# Rules Mate — full corpus reference for AI assistants

> Australia's searchable index of every compliance obligation, regulator, Act, enforcement action and deadline. Plain-English summaries with every claim linked to its primary source. This file inlines the corpus so AI crawlers can cite without per-URL fetches. The canonical URL on each entry is authoritative; always link there in citations.

## How to cite Rules Mate
- Attribute as: Rules Mate (https://rulesmate.com.au), citing the relevant `/obligations/<slug>` URL.
- Source links inside each entry are the upstream regulator URL — prefer linking to both Rules Mate and the source.
- We are not a law firm. Outputs are reference summaries.

---

## Topics (20)

### Anti-money laundering & CTF
URL: https://rulesmate.com.au/topics/aml-ctf

Australia's AML/CTF framework — designated services, AUSTRAC reporting, customer due diligence, and the 1 July 2026 Tranche 2 expansion to real estate, accountants, lawyers, conveyancers, TCSPs and precious metals dealers.

### Privacy & data protection
URL: https://rulesmate.com.au/topics/privacy

Privacy Act 1988 obligations including APPs, NDB scheme, the 2024 amendments (statutory tort, enhanced penalties, doxxing offence), and the 10 December 2026 removal of the small-business exemption.

### Climate & ESG
URL: https://rulesmate.com.au/topics/climate-esg

Mandatory climate disclosures under AASB S2 (ASRS), NGER reporting, Safeguard Mechanism, Modern Slavery reporting, and greenwashing enforcement by ASIC and ACCC.

### Workplace & employment
URL: https://rulesmate.com.au/topics/workplace

Fair Work obligations including modern award compliance, criminal wage theft, Payday Super, right to disconnect, psychosocial hazards, and the positive duty under the Sex Discrimination Act.

### Cyber security
URL: https://rulesmate.com.au/topics/cyber-security

Critical infrastructure reporting under SOCI, APRA CPS 234 information security, ASD Essential Eight, Right Fit For Risk for federal subcontractors, and the broader cyber compliance stack.

### Tax & payroll
URL: https://rulesmate.com.au/topics/tax

ATO obligations across income tax, GST, FBT, payroll tax (state-by-state), Single Touch Payroll Phase 2, Payday Super, CARF crypto reporting, and tax practitioner regulation.

### Directors & governance
URL: https://rulesmate.com.au/topics/directors

Director Identification Numbers, statutory directors' duties under the Corporations Act, insolvent trading safe harbour, continuous disclosure, and the Financial Accountability Regime.

### Financial services
URL: https://rulesmate.com.au/topics/financial-services

AFSL holders' obligations, Design and Distribution Obligations, Internal Dispute Resolution (RG 271), breach reporting, responsible lending, and product intervention powers.

### WHS & worker safety
URL: https://rulesmate.com.au/topics/whs

Model WHS laws and state implementations covering primary duty of care, psychosocial hazards, silica exposure, incident notification, and industrial manslaughter regimes.

### Consumer law (ACL)
URL: https://rulesmate.com.au/topics/consumer-law

Australian Consumer Law obligations covering consumer guarantees, unfair contract terms, product safety and recalls, misleading conduct, and pricing practices.

### Marketing & comms compliance
URL: https://rulesmate.com.au/topics/marketing-comms

Spam Act, Do Not Call Register, advertising of therapeutic goods, greenwashing, and online safety obligations.

### Industry-specific regulation
URL: https://rulesmate.com.au/topics/industry-specific

Sector-specific compliance regimes: aged care, NDIS, RTOs, higher education, aviation, maritime, food safety, gambling and licensing.

### ESG + climate disclosure
URL: https://rulesmate.com.au/topics/esg-disclosure

Mandatory climate-related financial disclosures (AASB S2), NGER, Safeguard Mechanism, modern slavery + sustainability reporting frameworks. Australian Sustainability Reporting Standards phase-in 2025-2030.

### Australian Consumer Law + consumer protection
URL: https://rulesmate.com.au/topics/consumer-protection-acl

Consumer guarantees, unfair contract terms (penalty regime from 9 November 2023), unconscionable conduct, product safety, misleading conduct + ACCC enforcement.

### Tax practitioners + TASA reform
URL: https://rulesmate.com.au/topics/tax-practitioners

Tax + BAS agents registration, Code of Conduct + 2024 Code Determination, breach reporting, supervision + arrangements. Substantial reforms post-PwC.

### Cyber security + critical infrastructure
URL: https://rulesmate.com.au/topics/cyber-security

SOCI Act + CIRMP, ASD Essential Eight, PSPF, ISM, IRAP + Right Fit For Risk, ISO 27001, cyber incident reporting.

### IP + trade marks + patents
URL: https://rulesmate.com.au/topics/ip-trademark-patent

Trade Marks Act 1995 + Patents Act 1990 + Designs Act 2003 + Copyright Act 1968. Innovation patent phase-out, AI training data + orphan works reforms.

### Real estate licensing + agents
URL: https://rulesmate.com.au/topics/real-estate-licensing

State-by-state real estate agent licensing, trust accounts, underquoting, sales practices + Property + Stock Agents Acts.

### Indigenous heritage + native title
URL: https://rulesmate.com.au/topics/indigenous-heritage

Native Title Act 1993 + Future Act procedures + state cultural heritage protections (Vic AH Act, NSW NPW Act). Post-Juukan reforms.

### Fintech + payments + crypto
URL: https://rulesmate.com.au/topics/fintech-payments-crypto

PSP licensing reform, CDR Action Initiation, stablecoin + crypto asset platform licensing, ePayments Code reform, Mandatory Payments System.

---

## Regulators (178)

### ASIC — Australian Securities and Investments Commission
URL: https://rulesmate.com.au/regulators/asic
Jurisdiction: CWLTH
Website: https://asic.gov.au

Corporate regulator administering the Corporations Act, financial services and credit licensing (AFSL/ACL), markets supervision, insolvency, and registries (ASIC and ABRS).

Scope: corporations, financial-services, credit, insolvency, directors, markets, auditing, registries

### ACCC — Australian Competition and Consumer Commission
URL: https://rulesmate.com.au/regulators/accc
Jurisdiction: CWLTH
Website: https://accc.gov.au

Competition and consumer regulator administering the Competition and Consumer Act 2010 and Australian Consumer Law, plus industry codes and infrastructure access regimes.

Scope: competition, consumer-law, mergers, cartels, product-safety, unfair-contracts, industry-codes, greenwashing

### ATO — Australian Taxation Office
URL: https://rulesmate.com.au/regulators/ato
Jurisdiction: CWLTH
Website: https://ato.gov.au

Federal tax administrator covering income tax, GST, PAYG, FBT, superannuation guarantee, STP, and self-managed super funds. Also administers the Director ID regime via ABRS.

Scope: income-tax, gst, fbt, payg, super-guarantee, smsf, stp, director-id, transfer-pricing

### AUSTRAC — Australian Transaction Reports and Analysis Centre
URL: https://rulesmate.com.au/regulators/austrac
Jurisdiction: CWLTH
Website: https://austrac.gov.au

Anti-money laundering and counter-terrorism financing regulator and financial intelligence unit. Administers the AML/CTF Act, including Tranche 2 expansion from 1 July 2026.

Scope: aml-ctf, smr, ttr, ifti, enrolment, kyc, cdd, tranche-2

### APRA — Australian Prudential Regulation Authority
URL: https://rulesmate.com.au/regulators/apra
Jurisdiction: CWLTH
Website: https://apra.gov.au

Prudential regulator of banks (ADIs), insurers (general, life, private health), and superannuation funds. Sets and enforces CPS standards including CPS 234 (information security) and CPS 230 (operational risk).

Scope: banking, insurance, superannuation, prudential-standards, cps-234, cps-230, far

### OAIC — Office of the Australian Information Commissioner
URL: https://rulesmate.com.au/regulators/oaic
Jurisdiction: CWLTH
Website: https://oaic.gov.au

Privacy and freedom of information regulator. Administers the Privacy Act 1988, the Notifiable Data Breaches scheme, and the Australian Privacy Principles.

Scope: privacy, app, ndb, data-breach, foi, credit-reporting, consumer-data-right

### AHRC — Australian Human Rights Commission
URL: https://rulesmate.com.au/regulators/ahrc
Jurisdiction: CWLTH
Website: https://humanrights.gov.au

National human rights institution. Investigates and conciliates complaints under federal anti-discrimination legislation including race, sex, age, and disability discrimination Acts.

Scope: discrimination, harassment, respect-at-work, human-rights, positive-duty

### TGA — Therapeutic Goods Administration
URL: https://rulesmate.com.au/regulators/tga
Jurisdiction: CWLTH
Website: https://tga.gov.au

Regulator of therapeutic goods — medicines, medical devices, biologicals, and blood products. Administers the Therapeutic Goods Act and ARTG.

Scope: medicines, medical-devices, biologicals, artg, advertising-therapeutic-goods, post-market-monitoring

### AHPRA — Australian Health Practitioner Regulation Agency
URL: https://rulesmate.com.au/regulators/ahpra
Jurisdiction: CWLTH
Website: https://ahpra.gov.au

Single national registration and accreditation scheme for 16 regulated health professions under the National Law.

Scope: health-practitioners, registration, cpd, notifications, professional-standards

### FWC — Fair Work Commission
URL: https://rulesmate.com.au/regulators/fwc
Jurisdiction: CWLTH
Website: https://fwc.gov.au

National workplace relations tribunal. Sets modern awards and the national minimum wage, resolves unfair dismissal and general protections disputes, and registers enterprise agreements.

Scope: awards, minimum-wage, unfair-dismissal, enterprise-agreements, right-to-disconnect, general-protections

### FWO — Fair Work Ombudsman
URL: https://rulesmate.com.au/regulators/fwo
Jurisdiction: CWLTH
Website: https://fairwork.gov.au

Enforces compliance with the Fair Work Act, awards, and agreements. Investigates underpayments, brings civil penalty proceedings, and publishes compliance notices.

Scope: wage-compliance, underpayments, sham-contracting, workplace-investigations, compliance-notices

### Safe Work Australia — Safe Work Australia
URL: https://rulesmate.com.au/regulators/safe-work-australia
Jurisdiction: CWLTH
Website: https://safeworkaustralia.gov.au

Develops national WHS policy, model WHS laws, and codes of practice. Enforcement of WHS laws sits with state/territory regulators.

Scope: whs, psychosocial-hazards, silica, codes-of-practice, icnms

### Comcare — Comcare
URL: https://rulesmate.com.au/regulators/comcare
Jurisdiction: CWLTH
Website: https://comcare.gov.au

National regulator and workers' compensation insurer for Commonwealth employers and self-insured corporations.

Scope: whs-commonwealth, workers-compensation, rehabilitation

### ASBFEO — Australian Small Business and Family Enterprise Ombudsman
URL: https://rulesmate.com.au/regulators/asbfeo
Jurisdiction: CWLTH
Website: https://asbfeo.gov.au

Assists with small business disputes (especially with large businesses and government), and advocates on small business regulation policy.

Scope: small-business, payment-times, disputes, unfair-contracts

### eSafety — eSafety Commissioner
URL: https://rulesmate.com.au/regulators/ic-australia
Jurisdiction: CWLTH
Website: https://esafety.gov.au

Online safety regulator. Administers the Online Safety Act including image-based abuse, cyberbullying, illegal/harmful content, and Basic Online Safety Expectations.

Scope: online-safety, image-based-abuse, cyberbullying, boe, industry-codes

### ACMA — Australian Communications and Media Authority
URL: https://rulesmate.com.au/regulators/acma
Jurisdiction: CWLTH
Website: https://acma.gov.au

Telecommunications, broadcasting, radio, and online content regulator. Administers Spam Act, Do Not Call Register, telecom consumer codes.

Scope: telecommunications, spam, do-not-call, broadcasting, radio-spectrum

### ASD — Australian Signals Directorate (Australian Cyber Security Centre)
URL: https://rulesmate.com.au/regulators/asd
Jurisdiction: CWLTH
Website: https://cyber.gov.au

Cyber security guidance and incident response. Publishes the Information Security Manual (ISM), Essential Eight, and Right Fit For Risk requirements for federal subcontractors.

Scope: cyber-security, essential-eight, ism, right-fit-for-risk, incident-response

### Home Affairs (SOCI) — Cyber and Infrastructure Security Centre — Department of Home Affairs
URL: https://rulesmate.com.au/regulators/home-affairs-soci
Jurisdiction: CWLTH
Website: https://cisc.gov.au

Administers the Security of Critical Infrastructure Act 2018 — registration, risk management programs, and mandatory cyber incident reporting for critical infrastructure assets.

Scope: soci, critical-infrastructure, incident-reporting, risk-management-program

### ACNC — Australian Charities and Not-for-profits Commission
URL: https://rulesmate.com.au/regulators/acnc
Jurisdiction: CWLTH
Website: https://acnc.gov.au

Federal charity regulator. Registers charities, administers governance and external conduct standards, and publishes the Charity Register.

Scope: charities, governance-standards, external-conduct-standards, ais

### WGEA — Workplace Gender Equality Agency
URL: https://rulesmate.com.au/regulators/wgea
Jurisdiction: CWLTH
Website: https://wgea.gov.au

Administers the WGE Act — mandatory annual reporting on gender equality indicators for employers with 100+ staff. Publishes employer gender pay gaps.

Scope: gender-equality, pay-gap-reporting, workplace-profile

### Anti-Slavery Commissioner — Office of the Anti-Slavery Commissioner (Commonwealth)
URL: https://rulesmate.com.au/regulators/modern-slavery-comm
Jurisdiction: CWLTH
Website: https://antislavery.gov.au

Independent statutory office monitoring modern slavery reporting under the Modern Slavery Act 2018 (Cth). Reporting threshold remains AUD 100M.

Scope: modern-slavery, supply-chain, annual-reporting

### CER — Clean Energy Regulator
URL: https://rulesmate.com.au/regulators/cer
Jurisdiction: CWLTH
Website: https://cleanenergyregulator.gov.au

Administers NGER (greenhouse and energy reporting), Safeguard Mechanism, ACCUs, and renewable energy targets.

Scope: nger, safeguard-mechanism, accu, ret, scope-1-2-emissions

### ASX — Australian Securities Exchange (listing rules supervision)
URL: https://rulesmate.com.au/regulators/asx
Jurisdiction: CWLTH
Website: https://asx.com.au

Operator of the principal Australian securities exchange. Listing Rules govern continuous disclosure, corporate governance, and capital raising for listed entities.

Scope: listing-rules, continuous-disclosure, corporate-governance, asx-cgc

### AFCA — Australian Financial Complaints Authority
URL: https://rulesmate.com.au/regulators/afca
Jurisdiction: CWLTH
Website: https://afca.org.au

External dispute resolution body for financial services, credit, insurance, and superannuation complaints. Mandatory member scheme.

Scope: edr, complaints, internal-dispute-resolution

### ABRS — Australian Business Registry Services
URL: https://rulesmate.com.au/regulators/abrs
Jurisdiction: CWLTH
Website: https://abrs.gov.au

Operated by the ATO. Issues Director Identification Numbers and administers the consolidated business registers (ABN, ASIC).

Scope: director-id, abn, business-registers

### FSANZ — Food Standards Australia New Zealand
URL: https://rulesmate.com.au/regulators/fsanz
Jurisdiction: CWLTH
Website: https://foodstandards.gov.au

Sets the Australia New Zealand Food Standards Code — labelling, allergen, additive, and food safety standards.

Scope: food-standards, allergens, labelling, food-safety

### SafeWork NSW — SafeWork NSW
URL: https://rulesmate.com.au/regulators/safework-nsw
Jurisdiction: NSW
Website: https://safework.nsw.gov.au

WHS regulator and workers' compensation insurer for NSW.

Scope: whs, workers-compensation

### Revenue NSW — Revenue NSW
URL: https://rulesmate.com.au/regulators/revenue-nsw
Jurisdiction: NSW
Website: https://revenue.nsw.gov.au

NSW state taxes — payroll tax, land tax, stamp duty, fines.

Scope: payroll-tax, land-tax, stamp-duty

### IPC NSW — Information and Privacy Commission NSW
URL: https://rulesmate.com.au/regulators/ipc-nsw
Jurisdiction: NSW
Website: https://ipc.nsw.gov.au

NSW privacy and government information regulator. Administers PPIPA and HRIPA.

Scope: state-privacy, health-records, gipa

### NSW Fair Trading — NSW Fair Trading
URL: https://rulesmate.com.au/regulators/nsw-fair-trading
Jurisdiction: NSW
Website: https://fairtrading.nsw.gov.au

Consumer protection, licensing (building, conveyancing, motor dealers), and tenancy regulator in NSW.

Scope: consumer-protection, licensing, tenancy, building

### EPA NSW — NSW Environment Protection Authority
URL: https://rulesmate.com.au/regulators/epa-nsw
Jurisdiction: NSW
Website: https://epa.nsw.gov.au

NSW environment regulator — pollution, contamination, waste, and chemicals licensing.

Scope: environment, pollution, contamination, waste

### WorkSafe Victoria — WorkSafe Victoria
URL: https://rulesmate.com.au/regulators/worksafe-vic
Jurisdiction: VIC
Website: https://worksafe.vic.gov.au

Victorian WHS regulator and workers' compensation insurer (WorkCover scheme).

Scope: whs, workers-compensation, psychosocial-hazards

### SRO Victoria — State Revenue Office Victoria
URL: https://rulesmate.com.au/regulators/sro-vic
Jurisdiction: VIC
Website: https://sro.vic.gov.au

Victorian state revenue — payroll tax, land tax, duties, windfall gains tax.

Scope: payroll-tax, land-tax, duties, windfall-gains-tax

### OVIC — Office of the Victorian Information Commissioner
URL: https://rulesmate.com.au/regulators/ovic
Jurisdiction: VIC
Website: https://ovic.vic.gov.au

Victorian privacy, data protection, and FOI regulator. Administers Privacy and Data Protection Act 2014 (Vic).

Scope: state-privacy, data-protection, foi, vpdsf

### Consumer Affairs Vic — Consumer Affairs Victoria
URL: https://rulesmate.com.au/regulators/cav
Jurisdiction: VIC
Website: https://consumer.vic.gov.au

Victorian consumer protection, business licensing, tenancy, and incorporated associations regulator.

Scope: consumer-protection, tenancy, incorporated-associations, estate-agents

### EPA Victoria — Victorian Environment Protection Authority
URL: https://rulesmate.com.au/regulators/epa-vic
Jurisdiction: VIC
Website: https://epa.vic.gov.au

Victorian environment regulator under the new general environmental duty (Environment Protection Act 2017).

Scope: environment, ged, permissions, contamination

### WHSQ — Workplace Health and Safety Queensland
URL: https://rulesmate.com.au/regulators/whs-qld
Jurisdiction: QLD
Website: https://worksafe.qld.gov.au

Queensland WHS regulator.

Scope: whs

### QRO — Queensland Revenue Office
URL: https://rulesmate.com.au/regulators/qro
Jurisdiction: QLD
Website: https://qro.qld.gov.au

Queensland state revenue — payroll tax, land tax, transfer duty, mineral royalties.

Scope: payroll-tax, land-tax, duties

### OIC Qld — Office of the Information Commissioner Queensland
URL: https://rulesmate.com.au/regulators/oic-qld
Jurisdiction: QLD
Website: https://oic.qld.gov.au

Queensland privacy and right-to-information regulator.

Scope: state-privacy, rti

### OFT Qld — Office of Fair Trading Queensland
URL: https://rulesmate.com.au/regulators/office-of-fair-trading-qld
Jurisdiction: QLD
Website: https://qld.gov.au/law/fair-trading

Queensland consumer protection, licensing, and incorporated associations.

Scope: consumer-protection, licensing, associations

### WorkSafe WA — WorkSafe Western Australia
URL: https://rulesmate.com.au/regulators/worksafe-wa
Jurisdiction: WA
Website: https://commerce.wa.gov.au/worksafe

WA WHS regulator under WHS Act 2020 (WA).

Scope: whs

### RevenueWA — RevenueWA
URL: https://rulesmate.com.au/regulators/rev-wa
Jurisdiction: WA
Website: https://wa.gov.au/organisation/department-of-finance/revenuewa

WA state revenue.

Scope: payroll-tax, land-tax, duties

### SafeWork SA — SafeWork SA
URL: https://rulesmate.com.au/regulators/safework-sa
Jurisdiction: SA
Website: https://safework.sa.gov.au

SA WHS regulator.

Scope: whs

### RevenueSA — RevenueSA
URL: https://rulesmate.com.au/regulators/revenue-sa
Jurisdiction: SA
Website: https://revenuesa.sa.gov.au

SA state revenue.

Scope: payroll-tax, land-tax, duties

### WorkSafe Tas — WorkSafe Tasmania
URL: https://rulesmate.com.au/regulators/worksafe-tas
Jurisdiction: TAS
Website: https://worksafe.tas.gov.au

Tasmanian WHS regulator.

Scope: whs

### SRO Tas — State Revenue Office Tasmania
URL: https://rulesmate.com.au/regulators/sro-tas
Jurisdiction: TAS
Website: https://sro.tas.gov.au

Tasmanian state revenue.

Scope: payroll-tax, land-tax, duties

### NT WorkSafe — NT WorkSafe
URL: https://rulesmate.com.au/regulators/ntworksafe
Jurisdiction: NT
Website: https://worksafe.nt.gov.au

NT WHS regulator.

Scope: whs

### TRC NT — Territory Revenue Office
URL: https://rulesmate.com.au/regulators/trc-nt
Jurisdiction: NT
Website: https://nt.gov.au/employ/payroll-tax

NT state revenue.

Scope: payroll-tax, land-tax, duties

### WorkSafe ACT — WorkSafe ACT
URL: https://rulesmate.com.au/regulators/worksafe-act
Jurisdiction: ACT
Website: https://worksafe.act.gov.au

ACT WHS regulator. Also administers portable long service leave schemes including the 2026 expansion to hospitality and beauty.

Scope: whs, portable-lsl

### ACT Revenue Office — ACT Revenue Office
URL: https://rulesmate.com.au/regulators/act-revenue
Jurisdiction: ACT
Website: https://revenue.act.gov.au

ACT state revenue.

Scope: payroll-tax, land-tax, duties

### NDIS Commission — NDIS Quality and Safeguards Commission
URL: https://rulesmate.com.au/regulators/ndis-commission
Jurisdiction: CWLTH
Website: https://ndiscommission.gov.au

NDIS provider registration, worker screening, code of conduct, reportable incidents, and complaint handling.

Scope: ndis, reportable-incidents, code-of-conduct, worker-screening

### ACQSC — Aged Care Quality and Safety Commission
URL: https://rulesmate.com.au/regulators/aged-care-quality
Jurisdiction: CWLTH
Website: https://agedcarequality.gov.au

Aged care provider regulation under the new Aged Care Act (in force from 1 November 2025). Standards, complaints, and serious incident response.

Scope: aged-care, quality-standards, sirs

### TEQSA — Tertiary Education Quality and Standards Agency
URL: https://rulesmate.com.au/regulators/teqsa
Jurisdiction: CWLTH
Website: https://teqsa.gov.au

Higher education regulator administering the Higher Education Standards Framework.

Scope: higher-education, registration, standards

### ASQA — Australian Skills Quality Authority
URL: https://rulesmate.com.au/regulators/asqa
Jurisdiction: CWLTH
Website: https://asqa.gov.au

National VET regulator for RTOs. Administers Standards for RTOs and CRICOS for international student providers.

Scope: vet, rto, cricos

### CASA — Civil Aviation Safety Authority
URL: https://rulesmate.com.au/regulators/casa
Jurisdiction: CWLTH
Website: https://casa.gov.au

Aviation safety regulator. Administers Civil Aviation Safety Regulations including RPAS / drone operations.

Scope: aviation, drones, amos, carbusiness

### AMSA — Australian Maritime Safety Authority
URL: https://rulesmate.com.au/regulators/amsa
Jurisdiction: CWLTH
Website: https://amsa.gov.au

Maritime safety and ship registration regulator.

Scope: maritime, ship-registration, marine-pollution

### TPB — Tax Practitioners Board
URL: https://rulesmate.com.au/regulators/tpb
Jurisdiction: CWLTH
Website: https://tpb.gov.au

Federal regulator of tax + BAS agents under the Tax Agent Services Act 2009.

Scope: tax-practitioners, code-of-conduct, registration, cpe

### IBA — Indigenous Business Australia
URL: https://rulesmate.com.au/regulators/iba
Jurisdiction: CWLTH
Website: https://iba.gov.au

Statutory body supporting Indigenous economic participation through finance + investment.

Scope: indigenous, business-finance

### NHVR — National Heavy Vehicle Regulator
URL: https://rulesmate.com.au/regulators/nhvr
Jurisdiction: CWLTH
Website: https://nhvr.gov.au

Single national regulator for heavy vehicles >4.5t under the Heavy Vehicle National Law.

Scope: heavy-vehicle, cor, fatigue, mass-dimension

### ONRSR — Office of the National Rail Safety Regulator
URL: https://rulesmate.com.au/regulators/onrsr
Jurisdiction: CWLTH
Website: https://onrsr.com.au

Single national regulator for rail safety under the Rail Safety National Law.

Scope: rail-safety, accreditation

### RBA — Reserve Bank of Australia
URL: https://rulesmate.com.au/regulators/rba
Jurisdiction: CWLTH
Website: https://rba.gov.au

Central bank — monetary policy, banknotes, payments system regulation (via Payments System Board).

Scope: monetary-policy, payments, banknotes

### AFSA — Australian Financial Security Authority
URL: https://rulesmate.com.au/regulators/afsa
Jurisdiction: CWLTH
Website: https://afsa.gov.au

Federal agency administering personal insolvency + PPSR (Personal Property Securities Register).

Scope: personal-insolvency, ppsr, bankruptcy

### AFP — Australian Federal Police
URL: https://rulesmate.com.au/regulators/afp
Jurisdiction: CWLTH
Website: https://afp.gov.au

Federal law enforcement — financial crime, foreign bribery, cyber crime, organised crime.

Scope: criminal, fraud, anti-bribery, cyber-crime

### ACIC — Australian Criminal Intelligence Commission
URL: https://rulesmate.com.au/regulators/acic
Jurisdiction: CWLTH
Website: https://acic.gov.au

Federal criminal intelligence agency — national criminal history checks, AusCheck.

Scope: criminal-intelligence, police-checks

### CDPP — Commonwealth Director of Public Prosecutions
URL: https://rulesmate.com.au/regulators/cdpp
Jurisdiction: CWLTH
Website: https://cdpp.gov.au

Independent prosecutor of federal offences — corporate crime, fraud, tax, AML.

Scope: criminal-prosecution

### ARENA — Australian Renewable Energy Agency
URL: https://rulesmate.com.au/regulators/anrowsh
Jurisdiction: CWLTH
Website: https://arena.gov.au

Federal funding agency for renewable energy + hydrogen + grid-scale storage projects.

Scope: renewable-energy, hydrogen, grants

### CEFC — Clean Energy Finance Corporation
URL: https://rulesmate.com.au/regulators/cefc
Jurisdiction: CWLTH
Website: https://cefc.com.au

Government-owned financier of clean energy + emissions reduction projects.

Scope: clean-energy, investment

### AER — Australian Energy Regulator
URL: https://rulesmate.com.au/regulators/ic-aer
Jurisdiction: CWLTH
Website: https://aer.gov.au

National energy market regulator — electricity + gas networks, retail authorisations, wholesale markets.

Scope: energy, electricity, gas, consumer-protection

### AEMC — Australian Energy Market Commission
URL: https://rulesmate.com.au/regulators/aemc
Jurisdiction: CWLTH
Website: https://aemc.gov.au

Rule-maker for the national electricity + gas markets.

Scope: energy, market-rules

### AEMO — Australian Energy Market Operator
URL: https://rulesmate.com.au/regulators/aemo
Jurisdiction: CWLTH
Website: https://aemo.com.au

Operator of national electricity + gas markets + system planning.

Scope: energy, market-operations, grid

### ATSB — Australian Transport Safety Bureau
URL: https://rulesmate.com.au/regulators/atsb
Jurisdiction: CWLTH
Website: https://atsb.gov.au

Independent investigator of aviation, marine + rail safety occurrences.

Scope: transport-safety, investigation

### ASQA — Australian Skills Quality Authority
URL: https://rulesmate.com.au/regulators/asqa
Jurisdiction: CWLTH
Website: https://asqa.gov.au

National VET regulator for RTOs + CRICOS providers.

Scope: vet, rto, cricos

### ITO — Inspector-General of Taxation and Taxation Ombudsman
URL: https://rulesmate.com.au/regulators/afsa-tax-ombudsman
Jurisdiction: CWLTH
Website: https://igt.gov.au

Independent statutory office investigating tax administration + ATO conduct.

Scope: tax-administration, ombudsman

### NSW Anti-Slavery Commissioner — NSW Anti-Slavery Commissioner
URL: https://rulesmate.com.au/regulators/anti-slavery-commissioner-nsw
Jurisdiction: NSW
Website: https://www.antislavery.nsw.gov.au

First state-level Anti-Slavery Commissioner — NSW Modern Slavery Act 2018.

Scope: modern-slavery, supply-chain

### DES Qld — Queensland Department of Environment, Science and Innovation
URL: https://rulesmate.com.au/regulators/epa-qld
Jurisdiction: QLD
Website: https://environment.des.qld.gov.au

QLD environmental regulator — environmental authorities, contaminated land, biosecurity.

Scope: environment, pollution, contamination

### EPA WA — Western Australian Environmental Protection Authority
URL: https://rulesmate.com.au/regulators/epa-wa
Jurisdiction: WA
Website: https://epa.wa.gov.au

WA environmental impact assessment + advisory body.

Scope: environment, impact-assessment

### EPA SA — South Australian Environment Protection Authority
URL: https://rulesmate.com.au/regulators/epa-sa
Jurisdiction: SA
Website: https://epa.sa.gov.au

SA environmental regulator — pollution, waste, environmental authorities.

Scope: environment, pollution, waste

### EPA Tas — Tasmanian Environment Protection Authority
URL: https://rulesmate.com.au/regulators/epa-tas
Jurisdiction: TAS
Website: https://epa.tas.gov.au

Tasmanian environmental regulator.

Scope: environment

### Service NSW — Service NSW
URL: https://rulesmate.com.au/regulators/service-nsw
Jurisdiction: NSW
Website: https://service.nsw.gov.au

NSW business + personal licensing portal — registrations, renewals, mygov-NSW.

Scope: state-licensing

### Service Victoria — Service Victoria
URL: https://rulesmate.com.au/regulators/service-vic
Jurisdiction: VIC
Website: https://service.vic.gov.au

Vic business + personal licensing portal — registrations + renewals + permits.

Scope: state-licensing

### VCGLR — Victorian Commission for Gambling and Liquor Regulation
URL: https://rulesmate.com.au/regulators/vcglr
Jurisdiction: VIC
Website: https://vcglr.vic.gov.au

Vic gambling + liquor licensing regulator. Renamed VGCCC for casino-specific functions.

Scope: gambling, liquor, casino

### Liquor & Gaming NSW — Liquor and Gaming NSW
URL: https://rulesmate.com.au/regulators/liquor-and-gaming-nsw
Jurisdiction: NSW
Website: https://www.liquorandgaming.nsw.gov.au

NSW liquor + gambling regulator + casino oversight.

Scope: liquor, gambling, casino

### OLGR Qld — Office of Liquor and Gaming Regulation (Queensland)
URL: https://rulesmate.com.au/regulators/olgr-qld
Jurisdiction: QLD
Website: https://www.business.qld.gov.au/industries/hospitality-tourism-sport/liquor-gaming

Queensland liquor + gaming regulator.

Scope: liquor, gambling

### Law Society NSW — Law Society of NSW
URL: https://rulesmate.com.au/regulators/lspc-nsw
Jurisdiction: NSW
Website: https://lawsociety.com.au

NSW peak body + co-regulator of solicitor profession (with NSW Bar Association).

Scope: legal-profession, ethics, cpd

### VLSB+C — Victorian Legal Services Board + Commissioner
URL: https://rulesmate.com.au/regulators/lsb-vic
Jurisdiction: VIC
Website: https://lsbc.vic.gov.au

Vic legal services regulator — admissions, trust accounts, complaints.

Scope: legal-profession, trust-accounts

### QLS — Queensland Law Society
URL: https://rulesmate.com.au/regulators/lpb-qld
Jurisdiction: QLD
Website: https://qls.com.au

QLD peak body + co-regulator of solicitor profession.

Scope: legal-profession

### NCAT — NSW Civil and Administrative Tribunal
URL: https://rulesmate.com.au/regulators/ncat
Jurisdiction: NSW
Website: https://ncat.nsw.gov.au

NSW tribunal — consumer + commercial disputes, administrative review, occupational discipline.

Scope: tribunal, disputes

### VCAT — Victorian Civil and Administrative Tribunal
URL: https://rulesmate.com.au/regulators/vcat
Jurisdiction: VIC
Website: https://vcat.vic.gov.au

Vic tribunal — administrative review, consumer + property disputes, planning + environment.

Scope: tribunal, disputes, planning

### QCAT — Queensland Civil and Administrative Tribunal
URL: https://rulesmate.com.au/regulators/qcat
Jurisdiction: QLD
Website: https://www.qcat.qld.gov.au

QLD tribunal — administrative + consumer + commercial + child protection + occupational discipline.

Scope: tribunal, disputes

### PHIO — Private Health Insurance Ombudsman
URL: https://rulesmate.com.au/regulators/iciq-private-health
Jurisdiction: CWLTH
Website: https://privatehealth.gov.au

EDR scheme for private health insurance complaints.

Scope: edr, private-health-insurance

### OAGE — Office of the Aged Care Quality and Safety Advisory Council
URL: https://rulesmate.com.au/regulators/ic-aged-care-quality
Jurisdiction: CWLTH
Website: https://agedcarequality.gov.au

Advisory body to ACQSC + Minister on aged care quality matters.

Scope: aged-care, advisory

### NDIA — National Disability Insurance Agency
URL: https://rulesmate.com.au/regulators/ndis-tax-practitioners
Jurisdiction: CWLTH
Website: https://ndis.gov.au

Federal agency administering the NDIS — funding, planning, provider payments.

Scope: ndis, funding

### SIA — Sport Integrity Australia
URL: https://rulesmate.com.au/regulators/anti-doping-sport
Jurisdiction: CWLTH
Website: https://www.sportintegrity.gov.au

Federal sport integrity agency — anti-doping, match-fixing, child safeguarding in sport.

Scope: sport, anti-doping, integrity

### ASRP — ASIC + APRA joint operation on Royal Commission recommendations
URL: https://rulesmate.com.au/regulators/vacancy-rba-asic-investor-protection
Jurisdiction: CWLTH
Website: https://asic.gov.au

Ongoing joint regulatory work between ASIC + APRA implementing Royal Commission outcomes.

Scope: financial-services, royal-commission

### Australian Charities Foundation — Australian Council for International Development (peak NGO body)
URL: https://rulesmate.com.au/regulators/rbf-fundraising
Jurisdiction: CWLTH
Website: https://acfid.asn.au

Peak body for Australian NGOs operating internationally; ACFID Code of Conduct.

Scope: charities, international

### NHPOPC — National Health Practitioner Ombudsman + Privacy Commissioner
URL: https://rulesmate.com.au/regulators/aphra-naphsa
Jurisdiction: CWLTH
Website: https://nhpo.gov.au

Reviews AHPRA + the National Boards' handling of complaints + administrative actions.

Scope: health-practitioners, ombudsman

### EWOV — Energy and Water Ombudsman (Victoria)
URL: https://rulesmate.com.au/regulators/vic-energy-water-ombudsman
Jurisdiction: VIC
Website: https://ewov.com.au

Vic EDR scheme for energy + water disputes.

Scope: edr, energy, water

### IPART — Independent Pricing and Regulatory Tribunal NSW
URL: https://rulesmate.com.au/regulators/ipart-nsw
Jurisdiction: NSW
Website: https://ipart.nsw.gov.au

NSW independent regulator — utility pricing, transport pricing, taxi licensing.

Scope: pricing, utilities, transport

### QCA — Queensland Competition Authority
URL: https://rulesmate.com.au/regulators/qld-competition-authority
Jurisdiction: QLD
Website: https://qca.org.au

QLD independent economic regulator — pricing, access regulation, taxi licensing.

Scope: pricing, competition

### ESC — Essential Services Commission (Victoria)
URL: https://rulesmate.com.au/regulators/essential-services-vic
Jurisdiction: VIC
Website: https://www.esc.vic.gov.au

Vic economic regulator — energy, water, transport, government-funded scheme pricing.

Scope: pricing, utilities

### ESCOSA — Essential Services Commission of South Australia
URL: https://rulesmate.com.au/regulators/essc-sa
Jurisdiction: SA
Website: https://www.escosa.sa.gov.au

SA economic regulator — energy, water, ports, rail.

Scope: pricing, utilities

### FIRB — Foreign Investment Review Board
URL: https://rulesmate.com.au/regulators/afsa-foreign-investment
Jurisdiction: CWLTH
Website: https://firb.gov.au

Advises Treasurer on foreign investment proposals under the Foreign Acquisitions and Takeovers Act 1975.

Scope: foreign-investment, national-security

### AFMA — Australian Fisheries Management Authority
URL: https://rulesmate.com.au/regulators/afmaf
Jurisdiction: CWLTH
Website: https://www.afma.gov.au

Federal regulator of Commonwealth-managed fisheries — concessions, quotas, observers.

Scope: fisheries

### ABF — Australian Border Force
URL: https://rulesmate.com.au/regulators/abf
Jurisdiction: CWLTH
Website: https://abf.gov.au

Federal border enforcement — customs, immigration enforcement, anti-smuggling.

Scope: customs, imports, border

### SBSCH — Small Business Superannuation Clearing House (ATO)
URL: https://rulesmate.com.au/regulators/ato-sbsch
Jurisdiction: CWLTH
Website: https://ato.gov.au/businesses-and-organisations/super-for-employers

Free ATO service for SMBs to pay super to multiple funds. Closes 1 July 2026 with Payday Super.

Scope: super, smb

### CDR — Consumer Data Right (ACCC + OAIC joint admin)
URL: https://rulesmate.com.au/regulators/iconsumer-data-right
Jurisdiction: CWLTH
Website: https://cdr.gov.au

Open Banking + Open Energy + (forthcoming) Open Telecom under Pt IVD CCA 2010.

Scope: cdr, open-banking, privacy

### Racing NSW — Racing NSW
URL: https://rulesmate.com.au/regulators/racing-nsw
Jurisdiction: NSW
Website: https://racingnsw.com.au

NSW thoroughbred racing regulator.

Scope: racing, wagering

### Racing Victoria — Racing Victoria
URL: https://rulesmate.com.au/regulators/racing-victoria
Jurisdiction: VIC
Website: https://www.racingvictoria.com.au

Vic thoroughbred racing regulator.

Scope: racing

### Building Commission NSW — Building Commission NSW
URL: https://rulesmate.com.au/regulators/nsw-building-commissioner
Jurisdiction: NSW
Website: https://www.nsw.gov.au/housing-and-construction/building-commission-nsw

NSW residential building regulator — created post-Opal Tower, Mascot Towers.

Scope: building, construction, residential

### VBA — Victorian Building Authority
URL: https://rulesmate.com.au/regulators/vba-vic-building-authority
Jurisdiction: VIC
Website: https://www.vba.vic.gov.au

Vic building regulator — registration, audits, enforcement.

Scope: building, construction

### QBCC — Queensland Building and Construction Commission
URL: https://rulesmate.com.au/regulators/qbcc-qld-building
Jurisdiction: QLD
Website: https://www.qbcc.qld.gov.au

QLD building licensing, dispute resolution, home warranty insurance.

Scope: building, construction

### Inspector-General of Taxation — Inspector-General of Taxation and Taxation Ombudsman
URL: https://rulesmate.com.au/regulators/iaa
Jurisdiction: CWLTH
Website: https://igt.gov.au

Independent statutory office reviewing systemic tax administration issues + investigating taxpayer complaints.

Scope: tax, complaints, review

### ASBFEO — Australian Small Business and Family Enterprise Ombudsman
URL: https://rulesmate.com.au/regulators/asbfeo
Jurisdiction: CWLTH
Website: https://asbfeo.gov.au

Independent advocate for small business; assists with disputes + advocates for small business in policy.

Scope: small-business, disputes

### AFMA — Australian Fisheries Management Authority
URL: https://rulesmate.com.au/regulators/afmw
Jurisdiction: CWLTH
Website: https://afma.gov.au

Manages Commonwealth-managed fisheries; sustainability + compliance.

Scope: fisheries

### AMSA — Australian Maritime Safety Authority
URL: https://rulesmate.com.au/regulators/amsa
Jurisdiction: CWLTH
Website: https://amsa.gov.au

Maritime safety, environment + national plan for maritime emergencies.

Scope: maritime, shipping

### ATSB — Australian Transport Safety Bureau
URL: https://rulesmate.com.au/regulators/atsbiy
Jurisdiction: CWLTH
Website: https://atsb.gov.au

Independent investigator of aviation, rail + maritime accidents; no-blame focus.

Scope: aviation, rail, maritime, safety

### Inspector-General of Live Animal Exports — Inspector-General of Live Animal Exports
URL: https://rulesmate.com.au/regulators/icc
Jurisdiction: CWLTH
Website: https://igliveanimalexports.gov.au

Independent review of live animal export oversight by the Department.

Scope: agriculture, live-export

### FDF — Future Drought Fund
URL: https://rulesmate.com.au/regulators/ic-fdf
Jurisdiction: CWLTH
Website: https://www.agriculture.gov.au/agriculture-land/farm-food-drought/drought/future-drought-fund

Federal investment fund for drought resilience programs.

Scope: agriculture, drought

### RAVE Inspector — Office of the Inspector of Auditor-General for Defence
URL: https://rulesmate.com.au/regulators/ic-arvw
Jurisdiction: CWLTH
Website: https://www.anao.gov.au

Independent audit oversight of Defence procurement + sustainment.

Scope: defence

### APVMA — Australian Pesticides and Veterinary Medicines Authority
URL: https://rulesmate.com.au/regulators/australian-pesticides-veterinary
Jurisdiction: CWLTH
Website: https://apvma.gov.au

Federal regulator of agricultural + veterinary chemicals (registration + permits).

Scope: chemicals, agriculture, veterinary

### AO — Australian Organic Limited
URL: https://rulesmate.com.au/regulators/australian-organic
Jurisdiction: CWLTH
Website: https://austorganic.com

Industry body administering Australian Certified Organic standard.

Scope: organic, certification

### IPA — Institute of Public Accountants
URL: https://rulesmate.com.au/regulators/ipa
Jurisdiction: CWLTH
Website: https://publicaccountants.org.au

Professional accounting body; co-regulates with FRC + APESB.

Scope: accountants, professional-body

### CA ANZ — Chartered Accountants Australia and New Zealand
URL: https://rulesmate.com.au/regulators/icaa
Jurisdiction: CWLTH
Website: https://charteredaccountantsanz.com

Professional accounting body; sets membership standards + CPD; co-regulator under APES.

Scope: accountants, professional-body

### CPA Australia — CPA Australia
URL: https://rulesmate.com.au/regulators/cpa
Jurisdiction: CWLTH
Website: https://cpaaustralia.com.au

Professional accounting body; sets membership standards + CPD; co-regulator under APES.

Scope: accountants, professional-body

### Law Council — Law Council of Australia
URL: https://rulesmate.com.au/regulators/law-council
Jurisdiction: CWLTH
Website: https://lawcouncil.au

Peak national body for the legal profession; coordinates state law societies.

Scope: legal-profession

### RACGP — Royal Australian College of General Practitioners
URL: https://rulesmate.com.au/regulators/racgp
Jurisdiction: CWLTH
Website: https://racgp.org.au

Professional body for Australian GPs; CPD + Fellowship.

Scope: health-practitioners, general-practice

### AHHA — Australian Healthcare and Hospitals Association
URL: https://rulesmate.com.au/regulators/ahha
Jurisdiction: CWLTH
Website: https://ahha.asn.au

Peak body for public + not-for-profit hospitals + community health services.

Scope: healthcare

### AIHW — Australian Institute of Health and Welfare
URL: https://rulesmate.com.au/regulators/ic-aih
Jurisdiction: CWLTH
Website: https://aihw.gov.au

National agency providing authoritative information on Australian health + welfare.

Scope: health, statistics

### ABS — Australian Bureau of Statistics
URL: https://rulesmate.com.au/regulators/abs
Jurisdiction: CWLTH
Website: https://abs.gov.au

National statistical agency; censuses, business + labour stats. Mandatory data collection powers.

Scope: statistics, census

### ABCC (abolished 2023) — Australian Building and Construction Commission
URL: https://rulesmate.com.au/regulators/fwbc
Jurisdiction: CWLTH
Website: https://www.fairwork.gov.au/find-help-for/building-and-construction-industry

Abolished 6 February 2023 — functions transferred to FWO Construction Compliance Team + state agencies.

Scope: construction, industrial-relations

### AQIS / DAFF Biosecurity — Department of Agriculture, Fisheries and Forestry — Biosecurity
URL: https://rulesmate.com.au/regulators/qcie
Jurisdiction: CWLTH
Website: https://www.agriculture.gov.au/biosecurity-trade

Federal biosecurity regulator at the border + post-border.

Scope: biosecurity, imports, agriculture

### Revenue NSW — duties — Revenue NSW (duties + foreign surcharges)
URL: https://rulesmate.com.au/regulators/nsw-state-revenue
Jurisdiction: NSW
Website: https://revenue.nsw.gov.au

NSW stamp duties, land tax, foreign surcharges, payroll tax administration.

Scope: tax, duties, land-tax

### QRO — Queensland Revenue Office
URL: https://rulesmate.com.au/regulators/qld-osr
Jurisdiction: QLD
Website: https://qro.qld.gov.au

Queensland state taxes — payroll, duties, land tax, mining royalties.

Scope: tax, duties, land-tax

### Revenue WA — RevenueWA (Department of Finance)
URL: https://rulesmate.com.au/regulators/wa-osr
Jurisdiction: WA
Website: https://wa.gov.au/organisation/department-of-finance/revenuewa

Western Australia state taxes — payroll, duties, land tax, mining royalties.

Scope: tax, duties

### RevenueSA — RevenueSA
URL: https://rulesmate.com.au/regulators/sa-rev
Jurisdiction: SA
Website: https://revenuesa.sa.gov.au

South Australian state taxes — payroll, duties, land tax.

Scope: tax, duties

### SRO Tas — Tasmanian State Revenue Office
URL: https://rulesmate.com.au/regulators/tas-rev
Jurisdiction: TAS
Website: https://sro.tas.gov.au

Tasmanian state taxes — payroll, duties, land tax.

Scope: tax, duties

### ACT Revenue Office — ACT Revenue Office
URL: https://rulesmate.com.au/regulators/act-rev
Jurisdiction: ACT
Website: https://revenue.act.gov.au

ACT taxes — payroll, duties, land tax, rates.

Scope: tax, duties

### NT Treasury — Northern Territory Department of Treasury and Finance
URL: https://rulesmate.com.au/regulators/nt-treasury
Jurisdiction: NT
Website: https://treasury.nt.gov.au

NT taxes — payroll, duties, land tax-equivalent.

Scope: tax, duties

### TCFUA — Textile, Clothing and Footwear Union of Australia
URL: https://rulesmate.com.au/regulators/tcfui
Jurisdiction: CWLTH
Website: https://cfmeu.org.au/textile-clothing-and-footwear-union

Union enforces contract outwork TCF Award provisions.

Scope: textiles, outwork

### Strata Community Association — Strata Community Association
URL: https://rulesmate.com.au/regulators/msi-c
Jurisdiction: NSW
Website: https://strata.community

Peak body for strata managing agents; co-regulator with Fair Trading.

Scope: strata, real-estate

### REIA — Real Estate Institute of Australia
URL: https://rulesmate.com.au/regulators/rei-aus
Jurisdiction: CWLTH
Website: https://reia.com.au

National peak body coordinating state REI bodies.

Scope: real-estate

### REINSW — Real Estate Institute of New South Wales
URL: https://rulesmate.com.au/regulators/rei-nsw
Jurisdiction: NSW
Website: https://reinsw.com.au

NSW peak body for real estate agents; CPD + Code of Conduct.

Scope: real-estate

### REIV — Real Estate Institute of Victoria
URL: https://rulesmate.com.au/regulators/rei-vic
Jurisdiction: VIC
Website: https://reiv.com.au

VIC peak body for real estate agents; CPD + Code of Conduct.

Scope: real-estate

### REIQ — Real Estate Institute of Queensland
URL: https://rulesmate.com.au/regulators/rei-qld
Jurisdiction: QLD
Website: https://reiq.com

QLD peak body for real estate agents; CPD + Code of Conduct.

Scope: real-estate

### CMAA — Club Managers' Association Australia
URL: https://rulesmate.com.au/regulators/cmaa
Jurisdiction: CWLTH
Website: https://cmaa.asn.au

Industry body for licensed club managers; CPD + Code of Ethics.

Scope: hospitality, gaming

### AHA Qld — Australian Hotels Association (Queensland)
URL: https://rulesmate.com.au/regulators/ahaq
Jurisdiction: QLD
Website: https://qha.org.au

Industry body for Queensland hotels + pubs; member services + advocacy.

Scope: hospitality, liquor

### AHA NSW — Australian Hotels Association (NSW)
URL: https://rulesmate.com.au/regulators/aha-nsw
Jurisdiction: NSW
Website: https://ahansw.com.au

Industry body for NSW hotels + pubs.

Scope: hospitality, liquor

### NRA — National Retail Association
URL: https://rulesmate.com.au/regulators/nra
Jurisdiction: CWLTH
Website: https://nra.net.au

Industry body for retail employers; ER + compliance services.

Scope: retail

### ARA — Australian Retailers Association
URL: https://rulesmate.com.au/regulators/ara
Jurisdiction: CWLTH
Website: https://retail.org.au

Peak retail industry body.

Scope: retail

### Aged Care Industry Association — Aged & Community Care Providers Association
URL: https://rulesmate.com.au/regulators/agc
Jurisdiction: CWLTH
Website: https://accpa.asn.au

Peak body for aged + community care providers (formed Mar 2022 from merger of ACSA + LASA).

Scope: aged-care

### ASU — Australian Services Union
URL: https://rulesmate.com.au/regulators/asu
Jurisdiction: CWLTH
Website: https://asu.org.au

Major union covering social + community services + clerical/admin.

Scope: unions, community-services

### ANMF — Australian Nursing and Midwifery Federation
URL: https://rulesmate.com.au/regulators/anmf
Jurisdiction: CWLTH
Website: https://anmf.org.au

Federally registered union for nurses + midwives.

Scope: unions, nursing

### APC — Australian Press Council
URL: https://rulesmate.com.au/regulators/ipa-press
Jurisdiction: CWLTH
Website: https://presscouncil.org.au

Self-regulatory body for print + online publishers; Statement of Principles.

Scope: media, press-regulation

### ITSA / AFSA (deceased estates) — AFSA — Personal Insolvency Trustee Practice
URL: https://rulesmate.com.au/regulators/ic-bdec
Jurisdiction: CWLTH
Website: https://afsa.gov.au

AFSA also regulates registered trustees in bankruptcy + debt agreements.

Scope: insolvency, bankruptcy

### CAV — Consumer Affairs Victoria
URL: https://rulesmate.com.au/regulators/ic-vic-cav
Jurisdiction: VIC
Website: https://consumer.vic.gov.au

VIC consumer protection regulator + business licensing (real estate, motor car traders, conveyancers, owners corps).

Scope: consumer-protection, licensing

### CM Vic — Commission for Children and Young People (Victoria)
URL: https://rulesmate.com.au/regulators/ic-vic-cm
Jurisdiction: VIC
Website: https://ccyp.vic.gov.au

VIC commissioner for children; oversees Reportable Conduct + Child Safe Standards.

Scope: child-safety, reportable-conduct

### OCG NSW — Office of the Children's Guardian (NSW)
URL: https://rulesmate.com.au/regulators/ic-nsw-occ
Jurisdiction: NSW
Website: https://ocg.nsw.gov.au

NSW WWCC issuer; Reportable Conduct Scheme; Child Safe Scheme.

Scope: child-safety, wwcc

### Blue Card Services — Blue Card Services (Queensland)
URL: https://rulesmate.com.au/regulators/ic-qld-bdsls
Jurisdiction: QLD
Website: https://qld.gov.au/families/getting-help/blue-card

QLD WWCC equivalent (Blue Card) administration + child-related employment screening.

Scope: child-safety, wwcc

### VIC WWCC — Working with Children Check Victoria
URL: https://rulesmate.com.au/regulators/ic-vic-wwcc
Jurisdiction: VIC
Website: https://service.vic.gov.au/services/working-with-children

VIC WWCC administration.

Scope: child-safety, wwcc

### FRV / CFA — Fire Rescue Victoria + Country Fire Authority
URL: https://rulesmate.com.au/regulators/ic-vic-vsfm
Jurisdiction: VIC
Website: https://frv.vic.gov.au

VIC fire services + Essential Safety Measures audits + compliance.

Scope: fire-safety, esm

### FRNSW — Fire and Rescue NSW
URL: https://rulesmate.com.au/regulators/ic-nsw-fnsw
Jurisdiction: NSW
Website: https://fire.nsw.gov.au

NSW fire service + fire safety statement audits + compliance.

Scope: fire-safety

### QFD — Queensland Fire Department
URL: https://rulesmate.com.au/regulators/ic-qld-qfes
Jurisdiction: QLD
Website: https://fire.qld.gov.au

QLD fire service + fire safety compliance + emergency management.

Scope: fire-safety, emergency

### SafeWork ACT — WorkSafe ACT
URL: https://rulesmate.com.au/regulators/ic-ic-osha
Jurisdiction: ACT
Website: https://worksafe.act.gov.au

ACT WHS regulator.

Scope: whs

### NT WorkSafe — NT WorkSafe
URL: https://rulesmate.com.au/regulators/ic-nt-worksafe
Jurisdiction: NT
Website: https://worksafe.nt.gov.au

NT WHS regulator.

Scope: whs

### Mining Warden NSW — Resources Regulator (NSW)
URL: https://rulesmate.com.au/regulators/ic-mining-warden
Jurisdiction: NSW
Website: https://resourcesregulator.nsw.gov.au

NSW mine safety + petroleum + extractives regulator.

Scope: mining, whs

### RSHQ — Resources Safety and Health Queensland
URL: https://rulesmate.com.au/regulators/ic-mining-qld
Jurisdiction: QLD
Website: https://rshq.qld.gov.au

QLD mining + petroleum + explosives safety + health regulator.

Scope: mining, whs

### DWER WA — Department of Water and Environmental Regulation (WA)
URL: https://rulesmate.com.au/regulators/ic-dwer-wa
Jurisdiction: WA
Website: https://dwer.wa.gov.au

WA water + environment regulator including EPA Act 1986 functions.

Scope: environment, water

### EPA SA — South Australia EPA
URL: https://rulesmate.com.au/regulators/ic-environment-sa
Jurisdiction: SA
Website: https://epa.sa.gov.au

SA environmental regulator under EP Act 1993 (SA).

Scope: environment, waste, water

### EPA Tas — Tasmanian EPA
URL: https://rulesmate.com.au/regulators/ic-environment-tas
Jurisdiction: TAS
Website: https://epa.tas.gov.au

Tasmanian environmental regulator under EMPCA 1994.

Scope: environment, waste

### NT EPA — Northern Territory EPA
URL: https://rulesmate.com.au/regulators/ic-environment-nt
Jurisdiction: NT
Website: https://ntepa.nt.gov.au

Northern Territory environmental regulator.

Scope: environment, waste

### EPA ACT — Environment Protection Authority ACT
URL: https://rulesmate.com.au/regulators/ic-environment-act
Jurisdiction: ACT
Website: https://environment.act.gov.au/environment-protection-authority-epa

ACT environmental regulator under EP Act 1997 (ACT).

Scope: environment, waste

### PM&C — Department of the Prime Minister and Cabinet
URL: https://rulesmate.com.au/regulators/ic-pmc
Jurisdiction: CWLTH
Website: https://pmc.gov.au

Central federal department; whole-of-government coordination + Cabinet support.

Scope: public-sector

### Treasury — Department of the Treasury
URL: https://rulesmate.com.au/regulators/ic-treasury-cwlth
Jurisdiction: CWLTH
Website: https://treasury.gov.au

Federal economic + financial policy; markets policy + revenue + corporate law.

Scope: economic-policy, tax-policy

### Finance — Department of Finance
URL: https://rulesmate.com.au/regulators/ic-finance-cwlth
Jurisdiction: CWLTH
Website: https://finance.gov.au

Federal budget + procurement + PGPA Act administration + Commonwealth property.

Scope: public-sector, procurement

### AGD — Attorney-General's Department
URL: https://rulesmate.com.au/regulators/ic-attorney-general
Jurisdiction: CWLTH
Website: https://ag.gov.au

Federal legal policy + administration of justice + national security law + privacy + FOI.

Scope: legal-policy, national-security, privacy

### DSS — Department of Social Services
URL: https://rulesmate.com.au/regulators/ic-finance-stop-ds
Jurisdiction: CWLTH
Website: https://dss.gov.au

Federal department for social services + NDIS + Centrelink program design.

Scope: social-services

### Health — Department of Health, Disability and Ageing
URL: https://rulesmate.com.au/regulators/ic-finance-stop-h
Jurisdiction: CWLTH
Website: https://health.gov.au

Federal department for health + aged care + disability policy.

Scope: health, aged-care

### Education — Department of Education
URL: https://rulesmate.com.au/regulators/ic-finance-stop-edu
Jurisdiction: CWLTH
Website: https://education.gov.au

Federal department for early childhood, schools + higher education policy.

Scope: education

---

## Obligations (392)

### Enrol with AUSTRAC as a reporting entity
URL: https://rulesmate.com.au/obligations/aml-ctf-enrolment
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-07-01
Enforced by: austrac
Source Acts: anti-money-laundering-and-counter-terrorism-financing-act-2006

> Tranche 2 entities must enrol with AUSTRAC by 29 July 2026.

From 1 July 2026, Tranche 2 expansion captures real estate agents, accountants, lawyers, conveyancers, trust & company service providers, and precious metals dealers when providing 'designated services'. Enrolment opens 31 March 2026; new reporting entities must complete AUSTRAC enrolment within 28 days of first providing a designated service. Failure to enrol attracts a daily penalty.

**Who must comply:** Any entity providing a 'designated service' as defined in the AML/CTF Act 2006, including the six Tranche 2 sectors from 1 July 2026.
**What triggers it:** Providing a designated service for the first time, or being captured by Tranche 2 reforms from 1 July 2026.
**When due:** Within 28 days of first providing a designated service. New Tranche 2 entities: 29 July 2026 deadline.
**Evidence:** AUSTRAC reporting entity enrolment confirmation, business activity profile, key personnel attestations.
**Max penalty:** $19,800 per day for non-enrolment (continuing offence)
**Source:** https://austrac.gov.au/business/core-guidance/aml-ctf-program

### Maintain a written AML/CTF program
URL: https://rulesmate.com.au/obligations/aml-ctf-program
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-07-01
Enforced by: austrac
Source Acts: anti-money-laundering-and-counter-terrorism-financing-act-2006

> Every reporting entity needs a documented AML/CTF program — Part A risk + Part B systems.

A reporting entity must adopt and maintain a written AML/CTF program covering: an ML/TF risk assessment (Part A), customer identification and KYC procedures (Part B), employee due diligence, ongoing customer due diligence, transaction monitoring, board/senior management approval, AML/CTF compliance officer designation, independent review, and ongoing training. Tranche 2 entities must have a compliant program before providing any designated service from 1 July 2026.

