Private health insurers compliance in Australian Capital Territory
Federal + ACT-specific compliance obligations for private health insurers businesses operating in Australian Capital Territory.
6
Total obligations
0
ACT-specific
5
ACT regulators
Federal obligations also applicable
Comply with APRA CPS 234 (Information Security)
APRA-regulated entities must maintain information security capability commensurate with the size and extent of threats.
Comply with APRA CPS 230 (Operational Risk Management)
APRA-regulated entities must manage operational risk including a comprehensive third-party / outsourcing register from 1 July 2025.
Comply with Financial Accountability Regime (FAR) accountability obligations
Banking entities from 15 March 2024; insurers and super trustees from 15 March 2025.
Comply with APRA CPS 220 (Risk Management)
APRA-regulated entities must have a comprehensive risk management framework.
Comply with Private Health Insurance Act 2007 + APRA rules
Private health insurers regulated by APRA + PHIO; community rating, complaints + claims rules apply.
Mandatory AI guardrails for high-risk AI (in development)
Australian Mandatory Guardrails for High Risk AI Settings — Treasury consultation in 2024/2025.
Need the federal-only picture?
See national private health insurers compliance for the full federal picture.