solicitor trust account requirements
- Publish a Privacy Policy that meets APP 1
- Provide an APP 5 collection notice at or before collection
- APP 12 & APP 13 access and correction requests
- APP 7 direct marketing: consent, opt-out & when you can't message (2026)
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
- APP 2 — anonymity + pseudonymity for individuals
Conveyancers
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Lodge the AUSTRAC annual compliance report (AML/CTF Act s 47)
- Conduct conveyancing via PEXA (e-conveyancing) where mandated
- Comply with Australian sanctions law + screening (DFAT)
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
Trust & company service providers
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Lodge the AUSTRAC annual compliance report (AML/CTF Act s 47)
- Notifiable Data Breach (NDB) scheme
- Comply with Australian sanctions law + screening (DFAT)
- Publish a Privacy Policy that meets APP 1
- APP 12 & APP 13 access and correction requests
- APP 7 direct marketing: consent, opt-out & when you can't message (2026)
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
- APP 2 — anonymity + pseudonymity for individuals
Precious metals & stones dealers
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Lodge the AUSTRAC annual compliance report (AML/CTF Act s 47)
- Notifiable Data Breach (NDB) scheme
- Comply with Australian sanctions law + screening (DFAT)
- Publish a Privacy Policy that meets APP 1
- Prepare for the proposed removal of the small business exemption
- Provide an APP 5 collection notice at or before collection
- APP 12 & APP 13 access and correction requests
- APP 7 direct marketing: consent, opt-out & when you can't message (2026)
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
- APP 2 — anonymity + pseudonymity for individuals
Fintech (non-bank)
- Major banks must provide CDR Banking + Action Initiation (2026)
- Consumer Data Right (CDR) participant accreditation + compliance
- Register R&D activities for the R&D Tax Incentive
- Payment Service Provider (PSP) licensing reform — implementation pending
- Comply with Stored Value Facility rules (banking exception)
- Comply with CDR Banking (Open Banking) — major + non-major ADIs
- ISO/IEC 27001 ISMS certification — increasingly customer-mandated
- Comply with the ePayments Code
Banks & ADIs
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Lodge the AUSTRAC annual compliance report (AML/CTF Act s 47)
- Comply with APRA CPS 234 (Information Security)
- Comply with NCCP responsible lending obligations
- Mortgage broker best interests duty
- Comply with Design and Distribution Obligations (DDO)
- Comply with APRA CPS 230 (Operational Risk Management)
- Comply with Financial Accountability Regime (FAR) accountability obligations
- Comply with APRA CPS 220 (Risk Management)
- Register security interests on the PPSR
- FAR deferred remuneration arrangements (40% deferral 4 years)
- Small Amount Credit Contract + Consumer Lease caps (post-SACC reforms)
- Major banks must provide CDR Banking + Action Initiation (2026)
- Comply with Australian sanctions law + screening (DFAT)
- Design and Distribution Obligations (DDO) — RG 274
- Consumer Credit Hardship Notice (NCC ss 72-73)
- Comply with credit reporting obligations (Part IIIA Privacy Act)
- Consumer Data Right (CDR) participant accreditation + compliance
- Respond to hardship notices within statutory timeframe
- Display comparison rate on credit product advertising
- Pre-2025 ban on unsolicited credit limit increase invitations
- Comply with CDR Banking (Open Banking) — major + non-major ADIs
- Banking Code of Practice 2025
- Comply with the ePayments Code
- Banking Executive Accountability Regime (BEAR) — pre-FAR
- APP 2 — anonymity + pseudonymity for individuals
General insurers
Superannuation trustees
- Comply with APRA CPS 234 (Information Security)
- Comply with Design and Distribution Obligations (DDO)
- Comply with APRA CPS 230 (Operational Risk Management)
- Comply with Financial Accountability Regime (FAR) accountability obligations