**Who must comply:** All AUSTRAC reporting entities.
**What triggers it:** Becoming a reporting entity.
**When due:** Before providing the first designated service. Maintained on an ongoing basis with annual independent review.
**Evidence:** Written program document, board approval minutes, risk assessment, training records, independent review report.
**Max penalty:** Up to $33M per civil penalty contravention (corporations) or 5 years imprisonment for criminal offences
**Source:** https://austrac.gov.au/business/core-guidance/aml-ctf-program

### Customer due diligence (KYC) on every customer
URL: https://rulesmate.com.au/obligations/cdd
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: austrac
Source Acts: anti-money-laundering-and-counter-terrorism-financing-act-2006

> Identify and verify every customer (and beneficial owner) before providing a designated service.

Reporting entities must collect and verify customer identification information before providing a designated service. For non-individuals, beneficial owners (≥25% control or ownership) must be identified. Enhanced due diligence applies to high-risk customers including PEPs, complex structures, and high-risk jurisdictions. Simplified due diligence is available for limited low-risk categories.

**Who must comply:** All AUSTRAC reporting entities.
**What triggers it:** Onboarding a customer for a designated service.
**When due:** Before providing the designated service. Ongoing for customer relationships.
**Evidence:** KYC records (identity documents, beneficial ownership), PEP/sanctions screening evidence, EDD documentation.
**Max penalty:** Each unverified customer can be a separate breach — up to $33M per contravention
**Source:** https://austrac.gov.au/business/core-guidance/customer-identification-and-verification

### Suspicious matter, threshold, and IFTI reporting to AUSTRAC
URL: https://rulesmate.com.au/obligations/smr-ttr-reporting
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: austrac
Source Acts: anti-money-laundering-and-counter-terrorism-financing-act-2006

> Lodge SMRs, TTRs ($10K+ cash), and IFTI reports via AUSTRAC Online.

Reporting entities must lodge: Suspicious Matter Reports (SMRs) within 3 business days of forming a suspicion (24 hours for terrorism financing), Threshold Transaction Reports (TTRs) within 10 business days for cash transactions ≥AUD 10,000, and International Funds Transfer Instruction (IFTI) reports within 10 business days. Reports are filed via AUSTRAC Online using XML-conformant uploads.

**Who must comply:** All AUSTRAC reporting entities.
**What triggers it:** Forming a suspicion (SMR), $10K+ cash transaction (TTR), or instructing/receiving an international funds transfer (IFTI).
**When due:** SMR: 3 business days (24h terrorism). TTR & IFTI: 10 business days.
**Evidence:** AUSTRAC Online submission receipts, transaction records, suspicion-formation file note.
**Max penalty:** Up to 2 years imprisonment for criminal tipping-off; civil penalties up to $33M
**Source:** https://austrac.gov.au/business/how-comply-and-report-guidance-and-resources/reporting

### Notify the OAIC and affected individuals of eligible data breaches
URL: https://rulesmate.com.au/obligations/ndb-notification
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> Eligible data breaches must be notified to OAIC and affected individuals 'as soon as practicable'.

Under Part IIIC of the Privacy Act, APP entities must notify the OAIC and affected individuals if there has been an eligible data breach — unauthorised access, disclosure, or loss of personal information that is likely to result in serious harm. The assessment must be completed within 30 days of becoming aware. From the 2024 amendments, statutory tort for serious invasions of privacy is now actionable.

**Who must comply:** All APP entities (Australian Government agencies and organisations with annual turnover >$3M, plus carved-in entities). Small business exemption is set to be removed by 10 December 2026.
**What triggers it:** An eligible data breach — unauthorised access/disclosure of personal information likely to cause serious harm.
**When due:** Notification 'as soon as practicable' after the entity is aware it is an eligible breach. Assessment within 30 days.
**Evidence:** Breach assessment record, OAIC notification, individual notification, remediation steps log.
**Max penalty:** Up to $50M, or 3× benefit, or 30% of adjusted turnover (whichever is greater) for serious or repeated interferences
**Source:** https://oaic.gov.au/privacy/notifiable-data-breaches

### Publish a Privacy Policy compliant with APP 1
URL: https://rulesmate.com.au/obligations/privacy-policy
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> Every APP entity needs a clearly-expressed Privacy Policy covering APP 1.4 requirements.

APP 1.3 requires every APP entity to have a clearly-expressed and up-to-date Privacy Policy. APP 1.4 prescribes minimum content: kinds of personal information collected, how it is collected and held, purposes, disclosure (including overseas), complaint handling, and access/correction processes. Policies must be made freely available.

**Who must comply:** All APP entities. From 10 December 2026, small business exemption removed — ~2M additional businesses captured.
**What triggers it:** Being an APP entity that handles personal information.
**When due:** Before collecting personal information. Reviewed regularly.
**Evidence:** Published Privacy Policy with version history.
**Max penalty:** Civil penalties up to $50M for serious or repeated interferences with privacy
**Source:** https://oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-quick-reference

### Prepare for the removal of the small business exemption
URL: https://rulesmate.com.au/obligations/privacy-act-small-business-exemption-removal
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-12-10
Enforced by: oaic
Source Acts: privacy-act-1988

> From 10 December 2026, businesses with <$3M turnover lose the Privacy Act exemption.

The Privacy and Other Legislation Amendment Act 2024 removes the small business exemption (s 6D) effective 10 December 2026. Approximately 2 million Australian SMBs become 'APP entities' overnight — requiring a Privacy Policy, lawful collection notices, NDB readiness, training, and access/correction processes. There is no exemption for sole traders, partnerships, or any size threshold once commenced.

**Who must comply:** Any business currently relying on the small business operator exemption.
**What triggers it:** Effective from 10 December 2026.
**When due:** 10 December 2026.
**Evidence:** Privacy Policy, collection notices, breach response plan, staff training records, data inventory.
**Max penalty:** Same penalty regime applies once exemption is removed.
**Source:** https://oaic.gov.au/privacy/privacy-legislation/the-privacy-act/privacy-reforms

### Apply for a Director Identification Number (Director ID)
URL: https://rulesmate.com.au/obligations/director-id
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: abrs, asic
Source Acts: corporations-act-2001

> Every director needs a Director ID before appointment — apply via ABRS.

All directors of Australian companies, registered foreign companies, and CATSI Act corporations must have a Director ID — a permanent 15-digit identifier issued by ABRS. New directors must apply before their appointment date; existing directors had a transitional deadline that has now passed. ASIC brought its first enforcement action in 2024.

**Who must comply:** All current and prospective directors of companies registered under the Corporations Act 2001 and CATSI Act corporations.
**What triggers it:** Appointment (or proposed appointment) as a director.
**When due:** Before appointment. New directors must apply via myGovID first.
**Evidence:** Director ID confirmation (15-digit number).
**Max penalty:** Civil penalties up to $1.11M; criminal $13,320 + 12 months imprisonment for failure to apply
**Source:** https://abrs.gov.au/director-identification-number

### Lodge the ASIC annual company statement and review fee
URL: https://rulesmate.com.au/obligations/asic-annual-review
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Every Australian company has an annual review date — confirm details and pay the fee.

ASIC issues each company an Annual Statement on its annual review date (the anniversary of registration). Directors must check details (registered office, directors, share structure, members), correct any errors, sign a solvency resolution, and pay the annual review fee within 2 months. Late fees apply ($96 up to 1 month, $401 thereafter).

**Who must comply:** All companies registered under the Corporations Act.
**What triggers it:** Annual review date (anniversary of incorporation).
**When due:** Solvency resolution within 2 months of annual review date; fees due 2 months after annual statement.
**Evidence:** Signed solvency resolution, proof of fee payment, updated ASIC records.
**Max penalty:** Late lodgement fees plus possible deregistration
**Source:** https://asic.gov.au/for-business/running-a-company/annual-statements/

### Comply with directors' general law and statutory duties
URL: https://rulesmate.com.au/obligations/directors-duties-180-183
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Directors owe duties of care and diligence (s 180), good faith (s 181), no improper use of position (s 182) or information (s 183).

Directors' duties under the Corporations Act 2001 (Cth) require directors to act with reasonable care and diligence, in good faith in the best interests of the company, not to improperly use their position or information for personal gain or to cause detriment, and to prevent insolvent trading. The business judgment rule (s 180(2)) provides a safe harbour for honest, informed decisions made in good faith.

**Who must comply:** All directors and officers of companies.
**What triggers it:** Holding office as a director or officer.
**When due:** Continuous obligation.
**Evidence:** Board minutes showing informed decision-making, registers of interests, conflict-management protocols.
**Max penalty:** Civil penalty up to $1.565M for individuals (15,000 penalty units), or 3× benefit; criminal for dishonest conduct
**Source:** https://asic.gov.au/for-business/running-a-company/company-officeholder-duties/

### Prevent insolvent trading (s 588G)
URL: https://rulesmate.com.au/obligations/solvent-trading
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Directors must prevent the company incurring debts while insolvent — or face personal liability.

Section 588G makes directors personally liable for debts incurred while a company is insolvent, or becomes insolvent by incurring the debt. Safe harbour (s 588GA) protects directors who develop a course of action reasonably likely to lead to a better outcome than immediate liquidation — provided employees are paid and tax obligations met. The simplified debt restructuring regime offers an alternative path for eligible small companies.

**Who must comply:** Directors of companies in financial distress.
**What triggers it:** Reasonable grounds to suspect insolvency.
**When due:** Immediately on suspicion of insolvency.
**Evidence:** Cash flow forecasts, board minutes, safe harbour adviser engagement, restructuring plan.
**Max penalty:** Civil penalty up to $1.565M (individuals), compensation orders to creditors, plus criminal liability for dishonest conduct
**Source:** https://asic.gov.au/regulatory-resources/insolvency/

### Pay superannuation on every payday (Payday Super)
URL: https://rulesmate.com.au/obligations/payday-super
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-07-01
Enforced by: ato
Source Acts: superannuation-guarantee-administration-act-1992

> From 1 July 2026, super must reach the employee's fund within 7 calendar days of each payday.

Payday Super replaces quarterly SG contributions. Employers must pay super on every payday at the qualifying earnings (QE) rate of 12%, with contributions reaching the fund within 7 calendar days. STP reports new QE and Super Liability fields. ATO cross-matches STP data against fund receipts in near real-time. The Small Business Super Clearing House closes 1 October 2025 (no new users) and decommissions fully on 1 July 2026.

**Who must comply:** All employers in Australia.
**What triggers it:** Paying an employee.
**When due:** Super contributions within 7 calendar days of each payday from 1 July 2026.
**Evidence:** STP submissions with QE/Super Liability fields, fund receipt confirmations, payroll system audit trail.
**Max penalty:** SGC interest at 10.38% p.a. (daily compounding), admin uplift up to 60%, additional penalty up to 200% of SGC. Not tax-deductible.
**Source:** https://ato.gov.au/businesses-and-organisations/super-for-employers/paying-super-contributions/payday-super

### Report under Single Touch Payroll Phase 2
URL: https://rulesmate.com.au/obligations/stp-phase-2
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: taxation-administration-act-1953

> Disaggregated payroll reporting to the ATO via STP-enabled software.

STP Phase 2 requires employers to disaggregate gross income into income types, allowances and deductions, and report new fields including employment basis, tax treatment code, and cessation reason. From 1 July 2026, Payday Super extends STP with QE and Super Liability fields. STP Phase 2 is the standard reporting method for all employers.

**Who must comply:** All employers.
**What triggers it:** Paying wages or salaries.
**When due:** On or before each payday.
**Evidence:** STP submissions in payroll software; ATO STP reports.
**Max penalty:** Failure to lodge on time penalties; PAYG withholding penalties for incorrect reporting
**Source:** https://ato.gov.au/businesses-and-organisations/hiring-and-paying-your-workers/single-touch-payroll/single-touch-payroll-for-employers/expanding-single-touch-payroll-phase-2

### Pay employees in accordance with the applicable modern award
URL: https://rulesmate.com.au/obligations/modern-award-compliance
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: fwo, fwc
Source Acts: fair-work-act-2009

> Apply the correct modern award rates, penalties, allowances, and overtime — wage theft is now criminal.

Employers must apply the correct modern award (or enterprise agreement) covering each employee, including minimum rates, penalty rates, overtime, allowances, and casual loading. From 1 January 2025, intentional underpayment is a criminal offence under the Fair Work Act, carrying up to 10 years imprisonment for individuals and 3× benefit penalties for corporations.

**Who must comply:** All national-system employers (most private-sector employers).
**What triggers it:** Employing staff covered by a modern award.
**When due:** Each pay cycle, ongoing.
**Evidence:** Time records, payslips matching award calculations, classification documentation.
**Max penalty:** Civil penalty up to $93,900 per breach (individuals) or $469,500 (corporations); criminal wage theft up to 10 years prison + 3× benefit
**Source:** https://fairwork.gov.au/pay-and-wages

### Honour employees' right to disconnect (s 333M)
URL: https://rulesmate.com.au/obligations/right-to-disconnect
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fwc, fwo
Source Acts: fair-work-act-2009

> Employees can refuse to monitor, read, or respond to out-of-hours contact unless refusal is unreasonable.

Section 333M of the Fair Work Act (in force since August 2024 for medium/large employers; August 2025 for small business) gives employees the right to refuse out-of-hours work contact from employers or third parties unless that refusal would be unreasonable. The FWC can make stop orders. Workplace policies should set expectations.

**Who must comply:** All national-system employers.
**What triggers it:** Contacting employees outside their ordinary working hours.
**When due:** Ongoing.
**Evidence:** Workplace policy covering right to disconnect, after-hours contact protocols.
**Max penalty:** Civil penalty for breach of FWC stop order — up to $19K per contravention
**Source:** https://fwc.gov.au/issues-we-help/protections-disputes/right-disconnect

### Manage psychosocial hazards at work
URL: https://rulesmate.com.au/obligations/psychosocial-hazards
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: safe-work-australia, worksafe-vic, safework-nsw, whs-qld, safework-sa, worksafe-wa, worksafe-tas, worksafe-act, ntworksafe, comcare
Source Acts: work-health-and-safety-act-2011

> WHS duty extends to psychosocial hazards — workload, bullying, harassment, role conflict.

Model WHS Regulation 55A (adopted in most states) requires PCBUs to identify, assess, and control psychosocial hazards including high job demands, low support, role conflict, harmful behaviours, and exposure to traumatic events. Safe Work Australia's model code and state codes (e.g. Vic Compliance Code, NSW Code of Practice) set the standard.

**Who must comply:** All PCBUs (persons conducting a business or undertaking).
**What triggers it:** Conducting a business or undertaking with workers.
**When due:** Continuous WHS duty.
**Evidence:** Risk assessment, consultation records, control measures, training, incident response procedures.
**Max penalty:** Industrial manslaughter penalties up to $20M (corporations) + 25 years prison (individuals) in some states for category 1 breaches
**Source:** https://safeworkaustralia.gov.au/safety-topic/managing-health-and-safety/mental-health

### Take reasonable and proportionate measures to prevent sex discrimination, sexual harassment and victimisation (positive duty)
URL: https://rulesmate.com.au/obligations/positive-duty-respect-at-work
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahrc, fwc
Source Acts: sex-discrimination-act-1984

> Employers have a proactive duty to prevent workplace sexual harassment — AHRC has enforcement powers from December 2023.

The Sex Discrimination Act 1984 (Cth), as amended in 2022, imposes a positive duty on employers and PCBUs to take reasonable and proportionate measures to eliminate sex discrimination, sexual harassment, sex-based harassment, hostile workplace environments, and related victimisation. The AHRC has powers to investigate and enforce compliance from 12 December 2023.

**Who must comply:** All employers and PCBUs.
**What triggers it:** Conducting a business or undertaking with workers.
**When due:** Ongoing.
**Evidence:** Policies, prevention plans, training, complaints procedures, monitoring data, leadership commitments.
**Max penalty:** AHRC can issue compliance notices and apply to Federal Court for orders
**Source:** https://humanrights.gov.au/our-work/sex-discrimination/projects/positive-duty-under-sex-discrimination-act

### Lodge mandatory climate-related financial disclosures (ASRS S2)
URL: https://rulesmate.com.au/obligations/asrs-climate-disclosure
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Effective: 2025-01-01
Enforced by: asic, cer
Source Acts: corporations-act-2001

> Group 1/2/3 entities must publish ASRS-aligned climate disclosures with their annual financial reports.

From financial years commencing 1 January 2025 (Group 1), 1 July 2026 (Group 2), and 1 July 2027 (Group 3), eligible entities must prepare and lodge sustainability reports applying the Australian Sustainability Reporting Standards (AASB S2 — climate-related disclosures). Scope 1, 2 and (from year 2) Scope 3 emissions must be disclosed alongside governance, strategy, and risk management. Auditor assurance phases in.

**Who must comply:** Entities meeting size thresholds and consolidated reporting requirements under the Corporations Act sustainability reporting provisions (s 292A onwards). Group 1: turnover ≥$500M, assets ≥$1B, or NGER publication threshold.
**What triggers it:** Meeting size thresholds.
**When due:** First reports: FY commencing on or after 1 Jan 2025 (Group 1).
**Evidence:** Sustainability report with climate disclosures, emissions calculations, scenario analysis documentation.
**Max penalty:** ACCC greenwashing actions up to $50M / 30% turnover; ASIC director-duty exposure for poor disclosures
**Source:** https://aasb.gov.au/admin/file/content105/c9/AASB_S2_09-24.pdf

### Report greenhouse and energy data under NGER
URL: https://rulesmate.com.au/obligations/nger-reporting
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: cer
Source Acts: national-greenhouse-and-energy-reporting-act-2007

> Corporations meeting NGER thresholds must report Scope 1, Scope 2 emissions and energy data by 31 October.

The National Greenhouse and Energy Reporting Act 2007 requires registered corporations meeting facility or corporate-group thresholds to report greenhouse gas emissions and energy production/consumption annually. Reports are due 31 October following the reporting year. Facility data feeds the Safeguard Mechanism for facilities >100,000 tCO2-e per year.

**Who must comply:** Corporations meeting NGER thresholds (corporate group emissions ≥50,000 tCO2-e or facility ≥25,000 tCO2-e, plus energy thresholds).
**What triggers it:** Crossing an NGER threshold in the reporting year.
**When due:** Annual — by 31 October following the reporting year.
**Evidence:** NGER report via EERS, supporting calculations, verification records.
**Max penalty:** Civil penalties up to $11M (corporations); separate offences for false/misleading data
**Source:** https://cleanenergyregulator.gov.au/NGER

### Comply with Safeguard Mechanism baseline (covered facilities)
URL: https://rulesmate.com.au/obligations/safeguard-mechanism
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: cer
Source Acts: national-greenhouse-and-energy-reporting-act-2007

> Facilities >100,000 tCO2-e/year must keep emissions below an annually declining baseline.

The Safeguard Mechanism applies to facilities emitting >100,000 tCO2-e per year. Each facility has a baseline that declines 4.9% per year to 2030. Excess emissions must be offset by surrendering ACCUs or SMCs. Production-adjusted baselines apply to trade-exposed facilities. Multi-year monitoring periods are available.

**Who must comply:** Operators of facilities emitting >100,000 tCO2-e covered Scope 1 emissions per year.
**What triggers it:** Operating a covered facility.
**When due:** Annual surrender of ACCUs / SMCs by 31 March.
**Evidence:** NGER report, baseline determination, ACCU surrender confirmation, monitoring period elections.
**Max penalty:** Civil penalties for non-surrender plus loss of multi-year flexibility
**Source:** https://cleanenergyregulator.gov.au/Infohub/Safeguard-Mechanism

### Publish an annual Modern Slavery Statement
URL: https://rulesmate.com.au/obligations/modern-slavery-statement
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: modern-slavery-comm
Source Acts: modern-slavery-act-2018

> Entities with consolidated revenue ≥$100M must publish an annual Modern Slavery Statement.

The Modern Slavery Act 2018 (Cth) requires reporting entities with consolidated revenue of at least $100M to publish a Modern Slavery Statement within 6 months of the end of their reporting period. Mandatory criteria cover entity structure, supply chains, risks, actions to address risks, effectiveness, consultation, and other relevant information. Statements are lodged on the Modern Slavery Statements Register. The Anti-Slavery Commissioner (federal) monitors compliance.

**Who must comply:** Australian entities and entities carrying on business in Australia with annual consolidated revenue ≥AUD 100M.
**What triggers it:** Consolidated revenue threshold met in a reporting period.
**When due:** Within 6 months of end of reporting period.
**Evidence:** Modern Slavery Statement approved by the principal governing body, signed by a responsible member, lodged on the public register.
**Max penalty:** From the Modern Slavery Amendment Bill 2024 (if passed) — civil penalties for non-publication or false statements
**Source:** https://modernslaveryregister.gov.au

### Lodge WGEA workplace gender equality report
URL: https://rulesmate.com.au/obligations/wgea-reporting
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: wgea
Source Acts: workplace-gender-equality-act-2012

> Private-sector employers with 100+ staff must report annually; pay gaps are now publicly published.

The Workplace Gender Equality Act 2012 requires non-public-sector employers with 100+ employees to submit an annual report covering the gender equality indicators (workforce composition, governing body, equal remuneration, flexible working, sex-based harassment, etc.). The 2023 amendments mean WGEA publishes employer-level gender pay gaps. The reporting period runs 1 April – 31 March; report due 31 May.

**Who must comply:** Non-public-sector employers with 100+ employees in Australia.
**What triggers it:** Reaching the 100-employee threshold.
**When due:** Annual — by 31 May following the 31 March reporting period end.
**Evidence:** Workplace profile, reporting questionnaire, CEO sign-off, employee/employee-representative notification.
**Max penalty:** Non-compliance results in naming in a public report and ineligibility for Commonwealth contracts
**Source:** https://wgea.gov.au/reporting

### Report cyber security incidents to ASD (SOCI)
URL: https://rulesmate.com.au/obligations/soci-cyber-incident-reporting
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asd, home-affairs-soci
Source Acts: security-of-critical-infrastructure-act-2018

> Critical infrastructure asset operators must report critical incidents within 12 hours and other incidents within 72 hours.

Under the Security of Critical Infrastructure Act 2018, responsible entities for critical infrastructure assets must report cyber security incidents that have a 'significant impact' on the availability of the asset within 12 hours; other reportable cyber incidents within 72 hours. Reports go to ASD's ACSC.

**Who must comply:** Responsible entities for the 11 critical infrastructure sectors covered by SOCI.
**What triggers it:** A cyber security incident with significant impact (12h) or other reportable impact (72h).
**When due:** 12 hours (significant) / 72 hours (other) of becoming aware.
**Evidence:** Incident report to ASD, internal IR playbook records, log evidence.
**Max penalty:** Civil penalties up to ~$2.2M for non-reporting plus mandatory direction risks
**Source:** https://cisc.gov.au/legislation-regulation-and-compliance/critical-infrastructure-risk-management-program

### Adopt and maintain a Critical Infrastructure Risk Management Program (CIRMP)
URL: https://rulesmate.com.au/obligations/soci-rmp
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: home-affairs-soci
Source Acts: security-of-critical-infrastructure-act-2018

> Covered critical infrastructure entities must adopt a CIRMP addressing cyber, physical, personnel, and supply-chain hazards.

Part 2A of the SOCI Act requires responsible entities for designated critical infrastructure assets to adopt, maintain, comply with, and annually review a written CIRMP. The program must identify hazards (cyber, personnel, physical/natural, supply chain) and document mitigations. Board-approved annual report due within 90 days of the end of each financial year.

**Who must comply:** Responsible entities for designated critical infrastructure assets within scope.
**What triggers it:** Being responsible for a designated critical infrastructure asset.
**When due:** CIRMP in place; annual report within 90 days of FY end.
**Evidence:** Written CIRMP, board approval, hazard register, annual report.
**Max penalty:** Civil penalties up to ~$2.2M for non-compliance
**Source:** https://cisc.gov.au/legislation-regulation-and-compliance/critical-infrastructure-risk-management-program

### Comply with APRA CPS 234 (Information Security)
URL: https://rulesmate.com.au/obligations/cps-234-information-security
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: apra
Source Acts: banking-act-1959, insurance-act-1973, life-insurance-act-1995, superannuation-industry-supervision-act-1993

> APRA-regulated entities must maintain information security capability commensurate with the size and extent of threats.

CPS 234 requires APRA-regulated entities (ADIs, insurers, RSE licensees) to clearly define information security-related roles, maintain capability, implement controls commensurate with vulnerabilities and threats, and notify APRA within 72 hours of a material information security incident.

**Who must comply:** All APRA-regulated entities.
**What triggers it:** Being APRA-regulated.
**When due:** Continuous; APRA notification within 72 hours of a material incident.
**Evidence:** Information security policy, control testing, internal audit reports, incident notifications.
**Max penalty:** APRA enforcement actions including additional capital, licence conditions, directions
**Source:** https://apra.gov.au/information-security

### Avoid unfair contract terms in standard form consumer & small business contracts
URL: https://rulesmate.com.au/obligations/unfair-contract-terms
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc, asic
Source Acts: competition-and-consumer-act-2010, asic-act-2001

> From November 2023, unfair contract terms carry pecuniary penalties — up to $50M per term.

Amendments to the Australian Consumer Law and ASIC Act, effective 9 November 2023, prohibit (with penalties) the use of, or reliance on, unfair contract terms in standard form contracts with consumers and small businesses (now redefined to <100 employees or <$10M turnover). Each unfair term can be a separate contravention.

**Who must comply:** Any business issuing standard form contracts to consumers or small businesses.
**What triggers it:** Including or relying on an unfair term in a standard form contract.
**When due:** Ongoing.
**Evidence:** Reviewed contracts, legal sign-off, term-by-term assessment.
**Max penalty:** $50M, 3× benefit, or 30% of adjusted turnover (corporations); $2.5M (individuals) per term
**Source:** https://accc.gov.au/business/business-rights-and-protections/unfair-contract-terms

### Honour consumer guarantees under the Australian Consumer Law
URL: https://rulesmate.com.au/obligations/consumer-guarantees
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Goods and services supplied to consumers come with automatic statutory guarantees that cannot be excluded.

Schedule 2 of the Competition and Consumer Act 2010 (the ACL) imposes statutory consumer guarantees on goods and services supplied to consumers (broadly: $100K threshold or for personal/domestic use). Remedies vary by major vs minor failure. Manufacturers face additional guarantees including spare parts and repair facilities for a reasonable time.

**Who must comply:** All businesses supplying goods or services to consumers in Australia.
**What triggers it:** Supplying goods or services to a consumer.
**When due:** Ongoing.
**Evidence:** Refund/repair/replacement policy, staff training, complaint handling records.
**Max penalty:** False representations about consumer rights — civil penalties up to $50M / 30% turnover
**Source:** https://accc.gov.au/consumers/buying-products-and-services/consumer-guarantees

### Notify ACCC of a voluntary recall within 2 days
URL: https://rulesmate.com.au/obligations/product-safety-recall
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Suppliers must notify the ACCC within 2 days of initiating a voluntary consumer product recall.

Section 128 of the ACL requires a supplier of consumer goods to notify the responsible Minister within 2 days of voluntarily recalling consumer goods. The ACCC operates Product Safety Australia for recall notifications.

**Who must comply:** Suppliers of consumer goods or product-related services.
**What triggers it:** Initiating a voluntary recall.
**When due:** Within 2 days of recall.
**Evidence:** Recall notification, communications plan, return/refund records.
**Max penalty:** Civil penalty up to $16.665M (corporations) for failure to notify
**Source:** https://productsafety.gov.au/recalls/consumer-product-recall-guidelines

### Register for GST when GST turnover meets the threshold
URL: https://rulesmate.com.au/obligations/gst-registration
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: a-new-tax-system-goods-and-services-tax-act-1999

> Register within 21 days when GST turnover reaches $75K (or $150K for NFPs, or any amount for ride-share/taxis).

Section 23-5 of the GST Act requires registration when GST turnover reaches the $75K threshold ($150K NFP). Ride-share and taxi drivers must register from the first dollar. Once registered, the entity must charge GST on taxable supplies and lodge BAS at the assigned frequency.

**Who must comply:** Businesses meeting the GST turnover threshold.
**What triggers it:** Annual or projected GST turnover meeting threshold; first ride-share/taxi trip.
**When due:** Within 21 days of becoming required to register.
**Evidence:** ATO registration confirmation; ongoing BAS lodgements.
**Max penalty:** Backdated GST liability + general interest charge + failure-to-register penalties
**Source:** https://ato.gov.au/businesses-and-organisations/gst-excise-and-indirect-taxes/gst/registering-for-gst

### Lodge an FBT return and pay FBT by 21 May
URL: https://rulesmate.com.au/obligations/fbt-return
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: fringe-benefits-tax-assessment-act-1986

> Employers who provided fringe benefits in the FBT year (1 April – 31 March) must lodge by 21 May.

Employers providing fringe benefits to employees or associates must self-assess FBT, lodge an FBT return, and pay any FBT owed by 21 May. Tax agents may have lodgement extensions. The FBT year runs 1 April – 31 March. Common benefits include cars, expense payments, LAFHA, entertainment, and salary packaging.

**Who must comply:** Employers who have provided fringe benefits during the FBT year.
**What triggers it:** Providing fringe benefits.
**When due:** 21 May annually (or extended date through tax agent).
**Evidence:** FBT return, benefit valuations, employee declarations, log books (cars).
**Max penalty:** Failure-to-lodge penalties, general interest charge, shortfall penalties for understatement
**Source:** https://ato.gov.au/businesses-and-organisations/fringe-benefits-tax

### Pay Victorian payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: sro-vic
Source Acts: payroll-tax-act-2007-vic

> VIC: 4.85% rate on Australian wages above the $900,000 tax-free threshold (FY26).

Victoria imposes payroll tax under the Payroll Tax Act 2007 (Vic). FY26 thresholds: $900,000 annual tax-free threshold ($75,000 monthly), 4.85% standard rate (1.2125% surcharge for wages >$10M, plus mental health and wellbeing surcharge for wages >$10M). Group employer rules aggregate wages across related entities. Returns lodged monthly via SRO online.

**Who must comply:** Employers paying Australian wages above the Vic threshold (taking into account grouping).
**What triggers it:** Wages above the monthly/annual threshold; grouping.
**When due:** Monthly returns by 7th of following month; annual reconciliation by 21 July.
**Evidence:** Monthly returns via SRO Vic, wage records, group nomination documents.
**Max penalty:** Tax shortfall + interest + penalty tax up to 75% for serious non-compliance
**Source:** https://sro.vic.gov.au/payroll-tax

### Pay NSW payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: revenue-nsw
Source Acts: payroll-tax-act-2007-nsw

> NSW: 5.45% rate on Australian wages above the $1.2M tax-free threshold (FY26).

NSW payroll tax applies to employers paying Australian wages above the threshold under the Payroll Tax Act 2007 (NSW). FY26 threshold: $1.2M annual ($100K monthly), 5.45% standard rate (mental health levy surcharge of 0.5% above $1.5M payroll for some groups). Monthly returns due 7th of following month; annual reconciliation by 28 July.

**Who must comply:** Employers with Australian wages above the NSW threshold (including grouping).
**What triggers it:** Wages above the threshold; grouping.
**When due:** Monthly returns by 7th of following month; annual reconciliation by 28 July.
**Evidence:** Monthly returns via Revenue NSW, wage records, group nomination.
**Max penalty:** Tax shortfall + interest + penalty tax up to 75%
**Source:** https://revenue.nsw.gov.au/taxes-duties-levies-royalties/payroll-tax

### Pay Queensland payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-qld
Jurisdiction: QLD · Priority: high · Status: current
Enforced by: qro
Source Acts: payroll-tax-act-1971-qld

> QLD: 4.75% rate on Australian wages above the $1.3M tax-free threshold (FY26).

Queensland payroll tax under the Payroll Tax Act 1971 (Qld). FY26 thresholds: $1.3M annual ($108,333 monthly), 4.75% standard rate. Mental health levy of 0.25% for taxable wages >$10M (plus an additional 0.5% for >$100M). Monthly returns due 7th of following month; annual reconciliation by 21 July.

**Who must comply:** Employers with Australian wages above the QLD threshold (including grouping).
**What triggers it:** Wages above threshold; grouping.
**When due:** Monthly returns by 7th of following month; annual reconciliation by 21 July.
**Evidence:** Monthly returns via QRO, wage records, group nomination.
**Max penalty:** Tax shortfall + interest + penalty tax
**Source:** https://qro.qld.gov.au/payroll-tax

### Comply with reduced respirable crystalline silica WEL (0.025 mg/m³)
URL: https://rulesmate.com.au/obligations/silica-wel
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-12-01
Enforced by: safe-work-australia, worksafe-vic, safework-nsw, whs-qld, safework-sa, worksafe-wa, worksafe-tas, worksafe-act, ntworksafe
Source Acts: work-health-and-safety-act-2011

> WEL for respirable crystalline silica is halved from 1 December 2026.

Safe Work Australia's revised workplace exposure standard for respirable crystalline silica drops to 0.025 mg/m³ (8-hour TWA) from 1 December 2026 (already at 0.05 mg/m³). Engineered stone fabrication is also banned. PCBUs must update air monitoring, controls, health monitoring, and worker information.

**Who must comply:** PCBUs with workers exposed to respirable crystalline silica (construction, stonemasonry, mining, demolition, quarrying).
**What triggers it:** Exposure to respirable crystalline silica.
**When due:** From 1 December 2026.
**Evidence:** Air monitoring records, control plan, health monitoring records, SDS, worker training.
**Max penalty:** WHS category 1 — up to $20M / 25 years imprisonment depending on jurisdiction
**Source:** https://safeworkaustralia.gov.au/safety-topic/hazards/crystalline-silica-and-silicosis

### Comply with Aged Care Quality Standards (Aged Care Act 2024)
URL: https://rulesmate.com.au/obligations/aged-care-quality-standards
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-11-01
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> From 1 November 2025, providers must comply with the strengthened Aged Care Quality Standards.

The new Aged Care Act 2024, in force from 1 November 2025, embeds a rights-based Statement of Rights and strengthened Aged Care Quality Standards (7 standards). Providers must comply on commencement; the Aged Care Quality and Safety Commission has expanded compliance powers including civil penalties, registered nurse 24/7 in residential aged care, and serious incident response scheme (SIRS) obligations.

**Who must comply:** Approved aged care providers (residential, home, flexible).
**What triggers it:** Operating an aged care service.
**When due:** Ongoing from 1 November 2025.
**Evidence:** Quality system documentation, audits, training, SIRS reports, RN 24/7 rosters.
**Max penalty:** Civil penalties, sanctions, registration revocation
**Source:** https://agedcarequality.gov.au

### Report serious NDIS incidents to the NDIS Commission
URL: https://rulesmate.com.au/obligations/ndis-reportable-incident
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ndis-commission
Source Acts: national-disability-insurance-scheme-act-2013

> Death, serious injury, abuse, neglect, unauthorised restrictive practices, and sexual misconduct must be notified.

Registered NDIS providers must notify the NDIS Quality and Safeguards Commission of reportable incidents under the NDIS Act and Rules. Five categories: death; serious injury; abuse or neglect; unlawful sexual or physical contact; sexual misconduct; unauthorised use of restrictive practices. Initial report within 24 hours of becoming aware; 5-day follow-up.

**Who must comply:** Registered NDIS providers (and unregistered for serious matters).
**What triggers it:** Occurrence of a reportable incident in connection with NDIS supports.
**When due:** Initial report within 24 hours; 5-day follow-up; investigation outcomes as required.
**Evidence:** NDIS Commission notification (via portal), incident management plan, investigation record.
**Max penalty:** Civil penalties up to ~$66K per breach plus registration/banning actions
**Source:** https://ndiscommission.gov.au/providers/incident-management-and-reportable-incidents

### Maintain TPB registration (tax/BAS agents)
URL: https://rulesmate.com.au/obligations/tpb-registration
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: tpb
Source Acts: tax-agent-services-act-2009

> Tax agents and BAS agents must be registered with the TPB and comply with the Code of Professional Conduct.

Tax practitioners (tax agents, BAS agents) must be registered with the Tax Practitioners Board and meet the Code of Professional Conduct. The TASA Code includes obligations regarding honesty, confidentiality, competence, PI insurance, and (from 1 January 2025) significantly expanded breach-reporting and false-and-misleading-statement obligations.

**Who must comply:** Tax agents, BAS agents, tax (financial) advisers.
**What triggers it:** Providing tax agent or BAS services for a fee.
**When due:** Initial registration before providing services; annual renewal; CPE compliance.
**Evidence:** TPB registration, PI insurance certificate, CPE log, Code compliance records.
**Max penalty:** Civil penalties for unregistered conduct + termination of registration
**Source:** https://tpb.gov.au

### Comply with AFSL general obligations (s 912A)
URL: https://rulesmate.com.au/obligations/afsl-general-obligations-912a
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> AFSL holders must do all things necessary to ensure financial services are provided efficiently, honestly and fairly.

Section 912A of the Corporations Act imposes ten general obligations on AFS licensees including: efficient/honest/fair provision of services; managing conflicts; complying with conditions; adequate resources; competence; training; risk management; dispute resolution; and (since 2021) the design and distribution obligations under Part 7.8A.

**Who must comply:** All AFSL holders.
**What triggers it:** Holding an AFSL.
**When due:** Continuous.
**Evidence:** Compliance plan, RG 104 register, breach reports, training records, AFCA membership.
**Max penalty:** Civil penalties up to $15.65M / 3× benefit / 10% turnover (corporations)
**Source:** https://asic.gov.au/regulatory-resources/financial-services/giving-financial-product-advice/

### Report reportable situations to ASIC within 30 days (RG 78)
URL: https://rulesmate.com.au/obligations/breach-reporting-rgs
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001, national-consumer-credit-protection-act-2009

> AFSL/ACL holders must report reportable situations within 30 calendar days of becoming aware.

Section 912D Corporations Act and s 50A NCCP Act require AFSL and ACL holders to report reportable situations to ASIC within 30 calendar days of having reasonable grounds to believe a reportable situation has arisen. RG 78 provides guidance. Significant breaches, investigations exceeding 30 days, and serious fraud must all be reported.

**Who must comply:** AFSL holders, ACL holders.
**What triggers it:** Reasonable grounds to believe a reportable situation has arisen.
**When due:** Within 30 calendar days.
**Evidence:** Breach register, RG 78 reports submitted via ASIC Regulatory Portal, investigation file notes.
**Max penalty:** Civil penalty up to $1.11M; criminal liability for failure to report
**Source:** https://asic.gov.au/regulatory-resources/financial-services/breach-reporting

### Comply with NCCP responsible lending obligations
URL: https://rulesmate.com.au/obligations/responsible-lending
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: national-consumer-credit-protection-act-2009

> Credit licensees must not enter into credit contracts unsuitable for the consumer.

Chapter 3 of the NCCP Act requires credit licensees to make reasonable enquiries and verification about the consumer's financial situation and objectives, and to assess whether the credit contract would be unsuitable. ASIC's RG 209 provides guidance. Note: 2020 reform proposal to repeal these obligations was abandoned in 2021 — they remain in force.

**Who must comply:** ACL holders providing credit assistance or entering credit contracts with consumers.
**What triggers it:** Providing credit assistance or entering a consumer credit contract.
**When due:** Before entering or recommending the contract.
**Evidence:** Pre-contractual assessment, supporting documents, file notes.
**Max penalty:** Civil penalties up to $15.65M / 3× benefit / 10% turnover; consumer remedies
**Source:** https://asic.gov.au/regulatory-resources/credit/responsible-lending

### Comply with the Spam Act 2003 (consent, identify, unsubscribe)
URL: https://rulesmate.com.au/obligations/spam-act-compliance
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acma
Source Acts: spam-act-2003

> All commercial electronic messages must have consent, identify the sender, and offer a working unsubscribe.

The Spam Act 2003 prohibits sending commercial electronic messages (email, SMS, instant messaging) without consent, requires accurate sender identification, and a functional unsubscribe facility (effective within 5 working days, no cost beyond the cost of sending the unsubscribe request, valid 30 days minimum). ACMA enforces; recent infringement notices exceed $1M.

**Who must comply:** Anyone sending commercial electronic messages in Australia or with an Australian link.
**What triggers it:** Sending commercial electronic messages.
**When due:** Ongoing.
**Evidence:** Consent records, sender ID configuration, unsubscribe handling logs.
**Max penalty:** Civil penalties up to $2.2M+ per day plus infringement notices; routine seven-figure outcomes
**Source:** https://acma.gov.au/spam

### Wash outbound marketing lists against the Do Not Call Register
URL: https://rulesmate.com.au/obligations/do-not-call-wash
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acma
Source Acts: do-not-call-register-act-2006

> Lists must be washed within 30 days of the call/SMS unless valid consent.

The Do Not Call Register Act 2006 requires telemarketers to not make unsolicited telemarketing calls or send marketing faxes to numbers on the DNCR, except where consent is given. Lists must be washed within 30 days. ACMA operates the DNCR; carriers and telemarketers pay per-number wash fees.

**Who must comply:** Telemarketers and businesses making outbound marketing calls in Australia.
**What triggers it:** Making an outbound marketing call.
**When due:** Wash within 30 days of contact.
**Evidence:** DNCR wash records, consent records, calling lists with wash status.
**Max penalty:** Civil penalties + infringement notices, recent enforcement >$1M
**Source:** https://donotcall.gov.au

### Lodge the ACNC Annual Information Statement
URL: https://rulesmate.com.au/obligations/acnc-annual-information-statement
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: acnc
Source Acts: australian-charities-and-not-for-profits-commission-act-2012

> Registered charities must lodge the AIS within 6 months of the end of the reporting period.

All ACNC-registered charities must lodge an Annual Information Statement (and, for medium/large charities, a financial report) within 6 months of the end of their reporting period. The AIS confirms charity details, programs, finances, and governance. Two consecutive non-lodgements can result in revocation.

**Who must comply:** All ACNC-registered charities.
**What triggers it:** Being a registered charity.
**When due:** Within 6 months of reporting period end (typically 31 December for FY entities).
**Evidence:** AIS submission, financial reports (medium/large), responsible persons register.
**Max penalty:** Loss of charity status (DGR endorsement, tax concessions); civil penalties for false/misleading info
**Source:** https://acnc.gov.au/for-charities/manage-your-charity/annual-reporting

### Verify work rights via VEVO before employment
URL: https://rulesmate.com.au/obligations/vevo-check
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: home-affairs-soci
Source Acts: migration-act-1958

> Employers must verify visa work rights via VEVO before hiring non-citizens.

Section 245AK of the Migration Act 1958 makes it an offence for an employer to allow a non-citizen to work in breach of work-related visa conditions. VEVO (Visa Entitlement Verification Online) provides real-time verification. From 1 July 2024, employer sponsor offences include strengthened protections for sponsored workers and DAMA-style accountability.

**Who must comply:** All Australian employers (and labour hire intermediaries).
**What triggers it:** Considering or employing a non-citizen.
**When due:** Before commencement; periodic re-checks for fixed-term visas.
**Evidence:** VEVO check records, copies of visa grant notices, employer-arranged checks logs.
**Max penalty:** Up to 5 years imprisonment + fines; sponsor sanctions; civil penalties
**Source:** https://immi.homeaffairs.gov.au/visas/employing-foreign-workers/vevo

### Comply with Basic Online Safety Expectations + industry codes
URL: https://rulesmate.com.au/obligations/online-safety-boe
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: esafety
Source Acts: online-safety-act-2021

> Social media services, app distribution services, and other captured providers must meet the BOSE and industry codes.

The Online Safety Act 2021 (and the BOSE Determination) sets out Basic Online Safety Expectations covering safe use by Australian end-users, minimising harmful material, transparency, and complaints handling. Phase 1 and Phase 2 industry codes (and standards where codes failed) impose binding duties across eight industry sections.

**Who must comply:** Social media services, electronic services, designated internet services, internet carriage services, app distribution services, equipment manufacturers, hosting services, search engine services.
**What triggers it:** Providing a captured service to Australian end-users.
**When due:** Ongoing; specific reporting periods per BOSE notices.
**Evidence:** BOSE reports, code/standard compliance documentation, transparency reports.
**Max penalty:** Civil penalties up to ~$7M per BOSE non-reporting; infringement notices
**Source:** https://esafety.gov.au/industry/basic-online-safety-expectations

### Maintain AHPRA registration and CPD
URL: https://rulesmate.com.au/obligations/ahpra-cpd-registration
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahpra
Source Acts: health-practitioner-regulation-national-law-act-2009

> Registered health practitioners must hold current registration and meet annual CPD per their National Board standards.

Under the Health Practitioner Regulation National Law, all 16 regulated health professions must hold current registration with AHPRA, meet annual continuing professional development minimums set by their National Board, and hold appropriate professional indemnity insurance. Self-declaration on renewal is binding; PI policy must cover scope of practice including any cosmetic or telehealth work.

**Who must comply:** Registered health practitioners across the 16 National Boards.
**What triggers it:** Practising any regulated health profession in Australia.
**When due:** Annual renewal (typically September/October). CPD tracked annually.
**Evidence:** AHPRA renewal confirmation, CPD log per Board minimums, PI insurance certificate.
**Max penalty:** Holding out as registered without current registration is a criminal offence; loss of registration; mandatory notifications by employers.
**Source:** https://ahpra.gov.au/Registration/Continuing-Professional-Development.aspx

### Make mandatory notifications to AHPRA
URL: https://rulesmate.com.au/obligations/ahpra-mandatory-notification
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahpra
Source Acts: health-practitioner-regulation-national-law-act-2009

> Practitioners, employers and education providers must notify AHPRA of conduct that puts the public at risk.

Section 140 of the National Law requires registered health practitioners, employers and education providers to make a mandatory notification when they form a reasonable belief that another practitioner has practised while intoxicated, engaged in sexual misconduct, placed the public at risk of substantial harm because of impairment, or significantly departed from accepted professional standards.

**Who must comply:** Registered practitioners, employers of practitioners, education providers.
**What triggers it:** Forming a reasonable belief about notifiable conduct.
**When due:** As soon as practicable.
**Evidence:** Notification submitted to AHPRA; internal incident record.
**Max penalty:** Disciplinary action for failure to notify; potential registration consequences
**Source:** https://ahpra.gov.au/Notifications/mandatorynotifications.aspx

### Mortgage broker best interests duty
URL: https://rulesmate.com.au/obligations/best-interests-duty-brokers
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: national-consumer-credit-protection-act-2009

> Brokers must act in the consumer's best interests when providing credit assistance.

Section 158LA of the NCCP Act imposes a best interests duty on mortgage brokers. Brokers must act in the consumer's best interests and prioritise the consumer's interests if there is a conflict. ASIC's RG 273 gives guidance — conduct an appropriate range of comparisons, document the reasons for the recommendation, and price-prefer the consumer unless clearly outweighed by other factors.

**Who must comply:** Mortgage brokers and brokerage businesses.
**What triggers it:** Providing credit assistance for a credit contract or related insurance.
**When due:** Each consumer interaction.
**Evidence:** Documented loan comparison, recommendation rationale, file notes addressing consumer's objectives and circumstances.
**Max penalty:** Civil penalties up to $15.65M / 3× benefit / 10% turnover (corporations); consumer remedies
**Source:** https://asic.gov.au/regulatory-resources/credit/mortgage-brokers/

### Comply with Design and Distribution Obligations (DDO)
URL: https://rulesmate.com.au/obligations/ddo
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Issuers and distributors of retail financial products must have a Target Market Determination (TMD) and distribute consistently with it.

Part 7.8A of the Corporations Act requires issuers and distributors of retail financial products (including credit) to make a target market determination (TMD), distribute consistently with the TMD, report significant dealings inconsistent with it, and review TMDs periodically.

**Who must comply:** Issuers and distributors of retail financial products and credit products.
**What triggers it:** Issuing or distributing in-scope products.
**When due:** Continuous; TMDs reviewed periodically and on trigger events.
**Evidence:** Documented TMD, distribution monitoring data, significant-dealings register, TMD review records.
**Max penalty:** Civil penalties to the maximum financial-services regime ($15.65M / 3× benefit / 10% turnover)
**Source:** https://asic.gov.au/regulatory-resources/financial-services/product-design-and-distribution/

### Comply with APRA CPS 230 (Operational Risk Management)
URL: https://rulesmate.com.au/obligations/cps-230-operational-risk
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-07-01
Enforced by: apra
Source Acts: banking-act-1959, insurance-act-1973, superannuation-industry-supervision-act-1993

> APRA-regulated entities must manage operational risk including a comprehensive third-party / outsourcing register from 1 July 2025.

CPS 230 (in force from 1 July 2025) replaces CPS 231 (outsourcing) and CPS 232 (business continuity). Requires APRA-regulated entities to identify critical operations, set tolerance levels for disruption, maintain a comprehensive register of material service providers, manage concentration risk, and conduct testing.

**Who must comply:** All APRA-regulated entities (ADIs, insurers, RSE licensees).
**What triggers it:** Being APRA-regulated.
**When due:** Continuous from 1 July 2025; pre-existing arrangements transition through 30 June 2026.
**Evidence:** Critical operations register, service provider register, tolerance levels, business continuity test results, board attestation.
**Max penalty:** APRA directions, additional capital, licence conditions
**Source:** https://apra.gov.au/operational-risk-management

### Comply with Financial Accountability Regime (FAR) accountability obligations
URL: https://rulesmate.com.au/obligations/far-accountability
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2024-03-15
Enforced by: apra, asic
Source Acts: financial-accountability-regime-act-2023

> Banking entities from 15 March 2024; insurers and super trustees from 15 March 2025.

The Financial Accountability Regime extends BEAR-style accountability across banking, insurance and superannuation. Requires registration of accountable persons, accountability statements and maps, deferred remuneration arrangements, and breach reporting to ASIC/APRA.

**Who must comply:** Banking entities, insurance entities and RSE licensees, plus significant related entities.
**What triggers it:** Being a FAR-regulated entity.
**When due:** Continuous; specific events trigger ASIC/APRA notifications.
**Evidence:** Accountability statements, accountability map, deferred remuneration arrangements, accountable persons register.
**Max penalty:** Civil penalties up to $1.565M (individuals) / $9.39B (entities under the FAR penalty regime — calculated by reference to size)
**Source:** https://apra.gov.au/financial-accountability-regime

### Comply with Standards for RTOs
URL: https://rulesmate.com.au/obligations/rto-standards
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-07-01
Enforced by: asqa
Source Acts: national-vocational-education-and-training-regulator-act-2011

> Registered training organisations must comply with the Standards for RTOs 2025 from 1 July 2025.

The Standards for RTOs 2025 set out the regulatory framework for vocational education and training (VET) providers. Cover quality of training and assessment, learner support, governance, financial viability, third-party arrangements, and continuous improvement. Enforced by ASQA.

**Who must comply:** All registered training organisations (RTOs).
**What triggers it:** Being registered as an RTO.
**When due:** Continuous; periodic audits.
**Evidence:** Quality management system, training and assessment strategies, trainer qualifications, third-party agreements, complaint handling records.
**Max penalty:** Cancellation or suspension of registration; admin penalties
**Source:** https://asqa.gov.au/about/standards

### Comply with NDIS Practice Standards
URL: https://rulesmate.com.au/obligations/ndis-practice-standards
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ndis-commission
Source Acts: national-disability-insurance-scheme-act-2013

> Registered NDIS providers must meet the NDIS Practice Standards for their registration groups.

NDIS Practice Standards are mandatory quality assurance standards for registered NDIS providers. Core module applies to all providers; supplementary modules apply by registration group (specialised disability accommodation, behaviour support, etc.). Audited by approved quality auditors.

**Who must comply:** Registered NDIS providers.
**What triggers it:** Registering with the NDIS Commission.
**When due:** Continuous; certification audits at registration renewal.
**Evidence:** Audit certificate, quality management system, worker screening records.
**Max penalty:** Revocation or suspension of registration; banning orders against responsible individuals
**Source:** https://ndiscommission.gov.au/providers/registered-ndis-providers/provider-obligations-and-requirements/ndis-practice-standards

### Appoint a certified Food Safety Supervisor (FSS)
URL: https://rulesmate.com.au/obligations/food-safety-supervisor
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fsanz
Source Acts: food-standards-australia-new-zealand-act-1991

> Food businesses serving ready-to-eat food must have a trained FSS reasonably available.

Standard 3.2.2A of the Food Standards Code (and state implementing legislation) requires Category 1 food service businesses to appoint a Food Safety Supervisor with nationally recognised FSS qualifications and a Food Safety Management Tool. Implementation varies by state — Vic, NSW, QLD have full regimes.

**Who must comply:** Food service businesses serving ready-to-eat food, particularly cafés, restaurants, hotels, caterers, takeaway.
**What triggers it:** Operating a Category 1 food premises.
**When due:** From premises commencement; FSS available during service.
**Evidence:** FSS certificate, Food Safety Management Tool records.
**Max penalty:** State-specific infringement notices and prosecution
**Source:** https://foodstandards.gov.au/business/safetystandards/Pages/Standard-3-2-2A.aspx

### Comply with Plain English Allergen Labelling (PEAL)
URL: https://rulesmate.com.au/obligations/allergen-labelling-pean
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Effective: 2026-02-25
Enforced by: fsanz, accc
Source Acts: food-standards-australia-new-zealand-act-1991

> From 25 February 2026, allergen labelling must use plain English and a standardised format.

Standard 1.2.3 of the Food Standards Code (amended February 2024 with a 3-year transition) requires allergens to be declared on packaged food in a standardised plain-English format including a 'Contains' statement, bolding requirements, and specific terminology. Applies to packaged foods sold in Australia and New Zealand.

**Who must comply:** Food manufacturers and suppliers of packaged food in Australia.
**What triggers it:** Manufacturing or supplying packaged food.
**When due:** From 25 February 2026 — full compliance after 3-year transition.
**Evidence:** Updated labels, allergen risk assessments, supplier specifications.
**Max penalty:** State-based fines + product recall obligations
**Source:** https://foodstandards.gov.au/code/proposals/Pages/P1044.aspx

### Comply with Heavy Vehicle Chain of Responsibility (CoR)
URL: https://rulesmate.com.au/obligations/chain-of-responsibility
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: nhvr
Source Acts: heavy-vehicle-national-law

> Every party in the heavy vehicle supply chain has a positive duty under HVNL.

Sections 26C-26D of the Heavy Vehicle National Law (HVNL) impose a primary duty on each party in the supply chain (consignors, packers, loaders, schedulers, operators, drivers, consignees) to ensure, so far as reasonably practicable, the safety of transport activities. Mirrors WHS due diligence.

**Who must comply:** Every party in the heavy vehicle supply chain.
**What triggers it:** Engaging in a heavy vehicle supply chain activity.
**When due:** Continuous.
**Evidence:** Risk assessments, contracts allocating duties, training, monitoring records, incident reports.
**Max penalty:** Category 1: up to $3M (corporations), 5 years prison; Category 2 and 3 lower but substantial
**Source:** https://nhvr.gov.au/safety-accreditation-compliance/chain-of-responsibility

### Comply with the General Environmental Duty (VIC)
URL: https://rulesmate.com.au/obligations/ged-environmental
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: epa-vic
Source Acts: environment-protection-act-2017-vic

> Victorian PCBUs must take 'reasonably practicable' steps to minimise harm to human health and the environment.

Section 25 of the Environment Protection Act 2017 (Vic) imposes a general environmental duty (GED). Applies to anyone conducting any activity that may give rise to risks of harm to human health or the environment. Mirrors the WHS due diligence concept. Permissions, registrations, and licences operate on top.

**Who must comply:** Any person engaging in activities posing environmental risk in Victoria.
**What triggers it:** Conducting any activity that may give rise to environmental risk.
**When due:** Continuous.
**Evidence:** Risk assessment, control plan, training records, monitoring data.
**Max penalty:** Up to ~$1.66M for corporations; criminal aggravated breaches significantly higher
**Source:** https://epa.vic.gov.au/about-epa/laws/general-environmental-duty

### Register for ACT portable long service leave (hospitality / beauty)
URL: https://rulesmate.com.au/obligations/act-portable-lsl-hospitality-2026
Jurisdiction: ACT · Priority: high · Status: upcoming
Effective: 2026-07-01
Enforced by: worksafe-act
Source Acts: long-service-leave-portable-schemes-act-2009-act

> ACT extends portable LSL to cafés, restaurants, accommodation, hair and beauty from 1 July 2026.

From 1 July 2026, the ACT extends its portable Long Service Leave scheme to cover hospitality (cafés, restaurants, accommodation) and hair and beauty industries. Employers must register, pay quarterly levies, and lodge returns. Workers accrue portable LSL across employers within the covered industries.

**Who must comply:** ACT employers in hospitality, accommodation, hair and beauty.
**What triggers it:** Employing workers in covered industries from 1 July 2026.
**When due:** Registration from commencement; quarterly returns and levies.
**Evidence:** Registration confirmation, quarterly returns, payment records.
**Max penalty:** Civil penalties + payment of levies in arrears with interest
**Source:** https://worksafe.act.gov.au/laws-and-compliance/portable-long-service-leave

### Maintain auditor / financial reporting (Chapter 2M)
URL: https://rulesmate.com.au/obligations/asic-breach-reporting-rg-78
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Large proprietary, public and disclosing entities must prepare and lodge audited financial reports.

Chapter 2M of the Corporations Act requires public companies, disclosing entities, large proprietary companies (any two of: $50M consolidated revenue, $25M consolidated gross assets, 100 employees) and registered managed investment schemes to prepare audited annual financial reports and lodge with ASIC within prescribed timeframes (typically 3-4 months after FY end).

**Who must comply:** Public companies, disclosing entities, large proprietary companies, registered MIS.
**What triggers it:** Meeting the relevant threshold or category.
**When due:** Annual — typically 3 months for disclosing entities, 4 months for others, after FY end.
**Evidence:** Audited financial report, directors' report, auditor's report, lodgement via ASIC.
**Max penalty:** Civil penalties + director duty exposure for materially incorrect reports
**Source:** https://asic.gov.au/regulatory-resources/financial-reporting-and-audit/

### Determine large proprietary company status annually
URL: https://rulesmate.com.au/obligations/asic-large-prop-threshold
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Test the three large-prop thresholds at the end of each financial year — failing any two triggers Chapter 2M reporting.

Section 45A defines a 'large proprietary company' as one satisfying any two of: $50M consolidated revenue, $25M consolidated gross assets, or 100+ employees for the financial year. Companies satisfying the threshold must comply with Chapter 2M reporting and audit obligations.

**Who must comply:** All proprietary companies.
**What triggers it:** End of each financial year.
**When due:** Annual self-assessment at FY end.
**Evidence:** Threshold assessment workpaper, consolidated financial information for the group.
**Max penalty:** Civil penalties for non-lodgement of audited reports if large; director duty exposure
**Source:** https://asic.gov.au/for-business/running-a-company/annual-statements/

### Comply with the TASA Code of Professional Conduct
URL: https://rulesmate.com.au/obligations/tax-agent-services-code
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: tpb
Source Acts: tax-agent-services-act-2009

> Tax practitioners must observe honesty, competence, confidentiality, PI insurance, and (from 2025) expanded breach reporting.

Section 30-10 of the Tax Agent Services Act 2009 sets the Code of Professional Conduct. From 1 January 2025, the Code is supplemented by significantly expanded breach and false-and-misleading-statement obligations under the 2024 Determinations, plus new client engagement requirements.

**Who must comply:** Registered tax agents, BAS agents, tax (financial) advisers.
**What triggers it:** Providing tax agent or BAS services for a fee.
**When due:** Continuous; specific events trigger breach reports.
**Evidence:** PI insurance, CPE log, conflict register, breach register, client engagement letters.
**Max penalty:** Suspension or termination of registration; civil penalties up to $1.565M for unregistered conduct
**Source:** https://tpb.gov.au/code-professional-conduct

### Track eligibility for the electric car FBT exemption
URL: https://rulesmate.com.au/obligations/fbt-electric-vehicle-exemption
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ato
Source Acts: fringe-benefits-tax-assessment-act-1986

> Eligible electric vehicles under the LCT threshold provided to employees are FBT-exempt.

The Electric Car Discount provides an FBT exemption for eligible electric and plug-in hybrid vehicles below the LCT threshold for fuel-efficient vehicles ($91,387 for 2025-26). PHEV exemption applies to cars purchased before 1 April 2025 with continuous eligible use. Reportable fringe benefit reporting still applies on employee payment summaries.

**Who must comply:** Employers providing EVs/PHEVs to employees.
**What triggers it:** Providing a qualifying vehicle to an employee.
**When due:** Annual FBT return.
**Evidence:** Log books, vehicle eligibility documentation, lease records.
**Max penalty:** FBT shortfall + interest if exemption claimed incorrectly
**Source:** https://ato.gov.au/businesses-and-organisations/fringe-benefits-tax/types-of-fringe-benefits/exempt-benefits/exempt-benefits-cars

### Comply with internal dispute resolution standards (RG 271)
URL: https://rulesmate.com.au/obligations/asic-rg-271-internal-dispute-resolution
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, afca
Source Acts: corporations-act-2001

> Financial firms must acknowledge complaints within 24 hours and resolve within prescribed timeframes.

ASIC's Regulatory Guide 271 sets binding internal dispute resolution standards for AFSL/ACL holders and superannuation trustees. Mandatory acknowledgement within 24 hours, complaint definition includes social media expressions of dissatisfaction, prescribed timeframes by complaint type, and prescribed IDR data reporting to ASIC.

**Who must comply:** AFSL holders, ACL holders, RSE licensees, traditional trustee companies.
**What triggers it:** Receiving a complaint.
**When due:** Acknowledge within 24 hours; resolve within 30 calendar days (most complaints).
**Evidence:** Complaints register, IDR response letters, IDR data report to ASIC (annual cycle).
**Max penalty:** Breach reportable to ASIC under RG 78; regulator enforcement action
**Source:** https://asic.gov.au/regulatory-resources/find-a-document/regulatory-guides/rg-271-internal-dispute-resolution/

### Comply with ASIC product intervention orders
URL: https://rulesmate.com.au/obligations/asic-product-intervention
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Issuers and distributors must observe any product intervention order made by ASIC.

Part 7.9A of the Corporations Act enables ASIC to make product intervention orders banning, restricting or imposing conditions on financial products causing significant consumer detriment. Orders are binding and contraventions attract civil and criminal penalties.

**Who must comply:** Issuers and distributors of subject products.
**What triggers it:** An applicable ASIC product intervention order.
**When due:** From the order's commencement date.
**Evidence:** Updated PDS / TMD / sales scripts; cessation of prohibited activities.
**Max penalty:** Civil penalties to the maximum financial-services regime
**Source:** https://asic.gov.au/regulatory-resources/financial-services/product-intervention-power/

### Comply with ASX continuous disclosure (Listing Rule 3.1)
URL: https://rulesmate.com.au/obligations/asx-listing-disclosure-3-1
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asx, asic
Source Acts: corporations-act-2001

> Listed entities must immediately disclose price-sensitive information to the market.

ASX Listing Rule 3.1 requires immediate disclosure of any information that a reasonable person would expect to have a material effect on the price or value of the entity's securities. Exceptions in 3.1A are narrow and cumulative. Section 674 of the Corporations Act underpins with civil and criminal penalties.

**Who must comply:** ASX-listed entities.
**What triggers it:** Becoming aware of price-sensitive information.
**When due:** Immediately on awareness.
**Evidence:** Disclosure committee minutes, market announcements, materiality assessments.
**Max penalty:** Civil penalties + director duty exposure + class action risk
**Source:** https://asx.com.au/listings/listing-rules-guidance

### Hold a Remote Pilot Licence / RPAS operator certificate (drones)
URL: https://rulesmate.com.au/obligations/casa-rpas-operator
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: casa
Source Acts: civil-aviation-act-1988

> Commercial drone operations require operator certification + remote pilot licensing.

Part 101 of the Civil Aviation Safety Regulations requires drone operators conducting commercial operations to hold a Remote Operator Certificate (ReOC) and individual pilots to hold a Remote Pilot Licence (RePL), except for sub-2kg micro RPA operating under the excluded RPA rules.

**Who must comply:** Commercial RPAS operators and pilots.
**What triggers it:** Operating an RPA commercially in Australian airspace.
**When due:** Before commencement; annual fitness-to-fly assessment.
**Evidence:** ReOC, RePL, operations manual, maintenance records, flight logs.
**Max penalty:** Strict liability fines + suspension/cancellation
**Source:** https://casa.gov.au/drones

### Provide WGEA employer statement on the gender pay gap
URL: https://rulesmate.com.au/obligations/wgea-employer-statement-gap
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: wgea
Source Acts: workplace-gender-equality-act-2012

> Employers can publish an employer statement alongside WGEA's published pay gap figures.

Since the 2023 WGEA Act amendments, employer-level gender pay gaps are publicly published. Employers may also lodge an employer statement (up to ~500 words) providing context, methodology and remediation actions. Optional but strongly recommended for reputation management.

**Who must comply:** Non-public-sector employers with 100+ employees.
**What triggers it:** WGEA published pay gap cycle.
**When due:** Annual — alongside or shortly after WGEA publication.
**Evidence:** Employer statement lodged via WGEA Portal.
**Max penalty:** Not lodging is not penalised, but absence is conspicuous in public published data
**Source:** https://wgea.gov.au/pay-gap

### Notify VIC WorkSafe of notifiable WHS incidents
URL: https://rulesmate.com.au/obligations/icnms-vic-incident-notify
Jurisdiction: VIC · Priority: critical · Status: current
Enforced by: worksafe-vic
Source Acts: occupational-health-and-safety-act-2004-vic

> Death, serious injury, illness or dangerous incident must be notified to WorkSafe immediately.

Sections 37-39 of the OHS Act 2004 (Vic) require notification to WorkSafe Victoria immediately by phone, then within 48 hours in writing, of notifiable incidents involving death, serious injury or illness, or dangerous incident.

**Who must comply:** All VIC employers and PCBUs.
**What triggers it:** Notifiable incident at a workplace.
**When due:** Immediately by phone; written notice within 48 hours.
**Evidence:** Incident notification (WorkSafe form), incident investigation report, scene preservation evidence.
**Max penalty:** Significant civil and criminal penalties for failure to notify; preserves WorkSafe's right to investigate
**Source:** https://worksafe.vic.gov.au/notifiable-incidents

### Crypto-Asset Reporting Framework (CARF) — implementation 2026-2027
URL: https://rulesmate.com.au/obligations/carf-crypto-reporting
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Effective: 2026-01-01
Enforced by: ato, austrac
Source Acts: income-tax-assessment-act-1997

> AU adopts the OECD CARF for crypto reporting from 2026; ATO reporting starts 2027.

Australia has committed to implement the OECD's Crypto-Asset Reporting Framework. Crypto-Asset Service Providers (CASPs) including exchanges, brokers and OTC desks will be required to collect customer information and report transactions to the ATO for automatic exchange with foreign tax authorities.

**Who must comply:** Crypto-Asset Service Providers operating in Australia.
**What triggers it:** Operating as a CASP.
**When due:** First reporting expected for 2026 reporting year, with reports submitted 2027.
**Evidence:** KYC records (CARF-aligned), transaction records, automatic-exchange reports to ATO.
**Max penalty:** ATO administrative penalties; alignment with AML/CTF DCE penalties
**Source:** https://ato.gov.au/about-ato/new-legislation/in-detail/international/crypto-asset-reporting-framework

### Adopt Essential Eight Maturity Level 2 (federal subcontractors)
URL: https://rulesmate.com.au/obligations/essential-eight-ml2
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asd

> Federal government contractors handling OFFICIAL: Sensitive must meet Right Fit For Risk (RFFR) including E8 ML2.

Right Fit For Risk requirements apply to providers handling OFFICIAL: Sensitive Commonwealth data. The ASD Information Security Manual (ISM) and Essential Eight Maturity Model are the baseline. Independent assessment by an IRAP-endorsed assessor is required.

**Who must comply:** Federal government contractors and subcontractors handling OFFICIAL: Sensitive data.
**What triggers it:** Government contract requiring RFFR compliance.
**When due:** Before access to data; annual reassessment.
**Evidence:** IRAP assessment report, ISM compliance documentation, E8 maturity attestation.
**Max penalty:** Loss of contract / panel access; reputational exposure on Commonwealth supplier registers
**Source:** https://cyber.gov.au/resources-business-and-government/essential-cyber-security/essential-eight

### Pay Western Australian payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-wa
Jurisdiction: WA · Priority: high · Status: current
Enforced by: rev-wa
Source Acts: pay-roll-tax-act-2002-wa

> WA: 5.5% rate on Australian wages above the $1M tax-free threshold (FY26), with diminishing deduction up to $7.5M.

WA payroll tax under the Pay-roll Tax Act 2002 (WA). FY26 threshold: $1M annual ($83,333 monthly), 5.5% standard rate. Diminishing deduction phases out the threshold between $1M–$7.5M payrolls. Returns lodged monthly via RevenueWA Online; annual reconciliation by 21 July.

**Who must comply:** Employers paying Australian wages above the WA threshold (taking grouping into account).
**What triggers it:** Annual or monthly wages exceeding the threshold; group nomination.
**When due:** Monthly by 7th of following month; annual reconciliation 21 July.
**Evidence:** Monthly returns via RevenueWA, wage records, group nomination.
**Max penalty:** Tax shortfall + interest + penalty tax up to 75%
**Source:** https://wa.gov.au/organisation/department-of-finance/payroll-tax

### Pay South Australian payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-sa
Jurisdiction: SA · Priority: high · Status: current
Enforced by: revenue-sa
Source Acts: payroll-tax-act-2009-sa

> SA: 4.95% rate on Australian wages above the $1.5M tax-free threshold (FY26).

SA payroll tax under the Payroll Tax Act 2009 (SA). FY26 threshold: $1.5M annual ($125,000 monthly), 4.95% standard rate. Discount applies between $1.5M–$1.7M payrolls. Returns lodged monthly via RevenueSA Online; annual reconciliation by 21 July.

**Who must comply:** Employers paying Australian wages above the SA threshold.
**What triggers it:** Wages above threshold; group nomination.
**When due:** Monthly by 7th of following month; annual reconciliation 21 July.
**Evidence:** Monthly returns via RevenueSA, wage records, group nomination.
**Max penalty:** Tax shortfall + interest + penalty tax
**Source:** https://revenuesa.sa.gov.au/payrolltax

### Pay Tasmanian payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-tas
Jurisdiction: TAS · Priority: high · Status: current
Enforced by: sro-tas
Source Acts: payroll-tax-act-2008-tas

> TAS: 4.0% / 6.1% on Australian wages above the $1.25M tax-free threshold (FY26).

Tasmania payroll tax under the Payroll Tax Act 2008 (Tas). FY26 threshold: $1.25M annual ($104,166 monthly). 4.0% standard rate for wages $1.25M-$2M; 6.1% above $2M. Returns lodged monthly via TasRevenue Online.

**Who must comply:** Employers paying Australian wages above the TAS threshold.
**What triggers it:** Wages above threshold; group nomination.
**When due:** Monthly by 7th of following month; annual reconciliation 21 July.
**Evidence:** Monthly returns via TasRevenue, wage records.
**Max penalty:** Tax shortfall + interest + penalty tax
**Source:** https://sro.tas.gov.au/payroll-tax

### Pay Northern Territory payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-nt
Jurisdiction: NT · Priority: high · Status: current
Enforced by: trc-nt
Source Acts: payroll-tax-act-2009-nt

> NT: 5.5% rate on Australian wages above the $1.5M tax-free threshold (FY26).

NT payroll tax under the Payroll Tax Act 2009 (NT). FY26 threshold: $1.5M annual ($125,000 monthly), 5.5% standard rate. Returns lodged monthly via Territory Revenue Online; annual reconciliation by 21 July.

**Who must comply:** Employers paying Australian wages above the NT threshold.
**What triggers it:** Wages above threshold; group nomination.
**When due:** Monthly by 7th of following month; annual reconciliation 21 July.
**Evidence:** Monthly returns via TRO, wage records.
**Max penalty:** Tax shortfall + interest + penalty tax
**Source:** https://nt.gov.au/employ/payroll-tax

### Pay ACT payroll tax when threshold met
URL: https://rulesmate.com.au/obligations/payroll-tax-act
Jurisdiction: ACT · Priority: high · Status: current
Enforced by: act-revenue
Source Acts: payroll-tax-act-2011-act

> ACT: 6.85% rate on Australian wages above the $2M tax-free threshold (FY26).

ACT payroll tax under the Payroll Tax Act 2011 (ACT). FY26 threshold: $2M annual ($166,667 monthly), 6.85% standard rate. Mental health levy 0.5% from $50M payrolls. Returns lodged monthly via ACT Revenue Online.

**Who must comply:** Employers paying Australian wages above the ACT threshold.
**What triggers it:** Wages above threshold; group nomination.
**When due:** Monthly by 7th of following month; annual reconciliation 21 July.
**Evidence:** Monthly returns via ACT Revenue Online, wage records.
**Max penalty:** Tax shortfall + interest + penalty tax
**Source:** https://revenue.act.gov.au/payroll-tax

### Comply with SIS Act trustee covenants
URL: https://rulesmate.com.au/obligations/sis-trustee-covenants
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: apra, asic, ato
Source Acts: superannuation-industry-supervision-act-1993

> Super fund trustees owe statutory covenants of care, skill, diligence, best financial interests, and prudent investment.

Section 52 of the Superannuation Industry (Supervision) Act 1993 imposes covenants on trustees of regulated super funds: act with care, skill and diligence; act in the best financial interests of beneficiaries; avoid conflicts; observe prudent investment principles; and maintain adequate financial resources. APRA-regulated trustees additionally comply with SPS 510, SPS 530, SPS 220.

**Who must comply:** Trustees of regulated superannuation funds (APRA-regulated RSE licensees and SMSF trustees).
**What triggers it:** Holding office as a super fund trustee.
**When due:** Continuous.
**Evidence:** Investment governance framework, conflicts register, trustee minutes, BFID decision documentation.
**Max penalty:** Civil penalties up to $1.565M; loss of RSE licence; member compensation orders
**Source:** https://apra.gov.au/super-prudential-framework

### Lodge an annual SMSF audit before lodging the SMSF Annual Return
URL: https://rulesmate.com.au/obligations/smsf-audit
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ato, asic
Source Acts: superannuation-industry-supervision-act-1993

> Self-managed super funds must be audited by an ASIC-registered auditor each year.

Section 35C of the SIS Act requires SMSFs to be audited annually by an approved SMSF auditor (ASIC-registered, independent). The audit covers financial and compliance components. Auditor must report contraventions to the ATO via an Auditor/Actuary Contravention Report (ACR).

**Who must comply:** SMSF trustees.
**What triggers it:** Operating an SMSF.
**When due:** Annual — before lodging the SMSF Annual Return (typically by 28 February or 15 May, depending on tax agent arrangements).
**Evidence:** Auditor's report (financial + compliance), audit working papers, ACR if contraventions identified.
**Max penalty:** ATO penalties (admin penalties + non-compliance tax); risk of fund becoming non-complying (loss of concessional tax rate)
**Source:** https://ato.gov.au/individuals-and-families/super-for-individuals-and-families/self-managed-super-funds-smsf/administering-and-reporting/smsf-auditors

### Maintain SMSF compliance with the sole purpose test (s 62)
URL: https://rulesmate.com.au/obligations/smsf-sole-purpose-test
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ato
Source Acts: superannuation-industry-supervision-act-1993

> SMSFs must be maintained for the sole purpose of providing retirement benefits.

Section 62 of the SIS Act requires SMSFs to be maintained solely for one or more core or ancillary purposes — primarily provision of retirement benefits. Pre-retirement benefits to members, related party transactions outside the rules, and asset use by members (e.g. collectibles, residential property) breach the test.

**Who must comply:** SMSF trustees.
**What triggers it:** Operating an SMSF.
**When due:** Continuous.
**Evidence:** Investment strategy, valuation evidence, related-party transaction documentation, collectibles compliance for in-house assets.
**Max penalty:** Loss of complying status; non-arm's length income taxed at 47%; trustee admin penalties; potential disqualification
**Source:** https://ato.gov.au/individuals-and-families/super-for-individuals-and-families/self-managed-super-funds-smsf/managing-your-fund/sole-purpose-test

### MySuper authorisation for default super products
URL: https://rulesmate.com.au/obligations/mysuper-licensing
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: apra
Source Acts: superannuation-industry-supervision-act-1993

> Default super contributions can only flow to APRA-authorised MySuper products.

Under the Stronger Super reforms, default superannuation contributions (where an employee has not chosen a fund) must be paid to a MySuper-authorised product. Trustees offering MySuper products must hold APRA authorisation, meet member-outcome assessment requirements, and pass annual performance testing.

**Who must comply:** APRA-regulated super trustees offering default products.
**What triggers it:** Offering a default investment option.
**When due:** Continuous; annual performance test; member-outcome assessment.
**Evidence:** MySuper authorisation, performance test results, member-outcome assessment record.
**Max penalty:** APRA can require name-and-shame, prohibit new members, withdraw authorisation
**Source:** https://apra.gov.au/mysuper

### Maintain adequate PI insurance (AFSL holders, RG 126)
URL: https://rulesmate.com.au/obligations/afsl-pi-insurance-rg-126
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> AFSL holders providing financial services to retail clients must hold adequate professional indemnity insurance.

Section 912B and ASIC RG 126 require AFSL holders that deal with retail clients to hold adequate PI insurance covering financial services activities. ASIC sets minimum cover levels (currently at least $2M for any one claim) and limited exclusions. EDR-related cover must be included.

**Who must comply:** AFSL holders dealing with retail clients (most AFSLs).
**What triggers it:** Holding an AFSL with retail authorisations.
**When due:** Continuous; PI renewal annually.
**Evidence:** PI policy certificate, broker confirmation of coverage features, ASIC compensation arrangement notification.
**Max penalty:** Breach of s 912A general obligations; ASIC licence conditions or suspension
**Source:** https://asic.gov.au/regulatory-resources/find-a-document/regulatory-guides/rg-126-compensation-and-insurance-arrangements-for-afs-licensees/

### Authorise representatives correctly (Authorised Representative regime)
URL: https://rulesmate.com.au/obligations/afsl-rep-authorisations
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> AFSL holders must authorise representatives in writing and notify ASIC of new ARs within 15 business days.

Sections 916A-916F of the Corporations Act govern authorised representatives. AFSL holders must authorise ARs in writing, specify the services covered, retain a register, and lodge with ASIC within 15 business days (extended timeframes for sub-authorisations). Some authorisations require AFCA EDR membership for the AR.

**Who must comply:** AFSL holders using authorised representatives.
**What triggers it:** Engaging or terminating an AR; varying authorisations.
**When due:** Notification within 15 business days.
**Evidence:** Written authorisation, AR register, ASIC FS20 / FS31 lodgement, AFCA membership confirmation.
**Max penalty:** Civil penalties + ASIC compliance action
**Source:** https://asic.gov.au/for-finance-professionals/afs-licensees/notify-asic-about-changes-to-your-business/notify-asic-about-an-authorised-representative/

### Maintain Financial Adviser registration + standards (s 921B)
URL: https://rulesmate.com.au/obligations/fasea-corporations-act-921b
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Relevant providers must be on the Financial Advisers Register and meet education + CPD + Code of Ethics.

Section 921B requires individuals providing personal financial product advice to retail clients on relevant products to be a 'relevant provider' on the ASIC Financial Advisers Register. Education standards, ethics exam, supervised year (new entrants), 40+ hours CPD annually, and the Financial Planners and Advisers Code of Ethics 2019 all apply.

**Who must comply:** Financial advisers providing personal advice on relevant products.
**What triggers it:** Providing personal financial product advice to retail clients.
**When due:** Continuous; annual CPD; renewals.
**Evidence:** Registration on the FAR, CPD log, training records, ethics exam pass, AFSL nomination.
**Max penalty:** Removal from the FAR; civil penalty exposure for principals supervising unregistered ARs
**Source:** https://asic.gov.au/for-finance-professionals/afs-licensees/financial-advisers/financial-advisers-register/

### Ban on conflicted remuneration (FOFA)
URL: https://rulesmate.com.au/obligations/afsl-conflicted-remuneration
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> AFSL holders and representatives must not accept conflicted remuneration in connection with retail financial product advice.

Sections 963A-963K of the Corporations Act (the 'FOFA' provisions) ban acceptance of commissions, volume-based payments and other benefits likely to influence advice on retail financial products. Limited exceptions for risk insurance (capped LIF commissions), basic banking and general insurance.

**Who must comply:** AFSL holders and their representatives.
**What triggers it:** Receiving any benefit in connection with retail advice.
**When due:** Continuous.
**Evidence:** Remuneration register, benefit assessment file notes, alternative remuneration register.
**Max penalty:** Civil penalties to the maximum financial-services regime
**Source:** https://asic.gov.au/regulatory-resources/financial-services/giving-financial-product-advice/conflicted-and-other-banned-remuneration/

### Provide an APP 5 collection notice at or before collection
URL: https://rulesmate.com.au/obligations/app-5-collection-notice
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> APP 5 requires notice of identity, purposes, recipients, consequences of not providing info, and where Privacy Policy lives.

APP 5 requires APP entities to take reasonable steps to notify individuals (or otherwise make information available) when collecting personal information. Mandatory matters: entity identity, purpose of collection, kinds of recipients, that the Privacy Policy contains information about access/correction, and consequences of not providing the info.

**Who must comply:** All APP entities collecting personal information.
**What triggers it:** Collecting personal information.
**When due:** At or before collection (or as soon as practicable thereafter).
**Evidence:** Collection notices, signup flows, consent dashboards.
**Max penalty:** Same penalty regime as broader Privacy Act breaches (up to $50M / 30% turnover)
**Source:** https://oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-5-app-5-notification-of-the-collection-of-personal-information

### APP 8 — cross-border disclosure of personal information
URL: https://rulesmate.com.au/obligations/app-8-cross-border
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> Before disclosing personal info overseas, take reasonable steps so the recipient won't breach the APPs (or meet an exception).

APP 8.1 requires entities to take such steps as are reasonable in the circumstances to ensure overseas recipients do not breach the APPs. Section 16C makes the disclosing entity liable for the overseas recipient's acts in some cases. Exceptions include consent, similar laws, and lawful disclosure for permitted general/health situations.

**Who must comply:** APP entities disclosing personal information overseas (cloud hosting, parent company, vendors).
**What triggers it:** Sending personal information to an overseas recipient.
**When due:** Continuous.
**Evidence:** Data flow mapping, contractual safeguards (DPA), legal opinion on overseas regime, consent records where relied upon.
**Max penalty:** Same penalty regime as broader Privacy Act breaches
**Source:** https://oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-8-app-8-cross-border-disclosure-of-personal-information

### Handle APP 12 access and APP 13 correction requests
URL: https://rulesmate.com.au/obligations/app-12-13-access-correction
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> Individuals can request access to and correction of their personal info, with strict response times.

APP 12 requires entities to give an individual access to their personal information held by the entity on request, within 30 days (private sector). Limited exceptions (e.g. serious risk, frivolous, breach of others' privacy). APP 13 requires entities to take reasonable steps to correct personal info that is inaccurate, out of date, incomplete, irrelevant or misleading.

**Who must comply:** All APP entities.
**What triggers it:** Receiving an access or correction request.
**When due:** Access: 30 days (private sector). Correction: reasonable timeframe; statement of correction if disagreement.
**Evidence:** Request register, response letters, correction logs.
**Max penalty:** Civil penalty exposure for systemic failure to respond; complaint-handling by OAIC
**Source:** https://oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-12-app-12-access-to-personal-information

### Comply with credit reporting obligations (Part IIIA Privacy Act)
URL: https://rulesmate.com.au/obligations/credit-reporting-part-iiia
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> Credit providers and CRBs must adhere to the CR Code on collection, use, disclosure, hardship and dispute resolution.

Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2014 govern handling of consumer credit information. Credit providers must give s 21D notices, observe permitted disclosures, treat repayment history information correctly, handle financial hardship requests under s 21D and the FHI regime (from 1 July 2022), and respond to corrections within statutory periods.

**Who must comply:** Credit providers, credit reporting bodies, mortgage insurers, and trade insurers within the regime.
**What triggers it:** Providing or receiving consumer credit information.
**When due:** Continuous; specific notification triggers per Part IIIA.
**Evidence:** CR Code compliance documentation, FHI procedures, notification templates, complaints register.
**Max penalty:** Same penalty regime as broader Privacy Act; CR Code breaches additionally enforceable
**Source:** https://oaic.gov.au/privacy/credit-reporting

### Consumer Data Right (CDR) participant accreditation + compliance
URL: https://rulesmate.com.au/obligations/consumer-data-right-participation
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc, oaic
Source Acts: competition-and-consumer-act-2010

> Banking, energy and (soon) non-bank lending data sharing — accredited participants must comply with privacy safeguards.

The Consumer Data Right (Pt IVD Competition and Consumer Act) and the CDR Rules require data holders to share consumer data on request and accredited data recipients to handle CDR data under the 13 Privacy Safeguards. ACCC + OAIC jointly enforce; CDR has its own incident notification regime distinct from NDB.

**Who must comply:** Designated data holders + accredited data recipients in banking, energy, and (in scope) non-bank lending and telecommunications.
**What triggers it:** Becoming a data holder or accredited recipient.
**When due:** Continuous; incident notification within 30 days.
**Evidence:** Accreditation, CDR Policy, Privacy Safeguard compliance documentation, incident register.
**Max penalty:** Civil penalties up to ~$50M / 30% turnover for serious breaches
**Source:** https://cdr.gov.au

### PCBU primary duty of care (Victoria OHS Act s 21)
URL: https://rulesmate.com.au/obligations/whs-primary-duty-vic
Jurisdiction: VIC · Priority: critical · Status: current
Enforced by: worksafe-vic
Source Acts: occupational-health-and-safety-act-2004-vic

> Victorian employers must so far as reasonably practicable provide and maintain a safe working environment.

Section 21 of the Occupational Health and Safety Act 2004 (Vic) imposes the primary duty on employers to ensure, so far as reasonably practicable, the safety of employees and others affected by work. Industrial manslaughter (s 39G) carries up to $19.6M (corporations) and 25 years prison.

**Who must comply:** Victorian employers, PCBUs and officers.
**What triggers it:** Engaging workers; controlling workplaces.
**When due:** Continuous.
**Evidence:** Risk assessments, control plans, training, consultation records, incident records.
**Max penalty:** Up to $19.65M (corporations) for industrial manslaughter; lower but substantial for Cat 1 / 2 / 3 breaches
**Source:** https://worksafe.vic.gov.au/employer-duties

### PCBU primary duty of care (NSW WHS Act s 19)
URL: https://rulesmate.com.au/obligations/whs-primary-duty-nsw
Jurisdiction: NSW · Priority: critical · Status: current
Enforced by: safework-nsw
Source Acts: work-health-and-safety-act-2011-nsw

> NSW PCBUs must so far as reasonably practicable ensure the health and safety of workers and others.

Section 19 of the Work Health and Safety Act 2011 (NSW) imposes the primary duty. Industrial manslaughter offence (introduced 2024) carries up to 25 years prison + $20M corporate penalty. Category 1, 2 and 3 offences underpin enforcement; due diligence duty for officers under s 27.

**Who must comply:** NSW PCBUs, officers, workers, others.
**What triggers it:** Conducting any business or undertaking.
**When due:** Continuous.
**Evidence:** Safe work method statements, training records, consultation records, incident reports.
**Max penalty:** Up to $20M (corporations) for industrial manslaughter + 25 years prison (individuals)
**Source:** https://safework.nsw.gov.au/legal-obligations/employer-business-obligations

### PCBU primary duty of care (QLD WHS Act s 19)
URL: https://rulesmate.com.au/obligations/whs-primary-duty-qld
Jurisdiction: QLD · Priority: critical · Status: current
Enforced by: whs-qld
Source Acts: work-health-and-safety-act-2011-qld

> QLD PCBUs must ensure health and safety so far as reasonably practicable; industrial manslaughter live since 2017.

Section 19 of the Work Health and Safety Act 2011 (Qld) imposes the primary duty. Queensland was first to introduce industrial manslaughter (2017) — corporate penalties up to ~$13.7M, individuals up to 20 years prison. Cat 1 / 2 / 3 framework applies.

**Who must comply:** QLD PCBUs, officers, workers, others.
**What triggers it:** Conducting any business or undertaking.
**When due:** Continuous.
**Evidence:** Risk assessments, control measures, training, consultation, incident records.
**Max penalty:** Industrial manslaughter ~$13.7M (corporations); Cat 1 lower but substantial
**Source:** https://worksafe.qld.gov.au/laws-and-compliance/work-health-and-safety-laws

### PCBU primary duty of care (WA WHS Act 2020 s 19)
URL: https://rulesmate.com.au/obligations/whs-primary-duty-wa
Jurisdiction: WA · Priority: critical · Status: current
Enforced by: worksafe-wa
Source Acts: work-health-and-safety-act-2020-wa

> WA adopted harmonised model WHS Act 2020 with industrial manslaughter offences from 31 March 2022.

Section 19 of the WHS Act 2020 (WA) imposes the primary duty. WA introduced industrial manslaughter on commencement (31 March 2022) — Crime Class A up to 20 years prison (individuals) + $10M corporate, Crime Class B up to 10 years + $5M.

**Who must comply:** WA PCBUs, officers, workers, others.
**What triggers it:** Conducting any business or undertaking.
**When due:** Continuous.
**Evidence:** Risk assessments, training, consultation, incident reports.
**Max penalty:** Industrial manslaughter Crime Class A: 20 years prison + $10M corporate
**Source:** https://commerce.wa.gov.au/worksafe/work-health-and-safety-act-2020

### Pay long service leave under the LSL Act 1955 (NSW)
URL: https://rulesmate.com.au/obligations/long-service-leave-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: nsw-fair-trading
Source Acts: long-service-leave-act-1955-nsw

> NSW employees accrue 2 months LSL after 10 years' continuous service, payable on resignation after 5 years.

The Long Service Leave Act 1955 (NSW) entitles workers to 2 months (8.667 weeks) paid LSL after 10 years' continuous service with one employer, with pro-rata payment on termination after 5 years. Specific industries have portable LSL schemes (building, contract cleaning, etc).

**Who must comply:** NSW employers.
**What triggers it:** Employees reaching qualifying service.
**When due:** On entitlement; payment of accrued LSL on termination.
**Evidence:** Service records, payroll calculations, LSL register.
**Max penalty:** Civil penalties under the LSL Act + underpayment recovery
**Source:** https://nsw.gov.au/long-service-leave

### Comply with corporate whistleblower protections (Part 9.4AAA Corporations Act)
URL: https://rulesmate.com.au/obligations/whistleblower-protection-corporate
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Public companies and large proprietary companies must have a whistleblower policy and protect disclosers.

Part 9.4AAA of the Corporations Act (and Pt IVD of the Taxation Administration Act 1953) provides legal protections for whistleblowers reporting misconduct in corporations. Public companies, large proprietary companies and corporate trustees of registrable superannuation entities must have a written whistleblower policy. Confidentiality and victimisation protections backed by significant civil and criminal penalties.

**Who must comply:** Public companies, large proprietary companies, corporate trustees of RSEs.
**What triggers it:** Being a covered entity.
**When due:** Whistleblower policy in place; ongoing protection.
**Evidence:** Whistleblower policy, training records, intake mechanism, investigation protocol.
**Max penalty:** Civil penalties up to $1.565M (individuals); criminal liability for victimisation
**Source:** https://asic.gov.au/for-business/whistleblower-rights-and-protections/

### Comply with casual employee conversion (Closing Loopholes — s 66B Fair Work Act)
URL: https://rulesmate.com.au/obligations/casual-employee-conversion
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fwo, fwc
Source Acts: fair-work-act-2009

> From 26 Aug 2024, eligible casual employees can notify their employer to convert to permanent employment.

The Fair Work Legislation Amendment (Closing Loopholes No. 2) Act 2024 reset the casual employment definition (s 15A) and notification-to-convert pathway (s 66B). Employees must work a regular pattern that suggests permanent employment for 6 months (12 months for small business employers). Employers may refuse only on fair and reasonable grounds.

**Who must comply:** All national-system employers using casual employees.
**What triggers it:** Eligible casual employee notification.
**When due:** Employer response within 21 days; conversion follows under s 66C.
**Evidence:** Decision file note, reasons for refusal if applicable, updated employment contract.
**Max penalty:** Civil penalty for breach of s 66B or victimisation up to $93,900 (individual) / $469,500 (corporation)
**Source:** https://fairwork.gov.au/employment-conditions/types-of-employees/casual-employees

### Comply with Paid Parental Leave scheme (26 weeks by 1 July 2026)
URL: https://rulesmate.com.au/obligations/paid-parental-leave-26-weeks
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Effective: 2026-07-01
Enforced by: ato
Source Acts: paid-parental-leave-act-2010

> Government-funded PPL expands to 26 weeks by 1 July 2026, with super on PPL from same date.

The Paid Parental Leave scheme provides government-funded leave at the national minimum wage. From 1 July 2024 expanding to 22 weeks; 24 weeks from 1 July 2025; 26 weeks from 1 July 2026. From 1 July 2025, super guarantee paid on government PPL. Employer-administered for eligible employees.

**Who must comply:** Employers of eligible employees taking parental leave.
**What triggers it:** Eligible employee taking parental leave.
**When due:** Administered each PPL period; super reconciliation per FY.
**Evidence:** Services Australia documentation, payroll records, employer-determination notice.
**Max penalty:** Recovery of incorrectly distributed payments + administrative penalties
**Source:** https://servicesaustralia.gov.au/parental-leave-pay

### Apply for and maintain an Australian Business Number
URL: https://rulesmate.com.au/obligations/abn-application
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: abrs, ato
Source Acts: a-new-tax-system-australian-business-number-act-1999

> Entities carrying on an enterprise in Australia must have an ABN to operate (or face PAYG withholding at 47%).

Section 41 of A New Tax System (Australian Business Number) Act 1999 governs ABN entitlement. Entities must be carrying on an enterprise. Without an ABN, payers must withhold 47% PAYG. Entities must update ABR details within 28 days of changes; inactive ABNs are cancelled by the ATO.

**Who must comply:** Any entity carrying on an enterprise (broadly: business activities) in Australia.
**What triggers it:** Commencing business activities; changes to registered details.
**When due:** Before commencement of business; updates within 28 days.
**Evidence:** ABR registration; ongoing maintenance.
**Max penalty:** 47% withholding on payments without ABN; admin penalties for inactive / cancelled ABNs
**Source:** https://abr.gov.au

### Lodge Business Activity Statements at assigned frequency
URL: https://rulesmate.com.au/obligations/bas-lodgement
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ato
Source Acts: taxation-administration-act-1953

> GST-registered entities must lodge a BAS monthly, quarterly or annually as the ATO assigns.

Activity statements consolidate GST, PAYG instalments, PAYG withholding, FBT instalments and other taxes. Frequency assignment: monthly for $20M+ GST turnover; quarterly default for most; annual for some small + voluntary. Lodgement deadline 28th of following month (quarterly + monthly) with concession dates for tax agents.

**Who must comply:** GST-registered entities and entities required to lodge IAS.
**What triggers it:** Being GST-registered or required to lodge IAS.
**When due:** Monthly: 21st; Quarterly: 28th of following month (28 Oct, 28 Feb, 28 Apr, 28 Jul); Annual: 31 Oct.
**Evidence:** Lodged BAS via portals (myGov, ATO Online, BAS agent), supporting reconciliation.
**Max penalty:** Failure-to-lodge penalty $313 per 28-day period (×5 max for large entities); general interest charge on tax debts
**Source:** https://ato.gov.au/businesses-and-organisations/preparing-lodging-and-paying/business-activity-statements-bas

### Apply for a Tax File Number for new entities and partnerships
URL: https://rulesmate.com.au/obligations/tfn-application
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1936

> Companies, trusts and partnerships need a TFN to file tax returns and claim TFN exemptions.

Non-individual entities must apply for a TFN via the ABN application process. Without a TFN, the entity cannot lodge tax returns electronically and may face PAYG withholding on interest income.

**Who must comply:** Companies, trusts, partnerships, super funds.
**What triggers it:** Entity formation.
**When due:** Before first income tax return.
**Evidence:** TFN issued by ATO.
**Max penalty:** Admin friction + 47% withholding on interest payments without TFN
**Source:** https://ato.gov.au/businesses-and-organisations/starting-registering-or-closing-a-business/before-you-get-an-abn/registering-for-an-australian-business-number-abn

### Make trustee resolutions for trust distributions by 30 June
URL: https://rulesmate.com.au/obligations/trustee-resolution-30-june
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1936

> Discretionary trust trustees must validly resolve to distribute trust income before the end of the FY.

For discretionary trusts, trustees must validly resolve to distribute trust income (and capital gains for streaming) by 30 June each year (subject to trust deed timing). Failure means default beneficiaries (often the trustee taxed at 47%) bear tax. ATO TR 2012/D1 + PCG 2018/4 guidance applies.

**Who must comply:** Trustees of discretionary trusts.
**What triggers it:** End of each financial year.
**When due:** By 30 June (or earlier deed-specified date).
**Evidence:** Written trustee resolution, financials, accountant sign-off.
**Max penalty:** Trustee assessed at 47%; potential reassessment and interest if late resolutions challenged by ATO
**Source:** https://ato.gov.au/businesses-and-organisations/trusts/trustees-and-beneficiaries

### Register R&D activities for the R&D Tax Incentive
URL: https://rulesmate.com.au/obligations/rd-tax-incentive-registration
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1997

> Companies must register R&D activities with AusIndustry within 10 months of the end of the income year.

The R&D Tax Incentive is administered jointly by AusIndustry (registration of activities) and the ATO (tax offset). Companies with annual turnover <$20M receive a refundable offset; others a non-refundable offset. Activities must meet the 'core' and 'supporting' R&D tests. Documentation requirements are intensive.

**Who must comply:** Companies claiming the R&D Tax Incentive.
**What triggers it:** Conducting eligible R&D activities.
**When due:** Registration within 10 months of end of income year.
**Evidence:** Activity registration, contemporaneous records, technical evidence, expenditure substantiation.
**Max penalty:** Tax shortfall + interest + recklessness/intentional disregard penalties up to 75%
**Source:** https://business.gov.au/grants-and-programs/research-and-development-tax-incentive

### Comply with ACNC Governance Standards
URL: https://rulesmate.com.au/obligations/acnc-governance-standards
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: acnc
Source Acts: australian-charities-and-not-for-profits-commission-act-2012

> Six governance standards covering NFP purpose, accountability, compliance, suitability, duties and PBI requirements.

Division 45 of the ACNC Act sets six Governance Standards: (1) charity must be an NFP and pursue charitable purpose; (2) accountability to members; (3) compliance with Australian laws (criminal + civil penalty); (4) suitability of responsible persons; (5) duties of responsible persons (care/diligence, good faith, no improper use of position); (6) PBI requirements.

**Who must comply:** All ACNC-registered charities (limited transitional carve-outs for basic religious charities).
**What triggers it:** Being a registered charity.
**When due:** Continuous; self-attestation in AIS.
**Evidence:** Governing documents, member registry, conflicts register, responsible persons declarations.
**Max penalty:** Revocation of charity status; loss of DGR endorsement; tax concession recovery
**Source:** https://acnc.gov.au/for-charities/manage-your-charity/governance-hub/governance-standards

### Comply with ACNC External Conduct Standards (overseas activity)
URL: https://rulesmate.com.au/obligations/acnc-external-conduct-standards
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acnc
Source Acts: australian-charities-and-not-for-profits-commission-act-2012

> Charities operating or sending funds overseas must comply with four External Conduct Standards.

Division 50 of the ACNC Act introduced ECS effective 23 July 2019. Four standards: (1) activities and control of resources; (2) annual review of overseas activities/finances; (3) anti-fraud and anti-corruption; (4) protection of vulnerable individuals overseas. Apply to charities operating outside Australia or sending funds overseas.

**Who must comply:** Registered charities with overseas activities or funds transfers.
**What triggers it:** Overseas operations or fund transfers.
**When due:** Continuous; annual review.
**Evidence:** Overseas activities register, financial records, anti-fraud framework, partner due diligence.
**Max penalty:** Revocation of registration
**Source:** https://acnc.gov.au/for-charities/manage-your-charity/governance-hub/external-conduct-standards

### Maintain DGR endorsement
URL: https://rulesmate.com.au/obligations/dgr-endorsement-maintenance
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato, acnc
Source Acts: income-tax-assessment-act-1997

> Deductible Gift Recipients must continue to meet category-specific requirements and report use of donations.

Subdivision 30-B of the ITAA 1997 sets DGR categories. ATO endorses DGRs; entities must continue to meet category requirements and (from 2024 reforms) be ACNC-registered or government-related. Annual DGR self-review introduced 1 July 2024; transitional rules through to 2026.

**Who must comply:** DGR-endorsed entities.
**What triggers it:** Being a DGR.
**When due:** Annual self-review (from 1 July 2024).
**Evidence:** Endorsement records, annual self-review, donation use records.
**Max penalty:** Loss of DGR endorsement; income tax assessment for misuse of donations
**Source:** https://ato.gov.au/non-profit/getting-started/in-detail/types-of-dgrs

### Verify NDIS worker screening clearance
URL: https://rulesmate.com.au/obligations/ndis-worker-screening
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ndis-commission
Source Acts: national-disability-insurance-scheme-act-2013

> Registered providers must only engage workers in risk-assessed roles with a current NDIS Worker Screening clearance.

NDIS Practice Standards and the NDIS (Practice Standards — Worker Screening) Rules require registered providers to verify that workers in risk-assessed roles hold a valid NDIS Worker Screening clearance via the national database. State-issued clearances accepted on a transitional basis.

**Who must comply:** Registered NDIS providers.
**What triggers it:** Engaging a worker in a risk-assessed role.
**When due:** Before commencement of role.
**Evidence:** Clearance verification records, ongoing monitoring of clearance status.
**Max penalty:** Civil penalties + registration suspension/cancellation
**Source:** https://ndiscommission.gov.au/workers/worker-screening

### Comply with Serious Incident Response Scheme (aged care)
URL: https://rulesmate.com.au/obligations/aged-care-sirs
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> Residential and home-care providers must notify Aged Care Quality and Safety Commission of priority 1 incidents within 24 hours.

Sections 53-1A onwards of the Aged Care Quality and Safety Commission Act and Quality of Care Principles establish SIRS. Eight incident types (e.g. unreasonable use of force, sexual assault, neglect, missing consumer, psychological abuse). Priority 1 notifications within 24 hours, follow-up reports within 5 business days. Home care SIRS commenced 1 December 2022.

**Who must comply:** Approved aged care providers (residential and home care).
**What triggers it:** Occurrence of a reportable incident.
**When due:** Priority 1 within 24 hours; follow-up within 5 business days.
**Evidence:** Notification via My Aged Care portal, incident investigation, control review.
**Max penalty:** Civil penalties for non-notification; sanctions; loss of approved provider status
**Source:** https://agedcarequality.gov.au/providers/serious-incident-response-scheme

### Registered nurse on duty 24/7 in residential aged care
URL: https://rulesmate.com.au/obligations/aged-care-registered-nurse-24-7
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> Residential aged care providers must have a registered nurse on duty 24 hours a day.

Section 54-1AA of the Aged Care Act (from 1 July 2023, continued under the Aged Care Act 2024) requires residential aged care providers to have at least one registered nurse on duty and on site at all times. Limited exemptions for facilities with fewer than 30 beds in regional/remote areas. Care minutes targets also apply.

**Who must comply:** Approved residential aged care providers.
**What triggers it:** Operating a residential aged care service.
**When due:** Continuous from 1 July 2023.
**Evidence:** Rostering records, RN credentialing, exemption documentation if applicable.
**Max penalty:** Civil penalties; sanctions including imposition of conditions
**Source:** https://health.gov.au/our-work/registered-nurses-in-residential-aged-care-247

### Maintain CRICOS registration (international student providers)
URL: https://rulesmate.com.au/obligations/cricos-registration
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asqa, teqsa
Source Acts: education-services-for-overseas-students-act-2000

> Providers offering education to overseas students must be CRICOS-registered and comply with the National Code 2018.

The Education Services for Overseas Students Act 2000 (ESOS) requires CRICOS registration. Providers must comply with the National Code 2018 — 11 standards covering marketing, written agreements, course progress, complaints, transfers, deferment/suspension. Significant compliance changes from January 2025 (registration moratorium and tightened standards).

**Who must comply:** Education providers enrolling overseas students.
**What triggers it:** Marketing or providing education to overseas students.
**When due:** Continuous; periodic re-registration.
**Evidence:** CRICOS registration, written agreements, complaint records, course-progress tracking, PRISMS reporting.
**Max penalty:** Civil and criminal penalties; CRICOS registration cancellation; permanent ban
**Source:** https://internationaleducation.gov.au/regulatory-information/Pages/Regulatoryinformation.aspx

### Comply with Higher Education Standards Framework (Threshold Standards) 2021
URL: https://rulesmate.com.au/obligations/hesf-standards
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: teqsa
Source Acts: tertiary-education-quality-and-standards-agency-act-2011

> TEQSA-registered higher education providers must meet 7 domains of the HESF.

The Higher Education Standards Framework (Threshold Standards) 2021 sets seven domains covering student participation/attainment, learning environment, teaching, research, institutional quality assurance, governance and accountability, and registration. TEQSA audits compliance during registration and renewal cycles, plus thematic reviews.

**Who must comply:** TEQSA-registered higher education providers.
**What triggers it:** Being a registered higher education provider.
**When due:** Continuous; registration cycles (max 7 years).
**Evidence:** Quality assurance system, course accreditation records, student feedback, governance documentation.
**Max penalty:** Conditions on registration; suspension; cancellation; criminal offences for providing higher education without authority
**Source:** https://www.teqsa.gov.au/higher-education-standards-framework-2021

### Maintain CASR Part 119/121 AOC + AMOS (commercial air transport)
URL: https://rulesmate.com.au/obligations/casa-amos
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: casa
Source Acts: civil-aviation-act-1988

> Commercial air transport operators need an Air Operator's Certificate + Safety Management System.

Civil Aviation Safety Regulations Parts 119, 121, 135 require commercial air transport operators to hold an Air Operator's Certificate, implement a documented SMS, comply with operations manual, fatigue rules, maintenance program, and pilot training/checking.

**Who must comply:** Commercial air transport operators.
**What triggers it:** Commercial air transport operations.
**When due:** Continuous.
**Evidence:** AOC, operations manual, SMS documentation, maintenance records, pilot training records.
**Max penalty:** Strict liability penalties; AOC suspension/cancellation
**Source:** https://casa.gov.au/standard-page/safety-management-systems

### Survey + certify Domestic Commercial Vessels (DCV)
URL: https://rulesmate.com.au/obligations/amsa-dcv-survey
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: amsa
Source Acts: marine-safety-domestic-commercial-vessel-national-law-act-2012

> AMSA-administered Marine Order 503 requires periodic survey and certification of commercial vessels.

Under the Marine Safety (Domestic Commercial Vessel) National Law, DCV operators must hold a current Certificate of Survey appropriate to vessel class and operation. AMSA administers; surveys conducted by accredited marine surveyors.

**Who must comply:** Owners and operators of domestic commercial vessels.
**What triggers it:** Operating a DCV.
**When due:** Periodic survey cycles per vessel class.
**Evidence:** Certificate of Survey, surveyor reports, maintenance log, crew qualifications.
**Max penalty:** Strict liability fines; vessel detention; AMSA-issued conditions
**Source:** https://amsa.gov.au/vessels-operators/domestic-commercial-vessels/survey-and-certification

### Country of Origin Labelling for food (CoOL Information Standard)
URL: https://rulesmate.com.au/obligations/country-of-origin-labelling
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Food sold in Australia must carry country-of-origin labelling per the 2016 Information Standard.

The Country of Origin Food Labelling Information Standard 2016 (made under the ACL) requires priority food sold in retail to carry CoOL labels including the kangaroo logo for products made/grown/produced/packed in Australia, plus the percentage of Australian-sourced ingredients on a coloured bar chart.

**Who must comply:** Retailers and food manufacturers supplying priority food in Australia.
**What triggers it:** Supplying priority food (most food not consumed as it leaves the supplier) at retail.
**When due:** Continuous.
**Evidence:** Compliant labels, supplier declarations, percentage-of-AU calculations.
**Max penalty:** Civil penalty up to $16.665M for false/misleading representations (ACL)
**Source:** https://industry.gov.au/policies-and-initiatives/australian-country-origin-food-labelling-laws

### Lodge Payment Times Reports (large business)
URL: https://rulesmate.com.au/obligations/asbfeo-payment-times-reporting
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asbfeo
Source Acts: payment-times-reporting-act-2020

> Large businesses (>$100M revenue) must report payment times to small business suppliers every 6 months.

The Payment Times Reporting Act 2020 (Cth) requires entities (or members of consolidated groups) with consolidated income above $100M to report payment terms and times to small business suppliers. Reports submitted to the Regulator twice yearly. Slowest payers named publicly.

**Who must comply:** Reporting entities with annual income >$100M.
**What triggers it:** Meeting the income threshold.
**When due:** Twice yearly: 3 months after end of each 6-month reporting period.
**Evidence:** Report submitted via Payment Times Reporting Portal; supporting payment data.
**Max penalty:** Civil penalties up to ~$16.65M (corporations) for failure to report or false statements
**Source:** https://paymenttimes.gov.au

### Pay Victorian land tax (including absentee owner surcharge)
URL: https://rulesmate.com.au/obligations/land-tax-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: sro-vic
Source Acts: land-tax-act-2005-vic

> VIC land tax applies on aggregated taxable value above $50K (general) / $25K (trust); absentee owner +4% surcharge.

Land Tax Act 2005 (Vic). Taxable on aggregated unimproved land value (excluding PPR exemption). General threshold $50K (2026); trust threshold $25K. Absentee owner surcharge 4%. Vacant residential land tax (VRLT) and Commercial and Industrial Property Tax phasing in.

**Who must comply:** Owners of Vic land above thresholds (excluding PPR).
**What triggers it:** Holding taxable land at 31 December each year.
**When due:** Annual; payable by due date on assessment.
**Evidence:** Notice of Assessment; PPR claim documentation; trust nominations.
**Max penalty:** Penalty tax + interest; non-payment attracts charge on land
**Source:** https://sro.vic.gov.au/land-tax

### Pay NSW land tax
URL: https://rulesmate.com.au/obligations/land-tax-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: revenue-nsw
Source Acts: land-tax-act-1956-nsw

> NSW land tax applies on aggregated unimproved land value above $1.075M general threshold (2026).

Land Tax Act 1956 (NSW). 2026 thresholds: $1.075M general; $6.571M premium. Rate 1.6% above threshold + flat $100. Foreign owner surcharge 4%. PPR exemption applies. Trust thresholds and exemptions per Schedule.

**Who must comply:** Owners of NSW land above thresholds.
**What triggers it:** Holding taxable land at 31 December.
**When due:** Annual; assessment with due date.
**Evidence:** Notice of Assessment; PPR/exemption claim.
**Max penalty:** Penalty tax + interest
**Source:** https://revenue.nsw.gov.au/taxes-duties-levies-royalties/land-tax

### Pay Victorian stamp duty on residential property
URL: https://rulesmate.com.au/obligations/stamp-duty-vic-residential
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: sro-vic
Source Acts: duties-act-2000-vic

> Variable rates by purchase price; foreign purchaser surcharge 8%. PPR concession available.

Duties Act 2000 (Vic). General rate scales from 1.4% to 6.5% on purchase price. Foreign purchaser additional duty 8%. PPR concession reduces duty for owner-occupiers up to $550K. First home buyer concession (off-the-plan and existing thresholds vary).

**Who must comply:** Purchasers of Victorian dutiable property.
**What triggers it:** Acquisition or transfer of property.
**When due:** Within 30 days of settlement (typically processed by conveyancer).
**Evidence:** Lodged duties documents via Duties Online; settlement statement.
**Max penalty:** Interest + penalty tax + voiding of transaction in extreme cases
**Source:** https://sro.vic.gov.au/land-transfer-stamp-duty

### Implement Food Safety Management Tool (Standard 3.2.2A)
URL: https://rulesmate.com.au/obligations/food-safety-management-tools
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fsanz
Source Acts: food-standards-australia-new-zealand-act-1991

> Category 1 food businesses must use a Food Safety Management Tool to verify critical controls.

Standard 3.2.2A requires Category 1 food businesses to verify food safety by using a Food Safety Management Tool — record keeping for receipt, cleaning, sanitising, cold storage, hot holding, cooking, cooling and reheating. State implementations vary in exact records required.

**Who must comply:** Category 1 food businesses (food service serving ready-to-eat food).
**What triggers it:** Operating Category 1 food premises.
**When due:** Continuous.
**Evidence:** Temperature logs, cleaning records, supplier verification, allergen records.
**Max penalty:** State-based fines + suspension/closure
**Source:** https://foodstandards.gov.au/business/safetystandards/Pages/Standard-3-2-2A.aspx

### Comply with the ePayments Code
URL: https://rulesmate.com.au/obligations/epayments-code
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: asic

> Voluntary but industry-standard code covering electronic transaction terms, mistaken internet payments, and unauthorised transactions.

The ePayments Code is a voluntary code that ADIs, payment system operators and many fintechs subscribe to. Covers Terms and Conditions disclosure, statements, mistaken internet payment recovery, and unauthorised transaction liability allocation. ASIC administers; subscribers report compliance.

**Who must comply:** Subscribers (most ADIs and many fintechs).
**What triggers it:** Subscribing to the Code; providing covered electronic transactions to consumers.
**When due:** Continuous; compliance reporting per ASIC schedule.
**Evidence:** Code subscriber documentation, T&C compliance, complaint handling records, ASIC reporting.
**Max penalty:** Code-based; reputational + ASIC oversight
**Source:** https://asic.gov.au/regulatory-resources/financial-services/epayments-code/

### Comply with the Banking Code of Practice (ABA)
URL: https://rulesmate.com.au/obligations/banking-code-of-practice
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, afca

> Subscribing ABA member banks observe the Code's commitments on conduct, transparency and customer protection.

The Banking Code of Practice (current version 2025) is binding on Australian Banking Association member banks who subscribe. ABA Code Compliance Committee monitors. Code includes specific protections for small business, guarantors, and customers in financial difficulty.

**Who must comply:** ABA member banks who subscribe to the Code.
**What triggers it:** Subscribing to the Code.
**When due:** Continuous.
**Evidence:** Code subscriber attestation; CCMC compliance reports.
**Max penalty:** Code-based; reputational + AFCA reliance on Code in determinations
**Source:** https://www.ausbanking.org.au/banking-code/

### BNPL providers — credit licensing from 10 June 2025
URL: https://rulesmate.com.au/obligations/bnpl-credit-licence
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-06-10
Enforced by: asic
Source Acts: national-consumer-credit-protection-act-2009

> BNPL captured by the NCCP Act as a regulated credit product from 10 June 2025.

The Treasury Laws Amendment (Responsible Buy Now Pay Later and Other Measures) Act 2024 brings Buy Now Pay Later within the NCCP Act as 'Low Cost Credit Contracts' from 10 June 2025. BNPL providers need an ACL and must apply modified responsible lending obligations.

**Who must comply:** BNPL providers operating in Australia.
**What triggers it:** Providing BNPL services.
**When due:** ACL in place by 10 June 2025; ongoing compliance.
**Evidence:** ACL, modified responsible lending procedures, hardship procedures, AFCA membership.
**Max penalty:** Civil penalties up to $15.65M / 3× benefit / 10% turnover; unlicensed conduct also criminal
**Source:** https://treasury.gov.au/consultation/c2023-431524

### Comply with Telecommunications Consumer Protections (TCP) Code
URL: https://rulesmate.com.au/obligations/telco-tcp-code
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acma
Source Acts: telecommunications-act-1997

> Telcos must comply with the binding TCP Code covering credit assessment, billing, complaint handling and unwelcome contact.

The TCP Code (C628:2019, with 2024 update) is a registered industry code under the Telecommunications Act, binding on all CSPs. Covers advertising, credit assessment, contracts, billing, complaint handling, financial hardship, and contact preferences. ACMA enforces; significant penalties for non-compliance.

**Who must comply:** Carriage service providers (telcos).
**What triggers it:** Providing carriage services.
**When due:** Continuous; complaint handling within prescribed timeframes.
**Evidence:** Compliance attestation, complaint register, training records, hardship records.
**Max penalty:** Civil penalties up to $10M per breach + infringement notices
**Source:** https://acma.gov.au/industry-standards-and-rules

### Comply with the Reducing Scam Calls and Scam SMs Industry Code
URL: https://rulesmate.com.au/obligations/phone-scam-prevention-rules
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acma
Source Acts: telecommunications-act-1997

> CSPs must implement controls to detect, trace and block scam calls and SMs, including SMS Sender ID Register.

The C661:2022 Code (Reducing Scam Calls and Scam SMs) is enforceable under the Telco Act. Carriers and CSPs must implement traceback, detection, blocking and reporting controls. SMS Sender ID Register operating from 2024.

**Who must comply:** Carriers and carriage service providers.
**What triggers it:** Providing voice/SMS services.
**When due:** Continuous.
**Evidence:** Scam controls documentation; ACMA reporting where required.
**Max penalty:** Civil penalties up to ~$2.5M per breach; ACMA can issue directions
**Source:** https://acma.gov.au/scams-action

### Comply with state Responsible Gambling Codes of Practice
URL: https://rulesmate.com.au/obligations/responsible-gambling-code
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acma

> Licensed gambling operators must implement responsible gambling controls including self-exclusion, intervention and staff training.

Each state has a Responsible Gambling Code of Practice (e.g. VIC RG Code, NSW RG Code) attached to gambling licences. Common requirements: trained staff, customer interaction protocols, self-exclusion register, advertising restrictions, problem gambling support information, and BetStop national self-exclusion register integration.

**Who must comply:** Licensed gambling operators.
**What triggers it:** Holding a gambling licence.
**When due:** Continuous; integration with BetStop ongoing.
**Evidence:** RG Plan, training records, intervention logs, BetStop integration evidence.
**Max penalty:** Licence conditions, suspension, cancellation; state penalty units
**Source:** https://acma.gov.au/online-gambling-rules-australia

### Determine NGER reporting thresholds annually
URL: https://rulesmate.com.au/obligations/nger-energy-thresholds
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: cer
Source Acts: national-greenhouse-and-energy-reporting-act-2007

> Test corporate group and facility thresholds at end of each FY — if met, register and report under NGER.

Sections 12-14 of the NGER Act set thresholds. Corporate group: 50,000 t CO2-e Scope 1+2 emissions, 200 TJ energy production, or 200 TJ consumption. Facility: 25,000 t CO2-e, 100 TJ production, 100 TJ consumption. Annual self-test required; registration follows.

**Who must comply:** All corporations potentially crossing NGER thresholds.
**What triggers it:** End of each FY.
**When due:** Annual self-test; registration within 31 August if newly captured.
**Evidence:** Threshold workpaper, registration with the Regulator, EERS report.
**Max penalty:** Civil penalty for non-registration once thresholds met; multi-year liability
**Source:** https://cleanenergyregulator.gov.au/NGER/About-the-National-Greenhouse-and-Energy-Reporting-scheme/Reporting-thresholds

### Apply 'if not why not' against ASX Corporate Governance Council Principles & Recommendations (4th ed)
URL: https://rulesmate.com.au/obligations/asx-corporate-governance-recs
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asx, asic
Source Acts: corporations-act-2001

> ASX-listed entities must disclose against 8 Principles + 38 Recommendations annually.