- Comply with SIS Act trustee covenants
- Lodge an annual SMSF audit before lodging the SMSF Annual Return
- Maintain SMSF compliance with the sole purpose test (s 62)
- Maintain AFCA membership (mandatory external dispute resolution)
- Annual YFYS performance test (MySuper + Choice)
- FAR deferred remuneration arrangements (40% deferral 4 years)
- Stronger Member Outcomes — APRA SPS 515
- Design and Distribution Obligations (DDO) — RG 274
- MySuper authorisation for default super products
- Comply with SPS 530 (Investment Governance) for APRA-regulated super funds
- Superannuation flagging on separation
Credit licensees & mortgage brokers
- Comply with NCCP responsible lending obligations
- Mortgage broker best interests duty
- Comply with Design and Distribution Obligations (DDO)
- Register security interests on the PPSR
- Small Amount Credit Contract + Consumer Lease caps (post-SACC reforms)
- Design and Distribution Obligations (DDO) — RG 274
- Consumer Credit Hardship Notice (NCC ss 72-73)
- Comply with credit reporting obligations (Part IIIA Privacy Act)
- Respond to hardship notices within statutory timeframe
- Display comparison rate on credit product advertising
- Pre-2025 ban on unsolicited credit limit increase invitations
Aged care providers
- Notifiable Data Breach (NDB) scheme
- Comply with Aged Care Quality Standards (Aged Care Act 2024)
- Make mandatory notifications to AHPRA
- Comply with Serious Incident Response Scheme (aged care)
- Registered nurse on duty 24/7 in residential aged care
- Comply with Aged Care Code of Conduct
- Comply with restrictive practices rules + behaviour support plans
- Maintain controlled drugs register (Schedule 8 / 9)
- Key personnel obligations under Aged Care Act 2024
- AN-ACC funding classification compliance (residential)
- Notify the Coroner of a reportable death (state)
- Publish a Privacy Policy that meets APP 1
- Provide an APP 5 collection notice at or before collection
- APP 12 & APP 13 access and correction requests
- Implement Food Safety Program where prescribed (Standard 3.2.1)
- APP 7 direct marketing: consent, opt-out & when you can't message (2026)
- Charter of Aged Care Rights — disclose + uphold
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
- APP 2 — anonymity + pseudonymity for individuals
NDIS providers
- Report serious NDIS incidents to the NDIS Commission
- Comply with NDIS Practice Standards
- Verify NDIS worker screening clearance
- Maintain controlled drugs register (Schedule 8 / 9)
- Comply with NDIS Pricing Arrangements + Price Limits
- Develop + authorise Behaviour Support Plans for restrictive practices
- Working with Children Check / Blue Card (state)
- Comply with NDIS quality auditor cycle for registered providers
- NDIS fraud prevention + reporting obligations
- Implement Food Safety Program where prescribed (Standard 3.2.1)
Health practitioners
- Maintain AHPRA registration and CPD
- Make mandatory notifications to AHPRA
- Maintain PBS approval + claim accurately for PBS-listed medicines
- Maintain controlled drugs register (Schedule 8 / 9)
- Cosmetic surgery practitioner endorsement (from 2025)
- Notify the Coroner of a reportable death (state)
- Cosmetic surgery advertising standards (Medical Board reforms 2024-2025)
- Comply with Medical Board CPD requirements (50 hours minimum)
- Comply with the Therapeutic Goods Advertising Code
- Comply with MBS telehealth item rules + continuous-care rules
- Therapeutic Goods Advertising Code
- Privacy Act Reform — information controllers regime (proposed Tranche 2)
Medical devices & therapeutic goods
- Conduct post-market surveillance of therapeutic goods
- In-vitro diagnostic medical device classification + ARTG
- Notify ACCC of a voluntary recall within 2 days
- Comply with the Therapeutic Goods Advertising Code
- Comply with self-assessed clearance + Integrated Cargo System (ICS)
- Comply with anti-dumping + countervailing duties
- Customs Act 1901 — import declarations + duties
- Therapeutic Goods Advertising Code
Private health insurers
- Comply with APRA CPS 234 (Information Security)