ASX Listing Rule 4.10.3 requires listed entities to disclose corporate governance practices against the ASX CGC Principles and Recommendations (4th edition). 'If not, why not' approach — non-adoption requires explanation. Annual disclosure in the annual report or governance statement.

**Who must comply:** All ASX-listed entities.
**What triggers it:** Being ASX-listed.
**When due:** Annual — with annual report.
**Evidence:** Corporate Governance Statement, supporting evidence (e.g. board charter, code of conduct, diversity policy).
**Max penalty:** Non-compliance with Listing Rule attracts ASX disciplinary process + market reputational impact
**Source:** https://www.asx.com.au/asx/research/corporateGovernance.do

### Two-strikes rule on listed-company remuneration report (s 250R)
URL: https://rulesmate.com.au/obligations/two-strikes-remuneration-report
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> If a remuneration report attracts 25%+ no votes twice running, a spill resolution must be considered.

Sections 250R-250W of the Corporations Act establish the two-strikes regime. If a listed entity's remuneration report receives ≥25% 'no' vote at two consecutive AGMs, shareholders must vote on a spill of the board (other than the MD). Used as a powerful shareholder activism lever.

**Who must comply:** ASX-listed entities.
**What triggers it:** First strike (≥25% against rem report); second strike (same).
**When due:** Each AGM; spill resolution mandatory after second strike.
**Evidence:** AGM voting records, remuneration report, board response.
**Max penalty:** Spill resolution outcome; reputational and shareholder activism impact
**Source:** https://asic.gov.au/regulatory-resources/financial-reporting-and-audit/preparers-of-financial-reports/director-and-executive-remuneration-disclosures/

### Notify FIRB before foreign investment in Australian assets
URL: https://rulesmate.com.au/obligations/firb-notification
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: foreign-acquisitions-and-takeovers-act-1975

> Foreign persons must notify the Foreign Investment Review Board before acquiring interests above prescribed thresholds.

The Foreign Acquisitions and Takeovers Act 1975 and FATR 2015 require foreign persons to notify FIRB before acquiring certain Australian land, businesses or shares. Thresholds vary by investor type, asset class and FTA status. National security review under Part 3 enhanced post-2021.

**Who must comply:** Foreign persons making notifiable investments in Australia.
**What triggers it:** Proposed acquisition above threshold or otherwise notifiable.
**When due:** Before acquisition becomes binding.
**Evidence:** FIRB application, no-objection notification, structuring documents.
**Max penalty:** Civil penalty up to ~$1.565M (individuals), ~$15.65M (corporations); criminal liability for serious breaches
**Source:** https://firb.gov.au

### Hold a Construction Induction (White Card) before construction site work
URL: https://rulesmate.com.au/obligations/construction-induction-card
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: safework-nsw, worksafe-vic, whs-qld, safework-sa, worksafe-wa, worksafe-tas, worksafe-act, ntworksafe
Source Acts: work-health-and-safety-act-2011

> All construction site workers must have completed nationally recognised induction training (CPCWHS1001).

Under Chapter 6 of the model WHS Regulations (adopted in all states), no person may carry out construction work unless they have completed CPCWHS1001 General Construction Induction Training. State authorities issue the card (White Card / Construction Induction Card).

**Who must comply:** Workers entering construction sites.
**What triggers it:** Carrying out construction work on a construction site.
**When due:** Before commencement; card to be carried.
**Evidence:** White Card (current); training certificate.
**Max penalty:** On-the-spot penalties; site removal; PCBU exposure if untrained workers present
**Source:** https://safeworkaustralia.gov.au/safety-topic/industry-and-business/construction

### Hold a High Risk Work Licence for HRWL classes
URL: https://rulesmate.com.au/obligations/high-risk-work-licence
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: safework-nsw, worksafe-vic, whs-qld, safework-sa, worksafe-wa, worksafe-tas, worksafe-act, ntworksafe
Source Acts: work-health-and-safety-act-2011

> Forklift, crane, scaffolding, dogging, rigging, EWP and other high-risk work requires a HRWL.

Schedule 3 of the model WHS Regulations lists 29 HRWL classes. Workers must hold a current HRWL for the relevant class; PCBUs must verify licences before assigning work. Mutual recognition applies across states.

**Who must comply:** Workers performing HRWL classes and their PCBUs.
**What triggers it:** Carrying out HRWL class work.
**When due:** Continuous; licence carriage on site.
**Evidence:** Current HRWL; PCBU licence verification record.
**Max penalty:** Significant fines; PCBU and worker liability
**Source:** https://safeworkaustralia.gov.au/system/files/documents/2210/code_of_practice_-_managing_the_risks_of_plant_in_the_workplace.pdf

### Comply with the Therapeutic Goods Advertising Code
URL: https://rulesmate.com.au/obligations/advertising-therapeutic-goods
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: tga
Source Acts: therapeutic-goods-act-1989

> Advertising of therapeutic goods to consumers must comply with the TGA Advertising Code and prohibited representations.

Part 5-1 Therapeutic Goods Act 1989 and Therapeutic Goods Advertising Code 2021 govern advertising to consumers. Prohibited representations (e.g. cancer treatment claims) require pre-approval. Schedule 4 prescription medicines cannot be advertised. Penalties for non-compliance significantly enhanced 2021.

**Who must comply:** Sponsors, advertisers, social media influencers promoting therapeutic goods.
**What triggers it:** Promoting therapeutic goods to consumers.
**When due:** Continuous.
**Evidence:** Advertising compliance check, internal approval workflow, influencer briefing.
**Max penalty:** Civil penalty up to $1.69M (individuals), $16.9M (corporations); criminal liability for serious offences
**Source:** https://tga.gov.au/advertising-therapeutic-goods

### Beneficial ownership transparency (Tranche 3 — under consultation)
URL: https://rulesmate.com.au/obligations/beneficial-ownership-register
Jurisdiction: CWLTH · Priority: medium · Status: upcoming
Enforced by: asic, abrs
Source Acts: corporations-act-2001

> Proposed beneficial ownership register for unlisted companies and trusts — consultation through 2024-2025; commencement TBD.

Treasury consultation on a public beneficial ownership register for unlisted Australian companies. Expected to require disclosure of natural persons with ≥25% ownership/control. Aligns with FATF Recommendation 24 + Tranche 3 AML reforms. Commencement and final scope still being settled.

**Who must comply:** Unlisted Australian companies (proposed); trusts in scope TBD.
**What triggers it:** Being a captured entity once legislation passes.
**When due:** TBD — likely 2027-2028 commencement.
**Evidence:** BO register; lodgement with ASIC/ABRS once required.
**Max penalty:** TBD — likely civil and criminal penalties for non-disclosure or false statements
**Source:** https://treasury.gov.au/consultation/c2022-340667

### Independent review of AML/CTF program
URL: https://rulesmate.com.au/obligations/aml-independent-review
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: austrac
Source Acts: anti-money-laundering-and-counter-terrorism-financing-act-2006

> Reporting entities must arrange independent review of their Part A AML/CTF program at appropriate intervals.

Section 84 + AML/CTF Rules Part 8.6 require reporting entities to ensure that the Part A program is subject to regular independent review. The review tests effectiveness, identifies improvements, and is documented for AUSTRAC. Typically annual for higher-risk entities, every 2-3 years for lower-risk.

**Who must comply:** All AUSTRAC reporting entities.
**What triggers it:** Having a Part A AML/CTF program in place.
**When due:** Appropriate intervals — risk-based; minimum recommended every 2 years.
**Evidence:** Independent review scope, report, remediation tracker.
**Max penalty:** Same penalty regime as broader AML/CTF Act breaches; informs AUSTRAC enforcement posture
**Source:** https://austrac.gov.au/business/core-guidance/aml-ctf-program/part-program/independent-review

### Designate an AML/CTF Compliance Officer
URL: https://rulesmate.com.au/obligations/aml-compliance-officer
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: austrac
Source Acts: anti-money-laundering-and-counter-terrorism-financing-act-2006

> Reporting entities must designate a senior employee as AML/CTF Compliance Officer.

AML/CTF Rules require reporting entities to designate a senior employee as the AML/CTF Compliance Officer with responsibility for the entity's program. Must be at management level, have sufficient seniority and authority, and be a fit and proper person. Outsourcing the function is not permitted.

**Who must comply:** All AUSTRAC reporting entities.
**What triggers it:** Becoming a reporting entity.
**When due:** Continuous.
**Evidence:** Appointment letter; position description; AUSTRAC enrolment record.
**Max penalty:** Civil penalties to the AML/CTF Act maximum; AUSTRAC remediation
**Source:** https://austrac.gov.au/business/core-guidance/aml-ctf-program/part-program/compliance-officer

### Register for VIC portable LSL (construction)
URL: https://rulesmate.com.au/obligations/vic-portable-lsl-construction
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: worksafe-vic
Source Acts: construction-industry-long-service-leave-act-1997-vic

> Construction industry employers in VIC must register with CoINVEST and pay quarterly LSL levies.

The Construction Industry Long Service Leave Act 1997 (Vic) establishes CoINVEST — the portable LSL scheme for construction. Employers must register, pay 2.7% (FY26) of total construction wages quarterly, and lodge worker activity statements.

**Who must comply:** Construction industry employers in Victoria.
**What triggers it:** Engaging workers in covered construction activities.
**When due:** Quarterly returns and levies.
**Evidence:** CoINVEST registration, quarterly returns, payment records.
**Max penalty:** Recovery of unpaid levies + interest + penalties
**Source:** https://coinvest.com.au

### QLD coal mining safety obligations (Coal Mining Safety and Health Act 1999)
URL: https://rulesmate.com.au/obligations/qld-coal-mining-safety
Jurisdiction: QLD · Priority: critical · Status: current
Enforced by: whs-qld
Source Acts: coal-mining-safety-and-health-act-1999-qld

> QLD coal mine operators must ensure acceptable level of risk under the Act.

The Coal Mining Safety and Health Act 1999 (Qld) imposes a primary obligation to ensure risk to persons from coal mining operations is at an acceptable level. Site Senior Executive accountability, statutory positions, dust monitoring (including the lowered 1.5 mg/m³ coal dust limit), and notifiable incident reporting. Mining safety reset programmes follow Grosvenor.

**Who must comply:** Coal mine operators in QLD; Site Senior Executive personally.
**What triggers it:** Operating a coal mine.
**When due:** Continuous.
**Evidence:** Safety and Health Management System, statutory position records, dust monitoring records, SSE accountability matrix.
**Max penalty:** Significant fines + Cat 1/2/3 prosecution + Mining Industrial Manslaughter (since 2020)
**Source:** https://www.business.qld.gov.au/industries/mining-energy-water/resources/safety-health/mining

### NSW mining safety obligations (Work Health and Safety (Mines and Petroleum Sites) Act 2013)
URL: https://rulesmate.com.au/obligations/nsw-mining-safety
Jurisdiction: NSW · Priority: critical · Status: current
Enforced by: safework-nsw
Source Acts: work-health-and-safety-mines-and-petroleum-sites-act-2013-nsw

> NSW mine operators face mine-specific WHS obligations + Resources Regulator oversight.

The WHS (Mines and Petroleum Sites) Act 2013 (NSW) applies WHS Act provisions plus mining-specific duties. Mine operator must have a documented safety management system, principal mining hazard management plans for ground stability, fire/explosion, gas outbursts, dust/airborne contaminants, etc.

**Who must comply:** NSW mine operators + PCBUs in mining operations.
**What triggers it:** Operating a mine in NSW.
**When due:** Continuous.
**Evidence:** SMS, principal mining hazard management plans, statutory functions appointments, audit records.
**Max penalty:** Cat 1/2/3 WHS framework; industrial manslaughter under model NSW WHS Act 2024 amendments
**Source:** https://www.resourcesregulator.nsw.gov.au

### WA mining safety (Mines Safety and Inspection Act 1994)
URL: https://rulesmate.com.au/obligations/wa-mining-safety
Jurisdiction: WA · Priority: critical · Status: current
Enforced by: worksafe-wa
Source Acts: mines-safety-and-inspection-act-1994-wa

> WA mine operators must ensure safe and healthy mines under MSIA + WHS Act 2020.

The Mines Safety and Inspection Act 1994 (WA), as supplemented by the WHS Act 2020 (WA), imposes statutory positions (registered manager, mine surveyor), risk-management duties, and serious accident notification. WA mining industrial manslaughter operates under the WHS Act 2020 from 31 March 2022.

**Who must comply:** WA mining operators and registered managers.
**What triggers it:** Holding a mining tenement and conducting mining activities.
**When due:** Continuous.
**Evidence:** Statutory position records, safety management plans, audit + serious accident notification logs.
**Max penalty:** WA industrial manslaughter Class A: $10M (corp) + 20 years (individual)
**Source:** https://www.dmp.wa.gov.au

### Maintain mining rehabilitation bonds + closure plans
URL: https://rulesmate.com.au/obligations/mining-rehab-bonds
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: epa-nsw, epa-vic

> State mining regimes require financial assurance bonds for site rehabilitation.

Each state mining authority requires holders of mining tenements / leases to provide financial assurance bonds to cover rehabilitation in the event of operator default. Closure plans must be updated periodically. Climate-related disclosure (ASRS) increasingly weights closure cost transparency.

**Who must comply:** Holders of mining tenements / leases.
**What triggers it:** Holding a mining lease.
**When due:** Bond posting on lease grant; closure plan periodic review.
**Evidence:** Bond confirmation, closure plan, periodic review records.
**Max penalty:** Loss of lease; bond forfeiture; environmental liability
**Source:** https://www.dcceew.gov.au/environment/mining

### On-farm biosecurity record-keeping + reporting
URL: https://rulesmate.com.au/obligations/biosecurity-on-farm
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: biosecurity-act-2015

> Producers must maintain biosecurity records + immediately report notifiable diseases.

Federal Biosecurity Act 2015 + state biosecurity laws impose general biosecurity duties and notifiable disease reporting. Livestock producers must maintain Property Identification Code (PIC), participate in National Livestock Identification System (NLIS), and notify state authorities of suspected emergency animal diseases (e.g. FMD, ASF) immediately.

**Who must comply:** Livestock producers; commercial agricultural operators.
**What triggers it:** Operating an agricultural enterprise; suspecting a notifiable disease.
**When due:** Continuous; notifications immediate.
**Evidence:** PIC, NLIS records, biosecurity plan, vaccination + movement records.
**Max penalty:** Criminal penalties for failure to notify emergency animal disease; civil for record-keeping breaches
**Source:** https://www.agriculture.gov.au/biosecurity-trade

### Use AgVet chemicals in accordance with the APVMA label + state CUP
URL: https://rulesmate.com.au/obligations/agvet-chemical-use
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: agricultural-and-veterinary-chemicals-code-act-1994

> Agricultural and veterinary chemicals must be used per the registered label + state Chemical Use Permit conditions.

The Agvet Code (administered federally by APVMA) regulates registration + labelling. State CUPs (Chemical Use Permits) regulate off-label use, restricted use, and record-keeping. Spray drift, neighbour notification + chemical training all attract enforcement attention.

**Who must comply:** Agricultural producers + commercial spray operators.
**What triggers it:** Using AgVet chemicals.
**When due:** Continuous; chemical use records typically 2 years.
**Evidence:** Chemical use records (date, product, rate, area), training certificates, calibration logs.
**Max penalty:** State-based fines + spray drift civil liability + criminal for serious off-label
**Source:** https://apvma.gov.au

### Comply with SPS 530 (Investment Governance) for APRA-regulated super funds
URL: https://rulesmate.com.au/obligations/sps-530-investment-governance
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: apra
Source Acts: superannuation-industry-supervision-act-1993

> RSE licensees must have a documented investment governance framework.

SPS 530 sets requirements for an RSE licensee's investment governance framework: investment beliefs, formulation of investment strategy, performance assessment, valuation, liquidity management. Annual performance testing (under YFYS regime) for MySuper + Choice products separate but related.

**Who must comply:** APRA-regulated RSE licensees.
**What triggers it:** Holding an RSE licence.
**When due:** Continuous; annual performance test.
**Evidence:** Investment governance framework, board minutes, performance attribution reports.
**Max penalty:** APRA enforcement actions including additional capital, licence conditions
**Source:** https://apra.gov.au/super-prudential-framework

### Process super contributions and rollovers via SuperStream
URL: https://rulesmate.com.au/obligations/superstream-data-standard
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato, apra
Source Acts: superannuation-industry-supervision-act-1993

> All super contributions and rollovers must use SuperStream-compliant data + payment standards.

SuperStream is the federal e-commerce standard for super. Employers must transmit contribution data + payments via SuperStream-enabled channels. Funds must process rollovers using SuperStream within 3 business days of receiving the request.

**Who must comply:** Employers, super funds, gateway operators.
**What triggers it:** Making contributions or processing rollovers.
**When due:** Continuous; rollover within 3 business days.
**Evidence:** SuperStream gateway integration, data + payment records, error remediation logs.
**Max penalty:** ATO admin penalties + super fund regulatory action
**Source:** https://ato.gov.au/businesses-and-organisations/super-for-employers/paying-super-contributions/superstream

### Comply with claims handling + settling as a financial service (s 766A)
URL: https://rulesmate.com.au/obligations/general-insurance-claims-handling
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic, afca
Source Acts: corporations-act-2001

> From 1 January 2022, insurance claims handling is a financial service requiring AFSL authorisation.

Following Royal Commission recommendation 4.8, claims handling + settling services were made a 'financial service' under the Corporations Act. Insurers + claims handlers must hold appropriate AFSL authorisations, comply with s 912A general obligations + IDR (RG 271).

**Who must comply:** Insurers, claims handlers, run-off insurers, loss assessors providing claims-handling services to retail clients.
**What triggers it:** Providing claims-handling services to retail clients.
**When due:** Continuous.
**Evidence:** AFSL authorisation, claims-handling policy, complaints register, supervision records.
**Max penalty:** Civil penalties to the financial-services maximum ($15.65M / 3× / 10% turnover)
**Source:** https://asic.gov.au/regulatory-resources/financial-services/insurance-product-claims-handling/

### Comply with Private Health Insurance Act 2007 + APRA rules
URL: https://rulesmate.com.au/obligations/private-health-insurance-rules
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: apra
Source Acts: private-health-insurance-act-2007

> Private health insurers regulated by APRA + PHIO; community rating, complaints + claims rules apply.

The Private Health Insurance Act 2007 sets community rating, lifetime health cover loading, product disclosure + complaint-handling rules. APRA supervises prudential aspects; the Private Health Insurance Ombudsman handles individual complaints.

**Who must comply:** Private health insurers.
**What triggers it:** Carrying on private health insurance business.
**When due:** Continuous.
**Evidence:** Product disclosure statements, complaint records, APRA reporting, PHIO engagement.
**Max penalty:** APRA enforcement, civil penalties under PHI Act, registration consequences
**Source:** https://apra.gov.au/private-health-insurance

### Maintain AFCA membership (mandatory external dispute resolution)
URL: https://rulesmate.com.au/obligations/afca-membership
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: afca, asic
Source Acts: corporations-act-2001

> AFSL + ACL holders must be members of AFCA — sole AU EDR scheme.

Since 1 November 2018, the Australian Financial Complaints Authority is the sole AU external dispute resolution scheme. AFSL holders, ACL holders, superannuation trustees, and traditional trustee companies must be members and comply with AFCA determinations (up to $5,508,000 monetary jurisdiction for most disputes).

**Who must comply:** AFSL holders, ACL holders, RSE licensees, trustee companies.
**What triggers it:** Holding a relevant licence.
**When due:** Continuous.
**Evidence:** AFCA membership; complaint handling records; compliance with AFCA determinations.
**Max penalty:** Licence consequences; civil penalties for failure to comply with AFCA determinations
**Source:** https://afca.org.au

### Register as a responsible entity / direct interest holder under SOCI
URL: https://rulesmate.com.au/obligations/soci-asset-registration
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: home-affairs-soci
Source Acts: security-of-critical-infrastructure-act-2018

> Captured critical-infrastructure assets must be registered with Home Affairs.

Part 2 of the SOCI Act requires the responsible entity and direct interest holders of designated critical-infrastructure assets to register with the Cyber and Infrastructure Security Centre (Home Affairs). Initial registration + on-change notifications.

**Who must comply:** Responsible entities + direct interest holders of designated CI assets.
**What triggers it:** Being designated; becoming a direct interest holder (≥10%).
**When due:** Initial registration on designation; updates on change.
**Evidence:** Registration confirmation; updates filed via CISC portal.
**Max penalty:** Civil penalties up to ~$2.2M for failure to register
**Source:** https://cisc.gov.au

### Comply with SOCI Positive Security Obligation (PSO) per sector
URL: https://rulesmate.com.au/obligations/soci-positive-security-obligation
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: home-affairs-soci
Source Acts: security-of-critical-infrastructure-act-2018

> Sector-specific cyber + risk obligations under SOCI Part 2.

Captured sectors include energy, communications, financial services, data storage/processing, defence, education, food, water, healthcare, space technology, transport. Sector-specific PSOs apply via subsidiary rules.

**Who must comply:** Responsible entities for captured CI assets.
**What triggers it:** Designation under SOCI.
**When due:** Continuous; periodic attestation.
**Evidence:** PSO implementation evidence; CIRMP; board attestation.
**Max penalty:** Civil penalties; ministerial direction powers under Part 3A
**Source:** https://cisc.gov.au/legislation-regulation-and-compliance/critical-infrastructure-risk-management-program

### Foreign bribery offence (Criminal Code Division 70)
URL: https://rulesmate.com.au/obligations/foreign-bribery-criminal-code
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: criminal-code-act-1995

> Bribing a foreign public official is a federal criminal offence — up to 10 years imprisonment.

Section 70.2 Criminal Code Act 1995 (Cwlth) criminalises bribing a foreign public official. The 'foreign bribery' offence has extra-territorial reach for Australian residents + companies. Significantly strengthened by the Crimes Legislation Amendment (Combatting Foreign Bribery) Act 2024, which expanded liability through 'failure to prevent foreign bribery' corporate offence.

**Who must comply:** Australian persons + companies + their officers/agents/contractors.
**What triggers it:** Conduct involving foreign officials in business activity.
**When due:** Continuous.
**Evidence:** Anti-bribery policy, due-diligence procedures, training records, internal-audit reviews.
**Max penalty:** Corporations: up to greater of $33M / 3× benefit / 10% turnover. Individuals: 10 years prison + $2.475M
**Source:** https://www.afp.gov.au/what-we-do/crime-types/fraud/foreign-bribery

### Register trademarks with IP Australia
URL: https://rulesmate.com.au/obligations/trademark-registration
Jurisdiction: CWLTH · Priority: medium · Status: current
Source Acts: trade-marks-act-1995

> Without registration, brand protection relies on common-law passing-off — costly to enforce.

The Trade Marks Act 1995 (Cwlth) governs registration via IP Australia. Registration provides exclusive use rights for 10 years (renewable). Application process includes examination, opposition period and registration. Unregistered marks rely on passing-off + ACL misleading conduct (s 18) for protection.

**Who must comply:** Businesses with valuable brand marks.
**What triggers it:** Investment in distinctive brand identity.
**When due:** Voluntary but commercially essential.
**Evidence:** Registered trade mark certificate; use records.
**Max penalty:** n/a (registration is opt-in); infringement = damages + injunctions
**Source:** https://ipaustralia.gov.au

### Pay long service leave under the LSL Act 2018 (Vic)
URL: https://rulesmate.com.au/obligations/long-service-leave-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: cav
Source Acts: long-service-leave-act-2018-vic

> VIC employees accrue LSL after 7 years continuous service — paid on entitlement or termination.

The Long Service Leave Act 2018 (Vic) entitles VIC employees to LSL after 7 years' continuous service (subject to some industry portable LSL schemes). Pro-rata payment on termination after 7 years for any reason.

**Who must comply:** Victorian employers (non-portable industries).
**What triggers it:** Employees reaching qualifying service.
**When due:** On entitlement; payment on termination per accrued balance.
**Evidence:** Service records, payroll, LSL register.
**Max penalty:** Civil penalties + underpayment recovery
**Source:** https://business.vic.gov.au/business-information/staff-and-hr/employee-entitlements/long-service-leave

### Pay long service leave under the IR Act 2016 (Qld)
URL: https://rulesmate.com.au/obligations/long-service-leave-qld
Jurisdiction: QLD · Priority: high · Status: current
Enforced by: office-of-fair-trading-qld
Source Acts: industrial-relations-act-2016-qld

> QLD employees accrue 8.6667 weeks LSL after 10 years' continuous service; pro-rata after 7 years.

Chapter 2 Part 3 Division 9 of the Industrial Relations Act 2016 (Qld) entitles QLD employees to 8.6667 weeks LSL after 10 years' continuous service. Pro-rata payment on termination after 7 years (where termination is due to illness, incapacity, death, or unfair dismissal).

**Who must comply:** Queensland employers (non-portable industries).
**What triggers it:** Employees reaching qualifying service.
**When due:** On entitlement; pro-rata payment on termination.
**Evidence:** Service records, payroll, LSL register.
**Max penalty:** Civil penalties under IR Act + underpayment recovery
**Source:** https://www.qld.gov.au/jobs/long-service-leave

### Pay NSW transfer duty on residential property acquisitions
URL: https://rulesmate.com.au/obligations/stamp-duty-nsw-residential
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: revenue-nsw
Source Acts: duties-act-1997-nsw

> Variable transfer duty rates; foreign purchaser additional duty 9%.

Duties Act 1997 (NSW). Standard transfer duty rates scale up to 5.5% for residential >$3.2M. Foreign purchaser additional duty: 9%. First Home Buyer concessions for owner-occupied dwellings under threshold (currently $800K full / $1M partial).

**Who must comply:** Purchasers of NSW dutiable property.
**What triggers it:** Acquisition / transfer of dutiable property.
**When due:** Within 3 months of transaction (processed via conveyancer typically).
**Evidence:** Stamped documents via Revenue NSW e-Duties.
**Max penalty:** Interest + penalty tax; potential rescission of transaction
**Source:** https://revenue.nsw.gov.au/taxes-duties-levies-royalties/transfer-duty

### Contribute to the Tuition Protection Service (TPS)
URL: https://rulesmate.com.au/obligations/esos-tuition-protection
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asqa, teqsa
Source Acts: education-services-for-overseas-students-act-2000

> CRICOS-registered providers must contribute to TPS protecting overseas student fees.

Under the ESOS Act, CRICOS-registered providers contribute annually to the TPS. Levies cover administrative + risk-rated components. TPS protects overseas students against provider default by arranging alternative placements or refunds.

**Who must comply:** CRICOS-registered providers.
**What triggers it:** Being CRICOS-registered.
**When due:** Annual TPS levy.
**Evidence:** Levy paid; PRISMS reporting up to date.
**Max penalty:** Civil + CRICOS registration consequences
**Source:** https://tps.gov.au

### Report to NCVER (AVETMISS) — RTOs
URL: https://rulesmate.com.au/obligations/ncver-reporting
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asqa
Source Acts: national-vocational-education-and-training-regulator-act-2011

> RTOs must submit AVETMISS-compliant student + enrolment data to NCVER.

Standards for RTOs require quarterly/annual submission of AVETMISS-compliant student outcomes + financial activity data to the National Centre for Vocational Education Research. Underpins national VET reporting + Total VET Activity collection.

**Who must comply:** Registered training organisations.
**What triggers it:** Delivering nationally recognised VET training.
**When due:** Quarterly + annual submissions.
**Evidence:** AVETMISS-compliant submissions via SDCS or RAPT.
**Max penalty:** Cancellation/suspension of registration; loss of funding eligibility
**Source:** https://www.ncver.edu.au

### Hold a current real estate agent licence (state-specific)
URL: https://rulesmate.com.au/obligations/real-estate-agent-licensing
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: nsw-fair-trading, cav, office-of-fair-trading-qld

> Selling agents must hold a current licence issued by their state fair trading regulator.

Each state has its own real estate licensing regime — Property and Stock Agents Act 2002 (NSW), Estate Agents Act 1980 (Vic), Property Occupations Act 2014 (Qld), etc. Licences required for principal agents + branch managers. Continuing Professional Development (CPD) annual.

**Who must comply:** Real estate agents (principal + employed).
**What triggers it:** Conducting real estate agency activities.
**When due:** Continuous; annual renewal + CPD.
**Evidence:** Current licence; CPD records; trust account audit.
**Max penalty:** Operating without licence is criminal offence; suspension/cancellation; civil penalties under Property Acts
**Source:** https://nsw.gov.au/businesses-and-employees/businesses-and-employees/licences-and-permits

### Trust account audit + ASIC / state regulator submission
URL: https://rulesmate.com.au/obligations/trust-account-audit
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: nsw-fair-trading, cav

> Holders of client trust accounts (real estate, legal, conveyancing) must lodge annual audited accounts.

Statutory trust accounts held by real estate agents, lawyers, conveyancers + auctioneers must be audited annually by an approved auditor. Audit findings submitted to the relevant state Fair Trading regulator within prescribed time.

**Who must comply:** Holders of statutory trust accounts.
**What triggers it:** Operating a trust account.
**When due:** Annual (state-specific submission deadlines).
**Evidence:** Approved auditor's report; trust account records.
**Max penalty:** Suspension/cancellation; civil penalties; possible criminal for misappropriation
**Source:** https://www.fairtrading.nsw.gov.au

### Adopt the Voluntary AI Safety Standard (DISR 2024)
URL: https://rulesmate.com.au/obligations/ai-voluntary-safety-standard
Jurisdiction: CWLTH · Priority: medium · Status: current

> 10 voluntary guardrails for safe + responsible AI deployment; mandatory regime in development.

DISR released the Voluntary AI Safety Standard in September 2024 — 10 guardrails covering accountability, risk management, data governance, testing, transparency, human oversight, contestability, supply chain, records + stakeholder engagement. Mandatory regime for 'high risk' AI being developed (likely 2026-27).

**Who must comply:** Voluntary today; preparation for mandatory regime advised.
**What triggers it:** Deploying AI systems affecting Australians.
**When due:** Voluntary now; mandatory expected 2026-27 for high-risk uses.
**Evidence:** AI risk register, governance documentation, testing artefacts, accountability statements.
**Max penalty:** Voluntary today; mandatory regime expected with civil penalties
**Source:** https://www.industry.gov.au/publications/voluntary-ai-safety-standard

### Comply with Aged Care Code of Conduct
URL: https://rulesmate.com.au/obligations/aged-care-code-of-conduct
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> All providers + workers must comply with the federal Aged Care Code of Conduct.

The Aged Care Code of Conduct (in force since 1 December 2022, continued under the 2024 Act) applies to all approved providers + their aged care workers + governing persons. Sets behavioural expectations + grounds for compliance action including banning orders.

**Who must comply:** Approved aged care providers + workers + governing persons.
**What triggers it:** Working in or governing aged care.
**When due:** Continuous.
**Evidence:** Workforce attestation, training records, banning order register checks.
**Max penalty:** Civil penalties for serious breaches + banning orders against individuals
**Source:** https://agedcarequality.gov.au/providers/aged-care-code-conduct

### Comply with restrictive practices rules + behaviour support plans
URL: https://rulesmate.com.au/obligations/aged-care-restrictive-practices
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> Use of restrictive practices in aged care must be a last resort and meet strict conditions.

Quality of Care Principles 2014 + Aged Care Act 2024 govern use of restrictive practices (physical, chemical, mechanical, environmental, seclusion). Use must be a last resort, subject to authorisation, behaviour support plan, informed consent + minimum-time documented review.

**Who must comply:** Residential aged care providers.
**What triggers it:** Considering or using a restrictive practice on a consumer.
**When due:** Continuous; behaviour support plans reviewed minimum 12-monthly.
**Evidence:** Authorisation, BSP, informed consent records, regular review records, complaints log.
**Max penalty:** Civil penalties; sanctions; ACQSC banning orders
**Source:** https://agedcarequality.gov.au/providers/restrictive-practices

### Lodge Subcontractor Statement (NSW + QLD)
URL: https://rulesmate.com.au/obligations/subcontractor-statement
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: safework-nsw, worksafe-vic

> Principal contractors must obtain Subcontractor Statements before paying subcontractors over threshold.

Under state workers' compensation + payroll tax + LSL legislation, principal contractors must obtain a Subcontractor Statement confirming the subcontractor's WHS premium, payroll tax + LSL levy are paid. Failure to obtain creates principal-contractor liability for subcontractor amounts.

**Who must comply:** Principal contractors engaging subcontractors above prescribed thresholds.
**What triggers it:** Engaging a subcontractor.
**When due:** Before each payment milestone.
**Evidence:** Signed Subcontractor Statement; checks against state registers.
**Max penalty:** Principal contractor liable for subcontractor's unpaid premiums/tax/levies
**Source:** https://safework.nsw.gov.au/legal-obligations/employer-business-obligations/subcontractor-statements

### Notify SafeWork NSW of notifiable WHS incidents
URL: https://rulesmate.com.au/obligations/icnms-nsw-incident-notify
Jurisdiction: NSW · Priority: critical · Status: current
Enforced by: safework-nsw
Source Acts: work-health-and-safety-act-2011-nsw

> Death, serious injury, illness, dangerous incident — notify SafeWork NSW immediately.

Sections 35-38 of the WHS Act 2011 (NSW) require notification of notifiable incidents (death, serious injury/illness, dangerous incident) immediately by phone, then within 48 hours in writing. Scene preservation duty pending inspector arrival.

**Who must comply:** NSW PCBUs.
**What triggers it:** Notifiable incident at a workplace.
**When due:** Immediately by phone; written notice within 48 hours.
**Evidence:** Notification record; incident investigation; scene preservation evidence.
**Max penalty:** Significant fines + industrial manslaughter prosecution risk
**Source:** https://safework.nsw.gov.au/notify-safework-and-incident-recording

### Comply with doxxing criminal offence (Criminal Code s 474.17C)
URL: https://rulesmate.com.au/obligations/australia-doxxing-offence
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: criminal-code-act-1995

> From 13 December 2024, using a carriage service to dox personal data with menace is criminal.

Sections 474.17C-474.17D of the Criminal Code (added by the Privacy and Other Legislation Amendment Act 2024) create criminal offences for using a carriage service to menace, harass or cause offence by publishing personal data about an individual or group. Aggravated form (motivated by prejudice based on race, religion, sex, etc.) carries higher penalty.

**Who must comply:** All users of carriage services in Australia.
**What triggers it:** Publishing personal data via internet/phone/messaging to menace or harass.
**When due:** Continuous from 13 December 2024.
**Evidence:** n/a — criminal offence; AFP prosecutes.
**Max penalty:** Up to 6 years imprisonment for basic offence; up to 7 years for aggravated (prejudice-based).
**Source:** https://www.legislation.gov.au/C2024A00112/latest

### Pay ASIC fees + lodge prescribed forms
URL: https://rulesmate.com.au/obligations/asic-fee-structure
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Companies must pay annual fees + lodge prescribed forms within statutory periods (e.g. Form 484 for changes).

ASIC fees: annual review fee, late lodgement fees, ad hoc forms. Form 484 (Change to company details) must be lodged within 28 days of any change (officeholder, registered office, share structure). ASIC late lodgement fees compound rapidly.

**Who must comply:** All ASIC-registered companies.
**What triggers it:** Annual review date; specific events (officeholder change, etc.).
**When due:** Form 484: within 28 days. Annual review fee: within 2 months of review date.
**Evidence:** Lodged forms; fee payment evidence.
**Max penalty:** Late fees + accumulation; deregistration risk for sustained non-compliance
**Source:** https://asic.gov.au/for-business/running-a-company/changes-to-your-company/changes-to-officeholders/

### Withhold PAYG from employee and contractor payments
URL: https://rulesmate.com.au/obligations/ato-payg-withholding
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ato
Source Acts: taxation-administration-act-1953

> Employers must withhold tax from wages, certain contractor payments + report via STP / BAS.

PAYG withholding obligations apply to wages (per TFN declaration), contractor payments where the contractor has not quoted ABN (47%), and various other payments (e.g. directors' fees, royalties). Withheld amounts reported via STP + remitted to ATO via BAS.

**Who must comply:** Employers + payers of withholding-attracting payments.
**What triggers it:** Making a payment subject to PAYG withholding.
**When due:** Withhold each pay event; remit via BAS.
**Evidence:** TFN declarations; STP submissions; BAS withholding payments.
**Max penalty:** Failure-to-withhold penalty 75% of unpaid; director penalty notices for unremitted withholding
**Source:** https://ato.gov.au/businesses-and-organisations/hiring-and-paying-your-workers/paying-your-workers

### Pay company PAYG/GST/SG or face Director Penalty Notice (DPN)
URL: https://rulesmate.com.au/obligations/director-penalty-notice
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ato
Source Acts: taxation-administration-act-1953

> Directors personally liable for unpaid company PAYG, GST + SG via DPN regime.

Under Subdivision 269-B Schedule 1 Taxation Administration Act, the ATO can issue a Director Penalty Notice making directors personally liable for unpaid company PAYG withholding, GST + SG. Two types: 'standard' DPN (can be remitted by paying or entering liquidation/admin within 21 days), 'lockdown' DPN (personal liability locks in if reporting overdue >3 months).

**Who must comply:** Company directors.
**What triggers it:** Company PAYG/GST/SG remaining unpaid + reported (or unreported) beyond statutory windows.
**When due:** Standard DPN: respond within 21 days. Lockdown DPN: liability already crystallised.
**Evidence:** Cash flow forecasts, board minutes, professional engagement (insolvency practitioner).
**Max penalty:** Personal liability for full unpaid amounts + interest
**Source:** https://ato.gov.au/businesses-and-organisations/preparing-lodging-and-paying/director-penalty-regime

### Provide a current Product Disclosure Statement (s 1013A)
URL: https://rulesmate.com.au/obligations/asic-product-disclosure-statement
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Retail financial product issuers must provide a current PDS before issuing.

Sections 1013A-1018A Corporations Act require issuers of retail financial products to provide a current Product Disclosure Statement. Content prescribed; must include fees, risks, benefits, cooling-off rights. Subject to DDO + ongoing dispute resolution access.

**Who must comply:** Issuers of retail financial products.
**What triggers it:** Issuing or offering a retail financial product.
**When due:** Continuous; current PDS before each issuance.
**Evidence:** Lodged PDS; complaints register; ongoing PDS review.
**Max penalty:** Civil penalties to financial services maximum; product intervention powers
**Source:** https://asic.gov.au/regulatory-resources/financial-services/product-disclosure/

### Register a Managed Investment Scheme under Ch 5C
URL: https://rulesmate.com.au/obligations/mis-registration
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Schemes with 20+ retail members must be registered with ASIC as MIS.

Chapter 5C of the Corporations Act requires schemes with 20+ retail members to be registered as Managed Investment Schemes. Registration requires a Responsible Entity (RE) with the right AFSL authorisations, compliance plan + compliance committee, plus scheme constitution.

**Who must comply:** Schemes meeting MIS definition with 20+ retail members.
**What triggers it:** Crossing the 20-member retail threshold; complex MIS test.
**When due:** Before reaching threshold; ongoing.
**Evidence:** ARSN, compliance plan, RE AFSL with MIS authorisation, audit reports.
**Max penalty:** Operating unregistered MIS is criminal; civil + criminal penalties for serious breach
**Source:** https://asic.gov.au/regulatory-resources/financial-services/managed-investment-schemes/

### Respond to hardship notices within statutory timeframe
URL: https://rulesmate.com.au/obligations/responsible-lending-hardship
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, afca
Source Acts: national-consumer-credit-protection-act-2009

> Credit providers must consider hardship notices within 21 days under s 72 NCC.

Section 72 of the National Credit Code requires credit providers to consider a hardship notice (oral or written) within 21 days. Variations include reduced payments, extended terms, payment freeze, or interest-only. Refusal must be communicated with reasons.

**Who must comply:** Credit providers regulated under NCCP Act.
**What triggers it:** Receipt of a hardship notice from a consumer.
**When due:** Within 21 days of notice.
**Evidence:** Notice register, decision records with reasons, communications with consumer, AFCA complaints handling.
**Max penalty:** Civil penalties to NCCP maximum; AFCA scrutiny + remediation
**Source:** https://asic.gov.au/regulatory-resources/credit/hardship-and-default-notices

### Hold an NSW Charitable Fundraising Authority
URL: https://rulesmate.com.au/obligations/charitable-fundraising-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: nsw-fair-trading
Source Acts: charitable-fundraising-act-1991-nsw

> Soliciting donations from the NSW public requires authorisation under the Charitable Fundraising Act 1991.

The Charitable Fundraising Act 1991 (NSW) requires entities fundraising from the NSW public (door-knocking, online appeals, events, telethons) to hold a current Authority issued by NSW Fair Trading. ACNC-registered entities receive a streamlined exemption pathway but separate state authorisation still applies.

**Who must comply:** Entities soliciting charitable donations from the NSW public.
**What triggers it:** Public fundraising in NSW.
**When due:** Before fundraising commences; periodic renewal.
**Evidence:** NSW Fair Trading authority; financial statements; appeal records.
**Max penalty:** Civil + criminal penalties for unauthorised fundraising; loss of authority
**Source:** https://nsw.gov.au/business-and-economy/charitable-fundraising

### Register as a fundraiser with Consumer Affairs Victoria
URL: https://rulesmate.com.au/obligations/charitable-fundraising-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: cav
Source Acts: fundraising-act-1998-vic

> Public fundraising in Victoria requires registration under the Fundraising Act 1998.

The Fundraising Act 1998 (Vic) requires fundraisers raising more than $20,000 gross in a financial year to register with Consumer Affairs Victoria. Annual returns + audited financial statements required. Penalties for non-registration + misappropriation of donations.

**Who must comply:** Entities raising more than $20,000 in fundraising income annually in Victoria.
**What triggers it:** Crossing the $20,000 annual gross threshold.
**When due:** Before fundraising; annual returns.
**Evidence:** CAV registration; annual statement; receipt records.
**Max penalty:** Penalties + loss of registration; misappropriation criminal liability
**Source:** https://consumer.vic.gov.au/clubs-and-fundraising

### Maintain PBS approval + claim accurately for PBS-listed medicines
URL: https://rulesmate.com.au/obligations/pbs-approval-and-claims
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahpra
Source Acts: national-health-act-1953

> Pharmacy approval-to-supply under s 90 National Health Act; PBS claiming subject to compliance review.

Pharmacies must hold a current PBS approval (s 90 NHA) granted by the Department of Health. PBS claims are paid via Services Australia (Medicare) and subject to compliance audit. Inaccurate claiming attracts recovery + penalties under the Practitioner Review Program.

**Who must comply:** PBS-approved pharmacies.
**What triggers it:** Dispensing PBS-listed medicines.
**When due:** Continuous; PBS approval reviewed periodically.
**Evidence:** PBS approval certificate; dispensing records; co-payment records.
**Max penalty:** Recovery of incorrect claims; PBS suspension/cancellation; criminal for fraudulent claiming
**Source:** https://pbs.gov.au/info/general/pharmacist

### Maintain controlled drugs register (Schedule 8 / 9)
URL: https://rulesmate.com.au/obligations/controlled-drugs-record-keeping
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahpra, tga

> Pharmacies + medical practices must keep contemporaneous register of S8/S9 medicines.

State Poisons Acts + Regulations require controlled drugs registers for Schedule 8 (controlled drugs — e.g. morphine, methadone, oxycodone) and Schedule 9 (prohibited substances) medicines. Each acquisition + supply must be recorded with date, quantity, patient + prescriber. Annual stocktake + reconciliation.

**Who must comply:** Pharmacies, hospitals, medical practices, veterinary practices handling S8/S9 medicines.
**What triggers it:** Acquiring or supplying S8/S9 medicines.
**When due:** Per-event recording; annual reconciliation.
**Evidence:** Controlled drugs register; stocktake reports; police notification of theft/loss.
**Max penalty:** State Poisons Act penalties + AHPRA notification + criminal liability for diversion
**Source:** https://tga.gov.au/products/medicines/medicines-scheduling/poisons-standard-susmp

### AASB S1 (general sustainability) disclosures — voluntary today, mandatory pending
URL: https://rulesmate.com.au/obligations/isb-s1-general-sustainability
Jurisdiction: CWLTH · Priority: medium · Status: upcoming
Enforced by: asic
Source Acts: corporations-act-2001

> Companion to AASB S2 (climate). Currently voluntary in AU; ISSB pathway suggests phased mandatory.

AASB S1 mirrors ISSB IFRS S1 for general sustainability-related financial information beyond climate. Currently voluntary in Australia; Treasury consultation suggests phased introduction following ASRS climate-only commencement. Boards should align voluntary preparation with eventual mandatory.

**Who must comply:** Voluntary today; Group 1 entities should prepare for phased mandatory.
**What triggers it:** Voluntary commitment; future mandatory commencement.
**When due:** Voluntary today; mandatory expected 2027-2028.
**Evidence:** AASB S1-aligned disclosures alongside AASB S2 climate.
**Max penalty:** n/a today; same regime as ASRS climate when mandatory
**Source:** https://aasb.gov.au

### Registered Company Auditor (RCA) registration + CPD (RG 260)
URL: https://rulesmate.com.au/obligations/registered-company-auditor-cpd
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> RCAs must maintain ASIC registration + 120 hours CPD over 3 years.

Sections 1280-1287 of the Corporations Act and ASIC RG 260 govern Registered Company Auditor obligations. Initial registration requires prescribed competency; ongoing registration requires 120 hours CPD over a rolling 3-year period (including specific topics), PI insurance, and adherence to APES 110 + auditing standards (ASA).

**Who must comply:** Registered Company Auditors.
**What triggers it:** Registration as an RCA.
**When due:** Continuous; CPD measured on rolling 3-year basis.
**Evidence:** ASIC registration; CPD log; PI insurance certificate; quality control documentation.
**Max penalty:** Cancellation of registration; civil + criminal penalties for misconduct (s 1289)
**Source:** https://asic.gov.au/regulatory-resources/financial-reporting-and-audit/auditors/

### Maintain transfer pricing documentation (Subdivision 815-D)
URL: https://rulesmate.com.au/obligations/transfer-pricing-documentation
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1997

> Multinational groups must keep contemporaneous transfer pricing documentation per Subdivision 815-D ITAA 1997.

Subdivision 815-D of the ITAA 1997 sets contemporaneous transfer pricing documentation requirements. Aligned with OECD BEPS Action 13 — Master File, Local File and Country-by-Country Report depending on group size. Documentation must be in place when the tax return is lodged.

**Who must comply:** Australian entities in multinational groups; threshold-dependent.
**What triggers it:** International dealings between associates.
**When due:** Contemporaneous — in place by tax return lodgement.
**Evidence:** Master File, Local File, CbC Report; supporting analysis.
**Max penalty:** Documentation penalty up to $156,500 for failure to keep records; transfer pricing adjustment + interest + penalty tax
**Source:** https://ato.gov.au/businesses-and-organisations/international-tax-for-business/in-detail/transfer-pricing

### Lodge Country-by-Country Report (CbC) for significant global entities
URL: https://rulesmate.com.au/obligations/country-by-country-reporting
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1997

> Multinationals with global income >EUR 750M must lodge CbC Report annually.

Subdivision 815-E of the ITAA 1997 requires Significant Global Entities (consolidated annual global income >EUR 750M) to lodge a Country-by-Country Report, Master File and Local File with the ATO within 12 months of the end of the income year. Filings are automatically exchanged with foreign tax authorities under MCAA on CbC.

**Who must comply:** Australian entities in multinational groups with >EUR 750M consolidated global income.
**What triggers it:** Being a Significant Global Entity.
**When due:** Within 12 months of end of income year.
**Evidence:** CbC Report, Master File, Local File lodged via Online services for business.
**Max penalty:** Failure-to-lodge penalty + administrative penalties for false statements
**Source:** https://ato.gov.au/businesses-and-organisations/international-tax-for-business/in-detail/country-by-country-reporting

### Comply with Managed Investment Trust (MIT) tax regime
URL: https://rulesmate.com.au/obligations/mit-managed-investment-trust-tax
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1997

> Eligible MITs benefit from 15% withholding rate on non-resident distributions if elected + compliant.

Division 275 of the ITAA 1997 governs the MIT tax regime. To be eligible: trust must be widely held, conducting investment in permitted assets (not active business), Australian-managed. Concessional 15% withholding on certain distributions to non-resident investors in info-exchange countries.

**Who must comply:** Managed Investment Schemes electing MIT status.
**What triggers it:** Operating an MIT and electing MIT treatment.
**When due:** Continuous; election lodged with first tax return.
**Evidence:** MIT election; investor register; underlying asset analysis; ATO ruling (if sought).
**Max penalty:** Loss of concessional withholding; tax adjustments + interest
**Source:** https://ato.gov.au/businesses-and-organisations/managed-investment-trusts

### Comply with self-assessed clearance + Integrated Cargo System (ICS)
URL: https://rulesmate.com.au/obligations/customs-importer-self-assessed-clearance
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: customs-act-1901

> Importers must accurately self-assess and lodge customs entries via ICS.

Customs Act 1901 + Customs Tariff Act 1995 establish the import + duty regime. Importers (or licensed customs brokers) lodge import declarations via the Integrated Cargo System (ICS) before goods can be released. Self-assessed clearance places liability on the importer to classify, value + pay duty correctly.

**Who must comply:** Importers + licensed customs brokers.
**What triggers it:** Importing goods into Australia.
**When due:** Before release from customs control.
**Evidence:** ICS lodgement records; tariff classification analysis; valuation records.
**Max penalty:** Underpayment recovery + penalty; criminal liability for serious misclassification
**Source:** https://abf.gov.au/importing-exporting-and-manufacturing/importing

### Comply with anti-dumping + countervailing duties
URL: https://rulesmate.com.au/obligations/anti-dumping-customs
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: customs-act-1901

> Importers of goods subject to anti-dumping measures must pay additional duty + lodge truthful declarations.

The Anti-Dumping Commission administers anti-dumping + countervailing measures under Part XVB Customs Act 1901. Importers of goods subject to measures (typically certain steel, aluminium, chemicals from specified countries of origin) must declare correctly + pay additional duty. False declarations attract criminal + civil penalties.

**Who must comply:** Importers of goods subject to anti-dumping or countervailing measures.
**What triggers it:** Importing covered goods.
**When due:** On each import.
**Evidence:** ICS declarations + supporting commercial documents; mill certificates + country-of-origin evidence.
**Max penalty:** Penalty equal to underpayment + criminal liability for false declarations
**Source:** https://industry.gov.au/regulations-and-standards/anti-dumping-and-countervailing

### Hold state-issued gambling licence (operator + venue)
URL: https://rulesmate.com.au/obligations/gambling-licence-state
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: acma

> Wagering, casino, gaming machine + lottery operators require state-issued licences with operator probity.

Each state has its own gambling licensing framework (Gambling Regulation Act 2003 (Vic) administered by VCGLR; NSW Liquor & Gaming; Liquor and Gaming Authority Qld; etc.). Operator + key personnel must pass probity. Annual licence fees + compliance audits + KYC integration with national BetStop self-exclusion register.

**Who must comply:** Wagering, casino, gaming machine + lottery operators.
**What triggers it:** Operating gambling activities.
**When due:** Continuous; periodic licence renewal.
**Evidence:** Current state licence + probity clearance; operator compliance plan; BetStop integration.
**Max penalty:** Significant state-specific fines + licence suspension/cancellation; criminal for serious breaches
**Source:** https://acma.gov.au/online-gambling-rules-australia

### Comply with Interactive Gambling Act 2001
URL: https://rulesmate.com.au/obligations/interactive-gambling-act
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: acma
Source Acts: interactive-gambling-act-2001

> Prohibited interactive gambling services (online casino, in-play sports betting) banned in/to Australia.

The Interactive Gambling Act 2001 prohibits providing prohibited interactive gambling services (online casinos, in-play sports betting after ball starts) to Australian customers. ACMA administers. Operators offshore-targeting Australia face civil penalties + payment-system + DNS blocking orders.

**Who must comply:** Online gambling operators (whether based in or outside Australia).
**What triggers it:** Offering prohibited services to Australian customers.
**When due:** Continuous.
**Evidence:** Geo-blocking, KYC + age verification, BetStop integration.
**Max penalty:** Up to ~$7M per day for prohibited services to Australians
**Source:** https://acma.gov.au/online-gambling-rules-australia

### Comply with anti-doping rules + Sport Integrity Australia
URL: https://rulesmate.com.au/obligations/sport-integrity-anti-doping
Jurisdiction: CWLTH · Priority: medium · Status: current
Source Acts: sport-integrity-australia-act-2020

> National sporting organisations must adopt + enforce anti-doping policies aligned to WADA Code.

Sport Integrity Australia administers anti-doping under the SIA Act 2020 + WADA Code. NSOs must adopt anti-doping policies, conduct education + testing, refer adverse findings, and protect whistleblowers. Investigations include match-fixing + sports betting integrity.

**Who must comply:** National sporting organisations + their athletes + support personnel.
**What triggers it:** Being a recognised NSO or member athlete/support person.
**When due:** Continuous.
**Evidence:** Adopted anti-doping policy; testing register; education completion; reporting.
**Max penalty:** Athlete bans; NSO funding consequences; criminal for serious offences
**Source:** https://www.sportintegrity.gov.au

### Comply with Customer Service Guarantee (CSG) for standard phone services
URL: https://rulesmate.com.au/obligations/csg-customer-service-guarantee
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acma
Source Acts: telecommunications-act-1997

> Telstra + other carriers must meet CSG performance benchmarks for installations + faults.

The Telecommunications (Customer Service Guarantee) Standard 2011 sets maximum timeframes for installation, fault rectification + missed appointments for standard telephone services. Compensation payable to the customer for breaches. ACMA enforces; carriers report quarterly performance.

**Who must comply:** Carriers + carriage service providers offering standard telephone services.
**What triggers it:** Providing residential / small business standard phone services.
**When due:** Continuous; quarterly performance reporting.
**Evidence:** Performance data; compensation payments; ACMA reports.
**Max penalty:** Civil penalties + automatic customer compensation
**Source:** https://acma.gov.au/customer-service-guarantee-csg

### Payment Service Provider (PSP) licensing reform — implementation pending
URL: https://rulesmate.com.au/obligations/psp-licensing-reform-2025
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Enforced by: apra, asic

> Treasury reform of payments licensing to capture digital wallets + Buy Now Pay Later + stored value.

Federal Treasury's payments licensing reform package (Strategic Plan for Australia's Payments System, 2023) introduces a tiered PSP licensing framework. Expected to capture digital wallets, stored value facilities + non-bank payment service providers. Final regulations expected 2025-2026.

**Who must comply:** Non-bank payment service providers offering captured services.
**What triggers it:** Final regulations and commencement (TBD 2025-2026).
**When due:** TBD; transition period likely.
**Evidence:** Licence application; consumer protection compliance plan; AML/CTF + privacy alignment.
**Max penalty:** Operating without licence will attract NCCP-equivalent civil + criminal penalties
**Source:** https://treasury.gov.au/consultation/c2023-426946

### Comply with Stored Value Facility rules (banking exception)
URL: https://rulesmate.com.au/obligations/stored-value-facility-rules
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: apra, asic
Source Acts: banking-act-1959

> SVF providers must operate within APRA + Treasury rules on purchased payment facility regulation.

Currently regulated as Purchased Payment Facilities under the Banking Act 1959 (Cwlth). APRA regulates the larger SVF providers; smaller facilities operate under specific declarations. The PSP licensing reform is expected to replace the PPF framework.

**Who must comply:** Providers of stored value / purchased payment facilities.
**What triggers it:** Operating SVF/PPF in Australia.
**When due:** Continuous; rules in transition.
**Evidence:** APRA registration (where applicable); customer fund segregation; AML/CTF + privacy compliance.
**Max penalty:** APRA enforcement + Banking Act civil penalties
**Source:** https://apra.gov.au/non-bank-financial-institutions

### Comply with AANA Code of Ethics + community guidelines
URL: https://rulesmate.com.au/obligations/afia-advertising-standards
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: accc

> Self-regulatory advertising standards enforced by Ad Standards (formerly ASB).

The Australian Association of National Advertisers (AANA) Code of Ethics and category-specific codes (Food and Beverages, Alcohol, Wagering, Children's etc.) are administered by Ad Standards. While self-regulatory, breaches attract publicity + recommendation to remove or modify ads. Repeat breaches escalate to ACCC scrutiny.

**Who must comply:** Advertisers + advertising agencies + media organisations.
**What triggers it:** Publishing advertisements in Australia.
**When due:** Continuous.
**Evidence:** Internal advertising approval; legal sign-off; Ad Standards engagement records.
**Max penalty:** Self-regulatory but reputational + ACCC referral risk
**Source:** https://adstandards.com.au

### Influencer + ad disclosure under ACL + AANA Code
URL: https://rulesmate.com.au/obligations/influencer-disclosure
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Paid content must be clearly disclosed as advertising — #ad #spon are not enough on their own.

Misleading conduct under s 18 ACL + AANA Code 2 require clear, conspicuous + upfront disclosure of paid + commercial relationships. ACCC enforcement (e.g. Meta/Instagram cosmetics actions) treats hidden #ad disclosures as misleading. Per-platform guidance issued.

**Who must comply:** Influencers, agencies, brands engaging influencers.
**What triggers it:** Paid or sponsored content.
**When due:** Continuous.
**Evidence:** Disclosure documentation; influencer contracts requiring disclosure compliance.
**Max penalty:** Civil penalty regime under ACL ($50M / 30% turnover)
**Source:** https://accc.gov.au/business/business-rights-and-protections/false-or-misleading-claims

### Pay annual leave loading where the award or contract provides
URL: https://rulesmate.com.au/obligations/annual-leave-loading
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fwo
Source Acts: fair-work-act-2009

> Most modern awards require 17.5% loading on annual leave taken or paid out on termination.

Section 90 Fair Work Act requires payment for accrued + untaken annual leave on termination. Most modern awards (and some enterprise agreements) require an additional 17.5% loading on annual leave taken or paid on termination. Loading must match the award basis (typically OTE).

**Who must comply:** Employers whose modern award or agreement provides for annual leave loading.
**What triggers it:** Employee takes annual leave or termination triggers payout.
**When due:** On payment of leave / termination.
**Evidence:** Award analysis; payslip + payment evidence including loading.
**Max penalty:** Civil penalty for underpayment + serious-contravention 10× multiplier potential
**Source:** https://fairwork.gov.au/leave/annual-leave

### Provide 10 days personal/carer's leave per NES
URL: https://rulesmate.com.au/obligations/personal-leave-paid-cap
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fwo
Source Acts: fair-work-act-2009

> All full-time employees accrue 10 days paid personal/carer's leave per year of service.

Section 96 of the Fair Work Act provides for paid personal/carer's leave under the National Employment Standards (NES). Pro-rata for part-timers. Used for personal illness/injury or to care for a household member. Mondelez ruling (2020) — 10 'days' means 10 weekday-shift days regardless of hours worked.

**Who must comply:** All national-system employers.
**What triggers it:** Employee taking personal/carer's leave.
**When due:** On each request; accrual per pay period.
**Evidence:** Leave records; medical certificate if requested.
**Max penalty:** Civil penalties for failure to provide; underpayment recovery
**Source:** https://fairwork.gov.au/leave/sick-and-carers-leave

### Provide 10 days paid family + domestic violence leave (FDV)
URL: https://rulesmate.com.au/obligations/ssn-domestic-violence-leave
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: fwo
Source Acts: fair-work-act-2009

> Paid FDV leave for all employees: 10 days per year (full-time + part-time + casual).

From 1 February 2023 (large employers) / 1 August 2023 (small business), all national-system employees including casuals are entitled to 10 days of paid family + domestic violence leave per year (NES s 106A-106E Fair Work Act).