- Comply with Design and Distribution Obligations (DDO)
- Comply with APRA CPS 230 (Operational Risk Management)
- Comply with Financial Accountability Regime (FAR) accountability obligations
- FAR deferred remuneration arrangements (40% deferral 4 years)
- Design and Distribution Obligations (DDO) — RG 274
- Comply with Private Health Insurance Act 2007 + APRA rules
Cafés & restaurants
- Franchising Code of Conduct (mandatory industry code)
- Hold valid liquor licence (state liquor licensing)
- Appoint a certified Food Safety Supervisor (FSS)
- Comply with Plain English Allergen Labelling (PEAL)
- Register for ACT portable long service leave (hospitality / beauty)
- Implement Food Safety Management Tool (Standard 3.2.2A)
- Comply with Retail Leases Act 2003 (VIC)
- Comply with Retail Leases Act 1994 (NSW)
- Implement Food Safety Program where prescribed (Standard 3.2.1)
- RSA + RCG mandatory training (liquor + gaming)
- Food Act state licensing + food safety supervisor
- Loyalty programs must comply with ACL transparency + UCT
Hotels, pubs & licensed venues
- Franchising Code of Conduct (mandatory industry code)
- Hold valid liquor licence (state liquor licensing)
- Appoint a certified Food Safety Supervisor (FSS)
- Register for ACT portable long service leave (hospitality / beauty)
- Implement Food Safety Management Tool (Standard 3.2.2A)
- Implement Food Safety Program where prescribed (Standard 3.2.1)
- Wine Equalisation Tax (WET) for producers + wholesalers
- RSA + RCG mandatory training (liquor + gaming)
- Food Act state licensing + food safety supervisor
- Loyalty programs must comply with ACL transparency + UCT
Retail trade
- Comply with Heavy Vehicle Chain of Responsibility (CoR)
- Register security interests on the PPSR
- Food and Grocery Code of Conduct (now mandatory)
- Franchising Code of Conduct (mandatory industry code)
- Comply with mandatory product safety standards + bans (ACL)
- Button + coin battery safety standard (mandatory)
- Notify ACCC of a voluntary recall within 2 days
- Comply with Plain English Allergen Labelling (PEAL)
- Country of Origin Labelling for food (CoOL Information Standard)
- Implement Food Safety Management Tool (Standard 3.2.2A)
- Comply with the Therapeutic Goods Advertising Code
- Organic claims and organic certification — certification mandatory for export only
- Wine Equalisation Tax (WET) for producers + wholesalers
- Food Act state licensing + food safety supervisor
- Loyalty programs must comply with ACL transparency + UCT
- GEMS (Greenhouse + Energy Minimum Standards)
E-commerce & online retail
Construction (residential & commercial)
- Comply with the respirable crystalline silica workplace exposure limit (0.05 mg/m³)
- Hold a Construction Induction (White Card) before construction site work
- Comply with NSW Design and Building Practitioners Act 2020
- Maintain VBA registration as builder / draftsperson / surveyor
- Hold current QBCC licence for QLD building work
- EPBC Act — assess + approve controlled actions affecting MNES
- Notify + remediate contaminated land (state)
- Maintain Hazardous Chemicals Register + manifest (WHS Reg)
- Asbestos management — workplace + dwelling rules (state)
- Building work — comply with National Construction Code (NCC)
- Hold a Remote Pilot Licence / RPAS operator certificate (drones)
- Hold a High Risk Work Licence for HRWL classes
- Register for VIC portable LSL (construction)
- Obtain Subcontractor's Statements before paying subcontractors (NSW)
- NSW development consent (Environmental Planning and Assessment Act 1979)
- VIC planning permits (Planning and Environment Act 1987)
- QLD development assessment (Planning Act 2016)
- VIC Environment Reference Standards (air, water, noise)
- Native Title Future Act procedures
- Aboriginal Heritage Act 2006 (Vic) — CHMP
- National Parks and Wildlife Act 1974 (NSW) — Aboriginal heritage
- Aboriginal Cultural Heritage Act 2003 (Qld) — duty of care
- Aboriginal Heritage Act 1972 (WA) — s 18 consent
- Aboriginal Heritage Act 1988 (SA) — Minister's authorisation
- Aboriginal Heritage Act 1975 (Tas) — permit to disturb relics