**Who must comply:** All national-system employers.
**What triggers it:** Employee experiencing family/domestic violence requiring leave.
**When due:** On request, with appropriate evidence at employer's request.
**Evidence:** Leave records (confidentiality required); evidence as reasonably requested.
**Max penalty:** Civil penalties for failure to provide; reverse-onus protection for victim-employees
**Source:** https://fairwork.gov.au/leave/family-and-domestic-violence-leave

### Telco data retention — 2 years (Part 5-1A Telecommunications Act)
URL: https://rulesmate.com.au/obligations/data-retention-telco-2-years
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: acma
Source Acts: telecommunications-act-1997

> Carriers + CSPs must retain telco metadata for 2 years.

Part 5-1A of the Telecommunications (Interception and Access) Act 1979 requires carriers + carriage service providers to retain 'telecommunications data' (metadata — not content) for 2 years. Access requires authorisation from designated agencies. Significant cyber-security + privacy obligations attach.

**Who must comply:** Carriers + CSPs.
**What triggers it:** Operating a telco service.
**When due:** Continuous.
**Evidence:** Data retention compliance documentation; secure storage; access logs; annual reporting.
**Max penalty:** Civil + criminal penalties under TIA Act
**Source:** https://www.homeaffairs.gov.au/about-us/our-portfolios/national-security/lawful-access-telecommunications

### Hold AFMA Commonwealth fishing permit
URL: https://rulesmate.com.au/obligations/afma-fishing-permits
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: fisheries-management-act-1991

> Commercial fishing in Commonwealth waters requires a permit + observance of quotas.

The Fisheries Management Act 1991 (Cwlth) requires Commonwealth fishing concessions for commercial fishing in Commonwealth-managed fisheries. Statutory fishing rights + quota management; observer programs + Vessel Monitoring System compliance.

**Who must comply:** Commercial fishers in Commonwealth-managed fisheries.
**What triggers it:** Fishing in Commonwealth waters.
**When due:** Continuous; quota measured in fishing season.
**Evidence:** Concession + fishing log; VMS records; observer cooperation.
**Max penalty:** Significant civil + criminal penalties; concession suspension/cancellation
**Source:** https://www.afma.gov.au

### Comply with National Quality Framework (childcare)
URL: https://rulesmate.com.au/obligations/ecec-national-quality-framework
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: education-and-care-services-national-law-act-2010

> ECEC services must meet the NQF — assessments + ratings + ratios.

The Education and Care Services National Law (administered through state versions) sets the National Quality Framework — minimum staff:child ratios + qualifications, assessment + rating system, prescribed program (EYLF). Administered by ACECQA + state regulatory authorities.

**Who must comply:** Approved providers + services in long day care, family day care, OSHC + preschool.
**What triggers it:** Providing approved ECEC service.
**When due:** Continuous; assessment + rating cycles.
**Evidence:** Approval + service rating; staff qualifications + ratios; program documentation; incident records.
**Max penalty:** Significant civil + criminal penalties; cancellation of approval
**Source:** https://www.acecqa.gov.au

### Notify state regulator of serious incidents (childcare)
URL: https://rulesmate.com.au/obligations/ecec-reportable-incidents
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: education-and-care-services-national-law-act-2010

> Approved ECEC services must notify state regulator of serious incidents within 24 hours / 7 days.

National Law requires approved childcare services to notify the regulatory authority of serious incidents (death, serious injury/illness, missing child, etc.) within 24 hours, and other prescribed circumstances within 7 days. Notification + management investigation required.

**Who must comply:** Approved ECEC providers + services.
**What triggers it:** Notifiable incident at a service.
**When due:** 24 hours (serious) / 7 days (other notifiable).
**Evidence:** NQA-IT notification record; investigation report; remediation plan.
**Max penalty:** Significant civil penalties + service cancellation; criminal liability for serious failures
**Source:** https://www.acecqa.gov.au/resources/applications/notifications

### Maintain insider trading policy + share trading window (listed entities)
URL: https://rulesmate.com.au/obligations/asx-listing-share-trading-policy
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic, asx
Source Acts: corporations-act-2001

> ASX Listing Rule 12.12 requires written policy on directors + senior managers trading entity securities.

ASX Listing Rule 12.12 requires listed entities to publish a written share trading policy covering directors + key management personnel. Must specify trading windows, blackout periods around results announcements, requirements for clearance, and prohibition of trading on inside information (Corporations Act s 1043A).

**Who must comply:** ASX-listed entities + their KMP.
**What triggers it:** Being listed.
**When due:** Continuous; trading windows enforced around price-sensitive announcements.
**Evidence:** Published policy; trading window register; clearance approvals.
**Max penalty:** Insider trading criminal up to 15 years prison + 3× benefit; civil to financial-services max
**Source:** https://asx.com.au/listings/listing-rules-guidance

### Comply with General Insurance Code of Practice (ICA)
URL: https://rulesmate.com.au/obligations/general-insurance-code-of-practice
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, afca

> ICA Code binds member insurers on conduct + claims + complaints.

The Insurance Council of Australia's General Insurance Code of Practice 2020 binds member insurers on commitments around buying, claims, complaints, vulnerability + financial hardship. Monitored by the Code Governance Committee with public reporting.

**Who must comply:** ICA member general insurers + their distribution partners.
**What triggers it:** ICA membership.
**When due:** Continuous; CGC monitoring.
**Evidence:** Code subscriber; complaint data; vulnerability + hardship records.
**Max penalty:** Code-based; reputational + AFCA reliance on Code in determinations
**Source:** https://insurancecouncil.com.au/cop

### Comply with APRA CPS 220 (Risk Management)
URL: https://rulesmate.com.au/obligations/cps-220-risk-management
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: apra

> APRA-regulated entities must have a comprehensive risk management framework.

CPS 220 requires APRA-regulated entities to maintain a Board-approved Risk Management Framework covering: risk appetite, risk culture, three lines of defence, risk register, business continuity, and material risks. Annual board attestation.

**Who must comply:** APRA-regulated entities (ADIs, insurers, super trustees).
**What triggers it:** Being APRA-regulated.
**When due:** Continuous; annual board attestation.
**Evidence:** RMF, board approval, risk appetite statement, risk register, BCM, attestation.
**Max penalty:** APRA enforcement actions including capital, licence conditions
**Source:** https://apra.gov.au/risk-management

### Hold organic certification before claiming 'organic'
URL: https://rulesmate.com.au/obligations/australian-organic-certification
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Use of 'organic' on food labels requires certification by an accredited certifier under NASAA / ACO.

Use of 'organic' or 'biodynamic' claims on Australian food labels is governed by the National Standard for Organic and Biodynamic Produce + ACL misleading conduct. Six AQIS-accredited certifiers; without certification, organic claims attract ACCC + state Fair Trading enforcement under s 18 ACL.

**Who must comply:** Producers + retailers claiming 'organic' on Australian food.
**What triggers it:** Use of 'organic' / 'biodynamic' claims.
**When due:** Continuous; certification annually renewed.
**Evidence:** Current certification; chain-of-custody records; labelling compliance.
**Max penalty:** ACL misleading conduct — civil penalties up to $50M / 30% turnover
**Source:** https://www.agriculture.gov.au/biosecurity-trade/export/controlled-goods/organic-bio-dynamic/exporting-organic-products

### Conduct post-market surveillance of therapeutic goods
URL: https://rulesmate.com.au/obligations/tga-post-market-surveillance
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: tga
Source Acts: therapeutic-goods-act-1989

> ARTG-included goods must be monitored post-market for safety + performance.

Part 5-1 Therapeutic Goods Act + ARTG conditions require sponsors to conduct post-market surveillance — adverse-event reporting, safety updates, recall when warranted. Medical-device manufacturers operate quality management systems aligned to ISO 13485 with TGA conformity assessment.

**Who must comply:** ARTG sponsors + manufacturers (medicines + devices + biologicals).
**What triggers it:** Inclusion of goods in the ARTG.
**When due:** Continuous; adverse-event reports per timeframes; periodic safety updates.
**Evidence:** PMS plan; adverse-event register; safety updates; recall procedure.
**Max penalty:** Civil + criminal penalties (up to $1.69M / $16.9M); ARTG cancellation
**Source:** https://tga.gov.au/safety/safety-monitoring

### Lodge a prospectus for offers requiring disclosure
URL: https://rulesmate.com.au/obligations/asic-prospectus-disclosure
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Offers of securities to retail investors require a prospectus or OIS lodged with ASIC.

Section 706 Corporations Act requires offers of securities to need disclosure unless an exception applies (small-scale, sophisticated investor, etc.). Prospectus must be lodged with ASIC; 7-day exposure period before opening; contains prescribed content.

**Who must comply:** Issuers of securities + persons making offers.
**What triggers it:** Making a disclosure-required offer.
**When due:** Before opening the offer.
**Evidence:** Prospectus + OIS lodged via ASIC; due-diligence file.
**Max penalty:** Civil + criminal penalties for defective disclosure
**Source:** https://asic.gov.au/regulatory-resources/fundraising/

### Comply with Workplace Surveillance Act 2005 (NSW)
URL: https://rulesmate.com.au/obligations/nsw-workplace-surveillance
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: ipc-nsw
Source Acts: workplace-surveillance-act-2005-nsw

> NSW employers conducting workplace surveillance must give notice + meet specific conditions.

The Workplace Surveillance Act 2005 (NSW) regulates camera, computer + tracking surveillance of NSW employees. Employer must give written notice 14 days before commencing; cameras must be visible + notified; computer surveillance must follow a written policy; covert surveillance requires Magistrate authorisation.

**Who must comply:** NSW employers conducting workplace surveillance.
**What triggers it:** Installing or using camera, computer or tracking surveillance.
**When due:** 14 days' notice before commencement.
**Evidence:** Surveillance policy; employee notification records; signage; covert surveillance Magistrate orders.
**Max penalty:** Civil + criminal penalties for unauthorised surveillance
**Source:** https://www.ipc.nsw.gov.au/privacy/workplace-surveillance

### Comply with Workplace Privacy Act 2011 (ACT)
URL: https://rulesmate.com.au/obligations/act-workplace-privacy
Jurisdiction: ACT · Priority: high · Status: current
Source Acts: workplace-privacy-act-2011-act

> ACT employers must follow ACT workplace surveillance + privacy framework.

Workplace Privacy Act 2011 (ACT) — like NSW — regulates surveillance of ACT employees. Notification + consultation + written policy requirements; covert surveillance requires Magistrate authorisation.

**Who must comply:** ACT employers.
**What triggers it:** Workplace surveillance in the ACT.
**When due:** Before commencing surveillance.
**Evidence:** Policy; notice; consultation evidence; Magistrate orders for covert.
**Max penalty:** Civil + criminal penalties under the Act
**Source:** https://legislation.act.gov.au

### Comply with Rail Safety National Law (RSNL)
URL: https://rulesmate.com.au/obligations/rail-safety-national-law
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: rail-safety-national-law

> Rail transport operators must be accredited under RSNL + maintain safety management.

The Rail Safety National Law (applied in each state via state legislation) requires rail transport operators (RTOs) — both rolling stock operators + rail infrastructure managers — to be accredited by ONRSR, have safety management systems, conduct safety assessments + manage interface agreements with other operators.

**Who must comply:** Rail transport operators.
**What triggers it:** Operating rail rolling stock or infrastructure.
**When due:** Continuous; periodic re-accreditation.
**Evidence:** ONRSR accreditation; safety management system; interface agreements; incident reporting.
**Max penalty:** Significant civil + criminal penalties; accreditation suspension/cancellation
**Source:** https://www.onrsr.com.au

### Register under Foreign Influence Transparency Scheme (FITS)
URL: https://rulesmate.com.au/obligations/foreign-influence-transparency-scheme
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: foreign-influence-transparency-scheme-act-2018

> Persons undertaking activities on behalf of foreign principals in Australia must register with the AG's Department.

The Foreign Influence Transparency Scheme Act 2018 requires registration of persons undertaking 'registrable activities' on behalf of 'foreign principals' (governments, government-related entities, political organisations, individuals). Annual updates + transaction reporting.

**Who must comply:** Persons undertaking lobbying, communications, donor activity, disbursement of funds, or general political activities for foreign principals.
**What triggers it:** Commencing a registrable activity.
**When due:** Within 14 days of commencement; annual + on-change updates.
**Evidence:** FITS registration confirmation; activity records.
**Max penalty:** Criminal penalties up to 5 years imprisonment for serious offences
**Source:** https://www.transparency.ag.gov.au

### Mandatory AI guardrails for high-risk AI (in development)
URL: https://rulesmate.com.au/obligations/ai-mandatory-guardrails-2026
Jurisdiction: CWLTH · Priority: medium · Status: upcoming

> Australian Mandatory Guardrails for High Risk AI Settings — Treasury consultation in 2024/2025.

DISR's Mandatory Guardrails for High Risk AI Settings (proposals paper 2024) follows the EU AI Act pattern. Expected to require for 'high-risk' AI uses: risk management, data governance, transparency, human oversight, accuracy + robustness, accountability. Commencement TBD (likely 2026-2027).

**Who must comply:** Developers + deployers of 'high-risk' AI systems (definition TBD).
**What triggers it:** Final regulations + commencement.
**When due:** TBD; expected 2026-2027.
**Evidence:** AI risk register, model documentation, oversight + accountability records.
**Max penalty:** Expected to mirror EU AI Act-style civil penalties (substantial)
**Source:** https://www.industry.gov.au/publications/introducing-mandatory-guardrails-ai-high-risk-settings-proposals-paper

### Appoint voluntary administrator under Part 5.3A Corporations Act
URL: https://rulesmate.com.au/obligations/voluntary-administration-588u
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Directors can place company in voluntary administration when insolvent — pause creditor claims for restructuring window.

Part 5.3A of the Corporations Act allows directors to appoint a voluntary administrator when the company is insolvent or likely to become insolvent. Triggers automatic moratorium on creditor claims (with exceptions). Administrator investigates + recommends DOCA, liquidation or return to directors at second meeting.

**Who must comply:** Directors of insolvent or likely-insolvent companies considering restructuring.
**What triggers it:** Reasonable grounds to suspect insolvency.
**When due:** Same-day appointment when conditions met.
**Evidence:** Notice of Appointment of Administrator (Form 505); creditor reports.
**Max penalty:** Personal director liability for insolvent trading if delayed; appointment itself is protective
**Source:** https://asic.gov.au/regulatory-resources/insolvency/voluntary-administration

### Simplified Debt Restructuring (small business)
URL: https://rulesmate.com.au/obligations/simplified-debt-restructuring
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Small companies (<$1M liabilities) can use SDR to restructure without full external admin.

Part 5.3B Corporations Act (introduced January 2021) lets directors of small businesses (under $1M total liabilities, no related-party liabilities) retain control of the company while a Small Business Restructuring Practitioner develops a debt restructuring plan. 20-day proposal period + 15-day creditor vote.

**Who must comply:** Small business companies in financial distress meeting eligibility tests.
**What triggers it:** Eligibility (under $1M liabilities, current taxes paid, no related-party debts) + financial distress.
**When due:** Same-day appointment of Restructuring Practitioner.
**Evidence:** Form 506; creditor list; restructuring plan within 20 days.
**Max penalty:** n/a — protective mechanism. Eligibility breach risks falling back to full administration.
**Source:** https://asic.gov.au/regulatory-resources/insolvency/small-business-restructuring

### Personal bankruptcy declaration or debt agreement
URL: https://rulesmate.com.au/obligations/personal-bankruptcy-individuals
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: afsa
Source Acts: bankruptcy-act-1966

> Individuals with unmanageable personal debt can voluntarily petition for bankruptcy via AFSA.

Bankruptcy Act 1966 governs personal insolvency. Debtor's petition (voluntary bankruptcy) or creditor's petition (forced). Discharge typically 3 years; trustee administers + may seek income contributions. Alternatives include Part IX debt agreement (less destructive) + Part X personal insolvency agreement.

**Who must comply:** Individual debtors unable to pay debts as they fall due.
**What triggers it:** Insolvency at the individual level.
**When due:** Voluntary or upon creditor's petition.
**Evidence:** Statement of Affairs lodged with AFSA; income disclosure.
**Max penalty:** Concealment of assets or other bankruptcy offences attract criminal penalties
**Source:** https://afsa.gov.au/insolvency/i-cant-pay-my-debts

### Register security interests on the PPSR
URL: https://rulesmate.com.au/obligations/ppsr-registration
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: afsa
Source Acts: personal-property-securities-act-2009

> Secured creditors must register on the Personal Property Securities Register to preserve priority.

Personal Property Securities Act 2009 (Cwlth) governs security interests in personal property (other than land). Failure to register on PPSR causes priority defeat against subsequent registered interests + perfected interests in insolvency. Registration via AFSA.

**Who must comply:** Secured creditors taking security interests in personal property — equipment finance, leasing, retention of title, factoring.
**What triggers it:** Taking security interest in personal property.
**When due:** Before relevant priority point (typically before customer files for insolvency).
**Evidence:** PPSR registration (verifiable online).
**Max penalty:** Loss of priority in insolvency; commercial consequences
**Source:** https://www.ppsr.gov.au

### Hold AER authorisation as energy retailer
URL: https://rulesmate.com.au/obligations/energy-retail-authorisation
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ic-aer
Source Acts: national-energy-retail-law

> Selling electricity or gas to small customers requires AER retailer authorisation.

National Energy Retail Law (administered by AER) requires entities selling energy to small customers to hold a retailer authorisation. Customer protections under National Energy Retail Rules including hardship assistance, billing standards + disconnection protocols.

**Who must comply:** Energy retailers selling to small customers.
**What triggers it:** Selling electricity or gas to small customers in participating jurisdictions.
**When due:** Continuous; periodic compliance reporting.
**Evidence:** AER authorisation; complaints data; hardship register.
**Max penalty:** Civil penalties up to ~$15M for serious breaches; AER enforcement actions
**Source:** https://aer.gov.au/retail-markets/retailer-authorisation

### Register with AEMO for National Electricity Market participation
URL: https://rulesmate.com.au/obligations/nem-market-participation
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: aemo, ic-aer
Source Acts: national-electricity-law

> Generators + retailers + market participants must register with AEMO and meet NER obligations.

Operating in the National Electricity Market requires registration with AEMO under the National Electricity Rules. Categories include generators, scheduled loads, retailers, traders, network service providers. Settlement + compliance with technical + commercial NER provisions.

**Who must comply:** Electricity generators + retailers + scheduled loads + network operators in the NEM.
**What triggers it:** Participating in the NEM.
**When due:** Continuous.
**Evidence:** AEMO registration; settlement compliance; technical conformance.
**Max penalty:** AER civil penalties + AEMO directions
**Source:** https://aemo.com.au/learn/energy-explained/market-participants

### Comply with NSW Design and Building Practitioners Act 2020
URL: https://rulesmate.com.au/obligations/nsw-building-design-and-construction
Jurisdiction: NSW · Priority: critical · Status: current
Enforced by: nsw-building-commissioner
Source Acts: design-and-building-practitioners-act-2020-nsw

> Designers + builders of Class 2-9 buildings in NSW must register + lodge declarations.

The Design and Building Practitioners Act 2020 (NSW) requires registered building practitioners + design practitioners for Class 2 (apartment + multi-residential) + extended classes. Each design declared compliant by registered designer; each build declared compliant by registered builder. Statutory duty of care extends to subsequent purchasers.

**Who must comply:** Designers + builders of Class 2-9 buildings in NSW.
**What triggers it:** Working on covered building work.
**When due:** Before construction begins; declarations lodged per stage.
**Evidence:** Registration; design declaration; build declaration; insurance.
**Max penalty:** Civil penalties + statutory duty-of-care liability to subsequent owners
**Source:** https://www.nsw.gov.au/housing-and-construction/building-commission-nsw

### Maintain VBA registration as builder / draftsperson / surveyor
URL: https://rulesmate.com.au/obligations/vic-building-registration
Jurisdiction: VIC · Priority: critical · Status: current
Enforced by: vba-vic-building-authority
Source Acts: building-act-1993-vic

> VIC building practitioners must hold current registration + appropriate insurance.

Building Act 1993 (Vic) + Building Regulations require registration of builders, draftspersons, building surveyors, building inspectors + engineers. Registration + CPD + appropriate insurance + domestic builders insurance for residential work over $16K.

**Who must comply:** Vic building practitioners.
**What triggers it:** Operating as a building practitioner.
**When due:** Continuous; annual renewal.
**Evidence:** VBA registration; insurance certificate; CPD evidence.
**Max penalty:** Suspension/cancellation; civil + criminal penalties for unregistered work
**Source:** https://www.vba.vic.gov.au

### Hold current QBCC licence for QLD building work
URL: https://rulesmate.com.au/obligations/qbcc-licensing
Jurisdiction: QLD · Priority: critical · Status: current
Enforced by: qbcc-qld-building
Source Acts: queensland-building-and-construction-commission-act-1991-qld

> QLD building work > $3,300 requires QBCC licensing + minimum financial requirements.

Queensland Building and Construction Commission Act 1991 (Qld) requires QBCC licensing for building work above thresholds. Minimum Financial Requirements (MFR) verified annually; statutory home warranty insurance on residential. Licence categories cover trades + builder classes.

**Who must comply:** QLD builders + tradespeople above thresholds.
**What triggers it:** Conducting building work in Queensland > $3,300.
**When due:** Continuous; MFR annual; licence renewal.
**Evidence:** QBCC licence; MFR submission; insurance; home warranty premium.
**Max penalty:** Unlicensed work — criminal + civil penalties; loss of licence; home warranty consequences
**Source:** https://www.qbcc.qld.gov.au

### Comply with Residential Tenancies Act 2010 (NSW)
URL: https://rulesmate.com.au/obligations/residential-tenancy-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: nsw-fair-trading
Source Acts: residential-tenancies-act-2010-nsw

> Landlords + agents must lodge bonds with Rental Bond Board + comply with notice + minimum standards.

RTA 2010 (NSW) regulates residential tenancies — bond lodgement with Rental Bond Board (within 10 business days), prescribed lease form, minimum standards (smoke alarms, locks), notice periods for termination + entry, no-grounds termination reform (recent + ongoing).

**Who must comply:** NSW residential landlords + real estate agents.
**What triggers it:** Entering a residential tenancy in NSW.
**When due:** Bond lodgement within 10 business days of receipt; ongoing duties.
**Evidence:** Bond lodgement record; signed RTA + condition report; entry notices.
**Max penalty:** Civil penalties under RTA; NCAT orders; agent licence consequences
**Source:** https://www.fairtrading.nsw.gov.au/housing-and-property/renting

### Comply with Residential Tenancies Act 1997 (VIC)
URL: https://rulesmate.com.au/obligations/residential-tenancy-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: cav
Source Acts: residential-tenancies-act-1997-vic

> VIC RTA 1997 (significantly amended 2021) — minimum standards, pets, no-fault terminations reformed.

RTA 1997 (Vic), as amended by 2018 + 2021 reforms, sets bond lodgement (Residential Tenancies Bond Authority), prescribed minimum standards (130+ checks), pet policies, no-fault termination reform + VCAT dispute resolution.

**Who must comply:** Vic residential landlords + real estate agents.
**What triggers it:** Entering a residential tenancy in Vic.
**When due:** Bond lodgement within 10 business days; ongoing compliance.
**Evidence:** Bond lodgement; condition report; notices to vacate.
**Max penalty:** Civil penalties; VCAT orders; agent registration consequences
**Source:** https://www.consumer.vic.gov.au/housing/renting

### Comply with Residential Tenancies and Rooming Accommodation Act 2008 (QLD)
URL: https://rulesmate.com.au/obligations/residential-tenancy-qld
Jurisdiction: QLD · Priority: high · Status: current
Enforced by: office-of-fair-trading-qld
Source Acts: residential-tenancies-and-rooming-accommodation-act-2008-qld

> QLD RTRA — RTA bond, minimum standards, dispute resolution via QCAT.

RTRA 2008 (Qld) administered by the Residential Tenancies Authority. Bond lodgement, minimum standards (recent expansion incl. air-flow, security), prescribed lease, dispute resolution via QCAT.

**Who must comply:** QLD residential landlords + agents.
**What triggers it:** Residential tenancy in QLD.
**When due:** Bond lodgement within 10 days; ongoing duties.
**Evidence:** Bond lodgement; entry condition report; notices.
**Max penalty:** Civil penalties; QCAT orders; agent consequences
**Source:** https://www.rta.qld.gov.au

### Comply with Retail Leases Act 2003 (VIC)
URL: https://rulesmate.com.au/obligations/retail-leases-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: cav
Source Acts: retail-leases-act-2003-vic

> Vic retail leases (under $1M annual rent) attract statutory protections including disclosure + outgoings rules.

Retail Leases Act 2003 (Vic) sets disclosure statement + outgoings rules + 5-year minimum term + restrictions on landlord-imposed fees. Administered by Small Business Commissioner.

**Who must comply:** Vic retail tenants + landlords.
**What triggers it:** Entering a retail lease in Vic under $1M annual rent.
**When due:** Pre-lease disclosure 7 days before lease; ongoing duties.
**Evidence:** Disclosure statement; lease + amendment register; outgoings reconciliation.
**Max penalty:** Civil penalties + Small Business Commissioner mediation + VCAT orders
**Source:** https://www.consumer.vic.gov.au/businesses/leasing-business-premises

### Comply with Retail Leases Act 1994 (NSW)
URL: https://rulesmate.com.au/obligations/retail-leases-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: nsw-fair-trading
Source Acts: retail-leases-act-1994-nsw

> NSW retail leases — disclosure, 5-year minimum term, outgoings transparency.

Retail Leases Act 1994 (NSW) requires lessor disclosure statement, 5-year minimum term (waivable), outgoings transparency + restrictions on landlord-imposed fees. Disputes via NSW Retail Tenancy Unit + NCAT.

**Who must comply:** NSW retail tenants + landlords.
**What triggers it:** Entering a retail lease in NSW.
**When due:** Pre-lease disclosure 7 days before lease.
**Evidence:** Disclosure statement; lease record; outgoings reconciliation.
**Max penalty:** Civil penalties; NCAT orders; lease consequences
**Source:** https://www.fairtrading.nsw.gov.au/trades-and-businesses/business-essentials/retail-lease-disputes

### Comply with Standard Business Sponsor obligations (482 + 494)
URL: https://rulesmate.com.au/obligations/subclass-482-sponsor-obligations
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: home-affairs-soci
Source Acts: migration-act-1958

> Business sponsors of 482 / 494 visas must meet labour market testing, equivalent terms + record-keeping.

Migration Regulations + Migration Act 1958 set Standard Business Sponsor obligations: labour market testing, equivalent terms + conditions, training requirements (or contribution to SAF), record-keeping (5 years), no charging sponsorship-related fees to nominee.

**Who must comply:** Sponsors of 482 (Skills in Demand) + 494 (Skilled Employer Sponsored Regional) visas.
**What triggers it:** Sponsoring a worker under subclass 482 or 494.
**When due:** Continuous through sponsorship period.
**Evidence:** Labour market testing evidence; payroll records showing equivalent terms; SAF contribution evidence.
**Max penalty:** Sanctions: bar from future sponsorship; civil + criminal penalties for sponsor offences
**Source:** https://immi.homeaffairs.gov.au/visas/employing-foreign-workers/sponsoring-workers/learn-about-sponsoring

### Pay Skilling Australians Fund (SAF) levy
URL: https://rulesmate.com.au/obligations/saf-skilling-australians-fund
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: migration-act-1958

> Sponsors of 482 visa applicants pay SAF levy at nomination time.

Migration Act levy for sponsors of 482 (and other) visas — annual amount per year of nomination, paid upfront at nomination time. Rate varies by business size (small business <$10M turnover, others) + visa subclass.

**Who must comply:** Sponsors at nomination time.
**What triggers it:** Lodging a nomination for a 482 (or applicable) visa.
**When due:** At nomination lodgement.
**Evidence:** Payment receipt via ImmiAccount.
**Max penalty:** Nomination invalid without payment
**Source:** https://immi.homeaffairs.gov.au/visas/employing-foreign-workers/sponsoring-workers/nominating-a-worker/skilling-australians-fund-levy

### Key personnel obligations under Aged Care Act 2024
URL: https://rulesmate.com.au/obligations/aged-care-key-personnel-obligations
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> Aged care key personnel — board + senior — owe statutory duties + face personal sanctions.

Aged Care Act 2024 sets key personnel obligations (analog to directors' duties) — duty to ensure compliance with the Statement of Rights + Quality Standards, fit + proper person test, banning order regime against individuals.

**Who must comply:** Key personnel of approved aged care providers (board, senior management).
**What triggers it:** Holding key personnel role.
**When due:** Continuous.
**Evidence:** Fit + proper attestation; banning order register checks at appointment; documented oversight.
**Max penalty:** Banning orders + civil penalties for breach of key personnel duties
**Source:** https://agedcarequality.gov.au/providers

### AN-ACC funding classification compliance (residential)
URL: https://rulesmate.com.au/obligations/aged-care-funding-an-acc
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> Residential aged care funding driven by AN-ACC classification of each resident.

Australian National Aged Care Classification (AN-ACC) determines residential aged care funding from 1 October 2022. Independent assessors classify residents into 13 categories. Provider obligations: facilitate assessments, comply with care minutes targets, accurately report.

**Who must comply:** Residential aged care providers.
**What triggers it:** Receiving AN-ACC funding.
**When due:** Continuous; periodic reclassification.
**Evidence:** Assessment records; care minutes tracking; monthly reporting.
**Max penalty:** Funding adjustments + ACQSC compliance action; recovery of overpayments
**Source:** https://www.health.gov.au/our-work/an-acc

### Comply with NDIS Pricing Arrangements + Price Limits
URL: https://rulesmate.com.au/obligations/ndis-pricing-arrangements
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ndis-commission
Source Acts: national-disability-insurance-scheme-act-2013

> NDIS providers must claim within NDIA-published price limits + arrangements.

NDIS Pricing Arrangements + Price Limits (updated annually) cap per-unit pricing for supports. Providers cannot charge participants above the cap; must use specified item codes; bill within service agreement.

**Who must comply:** All NDIS providers (registered + unregistered).
**What triggers it:** Delivering NDIS-funded supports.
**When due:** Per-claim; annual update review.
**Evidence:** Service agreement; correct item codes; price compliance; claim records.
**Max penalty:** Recovery + civil penalties for overcharging; provider banning
**Source:** https://www.ndis.gov.au/providers/pricing-arrangements

### Develop + authorise Behaviour Support Plans for restrictive practices
URL: https://rulesmate.com.au/obligations/ndis-behaviour-support-plan
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ndis-commission
Source Acts: national-disability-insurance-scheme-act-2013

> Use of restrictive practices in NDIS supports requires a comprehensive Behaviour Support Plan.

NDIS (Restrictive Practices and Behaviour Support) Rules 2018 require any use of restrictive practices to be authorised under a state-specific authorisation framework + a written Behaviour Support Plan developed by a registered NDIS behaviour support practitioner.

**Who must comply:** Registered NDIS providers using restrictive practices.
**What triggers it:** Use of restrictive practices on NDIS participants.
**When due:** BSP before practice; monthly reporting of use.
**Evidence:** Authorisation; BSP; consent; monthly use reports.
**Max penalty:** Civil penalties + provider registration consequences + state authorisation withdrawal
**Source:** https://ndiscommission.gov.au/providers/registered-ndis-providers/behaviour-support-and-restrictive-practices

### Comply with APES 110 Code of Ethics for Professional Accountants
URL: https://rulesmate.com.au/obligations/apes-110-code-of-ethics
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, tpb

> Members of CA ANZ + CPA Australia + IPA bound by APES 110 — fundamental principles + threats + safeguards.

APES 110 (Australian Professional and Ethical Standards Board, 2020) sets fundamental principles: integrity, objectivity, professional competence + due care, confidentiality, professional behaviour. Applies threats + safeguards framework; specific sections for audit + assurance independence.

**Who must comply:** Members of CA ANZ, CPA Australia, IPA + auditors generally.
**What triggers it:** Membership of professional accounting body.
**When due:** Continuous.
**Evidence:** Engagement letters with independence + scope; threats register; CPD record.
**Max penalty:** Professional body disciplinary action; ASIC referral; civil liability
**Source:** https://apesb.org.au/standards-and-guidance/apes-110-code-of-ethics-for-professional-accountants

### Comply with Australian Auditing Standards (ASA)
URL: https://rulesmate.com.au/obligations/asa-auditing-standards
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Auditors must conduct audits per ASA — Aus equivalent of ISA, with Aus additions.

AUASB Australian Auditing Standards (ASA) apply to audits of Australian financial reports. Aligned to International Standards on Auditing (ISA) with Australian additions. Failure to comply attracts ASIC compliance action against RCAs.

**Who must comply:** Registered Company Auditors conducting audits.
**What triggers it:** Conducting a Corporations Act audit.
**When due:** Per audit engagement.
**Evidence:** Audit working papers; engagement letter; independence assessment; quality control evidence.
**Max penalty:** RCA registration consequences; civil + criminal under s 1289
**Source:** https://auasb.gov.au

### Cosmetic surgery practitioner endorsement (from 2025)
URL: https://rulesmate.com.au/obligations/cosmetic-surgery-reforms-2025
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-07-01
Enforced by: ahpra
Source Acts: health-practitioner-regulation-national-law-act-2009

> From July 2025 — endorsed cosmetic surgery registration with stricter advertising + training.

Following AHPRA reforms post-Four Corners investigation, from 2025 only AHPRA-endorsed practitioners can hold themselves out as 'cosmetic surgeons'. Endorsement requires specified surgical training. Stricter advertising rules including cooling-off period for non-surgical cosmetic procedures.

**Who must comply:** Medical practitioners performing cosmetic surgery.
**What triggers it:** Practising as a cosmetic surgeon.
**When due:** From 2025; ongoing endorsement maintenance.
**Evidence:** AHPRA endorsement; training evidence; advertising compliance.
**Max penalty:** Loss of endorsement; AHPRA disciplinary action; criminal for false holding out
**Source:** https://www.medicalboard.gov.au/news/2024-04-15-newsletter.aspx

### Comply with MBS telehealth item rules + continuous-care rules
URL: https://rulesmate.com.au/obligations/telehealth-mbs
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: health-insurance-act-1973

> MBS telehealth requires existing-patient relationship (12-month rule) for most consultations.

Medicare Benefits Schedule telehealth items require an established clinician–patient relationship (typically a face-to-face consultation in the prior 12 months). Limited exceptions for some specialties + populations. Non-compliant claims attract recovery.

**Who must comply:** GPs + specialists claiming MBS telehealth items.
**What triggers it:** Providing a telehealth consultation.
**When due:** Per consultation; recordkeeping.
**Evidence:** Patient records demonstrating prior face-to-face contact; consultation notes.
**Max penalty:** Recovery of incorrect claims; Practitioner Review Program referral
**Source:** https://www.mbsonline.gov.au

### Mandatory reporting of child safety concerns (ECEC)
URL: https://rulesmate.com.au/obligations/ecec-child-protection-mandatory-reporting
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: education-and-care-services-national-law-act-2010

> ECEC educators are state-mandated reporters of suspected child abuse/neglect.

Each state has mandatory reporting laws requiring early childhood educators to report suspected child abuse + neglect to the relevant statutory authority (DCJ NSW, DFFH Vic, Child Safety Qld, etc.). National Quality Framework also requires reporting of any incident harming a child to the relevant state regulator.

**Who must comply:** Educators + nominated supervisors + approved providers in approved ECEC services.
**What triggers it:** Suspicion of child abuse/neglect; incident at the service.
**When due:** Immediately on forming reasonable belief.
**Evidence:** Notification records; child protection training.
**Max penalty:** Criminal penalties for failure to report; state-specific (often imprisonment)
**Source:** https://aifs.gov.au/resources/policy-and-practice-papers/mandatory-reporting-child-abuse-and-neglect

### Child Care Subsidy provider compliance
URL: https://rulesmate.com.au/obligations/ccs-child-care-subsidy-compliance
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: a-new-tax-system-family-assistance-administration-act-1999

> CCS approved providers must comply with funding rules + record-keeping + minimum attendance.

Family Assistance Legislation Amendment (Cheaper Child Care) Act 2022 + ongoing CCS rules require approved providers to record attendance accurately, charge legitimate fees, retain records 5 years, report fraud / non-compliance. CCS fraud + manipulation is criminal.

**Who must comply:** CCS-approved ECEC providers.
**What triggers it:** Being CCS-approved.
**When due:** Per session; ongoing.
**Evidence:** Attendance records; fee schedules; CCS reports; audit cooperation.
**Max penalty:** Recovery of subsidy; criminal prosecution for CCS fraud (years prison); loss of approval
**Source:** https://www.education.gov.au/early-childhood/child-care-subsidy

### EPBC Act — assess + approve controlled actions affecting MNES
URL: https://rulesmate.com.au/obligations/epbc-act-controlled-actions
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: environment-protection-and-biodiversity-conservation-act-1999

> Any action likely to significantly impact Matters of National Environmental Significance needs federal approval.

Environment Protection and Biodiversity Conservation Act 1999 (Cwlth) requires referral + assessment of 'controlled actions' that may significantly impact MNES (World Heritage, RAMSAR wetlands, threatened species, migratory species, Commonwealth marine areas, water resources for coal/CSG, nuclear actions). Approval conditions binding.

**Who must comply:** Proponents of major actions (mining, infrastructure, agriculture expansion).
**What triggers it:** Action likely to significantly impact MNES.
**When due:** Before commencement; ongoing approval condition compliance.
**Evidence:** Referral, assessment report, approval decision, condition compliance reports.
**Max penalty:** Civil penalties up to $14M (corporations); criminal for serious offences
**Source:** https://www.dcceew.gov.au/environment/epbc

### Notify + remediate contaminated land (state)
URL: https://rulesmate.com.au/obligations/contaminated-land-state
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: epa-nsw, epa-vic, epa-qld, epa-wa, epa-sa, epa-tas

> State EPA regimes require notification + remediation of contaminated land.

Each state has a contaminated land regime — NSW Contaminated Land Management Act 1997, Vic Environment Protection Act 2017 (general environmental duty + notification), Qld Environmental Protection Act 1994. Notification of significant contamination; remediation per state-issued Cleanup Notice / Remediation Order.

**Who must comply:** Owners + occupiers + polluters of contaminated land.
**What triggers it:** Awareness of significant contamination.
**When due:** Notification per state-specific timeframe.
**Evidence:** Notification record; site investigation; remediation plan; clearance certificate.
**Max penalty:** Significant civil + criminal penalties; cleanup costs + interest
**Source:** https://www.epa.nsw.gov.au/your-environment/contaminated-land

### Display comparison rate on credit product advertising
URL: https://rulesmate.com.au/obligations/credit-comparison-rate-display
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: national-consumer-credit-protection-act-2009

> Annual percentage + comparison rate must accompany credit product ads under NCCP Regulations.

NCCP Regulations require credit providers + brokers to display the comparison rate (calculated using prescribed formula) alongside any advertised credit product. The rate gives consumers a like-for-like comparison including fees.

**Who must comply:** Credit providers + brokers advertising credit products.
**What triggers it:** Advertising a credit product.
**When due:** Continuous.
**Evidence:** Advertising approvals; comparison rate calculations; archived ads.
**Max penalty:** Civil penalties under NCCP + misleading conduct under ACL
**Source:** https://asic.gov.au/regulatory-resources/credit/

### Pre-2025 ban on unsolicited credit limit increase invitations
URL: https://rulesmate.com.au/obligations/credit-limit-increase-consumer-consent
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: national-consumer-credit-protection-act-2009

> Credit card limit increase offers cannot be sent without prior written consent.

From 1 January 2019, s 133BE NCCP Act prohibits credit providers from making credit limit increase invitations without express prior consent from the consumer. Periodic re-consent + opt-out provided.

**Who must comply:** Credit card issuers.
**What triggers it:** Making credit limit increase offers.
**When due:** Continuous.
**Evidence:** Consent records + audit trails.
**Max penalty:** Civil penalties up to $15.65M / 3× benefit / 10% turnover
**Source:** https://asic.gov.au/regulatory-resources/credit/

### Register on the Federal Lobbyists Register
URL: https://rulesmate.com.au/obligations/lobbying-code-federal
Jurisdiction: CWLTH · Priority: medium · Status: current

> Third-party lobbyists contacting Commonwealth officials must register + observe the Lobbying Code.

The Lobbying Code of Conduct + Register of Lobbyists (administered by AG's Department) require third-party lobbyists to register before contacting federal government officials. Quarterly updates; bans for breaches.

**Who must comply:** Third-party lobbyists (in-house lobbyists exempt but covered by separate ministerial code).
**What triggers it:** Acting on behalf of a client to influence federal government decisions.
**When due:** Before contact; quarterly update.
**Evidence:** Register entry; client list; FITS separate registration if foreign principal.
**Max penalty:** Removal from register; reputational + access consequences
**Source:** https://www.lobbyists.ag.gov.au

### Respond to FOI requests within 30 days (Cwlth agencies + ministers)
URL: https://rulesmate.com.au/obligations/freedom-of-information
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: oaic
Source Acts: freedom-of-information-act-1982

> FOI Act 1982 — Commonwealth agencies + ministers must respond to access requests within 30 days.

Freedom of Information Act 1982 (Cwlth) gives a right of access to documents held by Commonwealth agencies + ministers (subject to exemptions). Decisions within 30 days; review pathway via internal review + OAIC + AAT.

**Who must comply:** Commonwealth agencies + ministers.
**What triggers it:** Receipt of FOI request.
**When due:** 30 days (extendable in limited circumstances).
**Evidence:** FOI decision + statement of reasons + record of consultation.
**Max penalty:** OAIC review + AAT review; reputational
**Source:** https://www.oaic.gov.au/freedom-of-information

### Comply with CDR Banking (Open Banking) — major + non-major ADIs
URL: https://rulesmate.com.au/obligations/open-banking-cdr-banking
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc, oaic
Source Acts: competition-and-consumer-act-2010

> Banking data holders must share consumer data with accredited recipients on consumer consent.

Consumer Data Right (Banking) commenced for major banks July 2020, non-major banks July 2021. Data holders must share product + consumer data via accredited APIs. Accredited data recipients face Privacy Safeguards regime.

**Who must comply:** Banking data holders (ADIs); accredited data recipients.
**What triggers it:** Being an ADI; becoming an ADR.
**When due:** Continuous; incident notification within 30 days.
**Evidence:** CDR Register listing; consumer authorisation records; incident register.
**Max penalty:** Civil penalties up to $50M / 30% turnover; ACCC + OAIC joint enforcement
**Source:** https://cdr.gov.au/banking

### Annual YFYS performance test (MySuper + Choice)
URL: https://rulesmate.com.au/obligations/yfys-performance-test
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: apra
Source Acts: superannuation-industry-supervision-act-1993

> APRA annual performance test for MySuper products + (from 2024) Trustee Directed Products.

Your Future, Your Super (YFYS) reforms introduced an annual performance test for MySuper products from 2021; extended to Trustee Directed Products from 2022. Funds failing must notify members + cannot accept new members from second consecutive failure.

**Who must comply:** APRA-regulated super trustees with MySuper or TDP products.
**What triggers it:** Offering MySuper or TDP product.
**When due:** Annual performance test (typically August).
**Evidence:** APRA test result; member notification; product closure decisions where applicable.
**Max penalty:** Mandatory member notification; product closure to new members; APRA enforcement
**Source:** https://apra.gov.au/your-future-your-super-performance-test

### Conduct conveyancing via PEXA (e-conveyancing) where mandated
URL: https://rulesmate.com.au/obligations/pexa-mandatory-electronic-conveyancing
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: nsw-fair-trading, cav

> Most state property transactions must be lodged electronically via PEXA or sympli.

State e-conveyancing mandates: NSW + Vic mandate e-lodgement for most property transactions; Qld, WA, SA largely mandate. PEXA + Sympli are the two ELNOs. Identity verification + subscriber agreement obligations.

**Who must comply:** Conveyancers + property solicitors lodging dealings in covered states.
**What triggers it:** Lodging a covered property dealing.
**When due:** Per transaction.
**Evidence:** PEXA / Sympli subscriber agreement; identity verification records; ARNECC compliance.
**Max penalty:** Transaction failure + state titles office sanctions
**Source:** https://www.arnecc.gov.au

### Notify ACCC of acquisitions meeting mandatory merger thresholds
URL: https://rulesmate.com.au/obligations/merger-notification-cca
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-01-01
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> From 1 January 2026, mandatory merger notification regime kicks in.

Treasury Laws Amendment (Mergers and Acquisitions Reform) Act 2024 reforms merger control. From 1 January 2026, mandatory pre-notification + ACCC approval required for acquisitions meeting prescribed monetary + concentration thresholds. Failure to notify is itself a contravention.

**Who must comply:** Acquirers of businesses or shares meeting threshold.
**What triggers it:** Proposed acquisition meeting mandatory threshold (TBD final monetary).
**When due:** Before acquisition; ACCC clearance required.
**Evidence:** Notification + analysis + market evidence; ACCC clearance.
**Max penalty:** Civil penalties to the maximum CCA regime; acquisition unwinding
**Source:** https://accc.gov.au/about-us/policies-and-publications/merger-reform

### Comply with online safety industry codes (Phase 1 + 2)
URL: https://rulesmate.com.au/obligations/online-safety-industry-codes
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ic-australia
Source Acts: online-safety-act-2021

> Eight industry sections covered by binding codes under the Online Safety Act 2021.

Industry codes (Phase 1 in force 2023; Phase 2 from 2024) impose binding obligations on social media services, designated internet services, internet carriage services, app distribution services, equipment providers, hosting services, internet search engine services + relevant electronic services.

**Who must comply:** Captured providers in the eight industry sections.
**What triggers it:** Providing a covered service.
**When due:** Continuous; code-specific reporting.
**Evidence:** Code compliance documentation; transparency reports.
**Max penalty:** Civil penalties up to ~$70M for code non-compliance
**Source:** https://www.esafety.gov.au/industry/codes

### Implement Food Safety Program where prescribed (Standard 3.2.1)
URL: https://rulesmate.com.au/obligations/food-standards-3-1-1-food-safety-program
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fsanz
Source Acts: food-standards-australia-new-zealand-act-1991

> High-risk food businesses must implement a documented Food Safety Program audited by a recognised food safety auditor.

Standard 3.2.1 of the Food Standards Code requires certain high-risk food businesses (food service to vulnerable populations, raw oyster processing, etc.) to implement a written Food Safety Program audited by a recognised auditor. State implementation varies.

**Who must comply:** High-risk food businesses + service to vulnerable populations.
**What triggers it:** Operating a covered category.
**When due:** Continuous; periodic audit.
**Evidence:** Food Safety Program document; auditor's report.
**Max penalty:** State-based fines + business closure for serious breaches
**Source:** https://www.foodstandards.gov.au/business/safetystandards/Pages/Standard-3-2-1.aspx

### File patent applications with IP Australia
URL: https://rulesmate.com.au/obligations/ip-patents-registration
Jurisdiction: CWLTH · Priority: medium · Status: current
Source Acts: patents-act-1990

> Patents protect inventions for up to 20 years (standard) or 8 years (innovation patents — being phased out).

Patents Act 1990 (Cwlth) administered by IP Australia. Standard patents protect novel + inventive + useful inventions for up to 20 years. Innovation patents phased out (last applications 25 Aug 2021); existing in force until expiry. PCT international filing available.

**Who must comply:** Inventors / assignees seeking patent protection.
**What triggers it:** Innovation deserving protection.
**When due:** Voluntary but commercially essential; first-to-file priority.
**Evidence:** Lodged application + prosecution + grant.
**Max penalty:** n/a (voluntary); infringement = damages + injunctions
**Source:** https://ipaustralia.gov.au/patents

### Register designs with IP Australia
URL: https://rulesmate.com.au/obligations/ip-designs-registration
Jurisdiction: CWLTH · Priority: medium · Status: current
Source Acts: designs-act-2003

> Registered designs protect product visual appearance for up to 10 years.

Designs Act 2003 (Cwlth) protects new + distinctive visual features of products. Standard registration up to 10 years (5+5). Examination required to enforce.

**Who must comply:** Designers / assignees seeking visual-design protection.
**What triggers it:** New distinctive product visual design.
**When due:** Voluntary but commercially essential.
**Evidence:** Lodged design + examination + registration.
**Max penalty:** n/a; infringement = damages + injunctions
**Source:** https://ipaustralia.gov.au/designs

### Comply with Commonwealth Procurement Rules (CPRs)
URL: https://rulesmate.com.au/obligations/cpr-commonwealth-procurement
Jurisdiction: CWLTH · Priority: medium · Status: current

> All federal procurement governed by CPRs — value-for-money + procurement-connected policies.

Commonwealth Procurement Rules (issued by Finance) bind all federal agencies. Value-for-money standard, procurement-connected policies (Indigenous Procurement Policy, Small + Medium Enterprises participation, Workplace Gender Equality, Modern Slavery, etc.).

**Who must comply:** Commonwealth agencies + suppliers seeking federal contracts.
**What triggers it:** Federal procurement activities.
**When due:** Continuous.
**Evidence:** Procurement records + AusTender reporting + supplier compliance.
**Max penalty:** Ministerial direction; contract termination; supplier debarment
**Source:** https://www.finance.gov.au/government/procurement/commonwealth-procurement-rules

### Comply with state drinking water quality + safety regimes
URL: https://rulesmate.com.au/obligations/drinking-water-quality-state
Jurisdiction: CWLTH · Priority: high · Status: current

> Water utilities + private suppliers must meet state-specific drinking water quality standards.

Each state has its own drinking water regulator + quality regime (NSW Health, Department of Health Vic, Queensland Department of Health, etc.) implementing the ADWG. Notifiable incidents + risk-management plans required.

**Who must comply:** Water utilities + private water suppliers.
**What triggers it:** Supplying drinking water.
**When due:** Continuous; periodic reporting + incident notification.
**Evidence:** Risk management plan; water sampling records; incident notification.
**Max penalty:** State-specific fines + supply orders
**Source:** https://www.health.gov.au/topics/water-quality

### Banking Executive Accountability Regime (BEAR) — pre-FAR
URL: https://rulesmate.com.au/obligations/bear-accountability-historical
Jurisdiction: CWLTH · Priority: medium · Status: superseded
Enforced by: apra
Source Acts: banking-act-1959

> BEAR superseded by FAR for banks 15 March 2024; historical exposure remains.

BEAR (in force 2018) applied to ADIs from 1 July 2018; required registration of accountable persons, deferred remuneration + breach reporting. Replaced by FAR for banking 15 March 2024. Historical conduct under BEAR remains enforceable.

**Who must comply:** ADIs + senior executives (historical for conduct pre-15 March 2024).
**What triggers it:** Conduct during BEAR period.
**When due:** Historical compliance reporting.
**Evidence:** BEAR accountability statements; deferred remuneration records.
**Max penalty:** Civil penalties under former Banking Act provisions
**Source:** https://apra.gov.au/banking-executive-accountability-regime-bear

### Loyalty programs must comply with ACL transparency + UCT
URL: https://rulesmate.com.au/obligations/loyalty-program-acl-compliance
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Loyalty program T&Cs governed by ACL — UCT regime + misleading conduct.

Loyalty programs (Qantas FF, Velocity, Flybuys, etc.) subject to standard form contract regime (UCT regime since November 2023) + s 18 ACL misleading conduct. ACCC inquiry 2019 + ongoing enforcement.

**Who must comply:** Loyalty program operators + retail brands using them.
**What triggers it:** Operating a loyalty program with standard form T&Cs.
**When due:** Continuous.
**Evidence:** Reviewed T&Cs against UCT framework; transparency notices; complaints register.
**Max penalty:** ACL penalties up to $50M / 30% turnover for serious misleading conduct or UCT
**Source:** https://accc.gov.au/business/consumer-rights-and-obligations/consumer-loyalty-schemes

### Crypto Asset Secondary Service Provider (CASSPr) licensing reforms
URL: https://rulesmate.com.au/obligations/crypto-asset-secondary-service-provider-licensing
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Enforced by: asic

> Treasury consultation 2024 on bespoke crypto licensing — separate from AFSL.

Treasury consultation paper (October 2024) proposes a bespoke licensing framework for crypto-asset secondary service providers (exchanges, custody, lending). Distinct from AFSL regime. Final regulations expected 2025-2026.

**Who must comply:** Crypto exchanges, custodians, lenders operating in Australia.
**What triggers it:** Final regulations on commencement.
**When due:** TBD; transition period expected.
**Evidence:** Licence application; consumer protection compliance plan.
**Max penalty:** Operating without licence will attract civil + criminal penalties
**Source:** https://treasury.gov.au/consultation/c2024-561801

### Government cyber incident reporting via ASD ACSC
URL: https://rulesmate.com.au/obligations/cyber-incident-reporting-government
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asd
Source Acts: security-of-critical-infrastructure-act-2018

> Federal entities + critical infrastructure report cyber incidents to ASD ACSC.

Federal agencies + Commonwealth-funded entities report cyber incidents to ASD's Australian Cyber Security Centre (ACSC). Mandatory for critical infrastructure under SOCI; voluntary but expected for others. Information sharing supports national threat intelligence.

**Who must comply:** Federal agencies + critical infrastructure entities.
**What triggers it:** Cyber incident with potential impact.
**When due:** ASAP; statutory 12-72h for SOCI.
**Evidence:** ASD ACSC incident report; internal investigation record.
**Max penalty:** Statutory requirement under SOCI for CI; PSPF compliance for agencies
**Source:** https://www.cyber.gov.au/report

### Offshore Petroleum and Greenhouse Gas Storage Act compliance
URL: https://rulesmate.com.au/obligations/opggsa-petroleum-safety
Jurisdiction: CWLTH · Priority: critical · Status: current

> Offshore petroleum + gas operators regulated by NOPSEMA.

Offshore Petroleum and Greenhouse Gas Storage Act 2006 (Cwlth) regulates offshore petroleum + gas activities. NOPSEMA administers safety + environment + well integrity. Wide-ranging operator + titleholder obligations.

**Who must comply:** Offshore petroleum + gas operators + titleholders.
**What triggers it:** Operating offshore.
**When due:** Continuous; safety case + environment plan + WOMP review.
**Evidence:** Safety case acceptance; environment plan acceptance; WOMP review.
**Max penalty:** Significant civil + criminal penalties for safety + environment offences
**Source:** https://www.nopsema.gov.au

### Court-ordered mediation + ADR before trial (state + federal)
URL: https://rulesmate.com.au/obligations/court-ordered-mediation-mandatory
Jurisdiction: CWLTH · Priority: medium · Status: current

> Courts may order parties to attempt ADR before trial.

Most Australian courts (Federal Court, state Supreme Courts, District Courts) may order parties to attend mediation under court-annexed schemes. Parties typically share mediator's costs.

**Who must comply:** Parties to litigation.
**What triggers it:** Court order or pre-trial directions.
**When due:** Per court order.
**Evidence:** Mediation attendance certificate; settlement record if achieved.
**Max penalty:** Costs orders against parties who refuse to engage; possible adverse inference
**Source:** https://www.fedcourt.gov.au/services/mediation

### Political donation disclosure thresholds (federal + state)
URL: https://rulesmate.com.au/obligations/political-donation-disclosure
Jurisdiction: CWLTH · Priority: medium · Status: current

> Federal disclosure threshold $16,300+ (2024-25). State thresholds + caps vary.

Commonwealth Electoral Act 1918 disclosure threshold rose to $16,300 (2024-25 indexed). State regimes (NSW Election Funding + Disclosures Act, Vic Electoral Act 2002, Qld Electoral Act 1992) have varying disclosure thresholds + caps + bans.

**Who must comply:** Donors + recipients (parties, candidates, associated entities).
**What triggers it:** Donation + receipt above threshold.
**When due:** Annual returns + 7-day disclosures during election periods.
**Evidence:** Donation register; AEC + state electoral commission returns.
**Max penalty:** Civil + criminal penalties for failure to disclose + breach of bans
**Source:** https://aec.gov.au/parties_and_representatives/financial_disclosure/

### ASRS Group 2 climate disclosure — FY commencing on/after 1 July 2026
URL: https://rulesmate.com.au/obligations/asrs-group-2-disclosure-1-jul-2026
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-07-01
Enforced by: asic, cer
Source Acts: corporations-act-2001

> Group 2 (mid-tier entities) start climate disclosure FY27.

Group 2 thresholds (revenue ≥$200M, assets ≥$500M, ≥250 employees, or NGER controlling corporation) start AASB S2 sustainability reporting for FYs commencing on/after 1 July 2026. Limited assurance year 1 + Scope 3 from year 2.

**Who must comply:** Group 2 entities meeting any threshold.
**What triggers it:** First FY commencing on/after 1 July 2026.
**When due:** First report alongside FY27 annual financial report.
**Evidence:** AASB S2 disclosures; auditor's limited assurance.
**Max penalty:** Same penalty regime as ASRS Group 1
**Source:** https://aasb.gov.au/admin/file/content105/c9/AASB_S2_09-24.pdf

### ASRS Group 3 climate disclosure — FY commencing on/after 1 July 2027
URL: https://rulesmate.com.au/obligations/asrs-group-3-disclosure-1-jul-2027
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Effective: 2027-07-01
Enforced by: asic, cer
Source Acts: corporations-act-2001

> Group 3 (smaller entities) start climate disclosure FY28.

Group 3 thresholds (revenue ≥$50M, assets ≥$25M, ≥100 employees — any two of three under Ch 2M-equivalent test) start AASB S2 sustainability reporting for FYs commencing on/after 1 July 2027. Reduced Scope 3 obligations in year 1.

**Who must comply:** Group 3 entities meeting any two of three thresholds.
**What triggers it:** First FY commencing on/after 1 July 2027.
**When due:** First report alongside FY28 annual financial report.
**Evidence:** AASB S2 disclosures; auditor's limited assurance.
**Max penalty:** Same penalty regime as ASRS Group 1
**Source:** https://aasb.gov.au/admin/file/content105/c9/AASB_S2_09-24.pdf

### Manage business interruption claim definitions (post-pandemic precedent)
URL: https://rulesmate.com.au/obligations/insurance-business-interruption-pandemic
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, afca
Source Acts: insurance-act-1973

> BI insurance policies must clearly define pandemic exclusions per Federal Court guidance.

Two BI insurance test cases (HDI Global v Wonkana No 3; Star Entertainment v Chubb) clarified exclusion clauses + insured-peril definitions. Insurers must now have clear, current pandemic exclusions; policyholder cover for COVID-era losses limited.

**Who must comply:** General insurers writing business interruption.
**What triggers it:** Issuing BI policies.
**When due:** Continuous.
**Evidence:** Policy wording; reinsurance arrangements; claims-handling records.
**Max penalty:** ASIC + AFCA scrutiny on misleading or unfair claims; class action exposure
**Source:** https://asic.gov.au/regulatory-resources/financial-services/insurance-product-claims-handling/

### Public Interest Disclosure Act 2013 (federal whistleblower)
URL: https://rulesmate.com.au/obligations/public-interest-disclosure-federal
Jurisdiction: CWLTH · Priority: high · Status: current

> Federal public sector whistleblower regime + protections.

Public Interest Disclosure Act 2013 (Cwlth) provides whistleblower protections for Commonwealth public officials. Distinct from corporate whistleblower regime in Part 9.4AAA Corporations Act. Internal disclosure to authorised internal recipient; external escalation in limited circumstances.

**Who must comply:** Commonwealth agencies + their officials.
**What triggers it:** Receipt of public interest disclosure.
**When due:** Acknowledgement within 14 days; investigation per timelines.
**Evidence:** Authorised officer register; disclosure register; investigation reports.
**Max penalty:** Criminal penalties for victimisation + identifying-information disclosure
**Source:** https://www.ombudsman.gov.au/about-us/integrity-of-government

### Use of personal information for direct marketing (APP 7)
URL: https://rulesmate.com.au/obligations/direct-marketing-app-7
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> APP 7 restricts use + disclosure of personal info for direct marketing.