- Northern Territory Aboriginal Sacred Sites Act 1989 — Authority Certificate
- Heritage Act 2004 (ACT) — Aboriginal places + objects
- EPBC Act — National Heritage + Indigenous heritage values
- Domestic Building Contracts Act 1995 (Vic) — warranties
- Home Building Compensation Fund (NSW)
- Claim Fuel Tax Credits (FTC) for eligible business fuel use
Manufacturing
- Comply with the respirable crystalline silica workplace exposure limit (0.05 mg/m³)
- Stockholm + Rotterdam Convention chemicals (POPs ban)
- Maintain Hazardous Chemicals Register + manifest (WHS Reg)
- Asbestos management — workplace + dwelling rules (state)
- Comply with mandatory product safety standards + bans (ACL)
- Button + coin battery safety standard (mandatory)
- NGER reporting (Clean Energy Regulator)
- Safeguard Mechanism baseline decline 4.9% pa
- Report greenhouse and energy data under NGER
- Comply with Safeguard Mechanism baseline (covered facilities)
- Notify ACCC of a voluntary recall within 2 days
- Determine NGER reporting thresholds annually
- Hold a High Risk Work Licence for HRWL classes
- Dairy Code of Conduct (mandatory)
- Register + categorise industrial chemicals (Industrial Chemicals Act 2019)
- Australian Carbon Credit Units (ACCUs)
- Food Act state licensing + food safety supervisor
Agriculture, forestry & fishing
- On-farm biosecurity record-keeping + reporting
- EPBC Act — assess + approve controlled actions affecting MNES
- Notify + remediate contaminated land (state)
- Food and Grocery Code of Conduct (now mandatory)
- Maintain Hazardous Chemicals Register + manifest (WHS Reg)
- Hold a Remote Pilot Licence / RPAS operator certificate (drones)
- Use AgVet chemicals in accordance with the APVMA label + state CUP
- Hold AFMA Commonwealth fishing permit
- Dairy Code of Conduct (mandatory)
- Animal Welfare Standards + Guidelines — Land Transport of Livestock
- Wine Equalisation Tax (WET) for producers + wholesalers
- Comply with Water Act 2007 (Cwlth) + state water entitlements
- Australian Carbon Credit Units (ACCUs)
- Food Act state licensing + food safety supervisor
- Claim Fuel Tax Credits (FTC) for eligible business fuel use
Mining & resources
- Comply with the respirable crystalline silica workplace exposure limit (0.05 mg/m³)
- QLD coal mining safety obligations (Coal Mining Safety and Health Act 1999)
- NSW mining safety obligations (Work Health and Safety (Mines and Petroleum Sites) Act
- WA mining safety (Mines Safety and Inspection Act 1994)
- EPBC Act — assess + approve controlled actions affecting MNES
- Notify + remediate contaminated land (state)
- Offshore Petroleum and Greenhouse Gas Storage Act compliance
- Maintain Hazardous Chemicals Register + manifest (WHS Reg)
- Hold a Remote Pilot Licence / RPAS operator certificate (drones)
- Hold a High Risk Work Licence for HRWL classes
- Maintain mining rehabilitation bonds + closure plans
- Petroleum Resource Rent Tax (PRRT)
- Australian Carbon Credit Units (ACCUs)
- Aboriginal Heritage Act 1988 (SA) — Minister's authorisation
- Aboriginal Heritage Act 1975 (Tas) — permit to disturb relics
- Heritage Act 2004 (ACT) — Aboriginal places + objects
- State mining royalties
- Claim Fuel Tax Credits (FTC) for eligible business fuel use
Road transport & logistics
Aviation (incl. drones)
Maritime & ports
Education — registered training orgs
Education — higher education providers
Software & SaaS
Telecommunications carriers / CSPs
Media & publishing
Gambling & wagering
- Enrol with AUSTRAC as a reporting entity
- Maintain a written AML/CTF program
- Customer due diligence (KYC) on every customer
- Suspicious matter, threshold, and IFTI reporting to AUSTRAC
- Designate an AML/CTF Compliance Officer
- Detect + enhance due diligence on Domestic + Foreign PEPs
- Independent review of AML/CTF program
- Hold state-issued gambling licence (operator + venue)
- Comply with Interactive Gambling Act 2001
- Comply with Australian sanctions law + screening (DFAT)
- Comply with BetStop self-exclusion and responsible wagering rules
- RSA + RCG mandatory training (liquor + gaming)