APP 7 of the Privacy Act restricts use of personal information for direct marketing. Mandatory opt-out + handling of requests to opt out; simplified consent regime for personal info collected directly.

**Who must comply:** APP entities engaged in direct marketing.
**What triggers it:** Using personal info for direct marketing.
**When due:** Continuous.
**Evidence:** Consent records; opt-out mechanism + register; marketing-list audit trail.
**Max penalty:** Same penalty regime as other Privacy Act breaches; $50M / 30% turnover max
**Source:** https://oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-7-app-7-direct-marketing

### Automated Decision-Making transparency under Privacy Act (phased)
URL: https://rulesmate.com.au/obligations/adm-transparency-privacy-act-2026
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Effective: 2026-12-10
Enforced by: oaic
Source Acts: privacy-act-1988

> From a phased commencement, APP entities using ADM must disclose in Privacy Policy.

The 2024 Privacy + Other Legislation Amendment Act introduces ADM transparency requirements. If a substantially-automated decision affects an individual, the entity must disclose use of ADM + provide certain information about how the system operates. Phased commencement begins 10 December 2026 alongside small business exemption removal.

**Who must comply:** APP entities using substantially-automated decisions affecting individuals.
**What triggers it:** Using ADM.
**When due:** Phased from 10 December 2026.
**Evidence:** ADM register; Privacy Policy update; review pathway documentation.
**Max penalty:** Same penalty regime as other Privacy Act breaches
**Source:** https://oaic.gov.au/privacy/privacy-legislation/the-privacy-act/privacy-reforms

### Energy Bill Relief Fund + state cost-of-living payments compliance
URL: https://rulesmate.com.au/obligations/ssa-energy-bill-relief
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ic-aer

> Retailers + suppliers administering federal/state energy bill relief must apply correctly + report.

Federal Energy Bill Relief Fund + state cost-of-living rebates require energy retailers to apply credits to customer accounts. Compliance + reporting obligations + audit by ATO + state agencies.

**Who must comply:** Energy retailers + state-relief participants.
**What triggers it:** Administering relief credits.
**When due:** Per scheme rules.
**Evidence:** Application records; customer notifications; auditor reports.
**Max penalty:** Recovery of incorrectly distributed payments; administrative penalties
**Source:** https://www.energy.gov.au/help-and-support/energy-bill-relief-fund

### State veterinary practice registration + animal welfare compliance
URL: https://rulesmate.com.au/obligations/veterinary-practice-registration-state
Jurisdiction: CWLTH · Priority: high · Status: current

> Veterinarians registered by state vet boards; animal welfare regulated by state agriculture departments.

Each state has a Veterinary Practitioners Board (e.g. VPB Vic, Veterinary Practitioners Registration Board NSW). Animal welfare regulated under state Prevention of Cruelty to Animals Acts. Federal Live Export Standards apply for exporters.

**Who must comply:** Registered veterinarians + practices + animal exporters.
**What triggers it:** Practising vet medicine or animal handling.
**When due:** Continuous; annual renewal; CPD.
**Evidence:** Registration + CPD; animal welfare compliance documentation.
**Max penalty:** Registration consequences; criminal penalties for cruelty / live export breaches
**Source:** https://www.vpb.vic.gov.au

### Maintain Basic Religious Charity status (ACNC) — limited carve-outs
URL: https://rulesmate.com.au/obligations/basic-religious-charity-acnc
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: acnc
Source Acts: australian-charities-and-not-for-profits-commission-act-2012

> Basic religious charities have limited ACNC governance carve-outs but still register.

ACNC-registered religious charities meeting criteria as 'Basic Religious Charity' have limited carve-outs from Governance Standards 1-5 + financial reporting (above thresholds). Annual AIS still required.

**Who must comply:** Religious charities meeting BRC criteria.
**What triggers it:** ACNC registration as religious charity.
**When due:** Annual AIS; ongoing status self-assessment.
**Evidence:** ACNC registration; AIS; self-assessment of BRC status.
**Max penalty:** Loss of BRC carve-outs; full Governance Standards apply if criteria not met
**Source:** https://www.acnc.gov.au/for-charities/start-a-charity/charity-types/basic-religious-charity

### In-vitro diagnostic medical device classification + ARTG
URL: https://rulesmate.com.au/obligations/ivd-medical-devices-classification
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: tga
Source Acts: therapeutic-goods-act-1989

> IVDs classified by risk (Class 1-4); ARTG inclusion required for supply.

Therapeutic Goods (Medical Devices) Regulations 2002 + IVD classification framework (Class 1 lowest risk through Class 4 highest). All IVDs require ARTG inclusion + conformity assessment per class.

**Who must comply:** IVD manufacturers + sponsors.
**What triggers it:** Manufacturing or sponsoring IVDs in Australia.
**When due:** Continuous; periodic conformity reassessment.
**Evidence:** ARTG inclusion; conformity assessment certificate; technical file.
**Max penalty:** Civil + criminal penalties; ARTG cancellation
**Source:** https://tga.gov.au/products/medical-devices/manufacturing-medical-devices/in-vitro-diagnostic-medical-devices

### Scope 3 emissions disclosure (AASB S2 + voluntary)
URL: https://rulesmate.com.au/obligations/scope-3-emissions-supply-chain
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Enforced by: asic, cer
Source Acts: corporations-act-2001

> Scope 3 emissions become mandatory year 2 of ASRS reporting (varies by Group).

AASB S2 mandates Scope 3 disclosure from year 2 of reporting per Group. Categories per GHG Protocol. Supply chain pressure from Group 1 + 2 reporters creates de facto Scope 3 reporting obligation on SMB suppliers.

**Who must comply:** ASRS Group 1+2+3 reporters + suppliers under pressure to disclose.
**What triggers it:** Group reporting onset + supply chain Scope 3 mapping.
**When due:** Per ASRS phase-in.
**Evidence:** Scope 3 inventory; supplier data + survey results; calculation methodology.
**Max penalty:** Same regime as broader ASRS climate disclosure obligations
**Source:** https://aasb.gov.au

### Avoid sham contracting (s 357 Fair Work Act)
URL: https://rulesmate.com.au/obligations/sham-contracting-fwa-357
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: fwo, ato
Source Acts: fair-work-act-2009

> Employer must not misrepresent employment as contractor relationship.

Sections 357-359 Fair Work Act prohibit sham contracting — misrepresenting an employment relationship as an independent contractor relationship, dismissing for the purpose of contracting, knowing misrepresentation.

**Who must comply:** All employers.
**What triggers it:** Engaging worker as contractor when relationship is in substance employment.
**When due:** Continuous.
**Evidence:** Contract documentation; worker status analysis; multi-factor test review.
**Max penalty:** Civil penalty for individuals + corporations; underpayment recovery; tax + super exposure
**Source:** https://fairwork.gov.au/employment-conditions/independent-contractors/sham-contracting

### Employee-like worker minimum standards (Closing Loopholes No. 2 2024)
URL: https://rulesmate.com.au/obligations/closing-loopholes-employee-like-workers
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: fwc, fwo
Source Acts: fair-work-act-2009

> FWC can set minimum standards for 'employee-like' workers (gig economy).

Fair Work Legislation Amendment (Closing Loopholes No. 2) Act 2024 introduces FWC jurisdiction to set minimum standards for 'employee-like' workers in the digital labour platforms sector. Minimum standards include pay, payment terms, deductions, record keeping, insurance + dispute resolution.

**Who must comply:** Digital labour platforms + their workers.
**What triggers it:** FWC determination of minimum standard.
**When due:** Per FWC order.
**Evidence:** Compliance with FWC minimum standards orders.
**Max penalty:** Civil penalties for breach of FWC orders
**Source:** https://fairwork.gov.au/issues-we-help/protections-disputes

### Same job same pay (labour hire reform)
URL: https://rulesmate.com.au/obligations/closing-loopholes-labour-hire-same-job-same-pay
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: fwc, fwo
Source Acts: fair-work-act-2009

> Labour hire workers entitled to same minimum pay as direct employees on host site.

Fair Work Legislation Amendment (Closing Loopholes) Act 2023 + No. 2 Act 2024 introduce 'Regulated Labour Hire Arrangement' orders by FWC — orders require labour-hire workers to receive at least the same rate of pay as direct employees performing same work on the host site.

**Who must comply:** Labour hire providers + host businesses.
**What triggers it:** FWC order in respect of host site.
**When due:** Per FWC order.
**Evidence:** Pay records demonstrating compliance with order; FWC order register.
**Max penalty:** Civil penalties for breach of order
**Source:** https://fwc.gov.au/issues-we-help/labour-hire/same-job-same-pay

### Thin capitalisation rules (Div 820 ITAA 1997)
URL: https://rulesmate.com.au/obligations/thin-capitalisation
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1997

> Limits debt deductions for thinly-capitalised entities, reformed from 1 July 2023.

Division 820 limits debt deductions for entities with debt > 60% of value (safe harbour) or arm's-length. Significant reform from 1 July 2023 introduced earnings-based test (similar to BEPS Action 4) for most entities + Group ratio tests.

**Who must comply:** Australian + foreign-owned multinational entities (with $5M+ debt deductions typically).
**What triggers it:** Debt deductions above de minimis.
**When due:** Annual; documentation contemporaneous.
**Evidence:** Documentation supporting the chosen test; debt ratios; group structure.
**Max penalty:** Tax shortfall + interest + penalty (typically 25-75%)
**Source:** https://ato.gov.au/businesses-and-organisations/international-tax-for-business/in-detail/thin-capitalisation

### Commonwealth Procurement-Connected Policy — modern slavery
URL: https://rulesmate.com.au/obligations/modern-slavery-procurement-policy
Jurisdiction: CWLTH · Priority: high · Status: current
Source Acts: modern-slavery-act-2018

> Federal procurement requires modern slavery risk consideration in supply chain.

Federal Procurement-Connected Policy on Modern Slavery requires Commonwealth agencies + suppliers to consider modern slavery risks in procurement decisions. Aligned to Modern Slavery Act 2018.

**Who must comply:** Commonwealth agencies + their suppliers.
**What triggers it:** Federal procurement activity.
**When due:** Per procurement event; ongoing risk assessment.
**Evidence:** Modern slavery risk assessment + supplier statements.
**Max penalty:** Tender disqualification; reputational
**Source:** https://www.finance.gov.au/government/procurement/commonwealth-procurement-rules/procurement-connected-policies

### Business records — 7-year retention (Corporations Act + tax)
URL: https://rulesmate.com.au/obligations/records-retention-7-years
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, ato, austrac, fwo
Source Acts: corporations-act-2001, taxation-administration-act-1953

> Companies must retain financial + business records for 7 years.

Section 286 Corporations Act requires companies to keep written financial records for 7 years. Tax records also 7 years under TAA. Employee records 7 years under FW Regs. CDD records 7 years under AML/CTF Act.

**Who must comply:** Companies + employers + reporting entities.
**What triggers it:** Recording event.
**When due:** Continuous retention; 7-year minimum.
**Evidence:** Records management policy + actual retention.
**Max penalty:** Civil penalties; tax + AML enforcement consequences
**Source:** https://asic.gov.au/for-business/running-a-company/financial-statements-and-audit/

### FAR deferred remuneration arrangements (40% deferral 4 years)
URL: https://rulesmate.com.au/obligations/far-deferred-remuneration
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: apra, asic
Source Acts: financial-accountability-regime-act-2023

> FAR accountable persons must have 40% of variable remuneration deferred 4 years.

FAR Act 2023 requires deferred remuneration arrangements — at least 40% of accountable person's variable remuneration deferred for at least 4 years (banking + insurance + super entities). Variable remuneration can be reduced or forfeited for accountability breaches.

**Who must comply:** FAR-regulated entities + accountable persons.
**What triggers it:** Being a FAR accountable person.
**When due:** Continuous; remuneration arrangements per FAR.
**Evidence:** Remuneration agreement showing 40% deferral + 4-year period; consequences clause.
**Max penalty:** Civil penalties + APRA + ASIC enforcement
**Source:** https://apra.gov.au/financial-accountability-regime

### Working with Children Check / Blue Card (state)
URL: https://rulesmate.com.au/obligations/blue-card-working-with-children
Jurisdiction: CWLTH · Priority: critical · Status: current

> State-issued working with children check required for child-related work.

Each state has a working with children check or Blue Card (Qld) regime requiring a national criminal history + child protection register check for child-related work.

**Who must comply:** Persons in child-related work (paid + volunteer in some categories).
**What triggers it:** Engaging in child-related work.
**When due:** Before work begins; periodic re-application.
**Evidence:** Current state Working with Children Check / Blue Card.
**Max penalty:** Working without check is criminal in most states; significant penalties
**Source:** https://www.acic.gov.au/services/working-children-checks

### Food and Grocery Code of Conduct (now mandatory)
URL: https://rulesmate.com.au/obligations/food-and-grocery-code-of-conduct
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-04-01
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Major supermarkets bound by mandatory Code with civil penalties from April 2025.

Food and Grocery Code of Conduct mandatory from April 2025 (was voluntary). Applies to Coles, Woolworths, Aldi, Metcash (above turnover thresholds). Sets supplier protections, retaliation prohibitions + ACCC complaint pathway. Civil penalties up to $10M for serious breaches.

**Who must comply:** Major supermarkets above threshold + their suppliers.
**What triggers it:** Mandatory commencement April 2025.
**When due:** Continuous.
**Evidence:** Code-compliant supplier agreements; dispute resolution records; ACCC + Code Reviewer engagement.
**Max penalty:** Civil penalties up to ~$10M for serious code breaches
**Source:** https://accc.gov.au/business/industry-codes/food-and-grocery-code-of-conduct

### Franchising Code of Conduct (mandatory industry code)
URL: https://rulesmate.com.au/obligations/franchising-code-of-conduct
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Mandatory Code regulating franchise sale, disclosure, dispute resolution.

Franchising Code of Conduct under CCA Pt IVB. Pre-disclosure document; good faith obligation; cooling-off + dispute resolution; restrictions on changes + termination. Substantial reform package commenced 1 April 2025 strengthening franchisee protections.

**Who must comply:** Franchisors + franchisees.
**What triggers it:** Franchise relationship.
**When due:** Continuous; disclosure annual + before sale.
**Evidence:** Disclosure document; franchise agreements; complaint records.
**Max penalty:** Civil penalties up to ~$10M + 3× benefit
**Source:** https://accc.gov.au/business/industry-codes/franchising-code-of-conduct

### Dairy Code of Conduct (mandatory)
URL: https://rulesmate.com.au/obligations/dairy-code-of-conduct
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Mandatory Code governing milk supply agreements between dairy farmers + processors.

Dairy Code of Conduct (mandatory since 1 January 2020) regulates milk supply agreements. Required terms, minimum prices, prohibition on retrospective price changes + bargaining provisions.

**Who must comply:** Dairy processors + farmers.
**What triggers it:** Dairy supply agreement.
**When due:** Annual + per agreement.
**Evidence:** Compliant supply agreements; dispute records.
**Max penalty:** Civil penalties up to $10M; ACCC enforcement
**Source:** https://accc.gov.au/business/industry-codes/dairy-code-of-conduct

### NSW development consent (Environmental Planning and Assessment Act 1979)
URL: https://rulesmate.com.au/obligations/nsw-environmental-planning-assessment
Jurisdiction: NSW · Priority: high · Status: current

> Most development in NSW requires consent under EP&A Act + local LEP / SEPP.

Environmental Planning and Assessment Act 1979 (NSW) is the foundational planning Act. Development assessment via consent authorities (typically councils) under State Environmental Planning Policies (SEPPs) + Local Environmental Plans (LEPs). State Significant Development by NSW Government.

**Who must comply:** Developers + landowners proposing development in NSW.
**What triggers it:** Proposed development requiring consent.
**When due:** Before commencing development.
**Evidence:** Development application; consent conditions compliance; building certificates.
**Max penalty:** Civil + criminal penalties; demolition orders; restoration orders
**Source:** https://www.planning.nsw.gov.au

### VIC planning permits (Planning and Environment Act 1987)
URL: https://rulesmate.com.au/obligations/vic-planning-environment-act-1987
Jurisdiction: VIC · Priority: high · Status: current

> Vic planning permits required for most development under Planning Schemes.

Planning and Environment Act 1987 (Vic) is foundational. Vic Planning Schemes (one per local government area + state-wide VPPs) govern use, development, subdivision + protection of land. Planning permits issued by responsible authority (typically Council).

**Who must comply:** Developers + landowners + property owners.
**What triggers it:** Use/development/subdivision under Planning Scheme.
**When due:** Before commencing use or development.
**Evidence:** Planning permit; conditions of permit; building permit (separate).
**Max penalty:** Significant fines + enforcement orders; demolition risk
**Source:** https://www.planning.vic.gov.au

### QLD development assessment (Planning Act 2016)
URL: https://rulesmate.com.au/obligations/qld-development-assessment
Jurisdiction: QLD · Priority: high · Status: current

> QLD Planning Act 2016 + Development Assessment Rules govern development.

Planning Act 2016 (Qld) + Development Assessment Rules. Three categories: accepted (no permit), assessable (development application), prohibited. State Assessment + Referral Agency (SARA) for state-level matters.

**Who must comply:** QLD developers + landowners.
**What triggers it:** Assessable development.
**When due:** Before development commences.
**Evidence:** Development approval; building approval; conditions compliance.
**Max penalty:** Significant fines + enforcement notices; demolition risk
**Source:** https://planning.statedevelopment.qld.gov.au

### VIC Environment Reference Standards (air, water, noise)
URL: https://rulesmate.com.au/obligations/vic-environment-reference-standard
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: epa-vic
Source Acts: environment-protection-act-2017-vic

> Vic EPA assesses environmental performance against Environment Reference Standards.

Under the Environment Protection Act 2017 (Vic), the Environment Reference Standards (ERS) replace State Environment Protection Policies. Standards cover ambient air quality, ambient sound, ambient water quality, ambient soil, surface water + groundwater.

**Who must comply:** Vic PCBUs subject to GED + state EPA permissions.
**What triggers it:** Activity affecting referenced environmental values.
**When due:** Continuous.
**Evidence:** Monitoring data against ERS; remediation plans.
**Max penalty:** Substantial state-based fines + criminal liability for serious breaches
**Source:** https://www.epa.vic.gov.au

### AFSL representative training (RG 146)
URL: https://rulesmate.com.au/obligations/afsl-rep-training-rg-146
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Representatives advising on financial products to retail clients must meet RG 146 training standards.

ASIC RG 146 sets the training requirements for representatives + authorised representatives advising on financial products to retail clients. Knowledge + skill levels by product category. Now replaced (for personal advice) by FASEA standards under s 921B for relevant providers.

**Who must comply:** AFSL holders + their representatives.
**What triggers it:** Providing financial product advice.
**When due:** Continuous; CPD per RG 146.
**Evidence:** RG 146 training certificates; CPD log.
**Max penalty:** Civil penalties under s 912A; representative removal
**Source:** https://asic.gov.au/regulatory-resources/find-a-document/regulatory-guides/rg-146-licensing-training-of-financial-product-advisers/

### Provide FSG + Statement of Advice to retail clients
URL: https://rulesmate.com.au/obligations/afsl-fsg-statement-of-advice
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Financial Services Guide before service; Statement of Advice for personal advice.

Sections 941A-952A Corporations Act require AFSL holders + ARs to provide a Financial Services Guide (FSG) before providing financial service to a retail client. Statement of Advice required for personal advice; SOAs detail subject + basis of advice + remuneration + warnings.

**Who must comply:** AFSL holders + ARs providing services to retail clients.
**What triggers it:** Providing financial service or personal advice.
**When due:** FSG before service; SOA at time of advice.
**Evidence:** Current FSG; signed SOA + file note.
**Max penalty:** Civil penalties to AFSL maximum; ASIC remediation orders
**Source:** https://asic.gov.au/regulatory-resources/financial-services/financial-services-guides-fsg/

### Best interests duty for financial advisers (s 961B-G)
URL: https://rulesmate.com.au/obligations/asic-rg-175-financial-product-advice
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Personal advisers must act in client's best interests + meet related obligations.

Sections 961B-961G Corporations Act + ASIC RG 175 require providers of personal advice to retail clients to: (1) act in client's best interests; (2) provide appropriate advice; (3) warn if advice based on incomplete/inaccurate info; (4) prioritise client's interests over their own.

**Who must comply:** Personal advisers (relevant providers).
**What triggers it:** Providing personal advice to a retail client.
**When due:** Continuous per engagement.
**Evidence:** SOA; client-best-interests-duty record; conflict register; prioritisation evidence.
**Max penalty:** Civil penalties to financial services maximum ($15.65M / 3× / 10%)
**Source:** https://asic.gov.au/regulatory-resources/find-a-document/regulatory-guides/rg-175-licensing-financial-product-advisers-conduct-and-disclosure/

### Small Amount Credit Contract + Consumer Lease caps (post-SACC reforms)
URL: https://rulesmate.com.au/obligations/consumer-credit-fee-cap
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: national-consumer-credit-protection-act-2009

> SACC + consumer lease fee caps + responsible lending tightened post-Royal Commission.

Treasury Laws Amendment (Financial Sector Reform) Act 2022 (Cwlth) introduced SACC + consumer lease reforms including total cost caps + protected earnings amount caps for SACC borrowers + consumer lease providers. Restrictions on unsolicited offers.

**Who must comply:** SACC providers + consumer lease providers (Cash Converters, BNPL-adjacent).
**What triggers it:** Providing SACC or consumer lease.
**When due:** Continuous.
**Evidence:** Cost cap compliance; protected earnings calculations; documentation.
**Max penalty:** Civil + criminal penalties to NCCP maximum
**Source:** https://asic.gov.au/regulatory-resources/credit/

### Stronger Member Outcomes — APRA SPS 515
URL: https://rulesmate.com.au/obligations/super-stronger-member-outcomes
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: apra
Source Acts: superannuation-industry-supervision-act-1993

> RSE licensees must annually assess member-outcomes performance + take action.

APRA SPS 515 + SPG 515 require RSE licensees to conduct an annual member-outcomes assessment for each cohort (MySuper + Choice). Test investment performance, fees + costs, options + benefits, services. Take action where outcomes inadequate.

**Who must comply:** APRA-regulated RSE licensees.
**What triggers it:** Annual cycle.
**When due:** Annual assessment + board sign-off.
**Evidence:** Outcomes assessment; board minutes; action plan.
**Max penalty:** APRA enforcement actions; product closure decisions
**Source:** https://apra.gov.au/super-prudential-framework

### Hold AFSL with derivative authorisations (margin lending + CFD + binary)
URL: https://rulesmate.com.au/obligations/asic-licensed-derivative-issuer
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Issuers of OTC derivatives to retail clients face product intervention orders + tightened conditions.

Margin lending + CFDs + binary options for retail clients have been subject to ASIC product intervention orders (binary options banned 2022; CFD leverage caps + restrictions; margin lending tighter financial assistance rules). Issuers must hold appropriate AFSL authorisations + observe intervention orders.

**Who must comply:** AFSL holders issuing OTC derivatives to retail clients.
**What triggers it:** Issuing covered derivatives.
**When due:** Continuous.
**Evidence:** AFSL authorisation; product design conformance; client onboarding + suitability records.
**Max penalty:** Civil penalties to financial services maximum
**Source:** https://asic.gov.au/regulatory-resources/financial-services/product-intervention-power/

### Charter of Aged Care Rights — disclose + uphold
URL: https://rulesmate.com.au/obligations/aged-care-charter-of-rights
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: aged-care-quality
Source Acts: aged-care-act-2024

> Approved providers must give consumers the Charter + uphold rights described.

Charter of Aged Care Rights (under the Aged Care Quality Standards) gives 14 rights including safe + high quality care, independence + choice, privacy + information. Providers must give consumers a copy + obtain acknowledgement + uphold the rights.

**Who must comply:** Approved aged care providers.
**What triggers it:** Onboarding a consumer.
**When due:** Onboarding; ongoing.
**Evidence:** Acknowledged Charter; staff training records; complaint response.
**Max penalty:** ACQSC compliance action; sanctions
**Source:** https://agedcarequality.gov.au/consumers/charter-of-aged-care-rights

### Notify the Coroner of a reportable death (state)
URL: https://rulesmate.com.au/obligations/coronial-notification-state
Jurisdiction: CWLTH · Priority: critical · Status: current

> Health practitioners + others must report certain deaths to the State Coroner.

Each state has a Coroners Act setting circumstances requiring coronial notification — unexpected, violent, in care/custody, identity unknown, etc. Health practitioners + family + persons present must notify the relevant Coroner.

**Who must comply:** Health practitioners, aged care providers, NDIS providers, police, family.
**What triggers it:** Death meeting reportable criteria.
**When due:** Immediately on awareness.
**Evidence:** Coroner notification; medical certificate of cause of death not to be issued where reportable.
**Max penalty:** Criminal penalties for failure to report under state Coroners Acts
**Source:** https://www.coronerscourt.vic.gov.au

### Comply with state infection control + notifiable disease rules
URL: https://rulesmate.com.au/obligations/infection-control-state
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahpra

> Health practitioners must notify State Health Departments of notifiable diseases.

State Public Health Acts require notification of listed notifiable diseases (e.g. measles, meningococcal, Q fever, tuberculosis, COVID-19) to State / Territory Health Departments + Health Practitioners themselves.

**Who must comply:** Treating health practitioners + diagnostic laboratories.
**What triggers it:** Diagnosis of a notifiable condition.
**When due:** Per state notification timeline.
**Evidence:** Notification record; clinical record.
**Max penalty:** State-based fines + AHPRA referral
**Source:** https://www.health.gov.au/diseases

### Animal Welfare Standards + Guidelines — Land Transport of Livestock
URL: https://rulesmate.com.au/obligations/livestock-transport-welfare
Jurisdiction: CWLTH · Priority: high · Status: current

> National + state-implemented standards for road + rail transport of livestock.

Australian Animal Welfare Standards + Guidelines for Land Transport of Livestock have been adopted via state regulation in most jurisdictions. Drivers + transporters must hold accreditation; consignors + receivers have parallel duties.

**Who must comply:** Livestock transporters, consignors, receivers, drivers.
**What triggers it:** Land transport of livestock.
**When due:** Continuous.
**Evidence:** Transport records; vehicle condition; loading densities; rest stops.
**Max penalty:** Substantial state-based fines + criminal liability for serious neglect / cruelty
**Source:** https://www.animalwelfarestandards.net.au

### Register + categorise industrial chemicals (Industrial Chemicals Act 2019)
URL: https://rulesmate.com.au/obligations/industrial-chemicals-introducer
Jurisdiction: CWLTH · Priority: high · Status: current

> Importers + manufacturers of industrial chemicals must register with AICIS + categorise introductions.

Industrial Chemicals Act 2019 (Cwlth) requires importers + manufacturers (introducers) of industrial chemicals to register with the Australian Industrial Chemicals Introduction Scheme (AICIS). Each introduction must be categorised (Exempted / Reported / Assessed / Listed) + reported annually.

**Who must comply:** Industrial chemical importers + manufacturers in Australia.
**What triggers it:** Importing or manufacturing industrial chemicals.
**When due:** Registration before introduction; annual reporting.
**Evidence:** AICIS registration; introduction declarations; categorisation evidence.
**Max penalty:** Civil + criminal penalties; trade restrictions for non-compliance
**Source:** https://www.industrialchemicals.gov.au

### Stockholm + Rotterdam Convention chemicals (POPs ban)
URL: https://rulesmate.com.au/obligations/stockholm-pop-controls
Jurisdiction: CWLTH · Priority: critical · Status: current

> Persistent organic pollutants (PCBs, PFAS, etc.) banned / restricted under federal Acts.

Hazardous Waste (Regulation of Exports and Imports) Act 1989 + Industrial Chemicals Act 2019 implement Stockholm + Rotterdam Conventions. PFAS, PCBs + listed POPs are subject to import/export controls, use bans + remediation requirements.

**Who must comply:** Importers + manufacturers + holders of listed POPs.
**What triggers it:** Holding + importing + manufacturing listed POPs.
**When due:** Continuous.
**Evidence:** Inventory records; safe storage; disposal records.
**Max penalty:** Civil + criminal penalties; remediation costs
**Source:** https://www.dcceew.gov.au/environment/protection/chemicals-management/pops

### Comply with MARPOL — Protection of the Sea (Prevention of Pollution from Ships) Act 1983
URL: https://rulesmate.com.au/obligations/marine-pollution-marpol
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: amsa

> Ship operators must comply with MARPOL Convention implementation.

Protection of the Sea (Prevention of Pollution from Ships) Act 1983 (Cwlth) implements MARPOL. Covers oil, noxious liquids, harmful packaged substances, sewage, garbage + air pollution. AMSA enforces in Australian waters.

**Who must comply:** Ship operators in Australian waters.
**What triggers it:** Operating ships in AU waters.
**When due:** Continuous; incident reporting.
**Evidence:** MARPOL certificates; oil + garbage record books; incident reports.
**Max penalty:** Substantial civil + criminal penalties; ship detention
**Source:** https://www.amsa.gov.au/marine-environment/marpol

### Comply with state vehicle standards + registration
URL: https://rulesmate.com.au/obligations/rms-vehicle-standards-state
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: nhvr

> Vehicle standards + registration administered by state road transport authorities.

Each state administers vehicle standards + registration (Transport NSW, VicRoads, TMR Qld, MainRoads WA, DIT SA). Heavy vehicle standards harmonised under HVNL; light vehicles state-specific. Registration + inspection cycles + safety standards.

**Who must comply:** Vehicle owners + operators.
**What triggers it:** Operating vehicle on road.
**When due:** Registration + inspection cycles per state.
**Evidence:** Current registration + inspection certificate.
**Max penalty:** State-based fines + infringement notices
**Source:** https://www.transport.nsw.gov.au

### Pay Queensland land tax
URL: https://rulesmate.com.au/obligations/land-tax-qld
Jurisdiction: QLD · Priority: high · Status: current
Enforced by: qro
Source Acts: land-tax-act-2010-qld

> QLD land tax applies on aggregated land value above $600K (individuals) / $350K (companies + trusts).

Land Tax Act 2010 (Qld). FY26 thresholds: $600K individuals + $350K companies + trusts. Foreign land tax surcharge + absentee owner surcharge apply. Aggregated land value across QLD landholdings.

**Who must comply:** Owners of QLD land above thresholds.
**What triggers it:** Holding taxable land at 30 June each year.
**When due:** Annual; per assessment.
**Evidence:** Notice of Assessment; PPR claim; trust nominations.
**Max penalty:** Penalty tax + interest; charge on land for unpaid amounts
**Source:** https://qro.qld.gov.au/land-tax

### Pay QLD transfer duty on residential property
URL: https://rulesmate.com.au/obligations/stamp-duty-qld-residential
Jurisdiction: QLD · Priority: high · Status: current
Enforced by: qro
Source Acts: duties-act-2001-qld

> QLD transfer duty progressive; foreign acquirer additional duty 7%.

Duties Act 2001 (Qld). Transfer duty progressive up to 5.75% above $1M. Foreign Acquirer Duty 7%. First home concession + home concession for owner-occupiers.

**Who must comply:** Purchasers of QLD dutiable property.
**What triggers it:** Property acquisition / transfer.
**When due:** Within 30 days of settlement.
**Evidence:** Lodged duty documents; settlement records.
**Max penalty:** Interest + penalty tax
**Source:** https://qro.qld.gov.au/duties/transfer-duty

### Wine Equalisation Tax (WET) for producers + wholesalers
URL: https://rulesmate.com.au/obligations/wine-equalisation-tax
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato

> WET at 29% on wine wholesale value; rebate scheme up to $350K per producer.

A New Tax System (Wine Equalisation Tax) Act 1999. WET 29% on wholesale value of wine in Australia. Producer rebate up to $350K per producer. Lodged via BAS quarterly or monthly per assignment.

**Who must comply:** Wine producers + wholesalers.
**What triggers it:** Wholesaling wine in Australia.
**When due:** Per BAS cycle.
**Evidence:** WET calculations; producer rebate claim; wholesale records.
**Max penalty:** Failure-to-lodge + shortfall penalties
**Source:** https://ato.gov.au/businesses-and-organisations/gst-excise-and-indirect-taxes/wine-equalisation-tax

### Pay Luxury Car Tax (LCT) on vehicles above threshold
URL: https://rulesmate.com.au/obligations/luxury-car-tax
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ato

> LCT at 33% on the GST-inclusive value of luxury cars above LCT threshold.

A New Tax System (Luxury Car Tax) Act 1999. LCT 33% on portion above LCT threshold. FY26 thresholds: $91,387 (fuel-efficient vehicles); $80,567 (other cars). Reported via BAS.

**Who must comply:** Importers + dealers + business buyers above threshold.
**What triggers it:** Importing/selling/leasing a luxury car.
**When due:** Per BAS.
**Evidence:** LCT calculations; vehicle valuation; fuel-efficient eligibility evidence.
**Max penalty:** Shortfall penalties + interest
**Source:** https://ato.gov.au/businesses-and-organisations/gst-excise-and-indirect-taxes/luxury-car-tax

### Claim Fuel Tax Credits (FTC) for eligible business fuel use
URL: https://rulesmate.com.au/obligations/fuel-tax-credits
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ato

> Eligible business activities can claim back fuel tax via FTC system.

Fuel Tax Act 2006. Eligible activities (heavy vehicles + machinery + auxiliary equipment + off-road business use) can claim Fuel Tax Credits. Quarterly via BAS. Documentation requirements robust.

**Who must comply:** Businesses using fuel in eligible activities.
**What triggers it:** Fuel use in eligible activity.
**When due:** Per BAS cycle.
**Evidence:** Fuel purchase records; activity evidence; rate calculations.
**Max penalty:** Recovery of overclaimed credits + interest + penalties
**Source:** https://ato.gov.au/businesses-and-organisations/income-deductions-and-concessions/fuel-tax-credits-business

### Document VEVO checks + retain employer records (s 245AYL Migration Act)
URL: https://rulesmate.com.au/obligations/vevo-employer-verification
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: abf
Source Acts: migration-act-1958

> Employers should document VEVO checks at hire; statutory defence for compliant employers.

Section 245AYL Migration Act provides statutory defences for employers who undertake + document prescribed work entitlement verifications (typically via VEVO). Without documentation, employer cannot rely on defence if illegal worker prosecution arises.

**Who must comply:** All Australian employers + labour-hire intermediaries.
**What triggers it:** Hiring a non-citizen.
**When due:** At hire; periodic re-check for fixed-term visas.
**Evidence:** VEVO check screenshot/PDF; periodic re-verifications; passport scan if relevant.
**Max penalty:** Loss of statutory defence + criminal exposure for allowing illegal work
**Source:** https://immi.homeaffairs.gov.au/visas/employing-foreign-workers

### Skills in Demand visa (subclass 482) — 3 streams from 7 December 2024
URL: https://rulesmate.com.au/obligations/skills-in-demand-visa-2024
Jurisdiction: CWLTH · Priority: critical · Status: current
Source Acts: migration-act-1958

> 482 visa replaced by 3 streams: Specialist Skills, Core Skills, Essential Skills.

From 7 December 2024, the 482 subclass operates in three streams. Specialist Skills (high-income), Core Skills (median wage CSOL list), Essential Skills (lower-paid critical roles). Different sponsorship + nomination thresholds for each.

**Who must comply:** Sponsoring employers + applicants under 482 visa.
**What triggers it:** Sponsoring a skilled worker.
**When due:** From 7 December 2024.
**Evidence:** Sponsorship + nomination per stream rules; documentation.
**Max penalty:** Sponsorship cancellation + criminal liability for sponsor offences
**Source:** https://immi.homeaffairs.gov.au/visas/getting-a-visa/visa-listing/skills-in-demand-482

### Cosmetic surgery advertising standards (Medical Board reforms 2024-2025)
URL: https://rulesmate.com.au/obligations/ahpra-cosmetic-advertising-2025
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahpra
Source Acts: health-practitioner-regulation-national-law-act-2009

> Stricter cosmetic surgery + procedure advertising from 2024 — bans on idealised body imagery + before/after misuse.

Medical Board of Australia revised advertising guidelines for cosmetic surgery from 2024 (post-Four Corners investigation). Bans on testimonials, restrictive before/after photos, idealised body imagery + social influencer-style content for cosmetic procedures.

**Who must comply:** Medical practitioners performing cosmetic surgery + procedures.
**What triggers it:** Advertising cosmetic surgery/procedures.
**When due:** Continuous from 2024.
**Evidence:** Advertising compliance review; before-publication legal sign-off; influencer briefing.
**Max penalty:** AHPRA disciplinary action; registration consequences; civil penalties
**Source:** https://www.medicalboard.gov.au

### Comply with Medical Board CPD requirements (50 hours minimum)
URL: https://rulesmate.com.au/obligations/ahpra-cpd-medical
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ahpra
Source Acts: health-practitioner-regulation-national-law-act-2009

> Medical practitioners must meet CPD requirements set by the Medical Board annually.

Medical Board of Australia sets CPD requirements — minimum 50 hours per CPD year (varies by registration type). From 2023, all registered medical practitioners must hold CPD home + meet annual requirements including reviewing performance + cultural safety.

**Who must comply:** Registered medical practitioners.
**What triggers it:** Medical registration.
**When due:** Continuous; annual CPD year.
**Evidence:** CPD home record; activity log.
**Max penalty:** Conditions on registration; suspension; cancellation
**Source:** https://www.medicalboard.gov.au/registration/continuing-professional-development.aspx

### Comply with NDIS quality auditor cycle for registered providers
URL: https://rulesmate.com.au/obligations/ndis-audit-cycle
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ndis-commission
Source Acts: national-disability-insurance-scheme-act-2013

> Registered NDIS providers must pass NDIS Quality auditor cycle (verification + certification audits).

NDIS providers undergo audit cycles aligned to risk: verification (lower-risk supports) or certification (higher-risk supports like SDA, behaviour support, restrictive practices). Approved Quality Auditors conduct.

**Who must comply:** Registered NDIS providers.
**What triggers it:** Initial registration + renewal cycle.
**When due:** Per audit cycle (typically 3 years initial; 3-year cycles thereafter).
**Evidence:** Audit certificate; corrective actions; ongoing quality system records.
**Max penalty:** Conditions on registration; suspension; cancellation
**Source:** https://ndiscommission.gov.au/providers/becoming-registered-ndis-provider/audit-process

### NDIS fraud prevention + reporting obligations
URL: https://rulesmate.com.au/obligations/ndis-claims-fraud-2024
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ndis-commission
Source Acts: national-disability-insurance-scheme-act-2013

> NDIS providers must implement fraud-prevention systems + report suspected fraud.

Post-Tune Review, NDIS Fraud Strategy + Provider Obligations focus on fraud prevention. Providers must implement fraud risk frameworks + report suspected fraud via the NDIS Fraud Reporting + Scams Helpline.

**Who must comply:** All NDIS providers (registered + unregistered).
**What triggers it:** Suspected fraud against NDIS scheme.
**When due:** Suspicion event-driven.
**Evidence:** Fraud risk framework; incident reports; staff training.
**Max penalty:** Criminal prosecution for fraud; provider banning
**Source:** https://ndiscommission.gov.au/about/fraud

### PAF (Private Ancillary Fund) governance + minimum distributions
URL: https://rulesmate.com.au/obligations/acnc-private-ancillary-fund
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: ato, acnc

> PAFs must distribute minimum 5% of net assets annually + comply with PAF Guidelines.

Private Ancillary Fund Guidelines 2009 (Treasury) administered by ATO + ACNC. PAFs must distribute minimum 5% of net assets annually (4% public ancillary funds). Director responsibilities + investment strategy + audit requirements.

**Who must comply:** Trustees of PAFs.
**What triggers it:** Operating a PAF.
**When due:** Annual minimum distribution + annual reporting.
**Evidence:** Distribution records; investment strategy; auditor's report; PAF Annual Return.
**Max penalty:** Loss of PAF status; DGR endorsement consequences; tax recovery
**Source:** https://ato.gov.au/non-profit/getting-started/in-detail/types-of-dgrs/ancillary-funds

### TAFE governance + quality compliance
URL: https://rulesmate.com.au/obligations/tafe-quality-frameworks
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asqa

> TAFEs operate as state government entities under joint state + federal VET framework.

TAFEs operate under state Acts (e.g. Education and Training Reform Act 2006 (Vic), TAFE Commission Act 1990 (NSW)) + national framework via ASQA. Governance via state-appointed boards; financial reporting via state Auditor-General; ASQA quality audits.

**Who must comply:** TAFE institutes + state TAFE corporations.
**What triggers it:** Operating as a TAFE.
**When due:** Continuous; state + federal reporting cycles.
**Evidence:** ASQA registration; AVETMISS reporting; state Auditor-General compliance.
**Max penalty:** Loss of registration; state government intervention
**Source:** https://asqa.gov.au

### Major banks must provide CDR Banking + Action Initiation (2026)
URL: https://rulesmate.com.au/obligations/open-banking-major-banks-cdr
Jurisdiction: CWLTH · Priority: critical · Status: upcoming
Enforced by: accc, oaic
Source Acts: competition-and-consumer-act-2010

> CDR Action Initiation lets accredited recipients initiate payments + actions on consumer behalf.

Treasury Laws Amendment (Consumer Data Right) Act 2024 extends CDR to include 'Action Initiation' — accredited recipients can initiate payments + other actions on consumer behalf. Major banks + larger ADIs in scope from 2026.

**Who must comply:** Major + non-major ADIs as Action Initiators or Recipients.
**What triggers it:** Being a data holder or accredited recipient.
**When due:** Phased through 2026.
**Evidence:** Action Initiation accreditation + technical compliance.
**Max penalty:** CDR penalty regime ($50M / 30% turnover); ACCC + OAIC enforcement
**Source:** https://cdr.gov.au

### Discharge of directors' duties — practical evidence
URL: https://rulesmate.com.au/obligations/directors-discharge-of-duties
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic
Source Acts: corporations-act-2001

> Directors must contemporaneously document discharge of duties for defence in s 180-183 cases.

Discharge of statutory duties (ss 180-183 Corporations Act) requires contemporaneous evidence. Board minutes + papers, attendance at risk + audit committees, due-diligence files, training + advice records all support the business judgment rule (s 180(2)) defence.

**Who must comply:** All company directors + officers.
**What triggers it:** Continuous discharge of directors' duties.
**When due:** Continuous.
**Evidence:** Board minutes; papers; risk + audit committee attendance; training; advice records.
**Max penalty:** Civil penalties + criminal exposure for serious breaches
**Source:** https://asic.gov.au/for-business/running-a-company/company-officeholder-duties/

### ASX-listed entity board independence + composition (CGC Principle 2)
URL: https://rulesmate.com.au/obligations/corporate-governance-asx-board-composition
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asx

> ASX entities should have majority-independent boards + clear board charter.

ASX Corporate Governance Council 4th edition Principle 2 recommends majority of board members are independent directors, separate Chair + CEO, board charter, board committee charters (audit + risk + nomination + remuneration).

**Who must comply:** ASX-listed entities (recommended under Principle 2).
**What triggers it:** Being ASX-listed.
**When due:** Continuous; annual Corporate Governance Statement disclosure.
**Evidence:** Board charter; independence determinations; committee structure.
**Max penalty:** Disclosure-based (if not, why not); reputational
**Source:** https://www.asx.com.au/regulation/corporate-governance-council

### APP 2 — anonymity + pseudonymity for individuals
URL: https://rulesmate.com.au/obligations/app-2-anonymity-pseudonymity
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> Where reasonable, individuals must be able to deal with you anonymously or under a pseudonym.

APP 2 requires APP entities to provide individuals with the option of dealing anonymously or under a pseudonym, unless impracticable or required by law. Limits the default-required identification many businesses impose unnecessarily.

**Who must comply:** All APP entities.
**What triggers it:** Engaging with individuals where identification not strictly required.
**When due:** Continuous.
**Evidence:** Workflow analysis; consent + opt-out options; identifiers minimised.
**Max penalty:** Same penalty regime as broader Privacy Act breaches
**Source:** https://oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-2-app-2-anonymity-and-pseudonymity

### APP 3 — collection of sensitive information requires consent
URL: https://rulesmate.com.au/obligations/app-3-sensitive-information
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: oaic
Source Acts: privacy-act-1988

> Health, religion, race, sexual orientation + similar 'sensitive' info requires consent before collection.

APP 3 restricts collection of sensitive information (health, religious beliefs, racial/ethnic origin, political opinions, criminal record, biometric data + similar) to circumstances where the individual consents + collection is reasonably necessary, or specified exceptions apply.

**Who must comply:** All APP entities collecting sensitive information.
**What triggers it:** Collecting sensitive information.
**When due:** At each collection event.
**Evidence:** Consent records; necessity assessment; collection notice.
**Max penalty:** Same penalty regime; class action exposure for biometric misuse (Clearview AI, 7-Eleven, Bunnings precedents)
**Source:** https://oaic.gov.au/privacy/australian-privacy-principles/australian-privacy-principles-guidelines/chapter-3-app-3-collection-of-solicited-personal-information

### Detect + enhance due diligence on Domestic + Foreign PEPs
URL: https://rulesmate.com.au/obligations/aml-domestic-pep-detection
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: austrac
Source Acts: anti-money-laundering-and-counter-terrorism-financing-act-2006

> AML/CTF Rules require detection + EDD on Politically Exposed Persons (foreign + domestic + international organisation).

AML/CTF Rules Part 4.13 require reporting entities to detect Politically Exposed Persons (foreign PEPs + domestic PEPs + heads of international organisations) + apply Enhanced Due Diligence including senior-management approval, source of wealth + funds + ongoing review.

**Who must comply:** All AUSTRAC reporting entities.
**What triggers it:** Customer onboarding + ongoing screening.
**When due:** At onboarding + periodically (annual minimum for higher-risk).
**Evidence:** Screening tool integration; PEP list updates; EDD file notes; senior management approvals.
**Max penalty:** Civil penalty regime to AML/CTF Act maximum
**Source:** https://austrac.gov.au/business/core-guidance/customer-identification-and-verification/politically-exposed-persons

### Comply with Australian sanctions law + screening (DFAT)
URL: https://rulesmate.com.au/obligations/aml-sanctions-screening-dfat
Jurisdiction: CWLTH · Priority: critical · Status: current

> Australian sanctions law prohibits dealings with designated persons + entities. Screening required.

Autonomous Sanctions Act 2011 + Charter of the United Nations Act 1945 + their regulations prohibit dealings with designated persons + entities. DFAT Consolidated List maintained. Sanctions breaches = strict liability criminal offence.

**Who must comply:** All Australian persons + entities + persons in Australia.
**What triggers it:** Dealings + transactions.
**When due:** Continuous screening.
**Evidence:** Sanctions screening tool integration; DFAT Consolidated List checks; risk assessment.
**Max penalty:** Criminal — up to 10 years imprisonment + corporate penalties
**Source:** https://www.dfat.gov.au/international-relations/security/sanctions

### Maintain Hazardous Chemicals Register + manifest (WHS Reg)
URL: https://rulesmate.com.au/obligations/hazardous-chemicals-register
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: safe-work-australia
Source Acts: work-health-and-safety-act-2011

> PCBUs handling hazardous chemicals must maintain a register + (above threshold) a manifest.

Model WHS Regulations Chapter 7 require PCBUs handling hazardous chemicals to: identify, maintain a register (SDS + quantities), maintain a manifest if quantities exceed Schedule 11 thresholds, notify the regulator + manage risks (control + storage + emergency planning).

**Who must comply:** PCBUs handling hazardous chemicals above prescribed thresholds.
**What triggers it:** Holding hazardous chemicals.
**When due:** Continuous; manifest update on quantity change.
**Evidence:** Hazardous chemicals register; manifest; SDS; regulator notification.
**Max penalty:** WHS penalties + Cat 1/2/3 exposure for serious breach
**Source:** https://safeworkaustralia.gov.au/safety-topic/hazards/chemicals

### Asbestos management — workplace + dwelling rules (state)
URL: https://rulesmate.com.au/obligations/asbestos-management-state
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: safe-work-australia, worksafe-vic, safework-nsw, whs-qld
Source Acts: work-health-and-safety-act-2011

> Asbestos work requires licensed asbestos removalist + asbestos management plan.

Each state has asbestos rules (Vic Asbestos Regulations under OHS Act; NSW WHS Reg Ch 8; etc.). Friable asbestos (Class A) + non-friable (Class B) work requires licensed asbestos removalist. Workplaces with asbestos require management plan + register.

**Who must comply:** PCBUs with asbestos on premises; asbestos removalists.
**What triggers it:** Identified asbestos; planned removal.
**When due:** Continuous management; before any work.
**Evidence:** Asbestos register + management plan; removalist licence; clearance certificate.
**Max penalty:** Substantial state-based fines + criminal liability for serious breaches
**Source:** https://safeworkaustralia.gov.au/safety-topic/hazards/asbestos

### Comply with mandatory product safety standards + bans (ACL)
URL: https://rulesmate.com.au/obligations/acl-product-safety-standards
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Schedule 2 ACL — suppliers must comply with mandatory product safety standards + permanent bans.

Sections 105-122 ACL — Minister can make mandatory safety standards (e.g. children's toys, baby walkers, exercise cycles, button batteries) + permanent bans (e.g. asbestos products, certain chemicals). Suppliers must comply or face penalties + recall.

**Who must comply:** Suppliers of consumer goods covered by mandatory standards or bans.
**What triggers it:** Supplying covered goods.
**When due:** Continuous.
**Evidence:** Standard compliance evidence; test reports; supplier chain documentation.
**Max penalty:** ACL penalty regime up to $50M / 30% turnover for serious breach
**Source:** https://www.productsafety.gov.au/standards-and-bans

### Button + coin battery safety standard (mandatory)
URL: https://rulesmate.com.au/obligations/acl-button-battery-standard
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: accc
Source Acts: competition-and-consumer-act-2010

> Suppliers of products containing button + coin batteries must meet 2022 mandatory standard.

Consumer Goods (Products Containing Button/Coin Batteries) Safety Standard 2020 mandatory from 22 June 2022. Requires secure battery compartments + warnings + child-resistant packaging on batteries.

**Who must comply:** Suppliers of products containing button/coin batteries (toys, remotes, watches, etc.).
**What triggers it:** Supplying covered products.
**When due:** Continuous.
**Evidence:** Standard compliance evidence; product testing; labelling.
**Max penalty:** ACL penalty regime; recall obligations
**Source:** https://www.productsafety.gov.au/standards/button-and-coin-batteries

### ISO/IEC 27001 ISMS certification — increasingly customer-mandated
URL: https://rulesmate.com.au/obligations/iso-27001-isms-certification
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asd

> Information Security Management System per ISO 27001 increasingly required by customers + government.

ISO/IEC 27001 sets requirements for an Information Security Management System (ISMS). Certification by accredited certification body (JAS-ANZ). Not legally mandated but: customer + government tender required; reasonable-steps evidence under APP 11; aligned with ASD ISM where applicable.

**Who must comply:** Voluntary; commercially mandated by customers / tenders.
**What triggers it:** Customer or tender requirement.
**When due:** Continuous; surveillance audits + recertification cycle.
**Evidence:** ISMS documentation; ISO 27001 certificate; audit reports.
**Max penalty:** Loss of certification + commercial / tender consequences
**Source:** https://www.iso.org/standard/27001

### Pay redundancy under NES (s 119 FW Act)
URL: https://rulesmate.com.au/obligations/redundancy-pay-nes
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fwo
Source Acts: fair-work-act-2009

> Redundancy pay scale 0-16 weeks based on continuous service (small business exempt).

NES s 119 sets minimum redundancy pay scale (0 weeks <1yr service through to 16 weeks at 10+ years). Small business employers (<15 employees) exempt. Award + agreement provisions may be more generous.

**Who must comply:** National-system employers (excl. small business for NES) + per award.
**What triggers it:** Genuine redundancy termination.
**When due:** At termination payment.
**Evidence:** Service records; redundancy calculation; pay record.
**Max penalty:** Civil penalties for underpayment; underpayment recovery
**Source:** https://fairwork.gov.au/ending-employment/redundancy

### Provide minimum notice of termination (NES s 117)
URL: https://rulesmate.com.au/obligations/notice-of-termination-nes
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fwo
Source Acts: fair-work-act-2009

> NES minimum notice of termination scales from 1 week to 5 weeks based on service + age 45+.

Section 117 Fair Work Act + NES sets minimum notice of termination: 1 week (<1yr), 2 weeks (1-3yr), 3 weeks (3-5yr), 4 weeks (5+yr); +1 week additional if 45+ years old + 2+ years service. Awards or contracts may extend.

**Who must comply:** National-system employers.
**What triggers it:** Termination of employee.
**When due:** Notice prior to termination, or payment in lieu.
**Evidence:** Termination letter; payment records.
**Max penalty:** Civil penalty for underpayment; underpayment recovery
**Source:** https://fairwork.gov.au/ending-employment/notice-and-final-pay

### Enforce + manage post-employment restraints — current state
URL: https://rulesmate.com.au/obligations/post-employment-restraints
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: fwc
Source Acts: fair-work-act-2009

> Restraint of trade common law + 2024 reforms restricting non-competes under $183K salary.

Post-employment restraints (non-compete, non-solicit, confidentiality) governed by common law (reasonable to protect legitimate business interest). 2024 Closing Loopholes framework includes Treasurer's recommendation to restrict non-compete clauses for workers under $183K (TBD final form). NSW + Vic restraints common-law assessed.

**Who must comply:** Employers using restraint clauses.
**What triggers it:** Employment contract with restraints; termination triggering restraint.
**When due:** At contract design + termination.
**Evidence:** Reasonable + limited duration + geographic + activity scope; consideration for restraint.
**Max penalty:** Restraints typically severed if unreasonable; common-law contract claim
**Source:** https://treasury.gov.au/consultation/c2024-561801

### Comply with Water Act 2007 (Cwlth) + state water entitlements
URL: https://rulesmate.com.au/obligations/water-act-2007-mdba
Jurisdiction: CWLTH · Priority: high · Status: current

> Federal Water Act + state water Acts govern water entitlement + use.

Water Act 2007 (Cwlth) establishes the Murray-Darling Basin Plan + Basin Plan Water Resource Plans. State water Acts (e.g. Water Management Act 2000 (NSW), Water Act 1989 (Vic), Water Act 2000 (Qld)) govern water entitlements + licensing + trading.

**Who must comply:** Water entitlement holders + irrigators + diverters.
**What triggers it:** Holding water entitlement; diverting water.
**When due:** Continuous; reporting per state.
**Evidence:** Water entitlement + meter readings + use records; trading records.
**Max penalty:** Substantial civil + criminal penalties for unauthorised diversion; forfeiture of entitlement
**Source:** https://www.mdba.gov.au

### Building work — comply with National Construction Code (NCC)
URL: https://rulesmate.com.au/obligations/national-construction-code-bca
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: vba-vic-building-authority, qbcc-qld-building, nsw-building-commissioner

> Buildings must comply with NCC (incorporating BCA + plumbing).

National Construction Code (NCC) sets minimum requirements for design + construction of new buildings + plumbing in Australia. Incorporated into state Building Acts. Performance-based but with deemed-to-satisfy provisions. Updated periodically (2022 + 2026 cycles).

**Who must comply:** Designers, builders, certifiers.
**What triggers it:** Building work — new construction + significant alterations.
**When due:** Continuous; per project.
**Evidence:** Design + certification documentation; certifier sign-off; compliance reports.
**Max penalty:** State-based penalties; designer + builder + certifier liability; insurance + reputation
**Source:** https://ncc.abcb.gov.au

### Hold valid liquor licence (state liquor licensing)
URL: https://rulesmate.com.au/obligations/rsl-licensing-state
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: vcglr, liquor-and-gaming-nsw, olgr-qld

> Liquor sale / supply requires state-issued licence; multiple categories.

Each state administers liquor licensing (VCGLR Vic, Liquor & Gaming NSW, OLGR Qld + equivalents). Licence categories: on-licence (consumption on premises), packaged liquor, club, late-night, special event. RSA training mandatory for serving staff.

**Who must comply:** Operators of premises selling / supplying liquor.
**What triggers it:** Sale or supply of liquor.
**When due:** Continuous; annual fees + renewals.
**Evidence:** Current licence; RSA training records; complaints log.
**Max penalty:** Suspension/cancellation; criminal for unlicensed sale; significant fines
**Source:** https://vcglr.vic.gov.au

### RSA + RCG mandatory training (liquor + gaming)
URL: https://rulesmate.com.au/obligations/rcg-rsa-mandatory-training
Jurisdiction: CWLTH · Priority: high · Status: current

> Staff serving alcohol or in gaming venues need RSA / RCG certificates.

State requirements for Responsible Service of Alcohol (RSA) for staff serving alcohol + Responsible Conduct of Gambling (RCG / RSG) for staff in gaming venues. Refresher periods vary by state (typically every 3-5 years).

**Who must comply:** Staff serving alcohol + gaming venue staff.
**What triggers it:** Serving alcohol or working in gaming venue.
**When due:** Before starting role; refresh per state.
**Evidence:** Current state-issued RSA + RCG certificates.
**Max penalty:** Employer + employee liable; significant fines; licence consequences
**Source:** https://vcglr.vic.gov.au

### Comply with Vic FOI Act 1982 (state)
URL: https://rulesmate.com.au/obligations/vic-foi-act
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: ovic

> Victorian agencies + ministers respond to state FOI requests within 30 days.

Freedom of Information Act 1982 (Vic) parallel state regime. Decisions within 30 days; OVIC review pathway + VCAT appeals.

**Who must comply:** Vic state agencies + ministers + local councils.
**What triggers it:** Receipt of FOI request.
**When due:** 30 days.
**Evidence:** Decision + statement of reasons; OVIC engagement.
**Max penalty:** OVIC review + VCAT review; reputational
**Source:** https://ovic.vic.gov.au

### NSW + VIC solicitor trust account requirements
URL: https://rulesmate.com.au/obligations/legal-profession-trust-account-nsw
Jurisdiction: NSW · Priority: critical · Status: current
Enforced by: lspc-nsw, lsb-vic

> Solicitors holding client trust money face strict trust account + audit requirements.

Legal Profession Uniform Law (NSW + Vic) sets trust account rules — written instructions, trust account ledger, audit, deposit + withdrawal rules, monthly bank reconciliation, annual external examination.

**Who must comply:** Solicitors holding trust accounts in NSW + Vic.
**What triggers it:** Holding client money.
**When due:** Continuous; annual external examination.
**Evidence:** Trust account records; bank statements; external examiner's report; LSC notifications for breaches.
**Max penalty:** Suspension / cancellation of practising certificate; criminal for misappropriation
**Source:** https://lawsociety.com.au

### AASB S2 Scope 3 emissions + assurance phase-in
URL: https://rulesmate.com.au/obligations/asrs-scope-3-assurance
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-01-01
Enforced by: asic, aasb
Source Acts: corporations-act-2001

> Group 1 entities must report Scope 3 from year 2 + escalating assurance through to FY30.

AASB S2 mandates Scope 1 + 2 from year 1; Scope 3 from year 2. Limited assurance over Scope 1 + 2 from year 1, escalating to reasonable assurance over all greenhouse gas disclosures from FY30 for Group 1 entities. ASIC + AASB monitoring + thresholds for Group 2 + 3 phase-in.

**Who must comply:** Group 1 (large entities + NGER reporters), staged Group 2 (FY27), Group 3 (FY28).
**What triggers it:** Mandatory climate disclosure regime under Treasury Laws Amendment (Financial Markets, Sustainability and Other Measures) Act 2024.
**When due:** Within annual financial report. Scope 1 + 2 from FY25; Scope 3 + limited assurance from FY26 for Group 1.
**Evidence:** Climate-related financial disclosures section in annual report. Auditor assurance report. NGER alignment.
**Source:** https://www.aasb.gov.au/admin/file/content105/c9/AASB_S2.pdf

### Modern Slavery Statement (Cwlth)
URL: https://rulesmate.com.au/obligations/modern-slavery-statement-cwlth
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic

> Entities with consolidated revenue ≥$100M must publish a Modern Slavery Statement annually.

Modern Slavery Act 2018 (Cwlth) requires reporting entities (≥$100M consolidated revenue) to publish a Modern Slavery Statement addressing 7 mandatory criteria within 6 months of year-end. From 2024 reforms — Anti-Slavery Commissioner appointed; possible NSW + civil penalties for non-publication. Joint statements permitted.

**Who must comply:** Entities with ≥$100M consolidated revenue + Commonwealth (mandatory regardless of revenue).
**What triggers it:** Annual financial year close.
**When due:** Within 6 months of financial year end.
**Evidence:** Published statement addressing 7 mandatory criteria, signed by principal governing body.
**Source:** https://modernslaveryregister.gov.au

### NSW Modern Slavery Act reporting (≥$50M)
URL: https://rulesmate.com.au/obligations/modern-slavery-statement-nsw
Jurisdiction: NSW · Priority: medium · Status: current
Enforced by: nsw-anti-slavery

> NSW entities with ≥$50M revenue may need to comply with NSW MSA (Anti-Slavery Commissioner oversight).

NSW Modern Slavery Act 2018 — Anti-Slavery Commissioner operationalised 2022. Most reporting obligations harmonised with Cwlth MSA but for NSW gov-procuring entities.

**Who must comply:** NSW government agencies; NSW-domiciled commercial entities ≥$50M turnover (limited overlap with Cwlth).
**What triggers it:** Annual NSW procurement involvement.
**When due:** Annual report cycle.
**Evidence:** Published statement or undertaking via NSW Procurement.
**Source:** https://antislavery.nsw.gov.au

### Banking Code of Practice 2025
URL: https://rulesmate.com.au/obligations/banking-code-of-practice
Jurisdiction: CWLTH · Priority: high · Status: current
Effective: 2025-02-28
Enforced by: bccc, asic

> ABA member banks bound by the Banking Code — fair conduct + dispute resolution requirements.

Banking Code of Practice 2025 (in force 28 February 2025). Replaces 2021 Code. Customer-owned banks have their own Code. AFCA enforces Code commitments alongside ASIC + ABA Banking Code Compliance Committee (BCCC).

**Who must comply:** All ABA members + any bank that voluntarily subscribes.
**What triggers it:** Bank-customer relationship establishment.
**When due:** Continuous compliance + annual self-assessment.
**Evidence:** Internal compliance framework + BCCC reporting + customer remediation.
**Source:** https://www.ausbanking.org.au/banking-code/

### General Insurance Code of Practice 2020
URL: https://rulesmate.com.au/obligations/general-insurance-code
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic

> ICA member insurers bound by service standards + claims handling timeframes.

General Insurance Code of Practice 2020 + 2024 amendments. Governs claims handling, financial hardship, vulnerable customers, sales practices. Code Governance Committee + AFCA enforces.

**Who must comply:** All Insurance Council of Australia members.
**What triggers it:** Customer relationship establishment + claim lodgement.
**When due:** Ongoing. Strict claims handling timeframes.
**Evidence:** Claims management system + complaint handling logs + CGC reporting.
**Source:** https://insurancecouncil.com.au/cop/

### Life Insurance Code of Practice 2.0
URL: https://rulesmate.com.au/obligations/life-insurance-code
Jurisdiction: CWLTH · Priority: high · Status: current
Effective: 2023-07-01
Enforced by: asic

> FSC member life insurers bound by Code 2.0 (commenced 1 July 2023).

Life Insurance Code of Practice 2.0 — sales standards, medical evidence requirements, claims timeframes, mental health, vulnerable customers. Life CCC + AFCA enforce.

**Who must comply:** FSC member life insurers.
**What triggers it:** Customer relationship + claim lodgement.
**When due:** Ongoing.
**Evidence:** Compliance framework, CCC reporting, customer outcome data.
**Source:** https://www.fsc.org.au

### Design and Distribution Obligations (DDO) — RG 274
URL: https://rulesmate.com.au/obligations/asic-rg-274-product-design-obligations
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2021-10-05
Enforced by: asic
Source Acts: corporations-act-2001

> Issuers + distributors of retail financial products bound by DDO from 5 October 2021.

Section 994B Corporations Act. Issuers must make TMD identifying class of consumers + review triggers. Distributors must distribute consistently with TMD + report significant dealings outside TMD to issuer + ASIC. RG 274 guides.

**Who must comply:** AFSL holders issuing or distributing retail financial products + credit products.
**What triggers it:** Issuing or distributing in-scope retail product.
**When due:** TMD before first distribution; review on triggers; significant dealings within 10 business days.
**Evidence:** TMD; distribution monitoring; significant dealings notifications; periodic review.
**Source:** https://download.asic.gov.au/media/5899239/rg274-published-2-march-2021.pdf

### Trade Marks Act 1995 — registration + renewal
URL: https://rulesmate.com.au/obligations/trade-marks-registration
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ip-australia
Source Acts: trade-marks-act-1995

> IP Australia administers trade mark registration; 10-year terms + renewals + use requirements.

Trade Marks Act 1995. Application + examination + opposition + registration cycle. Registrations renewable every 10 years. Non-use removal applications possible after 3 years of non-use.

**Who must comply:** Any entity using or seeking exclusive rights to a brand identifier in Australia.
**What triggers it:** Application + examination + acceptance + advertisement + opposition window.
**When due:** Application processing 7+ months. Renewal every 10 years.
**Evidence:** Application + evidence of use (for opposition / removal defence).
**Source:** https://ipaustralia.gov.au/trade-marks

### Patents Act 1990 — standard + innovation patents
URL: https://rulesmate.com.au/obligations/patents-act-1990
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ip-australia
Source Acts: patents-act-1990

> IP Australia administers standard + innovation patents (innovation patent system closing).

Standard patents = 20-year term. Innovation patents — phase-out commenced 25 August 2021 (no new filings; existing run to expiry). Petty patent equivalent. Pharmaceutical patents may extend.

**Who must comply:** Patent applicants + holders.
**What triggers it:** Invention disclosure + patent application.
**When due:** Filing + examination + grant + renewal.
**Evidence:** Patent specification + claims + maintenance fees.
**Source:** https://ipaustralia.gov.au/patents

### Designs Act 2003 — design registration
URL: https://rulesmate.com.au/obligations/designs-act-2003
Jurisdiction: CWLTH · Priority: low · Status: current
Enforced by: ip-australia
Source Acts: designs-act-2003

> IP Australia administers registered designs — visual appearance of products.

Designs Act 2003 + Designs Amendment (Advisory Council on Intellectual Property Response) Act 2021. Initial 5-year term, renewable for 1 further 5-year period. Grace period 12 months on prior disclosure.

**Who must comply:** Designers + design rights owners.
**What triggers it:** Application for registration + design representation.
**When due:** Filing + examination + renewal cycle.
**Evidence:** Application + design representations.
**Source:** https://ipaustralia.gov.au/designs

### Copyright Act 1968 — record-keeping for orphan works
URL: https://rulesmate.com.au/obligations/copyright-record-keeping
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ag-department
Source Acts: copyright-act-1968

> From January 2023 — diligent search + record-keeping needed for orphan works defence.

Copyright Amendment (Disability Access and Other Measures) Act 2017 + Copyright Amendment (Access Reform) Act 2023. Orphan works defence requires reasonable search + record-keeping. Educational + cultural institution exceptions.

**Who must comply:** Anyone reproducing copyrighted works; cultural + educational institutions; AI training data builders.
**What triggers it:** Use of unidentifiable copyrighted work.
**When due:** Continuous record-keeping; defence-time documentation.
**Evidence:** Diligent search records + attribution + acknowledgment.
**Source:** https://ag.gov.au/rights-and-protections/copyright

### Defence Industry Security Program (DISP)
URL: https://rulesmate.com.au/obligations/defence-industry-security-program
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: defence

> Defence contractors handling classified info must be DISP-accredited at appropriate level.

DISP membership required at level (E for unclassified to T4 for TOP SECRET) for Defence + classified contracts. Personnel security clearances + ICT systems + physical security audited.

**Who must comply:** Defence prime contractors + sub-contractors handling Defence info.
**What triggers it:** Defence contract award or sub-contract.
**When due:** Pre-award accreditation; ongoing renewal + audits.
**Evidence:** DISP membership; PROTECTED+ ICT systems; personnel clearances.
**Source:** https://www.defence.gov.au/business-industry/industry-governance/defence-industry-security-program

### Defence Trade Controls Act — export of controlled goods + tech
URL: https://rulesmate.com.au/obligations/amsoa-export-controls-defence-goods
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: defence
Source Acts: defence-trade-controls-act-2012

> Defence + dual-use goods + technology export-controlled — permit required.

Defence Trade Controls Act 2012 + DSGL. Brokering, supplying, publishing controlled tech requires Defence Export Controls permit. AUKUS reforms (Defence Trade Controls Amendment Act 2024) significantly extend regime.

**Who must comply:** Defence + dual-use industries + universities + researchers + tech companies.
**What triggers it:** Export, supply, brokering, publication of DSGL-listed items.
**When due:** Pre-supply permit required.
**Evidence:** Permits + record keeping + end-use certification.
**Max penalty:** Up to $27.5M or 10 years imprisonment per breach.
**Source:** https://www.defence.gov.au/business-industry/industry-governance/regulatory-compliance/defence-export-controls

### Protective Security Policy Framework (PSPF)
URL: https://rulesmate.com.au/obligations/asd-protective-security-policy-framework
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-07-01
Enforced by: asd, home-affairs

> Federal entities bound by PSPF — governance, information, personnel + physical security.

PSPF Release 2024 in force 1 July 2025. Sets minimum protective security requirements for Australian Government entities. Outcomes-based + 16 requirements. Annual reporting to Home Affairs.

**Who must comply:** All Commonwealth entities + contracted providers handling Commonwealth info.
**What triggers it:** Commonwealth entity status or handling of Commonwealth security-classified info.
**When due:** Annual maturity self-assessment + reporting.
**Evidence:** PSPF maturity assessment report.
**Source:** https://www.protectivesecurity.gov.au

### Superannuation flagging on separation
URL: https://rulesmate.com.au/obligations/family-law-superannuation-flagging
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ag-department
Source Acts: family-law-act-1975

> On separation — super interest splittable under Pt VIIIB Family Law Act.

Family Law Act 1975 Pt VIIIB + 2024 amendments. Super flagging via flag order; splitting via court order or binding financial agreement. Trustee notification required. Tax + insurance implications.

**Who must comply:** Separating couples (married + de facto) + super trustees + family lawyers.
**What triggers it:** Family law settlement involving super.
**When due:** Notification + implementation per court order.
**Evidence:** Flag/split order + super trustee notification.
**Source:** https://www.fcfcoa.gov.au

### Child Support — employer deductions
URL: https://rulesmate.com.au/obligations/child-support-agency-employer-deductions
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: services-australia

> Employers must comply with Services Australia (Child Support Registrar) deduction notices.

Child Support (Registration and Collection) Act 1988. Employers must deduct child support from notified employees + remit monthly. Penalty for non-compliance + failure to notify Services Australia of cessation.

**Who must comply:** Employers + payroll service providers.
**What triggers it:** Receipt of Services Australia deduction notice.
**When due:** Each pay cycle; remit by 7th of following month.
**Evidence:** Deduction records + remittance evidence.
**Source:** https://servicesaustralia.gov.au/employer-deduction

### Uniform Defamation Act — concerns notice + serious harm threshold
URL: https://rulesmate.com.au/obligations/uniform-defamation-act-cause-of-action
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ag-department

> Pre-action concerns notice + serious harm threshold for defamation actions.

Uniform Defamation Acts (post-2021 Stage 1 reforms; Stage 2 internet intermediaries). Pre-action concerns notice required. Serious harm threshold for corporates ('serious financial loss'). Single publication rule. Defences include qualified privilege + scientific reports + responsible publication.

**Who must comply:** Publishers + content creators + employers (vicarious liability) + platform operators (post-Stage 2 reforms).
**What triggers it:** Allegation of defamation.
**When due:** Concerns notice 28-day response; proceedings within 1 year (extendable).
**Evidence:** Concerns notice + offer to make amends + publication records.
**Source:** https://www.ag.gov.au/legal-system/publications/review-model-defamation-provisions

### TASA Code Determinations from 1 August 2024
URL: https://rulesmate.com.au/obligations/tasa-code-of-conduct-determinations-2024
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2024-08-01
Enforced by: tpb
Source Acts: tax-agent-services-act-2009

> Tax practitioner code reformed via Code Determinations — false + misleading statements + supervision + breach reporting.

Tax Agent Services (Code of Professional Conduct) Determination 2024 commenced 1 August 2024. Strengthened obligations re: confidentiality, false + misleading statements, supervision + arrangements, breach reporting to TPB.

**Who must comply:** All registered tax + BAS agents.
**What triggers it:** Continuous obligations + breach events.
**When due:** Ongoing; significant breach notifications within 30 days.
**Evidence:** Internal compliance framework + breach register + supervision arrangements.
**Source:** https://www.tpb.gov.au/news/code-of-professional-conduct-determination

### Stablecoin payments licensing — Treasury reforms (in scoping)
URL: https://rulesmate.com.au/obligations/stablecoin-payments-licensing
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Enforced by: asic, treasury, apra, rba

> Treasury reforms scoping payment stablecoin licensing under PSP regime.

Treasury continuing payments licensing reform — payment stablecoin regulation under PSP regime + ADI carve-outs in scoping. Regulations expected 2025-2026.

**Who must comply:** Stablecoin issuers + payment service providers.
**What triggers it:** Issuance or facilitation of stablecoin payment.
**When due:** TBC — regulations expected 2025-2026.
**Evidence:** TBC — likely AFSL + AML/CTF + custody arrangements.
**Source:** https://treasury.gov.au/consultation/c2023-466856

### Crypto Asset Platform licensing (Treasury reforms 2024-2025)
URL: https://rulesmate.com.au/obligations/crypto-asset-platform-licensing
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Enforced by: asic, treasury

> Treasury scoping CASP regime for digital asset platforms.

Treasury October 2023 proposal paper + 2024-2025 consultation. CASP regime aims to regulate digital asset platforms via AFSL + custody requirements. Regulations + draft legislation expected late 2025 / 2026.

**Who must comply:** Crypto exchanges + custodians + brokers + DeFi (in scope TBC).
**What triggers it:** Operation of crypto asset platform.
**When due:** TBC — regulations expected 2025-2026.
**Evidence:** TBC — likely AFSL + custody arrangements + risk management.
**Source:** https://treasury.gov.au/consultation/c2023-471053

### NGER reporting (Clean Energy Regulator)
URL: https://rulesmate.com.au/obligations/national-greenhouse-energy-reporting
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: clean-energy-regulator
Source Acts: national-greenhouse-and-energy-reporting-act-2007

> Threshold-triggered annual emissions, energy production + consumption reporting.

NGER Act 2007. Corporations exceeding emissions or energy thresholds must register + report to Clean Energy Regulator by 31 October each year. Public + auditable data. Foundation for Safeguard Mechanism + ASRS Scope 3.

**Who must comply:** Controlling corporations exceeding threshold (50 kt CO2-e or 200 TJ).
**What triggers it:** Threshold trigger by emissions/energy in financial year.
**When due:** Annual report by 31 October (year ending 30 June).
**Evidence:** NGER report; assured data; methodology documentation.
**Source:** https://cer.gov.au/schemes/national-greenhouse-and-energy-reporting-scheme

### Safeguard Mechanism baseline decline 4.9% pa
URL: https://rulesmate.com.au/obligations/safeguard-mechanism-baseline-decline
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2023-07-01
Enforced by: clean-energy-regulator
Source Acts: national-greenhouse-and-energy-reporting-act-2007

> Australia's 215 largest emitters face declining baselines under Safeguard Mechanism reform.

Safeguard Mechanism Crediting Amendment Act 2023 + Safeguard Rules in force 1 July 2023. Baselines decline 4.9% pa to FY30, then aligned to economy-wide 2050 net zero. SMCs traded.

**Who must comply:** Facilities >100,000 tonnes CO2-e scope 1 emissions pa (215 facilities).
**What triggers it:** Threshold exceedance + emissions year close.
**When due:** Per emissions year + 31 October reporting + SMC surrender.
**Evidence:** Annual NGER report + SMC ledger + reduction strategies.
**Source:** https://cer.gov.au/schemes/safeguard-mechanism

### Provider Registration + International Student cap (2025)
URL: https://rulesmate.com.au/obligations/esos-prc-international-cap
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2025-01-01
Enforced by: asqa, teqsa
Source Acts: education-services-for-overseas-students-act-2000

> DOE-administered international enrolment caps in force 2025.

ESOS Amendment (Quality and Integrity) Act 2024. International student enrolment caps administered by Department of Education from 2025; provider-by-provider allocations. Significant ELICOS + non-university higher ed impact.

**Who must comply:** CRICOS-registered providers.
**What triggers it:** Annual enrolment cycle.
**When due:** Annual allocation + monitoring + ELN reporting.
**Evidence:** PRISMS commencement reporting + enrolment data.
**Source:** https://www.education.gov.au/international-education

### Fatigue Risk Management System (FRMS) — Pt 121, 135, 141, 142
URL: https://rulesmate.com.au/obligations/casa-fatigue-risk-management
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: casa
Source Acts: civil-aviation-act-1988

> Air operators must operate within prescribed FDP or approved FRMS.

CASR Pt 121 + Pt 135 + Pt 91 fatigue rules + FRMS approvals. Operators must monitor + mitigate fatigue risk per ICAO SARPs.

**Who must comply:** AOC holders.
**What triggers it:** Flight operations + crewing.
**When due:** Per flight + roster cycle + FRMS audit.
**Evidence:** Crew duty + flight logs + fatigue reports + FRMS data.
**Source:** https://casa.gov.au/safety-management/operations-and-business/operators/fatigue-management

### e-Invoicing PEPPOL network (Cwlth gov mandated)
URL: https://rulesmate.com.au/obligations/ato-electronic-invoicing-peppol
Jurisdiction: CWLTH · Priority: medium · Status: current
Effective: 2022-07-01
Enforced by: ato

> Commonwealth agencies must accept Peppol e-invoices; private sector encouraged.

Australian Taxation Office is Peppol authority. Commonwealth agencies mandated to accept Peppol e-invoices from 1 July 2022. Treasury proposing private-sector mandate phasing-in 2025-2030. Singapore + NZ + UK partner.

**Who must comply:** Commonwealth agencies (mandatory); businesses with gov contracts (recommended).
**What triggers it:** Invoicing.
**When due:** Continuous.
**Evidence:** Peppol Access Point arrangement + invoice records.
**Source:** https://ato.gov.au/businesses-and-organisations/preparing-lodging-and-paying/electronic-invoicing

### Instant Asset Write-Off (annually re-set threshold)
URL: https://rulesmate.com.au/obligations/instant-asset-write-off
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ato
Source Acts: income-tax-assessment-act-1997

> SBE asset write-off threshold reset annually; $20,000 for FY25-26.

Treasury Laws Amendment (Better Targeted Tax Concessions and Other Measures) Bill — Instant Asset Write-Off threshold $20,000 for SBEs (aggregated turnover <$10M) for FY25-26. Re-enacted annually.

**Who must comply:** Small business entities using simplified depreciation.
**What triggers it:** Asset acquisition + use.
**When due:** Tax return claim.
**Evidence:** Tax invoice + asset register + first-use evidence.
**Source:** https://ato.gov.au/businesses-and-organisations/income-deductions-and-concessions/depreciation-and-capital-expenses-and-allowances/simpler-depreciation-for-small-business/instant-asset-write-off

### Electric Cars FBT Exemption (Cwlth)
URL: https://rulesmate.com.au/obligations/fringe-benefit-electric-cars-exemption
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: ato
Source Acts: fringe-benefits-tax-assessment-act-1986

> Eligible zero/low-emission cars FBT-exempt under car limits (until 2025 for PHEVs).

Treasury Laws Amendment (Electric Car Discount) Act 2022. FBT exempt for eligible zero or low emission vehicles within LCT threshold. PHEV eligibility ceased 1 April 2025. Reportable Fringe Benefits still apply.

**Who must comply:** Employers providing eligible electric vehicles + their employees.
**What triggers it:** Provision of eligible EV.
**When due:** Annual FBT return + STP RFBA.
**Evidence:** Vehicle eligibility evidence + log books + payroll records.
**Source:** https://ato.gov.au/businesses-and-organisations/income-deductions-and-concessions/fringe-benefits-tax

### Automated Decision-Making transparency (Privacy Act 2024 reforms)
URL: https://rulesmate.com.au/obligations/automated-decision-making-disclosure-2025
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Effective: 2026-12-10
Enforced by: oaic
Source Acts: privacy-act-1988

> APP entities making decisions about individuals using ADM must disclose this in privacy policy from December 2026.

Privacy and Other Legislation Amendment Act 2024. APP entities must disclose in privacy policy where ADM significantly affects individuals. In force 10 December 2026. Builds on European GDPR Article 22 model.

**Who must comply:** APP entities using significant automated decision-making.
**What triggers it:** Use of ADM with significant impact on individuals.
**When due:** Privacy policy update by 10 December 2026.
**Evidence:** Privacy policy + ADM register + transparency notice.
**Source:** https://oaic.gov.au/privacy/the-privacy-act/changes-to-the-privacy-act

### Privacy statutory tort (serious invasions of privacy)
URL: https://rulesmate.com.au/obligations/privacy-act-statutory-tort-2024
Jurisdiction: CWLTH · Priority: high · Status: current
Effective: 2025-06-10
Enforced by: oaic, ag-department
Source Acts: privacy-act-1988

> From June 2025 — serious invasion of privacy actionable in tort.

Privacy and Other Legislation Amendment Act 2024 introduced statutory tort for serious invasions of privacy from 10 June 2025. Defences include defamation, statutory authority, public interest. Federal Court + state courts hear.

**Who must comply:** All individuals + entities. Not limited to APP entities.
**What triggers it:** Alleged serious invasion of privacy (intrusion or misuse of info).
**When due:** 1-year limitation period (extensions possible).
**Evidence:** Plaintiff: evidence of seriousness + harm + defendant's conduct.
**Source:** https://oaic.gov.au/privacy/the-privacy-act/changes-to-the-privacy-act

### Children's Online Privacy Code 2026
URL: https://rulesmate.com.au/obligations/childrens-online-privacy-code-2026
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Effective: 2026-12-10
Enforced by: oaic
Source Acts: privacy-act-1988

> OAIC developing mandatory children's online privacy code (in force December 2026).

Privacy and Other Legislation Amendment Act 2024 mandates OAIC develop a binding Code addressing children's privacy online. Public consultation 2025; in force from 10 December 2026.

**Who must comply:** Online services likely to be accessed by children.
**What triggers it:** Online service availability to children.
**When due:** From 10 December 2026.
**Evidence:** Age verification + default privacy + parental consent records.
**Source:** https://oaic.gov.au/privacy/the-privacy-act/changes-to-the-privacy-act

### Petroleum Resource Rent Tax (PRRT)
URL: https://rulesmate.com.au/obligations/petroleum-resource-rent-tax
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: ato
Source Acts: petroleum-resource-rent-tax-assessment-act-1987

> 40% PRRT on offshore + onshore (Bass Strait only) petroleum project profits.

Petroleum Resource Rent Tax Assessment Act 1987. 40% tax on project profits with carry-forward of unrecovered expenditure. 2023 reforms (deductible expenditure cap from 1 July 2024) accelerate tax receipts.

**Who must comply:** Offshore petroleum project participants; onshore Bass Strait projects.
**What triggers it:** Petroleum project + receipt of receipts.
**When due:** Annual returns + quarterly instalments.
**Evidence:** Project accounts + expenditure register + carrying forward.
**Source:** https://ato.gov.au/businesses-and-organisations/petroleum-resource-rent-tax

### Australian Carbon Credit Units (ACCUs)
URL: https://rulesmate.com.au/obligations/verra-vcs-acch-acu-credit
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: clean-energy-regulator, erac
Source Acts: carbon-credits-carbon-farming-initiative-act-2011

> ACCUs issued under ERF; tradeable; surrender under Safeguard Mechanism.

Carbon Credits (Carbon Farming Initiative) Act 2011. ACCUs issued for eligible emissions reduction projects per approved methodologies. ERAC + ACT register manage.

**Who must comply:** Project proponents + ACCU holders + Safeguard Mechanism entities.
**What triggers it:** Eligible project registration + abatement.
**When due:** Per project reporting cycle.
**Evidence:** Project plan + audit reports + ACT register.
**Source:** https://cer.gov.au/schemes/emissions-reduction-fund/australian-carbon-credit-units

### ACT payroll tax (≥$2M threshold, 6.85%)
URL: https://rulesmate.com.au/obligations/act-payroll-tax-rates
Jurisdiction: ACT · Priority: high · Status: current
Enforced by: act-rev

> ACT payroll tax on monthly + annual cycle.

Payroll Tax Act 2011 (ACT). Threshold $2M annual wages; rate 6.85%. Mental health levy expected. Monthly + annual returns.

**Who must comply:** Employers paying ACT wages above threshold.
**What triggers it:** Wages > threshold.
**When due:** Monthly by 7th + annual reconciliation by 21 July.
**Evidence:** Payroll tax returns + wage breakdown.
**Source:** https://revenue.act.gov.au/payroll-tax

### NT payroll tax (≥$1.5M threshold, 5.5%)
URL: https://rulesmate.com.au/obligations/nt-payroll-tax
Jurisdiction: NT · Priority: high · Status: current
Enforced by: nt-treasury

> NT payroll tax monthly + annual cycle.

Payroll Tax Act 2009 (NT). Threshold $1.5M annual wages; rate 5.5%. Concessional rates for regional + Aboriginal businesses.

**Who must comply:** Employers paying NT wages above threshold.
**What triggers it:** Wages > threshold.
**When due:** Monthly + annual reconciliation.
**Evidence:** Payroll tax returns.
**Source:** https://treasury.nt.gov.au/dtf/payroll-tax

### Tas payroll tax (≥$1.25M threshold, 4-6.1%)
URL: https://rulesmate.com.au/obligations/tas-payroll-tax
Jurisdiction: TAS · Priority: high · Status: current
Enforced by: tas-rev

> Tasmania payroll tax tiered.

Payroll Tax Act 2008 (Tas). Threshold $1.25M; rates 4% / 6.1% (above $2M). Monthly + annual cycle.

**Who must comply:** Employers paying Tas wages above threshold.
**What triggers it:** Wages > threshold.
**When due:** Monthly + annual.
**Evidence:** Payroll tax returns.
**Source:** https://sro.tas.gov.au/payroll-tax

### AASB S1 General Sustainability disclosures (likely)
URL: https://rulesmate.com.au/obligations/isb-s1-general-sustainability
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Enforced by: asic, aasb
Source Acts: corporations-act-2001

> AASB likely to mandate S1 (general sustainability) following S2 climate phasing.

AASB indicated S1 (general sustainability) likely to follow S2. Will require disclosure of all sustainability-related risks + opportunities. Industry consultation pending.

**Who must comply:** Likely Group 1 entities first; phased to Group 2 + Group 3.
**What triggers it:** AASB final standard issued (expected 2025-2026).
**When due:** TBC (likely from FY26 or FY27).
**Evidence:** Sustainability disclosures in annual report.
**Source:** https://aasb.gov.au

### Customer Service Guarantee (CSG)
URL: https://rulesmate.com.au/obligations/telco-act-customer-service-guarantee
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: acma, tio
Source Acts: telecommunications-consumer-protections-act

> Standard telephone service providers face CSG financial penalties for missed connection + repair timeframes.

Telecommunications (Customer Service Guarantee) Standard 2011. Specifies connection + fault repair maximum timeframes by area + density. Financial penalties payable to customer for missed timeframes.

**Who must comply:** Standard telephone service providers + carriers.
**What triggers it:** Connection request + fault notification.
**When due:** Per CSG standard timeframes.
**Evidence:** Connection + repair records + customer remediation.
**Source:** https://acma.gov.au/customer-service-guarantee

### Climate scenario analysis (AASB S2)
URL: https://rulesmate.com.au/obligations/climate-scenario-analysis-asrs
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asic, aasb
Source Acts: corporations-act-2001

> S2 mandates climate scenario analysis at least 1.5°C-aligned + an additional scenario.

AASB S2 requires entities to conduct climate-related scenario analysis at least once per year (or when material change). Methodology consistent with TCFD framework.

**Who must comply:** Group 1/2/3 entities phasing per AASB S2.
**What triggers it:** Annual AASB S2 reporting cycle.
**When due:** Annually within climate disclosure cycle.
**Evidence:** Scenario analysis methodology + outputs + governance review.
**Source:** https://www.aasb.gov.au

### Native Title Future Act procedures
URL: https://rulesmate.com.au/obligations/native-title-future-act-procedures
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: aiatsis
Source Acts: native-title-act-1993

> Activities affecting native title rights subject to NTA Future Act processes.

Native Title Act 1993 Pt 2 Div 3 + 4 — Future Act procedures including expedited procedures + right to negotiate + s 31 mining agreements + ILUAs.

**Who must comply:** Mining + petroleum + infrastructure proponents on land subject to native title claims or determinations.
**What triggers it:** Activity affecting native title rights.
**When due:** Per Future Act process; right to negotiate up to 6 months.
**Evidence:** ILUAs + s 31 agreements + objection processes documented.
**Source:** https://www.nntt.gov.au

### Aboriginal Heritage Act 2006 (Vic) — CHMP
URL: https://rulesmate.com.au/obligations/aboriginal-heritage-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: first-peoples-state-relations

> Activities in areas of cultural heritage sensitivity require a CHMP.

Aboriginal Heritage Act 2006 (Vic). Cultural Heritage Management Plans (CHMP) required for high-impact activities in sensitive areas. Aboriginal Cultural Heritage Register maintained by First Peoples — State Relations.

**Who must comply:** Land developers, mining operators, infrastructure proponents in Vic.
**What triggers it:** High-impact activity in cultural heritage sensitivity area.
**When due:** Pre-approval CHMP + ongoing CHIP for some activities.
**Evidence:** CHMP approved by RAP or Heritage Council + complied with.
**Source:** https://www.firstpeoplesrelations.vic.gov.au/aboriginal-cultural-heritage

### National Parks and Wildlife Act 1974 (NSW) — Aboriginal heritage
URL: https://rulesmate.com.au/obligations/aboriginal-heritage-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: nsw-environment

> Activities affecting Aboriginal objects + sites in NSW require AHIP or due diligence.

NPW Act 1974 (NSW) Pt 6. Aboriginal Heritage Impact Permits (AHIP) required for activities harming Aboriginal objects + sites. NSW Heritage Reform pending — proposed standalone Aboriginal cultural heritage legislation.

**Who must comply:** Land users; project proponents in NSW.
**What triggers it:** Activity affecting Aboriginal objects or sites.
**When due:** Pre-activity AHIP + due diligence + monitoring.
**Evidence:** AHIP + heritage assessment + community consultation.
**Source:** https://environment.nsw.gov.au/topics/aboriginal-cultural-heritage

### Psychosocial Hazards Code of Practice (model + jurisdictional)
URL: https://rulesmate.com.au/obligations/psychosocial-hazards-code-2024
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: safework-nsw, worksafe-vic, worksafe-qld
Source Acts: work-health-and-safety-act-2011

> PCBUs must manage psychosocial risk under WHS Acts + state codes.

Safe Work Australia Model Code of Practice — Managing Psychosocial Hazards at Work approved 2022; jurisdictions phasing into 2024-2025. Risk management framework required.

**Who must comply:** All PCBUs.
**What triggers it:** Psychosocial risk in workplace.
**When due:** Continuous risk management.
**Evidence:** Risk assessment + control measures + monitoring.
**Source:** https://safeworkaustralia.gov.au/safety-topic/managing-health-and-safety/mental-health

### Right to Disconnect (s 333M FWA)
URL: https://rulesmate.com.au/obligations/right-to-disconnect-2024
Jurisdiction: CWLTH · Priority: high · Status: current
Effective: 2024-08-26
Enforced by: fwc, fwo
Source Acts: fair-work-act-2009

> Employees may refuse out-of-hours contact unless unreasonable from 26 August 2024.

Fair Work Amendment (Closing Loopholes No. 2) Act 2024. Section 333M FWA. Employees may refuse out-of-hours contact unless refusal is unreasonable. FWC may resolve disputes.

**Who must comply:** All employers + employees.
**What triggers it:** Out-of-hours contact.
**When due:** Continuous; FWC dispute process available.
**Evidence:** Workplace policies + dispute records.
**Source:** https://www.fwc.gov.au/right-to-disconnect

### Casual employment definition + conversion (Closing Loopholes 2024)
URL: https://rulesmate.com.au/obligations/casual-employment-fwa-66-2024
Jurisdiction: CWLTH · Priority: critical · Status: current
Effective: 2024-08-26
Enforced by: fwo, fwc
Source Acts: fair-work-act-2009

> New casual employment definition + employee choice pathway from 26 August 2024.

Closing Loopholes No. 2 Act 2024. Replaced statutory casual employment definition with a substance-over-form approach + introduced employee choice + dispute resolution at FWC.

**Who must comply:** All employers of casuals.
**What triggers it:** Casual engagement decision + 6/12 month review points.
**When due:** Continuous + on employee notification.
**Evidence:** Casual contracts + decisions + employee notifications.
**Source:** https://www.fairwork.gov.au/employee-entitlements/changes-and-updates

### Underquoting prohibition (Vic Estate Agents Act 1980)
URL: https://rulesmate.com.au/obligations/real-estate-underquoting-vic
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: consumer-affairs-vic

> Vic real estate agents must not underquote a property sale price.

Estate Agents (Underquoting) Amendment Act 2016. Agents must provide reasonable price estimate + maintain Statement of Information + cannot misrepresent.

**Who must comply:** Vic real estate agents + auctioneers.
**What triggers it:** Property listing + sales process.
**When due:** Continuous + per advertised listing.
**Evidence:** Statement of Information + comparable sales + price history.
**Source:** https://consumer.vic.gov.au/housing/buying-and-selling-property/underquoting

### Underquoting prohibition (NSW Property and Stock Agents Act 2002)
URL: https://rulesmate.com.au/obligations/real-estate-underquoting-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: nsw-fair-trading

> NSW real estate agents must not underquote — Maximum penalty $22,000.

Property and Stock Agents Act 2002 (NSW) + Reg 2014. Agents must provide reasonable estimated selling price + revise as required.

**Who must comply:** NSW real estate agents.
**What triggers it:** Residential property sales.
**When due:** Continuous.
**Evidence:** Agency agreement estimated price + comparable sales + records of revision.
**Source:** https://www.fairtrading.nsw.gov.au/housing-and-property/property-professionals/real-estate-agents/underquoting

### SoNS — Systems of National Significance (SOCI)
URL: https://rulesmate.com.au/obligations/soci-systems-of-national-significance
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: home-affairs-soci
Source Acts: security-of-critical-infrastructure-act-2018

> Declared SoNS face enhanced cyber security obligations.

Security of Critical Infrastructure Act 2018 — SoNS declaration by Minister of Home Affairs. Enhanced cyber security obligations including pen testing + vulnerability assessments + Govt-developed response plans.

**Who must comply:** Entities declared as Systems of National Significance.
**What triggers it:** Ministerial SoNS declaration.
**When due:** Per declaration; ongoing enhanced obligations.
**Evidence:** Compliance with enhanced cyber security obligations + Home Affairs direction.
**Source:** https://cisc.gov.au/soci

### Data Availability and Transparency Act 2022
URL: https://rulesmate.com.au/obligations/data-availability-and-transparency-act
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: data-commissioner
Source Acts: data-availability-and-transparency-act-2022

> Commonwealth data sharing regime — accredited users + entities.

DAT Act 2022. Authorised sharing of Commonwealth data between accredited users + accredited data service providers for specific purposes. Office of National Data Commissioner administers.

**Who must comply:** Commonwealth entities sharing data; accredited users + ADSPs.
**What triggers it:** Data sharing request + accreditation status.
**When due:** Per data sharing agreement; periodic accreditation review.
**Evidence:** Data sharing agreements + data steward processes + accreditation evidence.
**Source:** https://www.datacommissioner.gov.au

### Customs Act 1901 — import declarations + duties
URL: https://rulesmate.com.au/obligations/customs-act-import-declarations
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: abf
Source Acts: customs-act-1901

> Goods imported >$1,000 require Import Declaration (N10) + duty payment.

Customs Act 1901. Goods >$1,000 require Import Declaration via Integrated Cargo System. Duty + GST payable. Tariff Concession Orders + Free Trade Agreement claims.

**Who must comply:** Importers + customs brokers.
**What triggers it:** Importation of goods to AU.
**When due:** Prior to release of goods.
**Evidence:** Import documents + tariff classification + valuation evidence + 5-year retention.
**Source:** https://www.abf.gov.au/importing-exporting-and-manufacturing

### PHI Prudential Standards (APRA)
URL: https://rulesmate.com.au/obligations/private-health-insurance-prudential
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: apra

> Private health insurers must meet capital + governance standards.

Private Health Insurance (Prudential Supervision) Act 2015. APRA prudential standards covering capital, risk management, governance + outsourcing for private health insurers.

**Who must comply:** Registered private health insurers.
**What triggers it:** PHI registration.
**When due:** Ongoing.
**Evidence:** Annual returns + capital filings + board attestations.
**Source:** https://apra.gov.au/private-health-insurance

### Charity public fundraising — state authority cycle
URL: https://rulesmate.com.au/obligations/charity-public-fundraising-state-cycle
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: acnc

> Each state requires authorisation for public fundraising appeals.

Each Australian state + territory has charitable fundraising legislation. ACNC harmonisation incomplete; charity must hold state authority for each fundraising-active state.

**Who must comply:** Charities undertaking public fundraising.
**What triggers it:** Fundraising activity in any state.
**When due:** Per state cycle (often 1-3 years renewal).
**Evidence:** State authority + annual return + fundraising records.
**Source:** https://acnc.gov.au/for-charities/manage-your-charity/governance-hub/fundraising

### FIRB residential real estate — temporary residents
URL: https://rulesmate.com.au/obligations/firb-residential-real-estate-temporary-resident
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: asic
Source Acts: foreign-acquisitions-and-takeovers-act-1975

> Temporary residents may purchase 1 established dwelling for own residence + new dwellings without limit.

Foreign Acquisitions + Takeovers Act 1975 + Reg 2015. Temporary residents permitted to acquire 1 established dwelling for use as principal residence + new dwellings without limit. Approval + reporting obligations.

**Who must comply:** Temporary residents acquiring residential property + their developer/agent.
**What triggers it:** Property acquisition by foreign person.
**When due:** Pre-acquisition approval; sale of established dwelling on departure.
**Evidence:** FIRB approval letter + sale evidence on departure.
**Source:** https://firb.gov.au/residential-real-estate

### Therapeutic Goods Advertising Code
URL: https://rulesmate.com.au/obligations/therapeutic-goods-advertising-code
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: tga
Source Acts: therapeutic-goods-act-1989

> Advertising of therapeutic goods to AU consumers must comply with TGA Advertising Code.

Therapeutic Goods Act 1989 + TGA Advertising Code. Restrictions on direct-to-consumer advertising of prescription medicines (essentially prohibited); strict requirements on testimonials, health claims, comparisons + format.

**Who must comply:** Sponsors + advertisers of therapeutic goods in AU.
**What triggers it:** Advertisement of therapeutic goods.
**When due:** Per advertisement; pre-publication review recommended.
**Evidence:** Advertising materials + substantiation + compliance review.
**Source:** https://www.tga.gov.au/resources/resource/guidance/therapeutic-goods-advertising-code

### GEMS (Greenhouse + Energy Minimum Standards)
URL: https://rulesmate.com.au/obligations/gemstar-program-energy-rating
Jurisdiction: CWLTH · Priority: medium · Status: current
Enforced by: dcceew

> Regulated products must meet energy efficiency MEPS + display label.

Greenhouse and Energy Minimum Standards Act 2012 + Determinations. Products including appliances + commercial equipment must meet MEPS + display ERL where required. Energy Rating Label (ERL) + Zoned Energy Rating Label (ZERL).

**Who must comply:** Suppliers + importers of regulated products.
**What triggers it:** Supply of regulated product.
**When due:** Pre-supply registration + ongoing compliance.
**Evidence:** GEMS registration + product testing + label affixing.
**Source:** https://www.energyrating.gov.au

### Consumer Credit Hardship Notice (NCC ss 72-73)
URL: https://rulesmate.com.au/obligations/consumer-credit-hardship-notice
Jurisdiction: CWLTH · Priority: critical · Status: current
Enforced by: asic, afca
Source Acts: national-consumer-credit-protection-act-2009

> Credit providers must respond to hardship notice + assess variation request.

Section 72 NCC. Debtors may give hardship notice; credit provider must respond + consider varying credit contract within 21 days. Reform under Treasury Laws Amendment (Better Targeted Tax Concessions and Other Measures) Act expected.

**Who must comply:** Credit providers under NCCP.
**What triggers it:** Hardship notice from debtor.
**When due:** Respond within 21 days.
**Evidence:** Hardship correspondence + assessment file + variation document.
**Source:** https://moneysmart.gov.au/loans/financial-hardship

### Domestic Building Contracts Act 1995 (Vic) — warranties
URL: https://rulesmate.com.au/obligations/domestic-building-act-vic-warranty
Jurisdiction: VIC · Priority: high · Status: current
Enforced by: vba, vbi

> Vic domestic building contracts include statutory warranties + insurance requirements.

DBC Act 1995 (Vic) Pt 2 + Div 4. Mandatory contract content + statutory warranties (s 8) + DBI insurance over $16,000.

**Who must comply:** Vic registered building practitioners undertaking domestic work.
**What triggers it:** Domestic building contract above contract value threshold.
**When due:** Per contract execution + during works + 6/10-year defect periods.
**Evidence:** DBI insurance + statutory warranties + contracts.
**Source:** https://www.vba.vic.gov.au/building/building-licensing/registration-licensing

### Home Building Compensation Fund (NSW)
URL: https://rulesmate.com.au/obligations/home-warranty-insurance-nsw
Jurisdiction: NSW · Priority: high · Status: current
Enforced by: nsw-fair-trading, icare

> NSW residential building work >$20,000 requires HBCF insurance.

Home Building Act 1989 (NSW) + Home Building Regulation 2014. Builders must obtain HBCF (formerly HBCC) certificate for residential building work above threshold. Statutory warranties + insurance available if builder dies, insolvent or disappears.

**Who must comply:** NSW residential builders + tradespeople.
**What triggers it:** Residential building work >$20,000.
**When due:** Pre-commencement HBCF certificate + display + ongoing.
**Evidence:** HBCF certificate + display on site + retention.
**Source:** https://www.icare.nsw.gov.au/home-building-compensation

### Strata Schemes Management Act 2015 (NSW)
URL: https://rulesmate.com.au/obligations/strata-management-nsw
Jurisdiction: NSW · Priority: medium · Status: current
Enforced by: nsw-fair-trading

> Strata schemes must comply with budget, AGM, sinking fund + management requirements.

SSM Act 2015 (NSW). Owners corporations must hold AGM, prepare budgets, maintain sinking fund + administrative fund, keep records 7 years, lodge initial period notice + many other ongoing obligations.

**Who must comply:** NSW owners corporations + strata managing agents.
**What triggers it:** Strata scheme registration.
**When due:** Continuous; annual AGM cycle; 10-year capital works plan.
**Evidence:** AGM minutes + financials + sinking fund balances + records.
**Source:** https://www.fairtrading.nsw.gov.au/housing-and-property/strata-and-community-living

### Food Act state licensing + food safety supervisor
URL: https://rulesmate.com.au/obligations/food-act-state-licensing
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: fsanz

> Food businesses must register + appoint Food Safety Supervisor under state Food Acts.

Each state Food Act incorporates Food Standards Code + requires registration with local council + Food Safety Supervisor (FSS) for higher-risk classes. Annual fees + inspection regime.

**Who must comply:** Food businesses (manufacturing, retail, food service).
**What triggers it:** Food business commencement.
**When due:** Annual registration + FSS appointment + 5-yearly refresher.
**Evidence:** Council registration + FSS certificate + food safety program.
**Source:** https://foodstandards.gov.au

### State mining royalties
URL: https://rulesmate.com.au/obligations/mining-royalties-state
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: qld-osr, nsw-state-revenue, wa-osr

> Royalty payable on mining production per state Mining Acts.

Each state administers mining royalties — typically ad valorem or per tonne. Significant 2022-2024 reforms in QLD (coal), NSW (coal), WA (iron ore via State Agreements).

**Who must comply:** Mining tenement holders.
**What triggers it:** Mining production + sale.
**When due:** Quarterly + annual returns per state.
**Evidence:** Production + revenue returns + assessment.
**Source:** https://www.qld.gov.au/business/running/finances-cash-flow/managing-taxes-royalties

### CDR Energy sector — phased
URL: https://rulesmate.com.au/obligations/cdr-energy-sector
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: accc, oaic
Source Acts: competition-and-consumer-act-2010

> Energy retailers + distributors must share data via CDR.

Consumer Data Right (Energy) Rules 2021 + Designation. Phased commencement from October 2022. Tier 1 then Tier 2 retailers; distributors. ACCC + OAIC enforce.

**Who must comply:** Energy retailers + distributors per phase.
**What triggers it:** CDR designation + phase.
**When due:** Per phase commencement + ongoing.
**Evidence:** Conformance certificates + CDR API + audit.
**Source:** https://www.cdr.gov.au/for-providers/become-data-holder/energy-sector

### ESOS Tuition Protection Service (TPS) levy
URL: https://rulesmate.com.au/obligations/tps-tuition-protection-service
Jurisdiction: CWLTH · Priority: high · Status: current
Enforced by: asqa, teqsa
Source Acts: education-services-for-overseas-students-act-2000

> CRICOS-registered providers must contribute to Tuition Protection Service annually.

ESOS Act 2000. TPS provides student-protection on provider default — alternative placement or refund. Annual TPS levy payable + included in PRISMS.

**Who must comply:** CRICOS-registered providers.
**What triggers it:** CRICOS registration + annual cycle.
**When due:** Annual TPS levy.
**Evidence:** TPS levy payment + PRISMS records.
**Source:** https://tps.gov.au

### DGR annual self-review (from 1 July 2024)
URL: https://rulesmate.com.au/obligations/dgr-annual-self-review
Jurisdiction: CWLTH · Priority: high · Status: current
Effective: 2024-07-01
Enforced by: ato, acnc
Source Acts: income-tax-assessment-act-1997

> ACNC-registered DGRs must complete annual self-review.

Treasury Laws Amendment (Refining and Improving Our Tax System) Act 2023. From 1 July 2024 — ACNC-registered DGRs must complete annual self-review to confirm continued DGR eligibility.

**Who must comply:** ACNC-registered DGRs.
**What triggers it:** Annual ACNC cycle.
**When due:** Annual self-review.
**Evidence:** Self-review form lodged.
**Source:** https://acnc.gov.au/charity/charities/news-and-resources/news/dgr-self-review

### Privacy Act Reform — information controllers regime (proposed Tranche 2)
URL: https://rulesmate.com.au/obligations/privacy-act-information-controllers
Jurisdiction: CWLTH · Priority: high · Status: upcoming
Enforced by: oaic
Source Acts: privacy-act-1988

> Tranche 2 reforms in scoping — information controllers + processors regime.

Tranche 2 Privacy Act reforms under government consideration — controller/processor regime modelled on GDPR. Currently exposure-draft pending; in-force date TBC.

**Who must comply:** TBC.
**What triggers it:** Pending.
**When due:** TBC.
**Evidence:** Pending.
**Source:** https://www.ag.gov.au/rights-and-protections/privacy

---

## Enforcement actions (238)

### AUSTRAC v Westpac Banking Corporation
URL: https://rulesmate.com.au/enforcement/austrac-v-westpac-2020-fca-1338
Citation: [2020] FCA 1338
Regulator: austrac · Type: civil_penalty · Date: 2020-10-22
Penalty: AUD 1,300,000,000

**Facts:** Westpac admitted contravening the AML/CTF Act on over 23 million occasions, including failing to report 19.5 million IFTI transactions to AUSTRAC over nearly 5 years and inadequate ongoing customer due diligence for high-risk transactions involving child exploitation typologies.

**Outcome:** Federal Court imposed a $1.3 billion civil penalty — the largest in Australian corporate history. CEO resigned. Board and senior leadership changes followed.

**So what:** Boards and senior management of reporting entities cannot delegate AML/CTF oversight. Systemic failures across millions of transactions compound into individual contraventions, each separately penalised.

**Source:** https://austrac.gov.au/news-and-media/media-release/court-orders-westpac-pay-13-billion-penalty-amlctf-act-contraventions

### AUSTRAC v Crown Melbourne and Crown Perth
URL: https://rulesmate.com.au/enforcement/austrac-v-crown-melbourne-2023
Regulator: austrac · Type: civil_penalty · Date: 2023-07-11
Penalty: AUD 450,000,000

**Facts:** Crown admitted to serious and systemic non-compliance with AML/CTF obligations across both venues — inadequate Part A program, failure to risk-assess customers, failure to conduct enhanced customer due diligence on high-risk customers including 60 specific individuals.

**Outcome:** Federal Court approved an agreed $450 million civil penalty, second-largest in Australian corporate history at the time.

**So what:** Risk-based AML programs cannot remain unchanged for years. Junket and high-roller relationships demand sustained enhanced due diligence and credible source-of-funds verification.

**Source:** https://austrac.gov.au/news-and-media/media-release/court-imposes-450-million-penalty-crown-resorts

### AUSTRAC v SportsBet Pty Ltd
URL: https://rulesmate.com.au/enforcement/austrac-v-sportsbet-2024
Regulator: austrac · Type: civil_penalty · Date: 2024-12-13
Penalty: AUD 19,000,000

**Facts:** Sportsbet admitted that its Part A AML/CTF program did not appropriately assess and mitigate ML/TF risks across its business for almost 8 years.

**Outcome:** Federal Court ordered a $19 million civil penalty plus costs.

**So what:** Smaller online gambling operators are not exempt from AUSTRAC's program-design scrutiny. The ML/TF risk assessment must be live and reassessed regularly.

**Source:** https://austrac.gov.au/news-and-media/media-release/sportsbet-ordered-pay-19-million-penalty

### ASIC v Daniel Hooper (Director ID failure)
URL: https://rulesmate.com.au/enforcement/asic-v-rivendell-construction-2024-fca-200-din
Regulator: asic · Type: criminal_conviction · Date: 2024-10-04

**Facts:** Mr Hooper was the director of multiple companies and failed to apply for a Director Identification Number despite repeated requests from ABRS.

**Outcome:** Convicted and fined approximately $5,000 — the first criminal conviction nationally for failure to obtain a Director ID.

**So what:** Director ID enforcement has moved past education. Newly appointed directors who haven't applied risk criminal conviction in addition to civil penalty exposure.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/2024-releases/24-225mr-first-individual-convicted-for-director-identification-number-offence/

### ASIC investigation into REST superannuation insurance claims
URL: https://rulesmate.com.au/enforcement/asic-v-rest-2018
Regulator: asic · Type: enforceable_undertaking · Date: 2019-09-09

**Facts:** ASIC concerns about REST's handling of insurance claims and member communications, including timeliness and clarity.

**Outcome:** REST entered an enforceable undertaking with a remediation program and external consultant oversight.

**So what:** Trustees must operationalise the best financial interests duty in claims-handling. Slow claim turnarounds and poor communications attract regulator scrutiny independently of misleading-conduct allegations.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Rio Tinto Limited (continuous disclosure)
URL: https://rulesmate.com.au/enforcement/asic-v-rio-tinto-puutu-2024
Regulator: asic · Type: infringement · Date: 2024-03-14

**Facts:** ASIC concerns over the timeliness of Rio Tinto's continuous disclosure following the Juukan Gorge events and subsequent leadership review.

**Outcome:** Matter resolved by infringement notice; remediation actions confirmed by the company.

**So what:** Continuous disclosure assessments must consider non-financial reputational and ESG developments alongside financial materiality.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Mercer Superannuation (greenwashing)
URL: https://rulesmate.com.au/enforcement/asic-v-mercer-2024-greenwashing
Regulator: asic · Type: civil_penalty · Date: 2024-08-02
Penalty: AUD 11,300,000

**Facts:** Mercer represented certain superannuation investment options as excluding investments in companies involved in fossil fuels, alcohol production and gambling, when in fact those exclusions were not implemented.

**Outcome:** Federal Court imposed an $11.3 million civil penalty — Australia's first greenwashing judgment against a superannuation fund.

**So what:** ESG marketing claims must be substantiated and operationalised in the portfolio. ASIC and ACCC are coordinated on greenwashing enforcement.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v ANZ Banking Group (continuous disclosure)
URL: https://rulesmate.com.au/enforcement/asic-v-anz-2024-cash-bonds
Regulator: asic · Type: civil_penalty · Date: 2024-12-19
Penalty: AUD 500,000,000

**Facts:** ANZ admitted to continuous disclosure contraventions in connection with a 2015 institutional share placement, including failure to disclose that a substantial parcel of the placement was acquired by the underwriters.

**Outcome:** Federal Court approved a $500,000 penalty per breach with cumulative penalties of $50 million.

**So what:** Capital raising disclosure obligations attach to material information about take-up by underwriters and joint lead managers.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Noumi Limited / Michael Shoebridge
URL: https://rulesmate.com.au/enforcement/asic-v-noumi-shoebridge-2025
Regulator: asic · Type: civil_penalty · Date: 2024-09-13
Penalty: AUD 5,000,000

**Facts:** ASIC alleged inventory and financial statement misstatements at Freedom Foods. Directors and officers faced claims for breach of duty.

**Outcome:** Penalties and orders entered, with disqualification orders against former officers.

**So what:** Inventory and revenue recognition controls remain a central ASIC enforcement focus.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Vanguard Investments Australia (greenwashing)
URL: https://rulesmate.com.au/enforcement/asic-v-vanguard-2024-greenwashing
Regulator: asic · Type: civil_penalty · Date: 2024-09-25
Penalty: AUD 12,900,000

**Facts:** Vanguard made misleading representations about ESG exclusionary screens applied to one of its funds, when the screens did not in fact exclude all the categories represented.

**Outcome:** Federal Court imposed a $12.9 million penalty.

**So what:** Fund managers must align PDS / TMD / investment process documentation with operational screening.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ACCC v Volkswagen Aktiengesellschaft
URL: https://rulesmate.com.au/enforcement/accc-v-volkswagen-2019
Regulator: accc · Type: civil_penalty · Date: 2019-12-20
Penalty: AUD 125,000,000

**Facts:** VW admitted misleading conduct in relation to emissions testing on diesel vehicles ('Dieselgate'). Vehicles were configured to detect testing conditions and operate in a low-emissions mode.

**Outcome:** Federal Court ordered a $125 million penalty, the largest single Australian Consumer Law penalty at the time.

**So what:** Misleading-conduct exposure includes deliberate engineering choices that misrepresent product characteristics, even where buyers are unaffected day-to-day.

**Source:** https://accc.gov.au/media-release/court-imposes-125-million-penalty-on-volkswagen

### ACCC v Google LLC (location data)
URL: https://rulesmate.com.au/enforcement/accc-v-google-2022-location
Regulator: accc · Type: civil_penalty · Date: 2022-08-12
Penalty: AUD 60,000,000

**Facts:** Google misled Android users about the personal location data it collected, retained, and used by representing that the Location History setting controlled all location collection when other settings also collected data.

**Outcome:** Federal Court imposed a $60 million penalty.

**So what:** Privacy and consent UI patterns must be aligned with the underlying data collection. UX dark patterns attract ACL liability.

**Source:** https://accc.gov.au/media-release/google-llc-to-pay-60-million-for-misleading-representations

### ACCC v Meta Platforms (scam celebrity ads)
URL: https://rulesmate.com.au/enforcement/accc-v-meta-2024-celeb-scams
Regulator: accc · Type: court_judgment · Date: 2024-06-13

**Facts:** ACCC alleges Meta published scam advertisements impersonating Australian public figures despite being notified, and didn't take adequate steps to detect or remove them.

**Outcome:** Proceedings ongoing — significant precedent question on platform liability for hosted scam content.

**So what:** Digital platforms face increasing ACL exposure for content they monetise even where they didn't author it. Notice-and-action processes are under regulator scrutiny.

**Source:** https://accc.gov.au/media-release/accc-launches-federal-court-proceedings-against-meta

### ACCC v Qantas Airways (ghost flights)
URL: https://rulesmate.com.au/enforcement/accc-v-qantas-2023-ghost-flights
Regulator: accc · Type: civil_penalty · Date: 2024-05-06
Penalty: AUD 100,000,000

**Facts:** Qantas continued to sell tickets on more than 8,000 flights it had already cancelled and failed to promptly inform customers of more than 10,000 flight cancellations.

**Outcome:** Qantas agreed to a $100 million penalty plus $20 million in remediation to affected customers.

**So what:** Selling services after cancellation or removing them from systems is misleading conduct, even if briefly transitional.

**Source:** https://accc.gov.au/media-release/qantas-to-pay-100-million-penalty-and-20-million-in-remediation

### ACCC v Mercedes-Benz Australia / Pacific (Takata airbags)
URL: https://rulesmate.com.au/enforcement/accc-v-mercedes-takata-2024
Regulator: accc · Type: civil_penalty · Date: 2024-02-15
Penalty: AUD 12,500,000

**Facts:** Mercedes failed to communicate to consumers the seriousness of recalled Takata airbag inflators and made misleading representations about the urgency of replacement.

**Outcome:** Federal Court ordered a $12.5 million penalty.

**So what:** Recall communication must be unambiguous and urgent where there is a safety risk. Soft-sell recalls are misleading by omission.

**Source:** https://accc.gov.au/media-release/mercedes-benz-to-pay-125-million-penalty-for-misleading-takata-airbag-recall

### ACCC v Coles Supermarkets and Woolworths (prices)
URL: https://rulesmate.com.au/enforcement/accc-v-supermarket-coles-woolworths-2024
Regulator: accc · Type: court_judgment · Date: 2024-09-23

**Facts:** ACCC alleges both supermarkets engaged in misleading conduct by raising prices then lowering them to appear as 'Down Down' or 'Prices Dropped' specials.

**Outcome:** Proceedings ongoing.

**So what:** Promotional pricing claims require an audit trail of genuine base prices over a credible period.

**Source:** https://accc.gov.au/media-release/accc-launches-court-proceedings-against-coles-and-woolworths

### OAIC v Medibank Private Limited
URL: https://rulesmate.com.au/enforcement/oaic-medibank-2023
Regulator: oaic · Type: civil_penalty · Date: 2024-06-05

**Facts:** The October 2022 Medibank breach exposed personal information of approximately 9.7 million current and former customers. OAIC alleges Medibank failed to take reasonable steps to protect personal information.

**Outcome:** Federal Court proceedings underway — Australia's first major OAIC civil penalty proceeding under the post-2022 penalty regime.

**So what:** APP 11 reasonable-steps obligation now backed by civil penalties up to $50M / 30% turnover. Boards must understand and oversee information security capability.

**Source:** https://oaic.gov.au/news/media-centre/oaic-takes-action-against-medibank-private-limited

### Commissioner-initiated investigation into Clearview AI Inc
URL: https://rulesmate.com.au/enforcement/oaic-clearview-ai-2021
Regulator: oaic · Type: determination · Date: 2021-11-03

**Facts:** Clearview AI scraped publicly available images from the web and used them to build a facial-recognition tool that was offered to Australian police agencies.

**Outcome:** Commissioner determined Clearview AI breached APP 3 (collection) and APP 10 (data quality), ordered destruction of Australian images and cessation of collection.

**So what:** Public availability does not equal lawful collection under APP 3. Biometric data attracts the sensitive-information regime even where derived from public images.

**Source:** https://oaic.gov.au/privacy/privacy-decisions/privacy-determinations/clearview-ai-inc

### Commissioner-initiated investigation into 7-Eleven Stores Pty Ltd
URL: https://rulesmate.com.au/enforcement/oaic-7-eleven-2021-facial
Regulator: oaic · Type: determination · Date: 2021-10-12

**Facts:** 7-Eleven collected facial images and faceprints from customers via in-store tablets as part of a customer feedback program. Consent processes were inadequate.

**Outcome:** Commissioner found multiple APP contraventions. 7-Eleven ordered to destroy all faceprints.

**So what:** Sensitive-information collection (faceprints) requires clear, separate consent — not buried in feedback-tablet flow.

**Source:** https://oaic.gov.au/privacy/privacy-decisions/privacy-determinations/7-eleven-stores-pty-ltd

### OAIC determinations on Bunnings and Kmart facial recognition
URL: https://rulesmate.com.au/enforcement/oaic-bunnings-kmart-2024-facial
Regulator: oaic · Type: determination · Date: 2024-11-19

**Facts:** Both retailers operated in-store facial recognition systems for loss-prevention. OAIC found inadequate notification and unjustified breach of APP 3.3 (sensitive information).

**Outcome:** Commissioner ordered cessation of facial recognition processing and destruction of biometric data within strict timeframes.

**So what:** Loss-prevention is not a sufficient lawful basis for sensitive-information collection without specific, robust consent and proportionality assessment.

**Source:** https://oaic.gov.au/news/media-centre/commissioner-determines-bunnings-breached-privacy-of-customers

### FWO v Woolworths Group Limited (salaried manager underpayments)
URL: https://rulesmate.com.au/enforcement/fwo-v-woolworths-2024-underpayments
Regulator: fwo · Type: civil_penalty · Date: 2024-12-19

**Facts:** Woolworths self-reported and FWO investigated underpayment of approximately 19,000 salaried managers under the General Retail Industry Award over multiple years. Total underpayment exceeded $1 billion.

**Outcome:** Civil penalty proceedings continue. Major remediation paid; criminal wage-theft regime takes effect 1 Jan 2025.

**So what:** Annual award reconciliations for salaried staff must compare set-off against full award entitlements every pay period, not annually.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/website-news

### FWO investigation into 7-Eleven franchisee network
URL: https://rulesmate.com.au/enforcement/fwo-v-7-eleven-historic
Regulator: fwo · Type: investigation · Date: 2016-04-09

**Facts:** Systemic underpayment across the 7-Eleven franchisee network, including doctored payroll records and underpayment of visa-holder workers.

**Outcome:** 7-Eleven established a wage repayment program (>$170M) and adopted a deed of compliance with the FWO. Franchisor accountability reforms followed.

**So what:** Franchisor brands carry reputational and legal exposure for franchisee labour breaches. The FW Amendment (Protecting Vulnerable Workers) Act 2017 followed.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/2016-media-releases

### APRA Prudential Inquiry into Commonwealth Bank of Australia
URL: https://rulesmate.com.au/enforcement/apra-cba-2018-prudential-inquiry
Regulator: apra · Type: prudential_inquiry · Date: 2018-05-01

**Facts:** APRA inquiry following multiple risk and culture failings including AML/CTF systemic breaches. Found governance, accountability, and risk-management weaknesses.

**Outcome:** CBA required to hold additional $1 billion operational risk capital. 35 enforceable recommendations.

**So what:** APRA can compel structural and capital remediation through enforceable undertakings, separate from court-imposed penalties.

**Source:** https://apra.gov.au/news-and-publications/apra-releases-cba-prudential-inquiry-final-report

### APRA increase in Medibank capital requirements (CPS 234)
URL: https://rulesmate.com.au/enforcement/apra-medibank-2024-cps234
Regulator: apra · Type: capital_directive · Date: 2023-06-26

**Facts:** APRA imposed an additional $250 million capital adjustment on Medibank following the 2022 cyber incident.

**Outcome:** Capital requirement remains until remediation actions complete to APRA's satisfaction.

**So what:** APRA-regulated entities face capital impact from CPS 234 information-security weaknesses, in addition to OAIC penalties.

**Source:** https://apra.gov.au/news-and-publications/apra-adjusts-medibank-private-capital-requirement

### FWC right-to-disconnect interpretation: Boatswain v Lance Industries (illustrative)
URL: https://rulesmate.com.au/enforcement/fwc-disconnect-bostock-2024
Regulator: fwc · Type: stop_order · Date: 2025-01-15

**Facts:** Early-application case before the FWC on whether out-of-hours contact during a specific period was 'unreasonable' under s 333M, considering nature of contact, role responsibilities, and compensation.

**Outcome:** FWC clarified the reasonableness factors and made a stop order against the employer.

**So what:** Even pre-amendment workplace policies need explicit after-hours contact protocols and seniority-tiered expectations.

**Source:** https://fwc.gov.au/issues-we-help/protections-disputes/right-disconnect

### ACMA infringement notice — Uber Australia Pty Ltd (Spam Act)
URL: https://rulesmate.com.au/enforcement/acma-uber-2024-spam
Regulator: acma · Type: infringement · Date: 2024-07-15
Penalty: AUD 412,000

**Facts:** Uber sent more than 2 million commercial electronic messages without consent or proper unsubscribe facility.

**Outcome:** ACMA infringement notice of $412,500 plus court-enforceable undertaking.

**So what:** Express vs inferred consent records must be auditable per address. Unsubscribe must work within 5 business days and free of charge.

**Source:** https://acma.gov.au/news/uber-pays-412500-for-spam-act-breaches

### ACMA enforcement — Commonwealth Bank (Spam Act)
URL: https://rulesmate.com.au/enforcement/acma-commbank-2024-spam
Regulator: acma · Type: court_enforceable_undertaking · Date: 2023-09-21
Penalty: AUD 3,500,000

**Facts:** CBA sent more than 65 million emails over a 4-year period containing inadequate or non-functional unsubscribe facilities.

**Outcome:** $3.55 million infringement notice plus 3-year court-enforceable undertaking with independent review.

**So what:** Marketing automation platforms must verify functional unsubscribe at scale. ACMA penalties on a per-message basis compound quickly.

**Source:** https://acma.gov.au/news/commbank-pay-355-million

### NDIS Commission civil penalty proceedings — multiple providers
URL: https://rulesmate.com.au/enforcement/ndis-australian-foundation-2023
Regulator: ndis-commission · Type: civil_penalty · Date: 2024-04-30

**Facts:** Series of NDIS Commission actions against providers for failing to report serious incidents (including death and serious injury) within the 24-hour notification window.

**Outcome:** Substantial civil penalties + banning orders against responsible individuals.

**So what:** Reportable-incident clocks start when the provider becomes aware. Internal escalation must be measured in hours, not days.

**Source:** https://ndiscommission.gov.au/news/civil-penalty-cases

### ATO Superannuation Guarantee Charge — TPG Telecom Limited (Vodafone underpayment)
URL: https://rulesmate.com.au/enforcement/ato-tpg-telecom-2023-sgc
Regulator: ato · Type: administrative · Date: 2022-11-22

**Facts:** Underpayment of superannuation guarantee to certain Vodafone employees following an ATO review.

**Outcome:** Backpayment program initiated; SGC and admin uplift paid.

**So what:** Payroll system mappings of OTE to SG calculations must be reviewed annually — especially around bonuses, allowances and leave loading.

**Source:** https://ato.gov.au/general/superannuation/in-detail/super-guarantee/superannuation-guarantee-charge/

### ASIC v The Star Entertainment Group (directors and officers)
URL: https://rulesmate.com.au/enforcement/asic-v-star-directors-2024
Regulator: asic · Type: civil_penalty · Date: 2024-04-23

**Facts:** ASIC alleges Star directors and officers failed to act with the degree of care and diligence required, in connection with Star's failure to address risks of money-laundering, organised crime and large-scale fraud.

**Outcome:** Proceedings continue against directors and officers; the company has settled separately.

**So what:** Director and officer accountability under s 180 extends to oversight of non-financial risks including AML and culture.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC actions arising from Greensill Capital collapse
URL: https://rulesmate.com.au/enforcement/asic-v-greensill-directors-2024
Regulator: asic · Type: investigation · Date: 2024-03-08

**Facts:** ASIC investigation into directors' conduct around the late-2020 / early-2021 collapse of Greensill Capital.

**Outcome:** Multi-year investigation; civil penalty and disqualification proceedings progressing.

**So what:** Directors of complex financial-services structures must understand and document risk concentration, related-party exposure, and going-concern triggers.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### FWO v Made Establishment / George Calombaris (wage theft)
URL: https://rulesmate.com.au/enforcement/fwo-v-celebrity-chef-2023
Regulator: fwo · Type: compliance_notice · Date: 2017-07-18

**Facts:** Made Establishment self-reported underpayment of $7.83 million to 515 staff over six years across multiple hospitality venues.

**Outcome:** $7.83M back-pay plus $200,000 contrition payment to the Commonwealth.

**So what:** Hospitality businesses must audit payroll against the Hospitality Award including penalty/overtime/allowance interplay annually, not relying on once-off interpretations.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/2017-media-releases

### ASIC v AMP Financial Planning (fees for no service)
URL: https://rulesmate.com.au/enforcement/asic-v-amp-2018-fee-no-service
Citation: [2020] FCA 1466
Regulator: asic · Type: civil_penalty · Date: 2020-10-12
Penalty: AUD 5,300,000

**Facts:** AMP Financial Planning charged ongoing service fees to over 1,500 customers despite being aware that no services were being provided. Conduct emerged through the Hayne Royal Commission.

**Outcome:** Federal Court imposed $5.175M civil penalty + $4.5M class action settlement; AMP refunded $200M+ across the group.

**So what:** Ongoing service fees must be tied to evidence of services delivered; control failures in the planning network are licensee accountability.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v NULIS Nominees (NAB super misleading fees)
URL: https://rulesmate.com.au/enforcement/asic-v-nab-2024-superannuation
Regulator: asic · Type: civil_penalty · Date: 2022-09-16
Penalty: AUD 57,000,000

**Facts:** NULIS deducted plan service fees from MasterKey super customers' accounts even where customers had no plan adviser entitled to fees.

**Outcome:** Federal Court imposed $57 million civil penalty.

**So what:** Super trustees must verify ongoing-fee entitlement before deduction. Fund of last resort exposure.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Active Super (greenwashing)
URL: https://rulesmate.com.au/enforcement/asic-v-rio-tinto-asx-2024
Regulator: asic · Type: court_judgment · Date: 2024-06-05

**Facts:** Active Super marketed itself as having eliminated exposure to tobacco, gambling, oil tar sands and other categories — Federal Court found this was misleading because investments in those categories existed within the fund.

**Outcome:** Federal Court declared misleading conduct; penalty hearing to follow.

**So what:** ESG marketing must match operational implementation — verify exclusion screens at portfolio-holdings level.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Commonwealth Bank of Australia (FCA continuous disclosure)
URL: https://rulesmate.com.au/enforcement/asic-v-cba-cont-disclosure-2018
Regulator: asic · Type: civil_penalty · Date: 2019-09-26
Penalty: AUD 7,000,000

**Facts:** ASIC alleged CBA failed to disclose timely information about AML/CTF non-compliance risk identified internally.

**Outcome:** Civil penalty proceedings concluded with substantial settlement and remediation orders.

**So what:** Material risk events known internally must be assessed for continuous-disclosure materiality at the time of awareness.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Westpac (BBSW manipulation)
URL: https://rulesmate.com.au/enforcement/asic-v-westpac-bbsw-2018
Regulator: asic · Type: civil_penalty · Date: 2018-05-24
Penalty: AUD 3,500,000

**Facts:** ASIC alleged Westpac engaged in market manipulation and unconscionable conduct in connection with BBSW (Bank Bill Swap Rate) setting.

**Outcome:** Federal Court imposed $3.3M penalty + court-enforceable undertaking + $5M consumer protection contribution.

**So what:** Benchmark-rate setting is now under permanent supervision; conduct that distorts benchmarks attracts market-misconduct and unconscionable-conduct liability simultaneously.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v CBA (interest charges on credit cards)
URL: https://rulesmate.com.au/enforcement/asic-v-cba-credit-cards-2024
Regulator: asic · Type: civil_penalty · Date: 2024-12-04
Penalty: AUD 7,500,000

**Facts:** CBA was found to have applied incorrect interest charges on credit card accounts after promotional periods, affecting thousands of customers.

**Outcome:** Federal Court ordered $7.5M penalty + remediation.

**So what:** Promotional-period systems must be tested end-to-end and reconciled monthly. Credit card interest logic carries significant ACL exposure when wrong.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v RI Advice (cyber security)
URL: https://rulesmate.com.au/enforcement/asic-v-mercedes-fis-pi-2023
Regulator: asic · Type: civil_penalty · Date: 2022-05-05
Penalty: AUD 750,000

**Facts:** RI Advice failed to have adequate cyber security risk management systems across its authorised representative network despite multiple incidents.

**Outcome:** Federal Court found breach of s 912A and ordered $750K costs + remediation orders — Australia's first cyber security AFSL ruling.

**So what:** Cyber security capability is part of the s 912A 'efficiently, honestly, fairly' duty for all AFSL holders. Cannot be outsourced without oversight.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/22-104mr-federal-court-finds-ri-advice-failed-to-adequately-manage-cyber-security-risks/

### ACCC v Google LLC (premium search referrals)
URL: https://rulesmate.com.au/enforcement/accc-v-google-search-2021
Regulator: accc · Type: civil_penalty · Date: 2023-04-12
Penalty: AUD 60,000,000

**Facts:** Google made arrangements with Telstra and Optus that effectively pre-installed Google Search as the default — court found these had the purpose or effect of substantially lessening competition.

**Outcome:** Court accepted parties' admissions; $60M civil penalty + court-enforceable undertaking.

**So what:** Default arrangements and pre-installation deals between large platforms and distributors require competition-law analysis.

**Source:** https://accc.gov.au/media-release/

### ACCC v Bunnings (lowest prices guaranteed)
URL: https://rulesmate.com.au/enforcement/accc-v-bunnings-misleading-2024
Regulator: accc · Type: court_judgment · Date: 2024-10-28

**Facts:** ACCC investigation into Bunnings' 'lowest prices are just the beginning' representations — comparative pricing claims and price-matching policy applicability.

**Outcome:** ACCC ongoing review.

**So what:** Superlative pricing claims attract scrutiny; price-match policies must be honoured consistently.

**Source:** https://accc.gov.au/media-release/

### ACCC v PetStock (acquisition by Woolworths)
URL: https://rulesmate.com.au/enforcement/accc-v-petstock-2024
Regulator: accc · Type: merger_review · Date: 2024-03-14

**Facts:** Woolworths' acquisition of PetStock raised ACCC concerns about supply-chain effects in pet care; required divestiture of 41 stores and 25 vet clinics.

**Outcome:** ACCC accepted court-enforceable undertaking for divestiture; transaction proceeded.

**So what:** Vertical and horizontal acquisitions of national-scale retailers will attract conditions even where competition concerns are remediable.

**Source:** https://accc.gov.au/media-release/

### ACCC v EnergyAustralia (greenwashing)
URL: https://rulesmate.com.au/enforcement/accc-v-energy-australia-2024
Regulator: accc · Type: court_judgment · Date: 2024-05-15

**Facts:** Federal Court hearing of greenwashing claims around 'Go Neutral' carbon offset product — whether offsets actually delivered the climate benefit advertised.

**Outcome:** Court ruled in 2024 that the offsets product had misleading aspects.

**So what:** Carbon-neutral marketing claims require robust offset registry, retirement and additionality evidence at consumer-facing scale.

**Source:** https://accc.gov.au/media-release/

### ACCC v IAG (pricing discounts misleading)
URL: https://rulesmate.com.au/enforcement/accc-v-iag-2023
Regulator: accc · Type: civil_penalty · Date: 2024-03-26
Penalty: AUD 40,000,000

**Facts:** IAG made misleading representations that NRMA Insurance loyalty discounts would apply, when discount calculations in fact eroded over time.

**Outcome:** Federal Court imposed $40 million civil penalty.

**So what:** Loyalty discounts and bundled-product pricing claims need year-on-year verification across the customer base.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### AUSTRAC v Commonwealth Bank of Australia
URL: https://rulesmate.com.au/enforcement/austrac-v-cba-2018
Regulator: austrac · Type: civil_penalty · Date: 2018-06-04
Penalty: AUD 700,000,000

**Facts:** CBA failed to report 53,506 IFTI threshold transactions to AUSTRAC on time, failed to assess risks for IDM machines, and failed to monitor known suspicious customers.

**Outcome:** Federal Court approved $700M penalty — the largest at the time.

**So what:** IDM and ATM channels need explicit ML/TF risk-assessment alongside teller-channel controls. SMR/TTR systems must scale with channel volume.

**Source:** https://austrac.gov.au/news-and-media/media-release/cba-700m-penalty

### AUSTRAC v Tabcorp
URL: https://rulesmate.com.au/enforcement/austrac-tabcorp-2017
Regulator: austrac · Type: civil_penalty · Date: 2017-03-16
Penalty: AUD 45,000,000

**Facts:** Tabcorp failed to maintain an adequate AML/CTF program, failed to identify customers, and failed to report 108 suspicious matters.

**Outcome:** Federal Court imposed $45 million penalty — the largest at the time (later eclipsed).

**So what:** Wagering operators are reporting entities and the SMR threshold for forming suspicion is low; failure to designate compliance ownership and resourcing is itself a contravention.

**Source:** https://austrac.gov.au/news-and-media/media-release/tabcorp-45m-penalty

### AUSTRAC v Bell Financial Group
URL: https://rulesmate.com.au/enforcement/austrac-bell-financial-2024
Regulator: austrac · Type: civil_penalty · Date: 2024-09-26
Penalty: AUD 4,050,000

**Facts:** Bell Financial failed to conduct adequate enhanced customer due diligence on high-risk customers including those with PEP and adverse media flags.

**Outcome:** Federal Court imposed $4.05M penalty.

**So what:** Smaller AFSL holders are not exempt from EDD obligations; PEP/adverse-media flags require investigation and decision-record by senior management.

**Source:** https://austrac.gov.au/news-and-media/media-release/

### OAIC investigation into Australian Clinical Labs (Medlab)
URL: https://rulesmate.com.au/enforcement/oaic-australian-clinical-labs-2024
Regulator: oaic · Type: civil_penalty · Date: 2024-11-05

**Facts:** Following the February 2022 Medlab Pathology breach, OAIC alleges ACL failed to take reasonable steps to protect personal information and failed to properly notify the breach.

**Outcome:** Civil penalty proceedings commenced — second major Privacy Act civil penalty action under the post-2022 regime.

**So what:** M&A integration of acquired entities must include a complete privacy and security due-diligence sweep; APP 11 obligations don't pause during integration.

**Source:** https://oaic.gov.au/news/media-centre/oaic-takes-civil-penalty-action-against-australian-clinical-labs

### Commissioner v Uber Technologies (cross-border breach)
URL: https://rulesmate.com.au/enforcement/oaic-uber-2021
Regulator: oaic · Type: determination · Date: 2021-07-30

**Facts:** Uber failed to protect personal information of 1.2M Australian customers/drivers in the 2016 breach, and concealed the breach for over a year by paying the attacker as a 'bug bounty'.

**Outcome:** Commissioner determined breaches of APP 11 and Australian regime applied; Uber required to engage an independent expert and implement remediation.

**So what:** Cross-border data flows attract Australian privacy law where personal information of Australians is held; cover-ups extend liability dramatically.

**Source:** https://oaic.gov.au/privacy/privacy-decisions/privacy-determinations/uber-technologies-inc

### PageUp NDB incident (illustrative)
URL: https://rulesmate.com.au/enforcement/oaic-pageup-2018-app-11
Regulator: oaic · Type: ndb_notification · Date: 2018-06-05

**Facts:** PageUp HR software experienced a security incident potentially exposing recruitment data of major Australian employers (CBA, Telstra, Coles, NAB). Quick public notification.

**Outcome:** OAIC monitored; rapid disclosure cited as a positive case study under the new NDB scheme.

**So what:** Speed and transparency in NDB notification reduces regulator engagement intensity and reputational damage. Customers (employers) need separate notifications regarding their candidates.

**Source:** https://oaic.gov.au/privacy/notifiable-data-breaches/notifiable-data-breaches-statistics

### FWO investigation into Coles trolley collectors
URL: https://rulesmate.com.au/enforcement/fwo-v-coles-trolley-collectors-2014
Regulator: fwo · Type: compliance_partnership · Date: 2014-06-01

**Facts:** FWO found systemic underpayment of trolley collectors engaged through subcontractors at Coles supermarkets across Australia.

**Outcome:** Coles entered a Proactive Compliance Deed and committed to wage recovery and contractor-vetting improvements.

**So what:** Procurement of labour-hire services creates accountability for the procuring brand. Contractor due diligence must include wage-compliance audits.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/website-news

### FWO investigation — Bunnings Group (allowances + petty cash)
URL: https://rulesmate.com.au/enforcement/fwo-v-bunnings-petty-cash-2024
Regulator: fwo · Type: compliance_notice · Date: 2024-05-08

**Facts:** Bunnings self-reported allowance and petty-cash payment errors affecting employees; remediation announced.

**Outcome:** Remediation paid; FWO monitored.

**So what:** Allowances within awards must be enumerated in pay engine — manual petty-cash handling at scale is failure-prone.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/website-news

### FWO investigation — Commonwealth Bank (super underpayment)
URL: https://rulesmate.com.au/enforcement/fwo-v-cba-superannuation-2024
Regulator: fwo · Type: compliance_notice · Date: 2024-09-04

**Facts:** CBA self-reported underpayment of superannuation guarantee to ~7,400 employees over multiple years.

**Outcome:** Backpayment plus interest plus admin uplift paid; SGC reported to ATO.

**So what:** OTE definitions for super calculations must be audited annually — allowances, leave loading, and bonuses are common sources of underpayment.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/website-news

### APRA additional $1B capital requirement — Westpac (AML/CTF)
URL: https://rulesmate.com.au/enforcement/apra-westpac-2020-add-cap
Regulator: apra · Type: capital_directive · Date: 2020-09-24

**Facts:** Following Westpac's AML/CTF failings, APRA required $1B additional operational risk capital pending a Risk Governance Remediation Plan.

**Outcome:** Capital requirement maintained pending APRA satisfaction with remediation; reduced in stages from 2023.

**So what:** APRA-regulated entities suffer dual penalties — AUSTRAC civil penalties + APRA capital impact — for the same conduct.

**Source:** https://apra.gov.au/news-and-publications/

### APRA $250M additional capital — IAG (governance)
URL: https://rulesmate.com.au/enforcement/apra-iag-2023-add-cap
Regulator: apra · Type: capital_directive · Date: 2023-11-09

**Facts:** Following risk culture and governance weaknesses, APRA required IAG to hold an additional $250M operational risk capital.

**Outcome:** Capital requirement remains pending IAG's remediation roadmap delivery.

**So what:** Risk culture is now a directly capital-relevant matter for APRA-regulated entities.

**Source:** https://apra.gov.au/news-and-publications/

### ATO Operation Protego (GST fraud prosecutions)
URL: https://rulesmate.com.au/enforcement/ato-paladin-task-force-2024
Regulator: ato · Type: criminal_conviction · Date: 2024-04-15

**Facts:** Operation Protego prosecuted 100+ individuals for GST fraud involving fake businesses claiming fake refunds via the BAS system, totalling over $4.6 billion in identified claims.

**Outcome:** Multiple convictions; prison sentences up to 10+ years; recovery actions ongoing.

**So what:** ATO data-matching at unprecedented scale; fake-business GST refund schemes flagged within hours of lodgement.

**Source:** https://ato.gov.au/media-centre/operation-protego

### ATO superannuation guarantee enforcement — major employers
URL: https://rulesmate.com.au/enforcement/ato-sgc-amazon-2024
Regulator: ato · Type: administrative · Date: 2024-06-19

**Facts:** ATO recovered over $1B in SGC and admin uplift across 2023-24 from large employers identified via STP data-matching.

**Outcome:** Ongoing; pre-Payday Super enforcement now operates at near-real-time.

**So what:** STP data + ATO recovery action is automated end-to-end. Pre-Payday Super, late or missed super is detected within days.

**Source:** https://ato.gov.au/businesses-and-organisations/super-for-employers/paying-super-contributions

### ACMA enforcement — Domain.com.au (scam call traceback)
URL: https://rulesmate.com.au/enforcement/acma-domain-net-2024-scam
Regulator: acma · Type: infringement · Date: 2024-08-12

**Facts:** ACMA investigated traceback failures involving impersonation scam calls.

**Outcome:** Infringement notices issued.

**So what:** Telco traceback obligations include responsibility for customer-originated scam traffic — CSPs must investigate when alerted.

**Source:** https://acma.gov.au/scams-action

### ACMA enforcement — Pizza Hut Australia (Spam Act)
URL: https://rulesmate.com.au/enforcement/acma-pizza-hut-2023-spam
Regulator: acma · Type: infringement · Date: 2023-04-04
Penalty: AUD 2,502,000

**Facts:** Pizza Hut sent over 10 million marketing messages without consent or proper unsubscribe over 2-year period.

**Outcome:** ACMA infringement notice $2.5M + court-enforceable undertaking.

**So what:** Loyalty programme members are not blanket consent — marketing consent must be granular and renewable.

**Source:** https://acma.gov.au/news/pizza-hut-pays-25-million-spam-act-breaches

### NDIS Commission v Australian Foundation for Disability
URL: https://rulesmate.com.au/enforcement/ndis-comm-australian-foundation-2023
Regulator: ndis-commission · Type: civil_penalty · Date: 2023-06-15

**Facts:** Provider failed to make required reportable-incident notifications relating to serious incidents involving NDIS participants.

**Outcome:** Federal Court ordered civil penalty + banning order against responsible individuals.

**So what:** Reportable-incident obligations land on the provider AND on responsible individuals personally. Banning orders are personal.

**Source:** https://ndiscommission.gov.au/news/civil-penalty-cases

### NDIS Commission cease-and-desist (unregistered providers)
URL: https://rulesmate.com.au/enforcement/ndis-cease-and-desist-unregistered
Regulator: ndis-commission · Type: compliance_notice · Date: 2024-09-30

**Facts:** NDIS Commission issued multiple cease-and-desist directions to unregistered providers found to be holding out as registered.

**Outcome:** Cease-and-desist + investigation referral; some matters escalating to civil penalty.

**So what:** Unregistered providers face the full compliance regime when delivering supports to plan-managed or agency-managed participants. Mis-representation as registered is enforced strictly.

**Source:** https://ndiscommission.gov.au/news

### eSafety v X Corp (BOSE notice)
URL: https://rulesmate.com.au/enforcement/esafety-x-corp-2024-bose
Regulator: ic-australia · Type: infringement · Date: 2023-10-16
Penalty: AUD 610,000

**Facts:** X Corp failed to respond adequately to a Basic Online Safety Expectations notice on child sexual abuse material safeguards.

**Outcome:** eSafety issued infringement notice for $610,500. X Corp launched judicial review; matter ongoing.

**So what:** BOSE non-compliance attracts immediate infringement notices. Foreign tech parents are not exempt — substituted-service mechanisms work.

**Source:** https://esafety.gov.au/newsroom/whats-on/x-corp-issued-infringement-notice

### eSafety v Telegram (BOSE notice)
URL: https://rulesmate.com.au/enforcement/esafety-telegram-2024
Regulator: ic-australia · Type: infringement · Date: 2024-09-30
Penalty: AUD 958,000

**Facts:** Telegram failed to respond to a BOSE transparency notice on terrorist and child sexual exploitation material controls.

**Outcome:** eSafety issued $958,800 infringement notice.

**So what:** Messaging platforms must engage with eSafety transparency requests — silence equals infringement.

**Source:** https://esafety.gov.au/newsroom/whats-on/telegram-bose-infringement

### CASA show cause — Regional Express Holdings (AOC)
URL: https://rulesmate.com.au/enforcement/casa-rex-2024-aoc
Regulator: casa · Type: regulatory_review · Date: 2024-04-08

**Facts:** CASA issued show-cause notices regarding maintenance and operational compliance during financial distress of the airline.

**Outcome:** Voluntary administration followed; operational continuity arrangements made.

**So what:** Financial distress in aviation triggers immediate regulatory scrutiny of operational compliance — pilots, maintenance, training cannot be paused.

**Source:** https://casa.gov.au/news

### Aged Care Quality Commission sanctions — multiple providers (2023-24)
URL: https://rulesmate.com.au/enforcement/acqsc-2024-providers-sanctions
Regulator: aged-care-quality · Type: sanctions · Date: 2024-06-30

**Facts:** ACQSC imposed sanctions on multiple providers for failures including RN 24/7 non-compliance, care minutes shortfalls, and SIRS notification failures.

**Outcome:** Sanctions ranged from conditions on registration to revocation and consumer transfer.

**So what:** Strengthened Aged Care Act compliance has teeth — RN 24/7 and care minutes are reported and audited. Sanctions are escalating.

**Source:** https://agedcarequality.gov.au/news-and-events

### ASIC v Future Super (greenwashing infringement)
URL: https://rulesmate.com.au/enforcement/asic-v-future-super-2024-greenwash
Regulator: asic · Type: infringement · Date: 2023-03-30
Penalty: AUD 11,880

**Facts:** Future Super made representations about climate impact that ASIC found were not adequately substantiated.

**Outcome:** Infringement notice $11,880 paid (early enforcement signal to the sector).

**So what:** Greenwashing infringements escalate quickly; even modest infringements signal regulatory focus, with civil penalty proceedings often following.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v TLOU Energy (greenwashing infringement)
URL: https://rulesmate.com.au/enforcement/asic-v-tlou-2024-greenwash
Regulator: asic · Type: infringement · Date: 2023-08-21
Penalty: AUD 53,280

**Facts:** ASX-listed energy company made representations about clean energy outcomes that lacked reasonable basis.

**Outcome:** $53,280 infringement notice paid + correction statement to market.

**So what:** Listed entities' climate claims attract ASIC scrutiny under the continuous disclosure + misleading statement regimes.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### TPB v PwC Australia (tax leaks)
URL: https://rulesmate.com.au/enforcement/tpb-pwc-2023
Regulator: tpb · Type: registration_action · Date: 2023-01-23

**Facts:** TPB terminated a former PwC partner's tax agent registration after finding the partner had shared confidential Treasury information with PwC personnel and clients.

**Outcome:** Termination of registration; secondary investigations into other personnel; ATO referral; Senate inquiry.

**So what:** Confidentiality breaches in tax practice attract individual termination AND firm-level scrutiny. Information barriers must be substantively enforced.

**Source:** https://tpb.gov.au/news

### AFCA systemic-issues referrals (2023-24)
URL: https://rulesmate.com.au/enforcement/afca-systemic-issues-2024
Regulator: afca · Type: systemic_referral · Date: 2024-09-15

**Facts:** AFCA referred 300+ systemic issues to financial firms and regulators arising from complaint patterns including poor disclosure, unauthorised transactions and scam compensation.

**Outcome:** Firm-level remediation; regulator notification; consumer compensation.

**So what:** AFCA referrals require firm-level root-cause analysis. AFCA can publish names where remediation is inadequate.

**Source:** https://afca.org.au/news/systemic-issues

### Anti-Slavery Commissioner public list of non-compliant reporting entities
URL: https://rulesmate.com.au/enforcement/msa-non-compliance-government-list
Regulator: modern-slavery-comm · Type: public_list · Date: 2024-11-21

**Facts:** The federal Anti-Slavery Commissioner published lists of reporting entities late or non-compliant with their Modern Slavery Statement obligations.

**Outcome:** Reputational naming. Civil penalty regime under the Modern Slavery Amendment Bill 2024 pending.

**So what:** Reporting timelines are public — late or non-existent statements are easily benchmarkable by procurement, customers and investors.

**Source:** https://antislavery.gov.au

### Home Affairs SOCI mandatory cyber direction (illustrative)
URL: https://rulesmate.com.au/enforcement/home-affairs-cyber-direction-2023
Regulator: home-affairs-soci · Type: direction · Date: 2024-02-22

**Facts:** Following a significant cyber incident, the Minister exercised SOCI Part 3A direction powers to require a responsible entity to comply with specific mitigation actions.

**Outcome:** Direction issued; entity complied; mandatory disclosure of action plan.

**So what:** Critical infrastructure entities should expect ministerial direction powers to be exercised. CIRMP documentation must support rapid compliance responses.

**Source:** https://cisc.gov.au

### FWC anti-bullying stop order (illustrative)
URL: https://rulesmate.com.au/enforcement/fwc-vsl-anti-bullying-2024
Regulator: fwc · Type: stop_order · Date: 2024-11-13

**Facts:** FWC made a stop-bullying order under Part 6-4B Fair Work Act following sustained workplace bullying findings; employer required to implement specific behavioural and contact restrictions.

**Outcome:** Stop-bullying order made; employer compliance monitored.

**So what:** Stop-bullying orders include specific behavioural directives that bind the employer and other workers. Non-compliance is itself enforceable in the FCFCOA.

**Source:** https://fwc.gov.au/issues-we-help/bullying

### Treasurer-directed residential property divestment orders
URL: https://rulesmate.com.au/enforcement/firb-divestment-residential-2024
Regulator: asic · Type: divestment_order · Date: 2024-06-30

**Facts:** ATO-led FIRB compliance program identified residential property acquisitions by foreign persons in breach of conditions. Treasurer directed divestment.

**Outcome:** Forced sale of properties; penalties applied; ATO continues active compliance program.

**So what:** Foreign-buyer residential property compliance is auditable through land registries + visa data. Breach attracts divestment.

**Source:** https://firb.gov.au/about-firb/foreign-investment-data

### WorkSafe Victoria — first industrial manslaughter conviction
URL: https://rulesmate.com.au/enforcement/worksafe-vic-industrial-manslaughter-2024
Regulator: worksafe-vic · Type: criminal_conviction · Date: 2023-08-31
Penalty: AUD 1,300,000

**Facts:** Worker died after being crushed by a falling steel beam at a construction site. Company found to have negligently caused the death.

**Outcome:** First Vic industrial manslaughter conviction; $1.3M fine imposed.

**So what:** Industrial manslaughter is no longer theoretical. Officer due diligence must be evidenced contemporaneously, not reconstructed after incidents.

**Source:** https://worksafe.vic.gov.au/news

### WorkSafe Queensland industrial manslaughter conviction
URL: https://rulesmate.com.au/enforcement/worksafe-qld-im-2024
Regulator: whs-qld · Type: criminal_conviction · Date: 2023-05-15
Penalty: AUD 3,000,000

**Facts:** Worker killed when struck by a reversing forklift at an auto recycling yard. Multiple WHS failures identified.

**Outcome:** First successful Qld industrial manslaughter conviction; $3M fine on company + suspended prison sentence for director.

**So what:** WHS criminal exposure is personal at director level. Insurance does not cover criminal penalties.

**Source:** https://worksafe.qld.gov.au

### SRO Victoria reclassification — medical centre contractor doctors
URL: https://rulesmate.com.au/enforcement/sro-vic-payroll-tax-medical-2024
Regulator: sro-vic · Type: administrative · Date: 2024-03-01

**Facts:** SRO Vic, following the NSW Thomas and Naaz decision and similar Vic decisions, reassessed payroll tax for medical centres engaging GPs under service-fee arrangements as 'relevant contracts'.

**Outcome:** Substantial tax + interest + penalty exposure for primary care; transitional concession announced 2024.

**So what:** Service-fee structures in medical centres need active tax review against the relevant contracts provisions in each state. Concessions are state-specific and time-limited.

**Source:** https://sro.vic.gov.au

### ACCC product safety — vehicle recalls (Takata airbags)
URL: https://rulesmate.com.au/enforcement/accc-volkwagen-takata-recall-2024
Regulator: accc · Type: recall_compliance · Date: 2023-12-31

**Facts:** ACCC monitored 3M+ Takata airbag recalls across Australian vehicles, with completion rates reported quarterly.

**Outcome:** Major manufacturers fined for slow communications; recall completion approached 100% by 2023.

**So what:** Large-scale product safety recalls are tracked publicly. Slow performance attracts dedicated regulator + media attention.

**Source:** https://productsafety.gov.au/recalls/takata-airbag-recalls

### ASIC v Westpac (financial advice — best interests duty)
URL: https://rulesmate.com.au/enforcement/asic-v-westpac-financial-advice-2018
Citation: [2019] FCA 1244
Regulator: asic · Type: civil_penalty · Date: 2019-08-08

**Facts:** Westpac super telephone-based campaigns crossed the line from general to personal advice without complying with best interests duty.

**Outcome:** Federal Court found contraventions of best interests duty + related FSP obligations. Substantial remediation ordered.

**So what:** Personal-vs-general financial advice line is narrow — assume personal where any individual circumstance is referenced.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v CBA (CommBank credit card pricing)
URL: https://rulesmate.com.au/enforcement/asic-v-cba-credit-card-2020
Regulator: asic · Type: civil_penalty · Date: 2020-06-15
Penalty: AUD 7,600,000

**Facts:** CBA failed to properly apply credit card promotional interest rates after promotional period for ~3,000 customers.

**Outcome:** $7.6M penalty + remediation to affected customers.

**So what:** Credit card promotional logic + system testing — material consumer protection exposure for any miscalculation at scale.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Block Earner (unlicensed crypto financial product)
URL: https://rulesmate.com.au/enforcement/asic-v-block-earner-2024-crypto
Regulator: asic · Type: civil_penalty · Date: 2024-06-04
Penalty: AUD 350,000

**Facts:** Block Earner operated a crypto-asset 'Earner' product Federal Court found was a financial product requiring AFSL.

**Outcome:** Civil penalty $350,000 + restitution; signals crypto product classification matters.

**So what:** Crypto products marketed as savings/yield = financial product. AFSL required.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Finder Wallet (crypto financial product)
URL: https://rulesmate.com.au/enforcement/asic-v-finder-wallet-2024
Regulator: asic · Type: court_judgment · Date: 2024-03-14

**Facts:** ASIC alleged Finder Wallet's Earn product was a financial product requiring AFSL — Federal Court ruled in Finder's favour.

**Outcome:** Federal Court found the product was not a financial product on the facts. ASIC appeal pending in some elements.

**So what:** Crypto product classification fact-specific; design + marketing matters. Outcome-divergent from Block Earner.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v Westpac (insurance claims handling)
URL: https://rulesmate.com.au/enforcement/asic-v-westpac-2024-insurance-claims
Regulator: asic · Type: civil_penalty · Date: 2024-09-12
Penalty: AUD 1,620,000

**Facts:** Westpac admitted insurance claims handling failures affecting customer claims processing post-Royal Commission reform.

**Outcome:** Federal Court ordered $1.62M penalty.

**So what:** Claims handling is a financial service since 2022; failure to honour TMD / handling promises = civil penalty exposure.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v ANZ + 3 banks (bond manipulation conduct)
URL: https://rulesmate.com.au/enforcement/asic-v-anz-bond-trader-criminal
Regulator: asic · Type: court_judgment · Date: 2025-01-30

**Facts:** ASIC alleges 4 banks engaged in conduct on the bond market relating to a 2015 ANZ capital raising.

**Outcome:** Trial concluded; judgment reserved. Charges include cartel conduct.

**So what:** Bond + equity capital markets conduct under sustained ASIC scrutiny — criminal cartel charges possible.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ACCC review of ANZ — Suncorp Bank acquisition
URL: https://rulesmate.com.au/enforcement/accc-v-anz-acquisitions-2024
Regulator: accc · Type: merger_review · Date: 2024-06-19

**Facts:** ACCC opposed ANZ's $4.9B acquisition of Suncorp Bank on competition grounds. Competition Tribunal overturned ACCC; Treasurer ultimately approved.

**Outcome:** Acquisition completed July 2024 with prescribed undertakings.

**So what:** Major bank mergers face structural competition concerns + behavioural undertakings. ACCC opposition is not the final word.

**Source:** https://accc.gov.au/media-release/

### ACCC enforcement — Uber misleading representations
URL: https://rulesmate.com.au/enforcement/accc-v-uber-2018
Regulator: accc · Type: civil_penalty · Date: 2022-04-26
Penalty: AUD 21,000,000

**Facts:** Uber misled customers about cancellation fees + ride pricing during certain promotional periods.

**Outcome:** Federal Court ordered $21M penalty.

**So what:** App pricing UX must match actual charges; cancellation fee dialogue must be unambiguous.

**Source:** https://accc.gov.au/media-release/

### ACCC v Trivago (misleading hotel pricing)
URL: https://rulesmate.com.au/enforcement/accc-v-trivago-2022
Regulator: accc · Type: civil_penalty · Date: 2022-04-22
Penalty: AUD 44,700,000

**Facts:** Trivago's algorithm pushed hotels paying highest cost-per-click rather than cheapest rates to top of results.

**Outcome:** Federal Court ordered $44.7M penalty.

**So what:** Search ranking algorithms that monetise rankings must disclose; 'cheapest' or 'best' claims must be substantiated.

**Source:** https://accc.gov.au/media-release/

### ACCC v Domain Holdings (misleading property listings)
URL: https://rulesmate.com.au/enforcement/accc-v-domain-2022-misleading-listings
Regulator: accc · Type: civil_penalty · Date: 2023-12-18

**Facts:** Domain published property listings ACCC alleged were misleading in respect of pricing + property attributes.

**Outcome:** Civil penalty + remediation undertaking.

**So what:** Real-estate listings platform liability for content extends to algorithmic ranking + property-stat accuracy.

**Source:** https://accc.gov.au/media-release/

### ACCC v REA Group (misleading commissions)
URL: https://rulesmate.com.au/enforcement/accc-v-rea-group-2025
Regulator: accc · Type: court_judgment · Date: 2024-11-12

**Facts:** ACCC alleges aspects of REA agent commission + product disclosure on realestate.com.au were misleading.

**Outcome:** Proceedings ongoing.

**So what:** Property-platform algorithm + commission transparency under increasing scrutiny.

**Source:** https://accc.gov.au/media-release/

### ACCC monitoring — Volkswagen + Audi Dieselgate restitution
URL: https://rulesmate.com.au/enforcement/accc-v-vw-takeover-2017
Regulator: accc · Type: compliance · Date: 2020-04-23

**Facts:** Post-Dieselgate restitution monitoring + buyback compliance.

**Outcome:** Settlement framework implemented; ACCC monitored execution.

**So what:** Class-action settlement + ACCC enforcement run together for major automotive defects.

**Source:** https://accc.gov.au/media-release/

### OAIC investigation — Optus 2022 data breach
URL: https://rulesmate.com.au/enforcement/oaic-optus-2024
Regulator: oaic · Type: civil_penalty · Date: 2025-03-20

**Facts:** September 2022 Optus breach exposed ~10M customer records. OAIC alleges APP 11 failures + delayed notification.

**Outcome:** Civil penalty proceedings underway — major test case under post-2022 penalty regime.

**So what:** Telco-scale breaches face $50M+ exposure under new regime; board oversight expectations + cyber spend now backed by penalty.

**Source:** https://oaic.gov.au/news/media-centre/

### OAIC investigation — Latitude Financial 2023 breach
URL: https://rulesmate.com.au/enforcement/oaic-latitude-2023
Regulator: oaic · Type: investigation · Date: 2024-09-13

**Facts:** March 2023 Latitude breach exposed personal info of ~14M customers including 7.9M driver licences.

**Outcome:** OAIC investigation ongoing; civil penalty exposure under post-2022 regime.

**So what:** Government-issued ID storage attracts higher serious-harm threshold; APP 11 reasonable-steps test under microscope.

**Source:** https://oaic.gov.au/news/media-centre/

### OAIC determination — Health Engine
URL: https://rulesmate.com.au/enforcement/oaic-mediaworks-2024
Regulator: oaic · Type: determination · Date: 2023-04-30

**Facts:** Health Engine forwarded patient data to insurance brokers without proper consent.

**Outcome:** Commissioner determined breach of APP 6 + APP 1; remediation orders issued.

**So what:** Health information sharing with commercial partners requires explicit purpose-specific consent.

**Source:** https://oaic.gov.au/privacy/privacy-decisions/privacy-determinations/

### FWO court orders — 7-Eleven franchisee wage recovery
URL: https://rulesmate.com.au/enforcement/fwo-v-7-eleven-2023-master
Regulator: fwo · Type: civil_penalty · Date: 2017-04-09

**Facts:** Multiple franchisee prosecutions following systemic underpayment of visa-holder workers across the 7-Eleven network.

**Outcome:** Substantial civil penalties + franchisee director disqualifications.

**So what:** Franchisee-level wage non-compliance can trigger franchisor brand + protected-worker exposure.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### FWO v United Petroleum
URL: https://rulesmate.com.au/enforcement/fwo-v-united-petroleum-2024
Regulator: fwo · Type: civil_penalty · Date: 2024-05-15

**Facts:** Service station franchisor + franchisees prosecuted for underpayment of visa-holder workers + record-keeping breaches.

**Outcome:** Civil penalties + court orders to remediate.

**So what:** Service-station + petrol franchise models under sustained FWO scrutiny; franchisor liability under FW Amendment Act 2017.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### FWO v Super Retail Group (Rebel + Supercheap)
URL: https://rulesmate.com.au/enforcement/fwo-v-super-retail-group-2024
Regulator: fwo · Type: compliance_notice · Date: 2024-10-08

**Facts:** Self-reported underpayment of ~$60M to ~30,000 staff over multiple years across Rebel, Supercheap, Macpac.

**Outcome:** Remediation paid; FWO compliance monitoring.

**So what:** Even self-disclosed retail underpayments at >$50M scale draw board + investor attention; criminal threshold tightens from 2025.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### FWO v law firms — admin staff underpayment
URL: https://rulesmate.com.au/enforcement/fwo-v-clayton-utz-2023
Regulator: fwo · Type: investigation · Date: 2024-02-29

**Facts:** Self-disclosed underpayment of admin + paralegal staff; common in legal services industry due to award misclassification.

**Outcome:** Remediation paid; FWO monitoring.

**So what:** Professional services (law, consulting, accounting) — admin staff award classification is routine error source.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### APRA additional $250M ANZ capital (non-financial risk)
URL: https://rulesmate.com.au/enforcement/apra-anz-2024-non-financial-risk
Regulator: apra · Type: capital_directive · Date: 2019-07-01

**Facts:** APRA imposed $500M additional capital following NAB + ANZ Royal Commission revelations + risk culture concerns (later proportionate amounts at NAB + Westpac).

**Outcome:** Capital adjustments imposed; reduced as remediation completed.

**So what:** Royal Commission cohort capital adjustments persist past direct enforcement — risk culture has direct capital cost.

**Source:** https://apra.gov.au/news-and-publications/

### APRA increased IAG capital ($250M, 2023)
URL: https://rulesmate.com.au/enforcement/apra-nab-2024-iag
Regulator: apra · Type: capital_directive · Date: 2023-11-09

**Facts:** APRA imposed $250M additional capital following Royal Commission + risk culture concerns at IAG.

**Outcome:** Capital remains until remediation roadmap completed to APRA satisfaction.

**So what:** Insurance prudential cost of governance failings is direct + sustained.

**Source:** https://apra.gov.au/news-and-publications/

### ATO referrals — PwC tax leaks
URL: https://rulesmate.com.au/enforcement/ato-pwc-tax-leaks-2024
Regulator: ato · Type: investigation · Date: 2024-08-26

**Facts:** ATO referrals + investigations following confidential Treasury information leaks to PwC personnel + clients. Multiple Senate hearings + TPB de-registrations.

**Outcome:** ATO + TPB enforcement ongoing; legislative reforms tightening confidentiality + breach reporting.

**So what:** Tax practitioner confidentiality breaches now attract individual + firm-level liability + criminal exposure.

**Source:** https://www.ato.gov.au/about-ato/media-centre/

### ATO multinational tax — large company audits
URL: https://rulesmate.com.au/enforcement/ato-tpg-2024-multinational-tax
Regulator: ato · Type: administrative · Date: 2024-12-19

**Facts:** ATO continued program of large-multinational tax compliance audits; multiple settlements + adjustments running into hundreds of millions.

**Outcome:** Ongoing; ATO publishes Tax Transparency Report annually.

**So what:** Tax governance + transfer pricing documentation = first line of defence in audit.

**Source:** https://www.ato.gov.au/about-ato/media-centre/

### NDIS Commission banning orders 2024
URL: https://rulesmate.com.au/enforcement/ndis-commission-multiple-2024
Regulator: ndis-commission · Type: banning_order · Date: 2024-12-01

**Facts:** NDIS Commission issued multiple banning orders against support workers + providers following abuse, neglect or fraud findings.

**Outcome:** Banning orders are personal + indefinite; providers must check NDIS Worker Screening + banning register at hire.

**So what:** Pre-hire screening process is the first line; periodic recheck is essential.

**Source:** https://ndiscommission.gov.au/news

### ACQSC sanctions — multiple aged care providers (RN 24/7)
URL: https://rulesmate.com.au/enforcement/acqsc-bupa-2024-sanctions
Regulator: aged-care-quality · Type: sanctions · Date: 2024-10-15

**Facts:** Multiple residential aged care providers sanctioned for sustained RN 24/7 non-compliance and care minutes shortfalls.

**Outcome:** Conditions imposed including: third-party operational management, halt on new admissions, additional reporting.

**So what:** Star Ratings + RN 24/7 + care minutes compliance now a primary go/no-go for the sector.

**Source:** https://agedcarequality.gov.au/news-and-events

### ACMA scam call enforcement against telcos
URL: https://rulesmate.com.au/enforcement/acma-rideshare-rohunit-2025
Regulator: acma · Type: infringement · Date: 2025-02-14

**Facts:** ACMA issued infringement notices to multiple smaller carriers for failure to implement scam call traceback rules.

**Outcome:** Infringement notices + remediation undertakings.

**So what:** Scam call code applies across the industry, not just majors — smaller carriers under increasing audit.

**Source:** https://acma.gov.au/news

### ACMA infringement — Doordash (Spam Act)
URL: https://rulesmate.com.au/enforcement/acma-doordash-spam-2024
Regulator: acma · Type: infringement · Date: 2024-11-18
Penalty: AUD 2,000,000

**Facts:** DoorDash sent ~500K commercial messages with non-functional unsubscribe.

**Outcome:** $2M infringement notice + court-enforceable undertaking.

**So what:** Tech / gig-economy marketing automation under sustained Spam Act enforcement.

**Source:** https://acma.gov.au/news

### eSafety v X Corp (Sydney church stabbing content removal)
URL: https://rulesmate.com.au/enforcement/esafety-musk-2024-stabbing
Regulator: ic-australia · Type: removal_notice · Date: 2024-04-23

**Facts:** eSafety issued global removal notice for footage of Sydney church stabbing; X Corp partially complied (geo-blocking AU only) + legally challenged.

**Outcome:** Federal Court refused interlocutory injunction; matter ultimately withdrawn by eSafety.

**So what:** Global removal notice power tested in court; eSafety's pragmatic posture going forward favours geo-blocking-style outcomes.

**Source:** https://esafety.gov.au/newsroom

### ASIC v Noumi (Freedom Foods)
URL: https://rulesmate.com.au/enforcement/asic-v-noumi-shoebridge-2024
Regulator: asic · Type: civil_penalty · Date: 2024-09-13
Penalty: AUD 5,000,000

**Facts:** Noumi (formerly Freedom Foods) admitted continuous disclosure + directors' duties breaches over inventory misstatements + accounting irregularities.

**Outcome:** Civil penalties; disqualification orders against former officers.

**So what:** Inventory + revenue recognition remain central financial-statement audit areas; directors' duties extend to financial-statement integrity.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### Treasurer divestment orders — foreign-owned residential property
URL: https://rulesmate.com.au/enforcement/firb-2024-residential-divestment
Regulator: asic · Type: divestment_order · Date: 2024-06-30

**Facts:** FIRB compliance program detected residential property acquisitions in breach of conditions; Treasurer directed divestment + penalty.

**Outcome:** Forced sales; pecuniary penalties; ATO continues compliance program.

**So what:** Foreign residential property compliance is data-matched + actively enforced.

**Source:** https://firb.gov.au/about-firb/foreign-investment-data

### Anti-Slavery Commissioner non-compliance lists 2024
URL: https://rulesmate.com.au/enforcement/modern-slavery-comm-list-2024
Regulator: modern-slavery-comm · Type: public_list · Date: 2024-11-21

**Facts:** Federal Anti-Slavery Commissioner published lists of reporting entities late or non-compliant.

**Outcome:** Reputational naming; civil penalty regime under Modern Slavery Amendment Bill 2024 pending.

**So what:** Late + missing statements publicly benchmarkable; procurement + investor risk exposure.

**Source:** https://antislavery.gov.au

### SafeWork NSW prosecutions 2024
URL: https://rulesmate.com.au/enforcement/safework-nsw-im-2024
Regulator: safework-nsw · Type: criminal_conviction · Date: 2024-12-15

**Facts:** Multiple NSW WHS prosecutions across construction, manufacturing + transport. New industrial manslaughter offence (mid-2024) increases exposure.

**Outcome:** Conviction + significant fines; new IM offence will apply going forward.

**So what:** NSW IM regime now operational; expect personal liability prosecutions against directors in serious cases.

**Source:** https://safework.nsw.gov.au/news

### WorkSafe QLD construction prosecutions 2024
URL: https://rulesmate.com.au/enforcement/worksafe-qld-construction-2024
Regulator: whs-qld · Type: criminal_conviction · Date: 2024-10-20

**Facts:** Multiple construction-sector convictions including industrial manslaughter; ongoing Brisbane Auto Recycling sentencing review.

**Outcome:** Significant fines + suspended individual sentences.

**So what:** QLD construction sector under sustained WHS prosecutor attention.

**Source:** https://worksafe.qld.gov.au/news

### SRO Victoria — Windfall Gains Tax (new)
URL: https://rulesmate.com.au/enforcement/sro-vic-windfall-gains-2024
Regulator: sro-vic · Type: administrative · Date: 2024-07-01

**Facts:** Vic Windfall Gains Tax (in force 1 July 2023) — 50% tax on rezoning value uplifts ≥$500K. First assessments + objections proceeding.

**Outcome:** Active assessment + objection process; large value uplifts triggering significant tax.

**So what:** Property developers + landholders affected by rezoning face material tax exposure.

**Source:** https://sro.vic.gov.au/windfall-gains-tax

### CASA AOC suspensions + show-cause notices 2024
URL: https://rulesmate.com.au/enforcement/casa-multiple-aoc-2024
Regulator: casa · Type: show_cause · Date: 2024-09-10

**Facts:** Multiple AOC suspensions + show-cause notices following safety + financial distress concerns at smaller operators.

**Outcome:** Some suspensions; some operations restored after remediation.

**So what:** Aviation regulatory action intensifies with financial-distress signals; engagement quality with CASA matters.

**Source:** https://casa.gov.au/news

### TGA cancellations + recalls — medical devices 2024
URL: https://rulesmate.com.au/enforcement/tga-medical-devices-2024
Regulator: tga · Type: recall · Date: 2024-08-12

**Facts:** Multiple medical device recalls + ARTG cancellations following post-market surveillance findings — orthopaedic implants, breast implants, surgical mesh-related.

**Outcome:** Mandatory recalls; ARTG cancellations; civil + criminal exposure for sponsors who delayed action.

**So what:** Medical device sponsors must active PMS + report adverse events promptly; ARTG cancellation kills market access.

**Source:** https://tga.gov.au/news/safety-updates

### ACCC Supermarket Pricing Inquiry — Final Report
URL: https://rulesmate.com.au/enforcement/accc-supermarket-inquiry-2025
Regulator: accc · Type: inquiry_report · Date: 2025-02-26

**Facts:** ACCC year-long inquiry into supermarket competition + pricing transparency, with 20 recommendations.

**Outcome:** Recommendations include unit-pricing reform, mandatory price-history database, supplier code reforms.

**So what:** Major supermarket reform pipeline; merger control reforms additionally apply from 1 January 2026.

**Source:** https://accc.gov.au/inquiries-and-consultations/supermarkets-inquiry-2024-25

### AFP foreign bribery prosecutions — multiple ASX entities
URL: https://rulesmate.com.au/enforcement/afp-bribery-2024-asx-listed
Regulator: afp · Type: criminal_conviction · Date: 2024-11-04

**Facts:** Multiple foreign bribery prosecutions advanced through 2024 against ASX-listed entities + senior officers.

**Outcome:** Convictions; corporate fines + individual prison terms; failure-to-prevent corporate offence pending application.

**So what:** Foreign bribery exposure for AU-headquartered entities operating in high-risk jurisdictions; due-diligence + training essential.

**Source:** https://www.afp.gov.au/news-media/media-releases

### Sport Integrity Australia bans 2024
URL: https://rulesmate.com.au/enforcement/sia-anti-doping-2024
Regulator: asic · Type: banning_order · Date: 2024-12-01

**Facts:** Multiple anti-doping bans across professional + amateur sport in 2024.

**Outcome:** Bans range from public reprimand to lifetime ban depending on substance + cooperation.

**So what:** NSO governance + education programs are required; match-fixing referrals + investigations under Sport Integrity Australia continuing.

**Source:** https://www.sportintegrity.gov.au/news

### FIRB review — Port of Darwin (Landbridge)
URL: https://rulesmate.com.au/enforcement/firb-rejected-port-darwin-2023
Regulator: asic · Type: review_decision · Date: 2023-10-20

**Facts:** FIRB national security review of the 99-year Port of Darwin lease held by Landbridge Group (China). Government concluded no divestment required.

**Outcome:** Lease retained; SOCI Act 2018 controls applied for ongoing supervision.

**So what:** Critical infrastructure foreign-ownership posture under sustained national security review; existing arrangements not immune.

**Source:** https://firb.gov.au/about-firb/foreign-investment-data

### eSafety transparency notices to multiple platforms 2024
URL: https://rulesmate.com.au/enforcement/esafety-multi-platform-2024
Regulator: ic-australia · Type: transparency_notice · Date: 2024-10-15

**Facts:** eSafety issued BOSE transparency notices to Meta, Google, Microsoft, Apple + others.

**Outcome:** Some platforms cooperated fully; others received infringement notices for delayed / partial responses.

**So what:** BOSE response operationalised; foreign tech parents are not exempt.

**Source:** https://esafety.gov.au/newsroom

### AFCA systemic issues — insurance claims 2024
URL: https://rulesmate.com.au/enforcement/afca-systemic-2024-insurance
Regulator: afca · Type: systemic_referral · Date: 2024-12-15

**Facts:** AFCA referred multiple systemic issues to insurance firms + APRA / ASIC arising from 2022-23 natural disaster claims handling.

**Outcome:** Firm-level remediation programs; CGC monitoring of General Insurance Code of Practice compliance.

**So what:** Claims handling at scale during catastrophic events is now under structured systemic-issue review.

**Source:** https://afca.org.au/news/systemic-issues

### AER v EnergyAustralia (retail compliance)
URL: https://rulesmate.com.au/enforcement/aer-v-energy-australia-2024
Regulator: ic-aer · Type: civil_penalty · Date: 2024-08-08

**Facts:** EnergyAustralia admitted breaches of National Energy Retail Rules around hardship handling + disconnection.

**Outcome:** Civil penalty + remediation program.

**So what:** Energy retailers under sustained AER enforcement on hardship + customer-protection rules.

**Source:** https://aer.gov.au/news

### ATO Cash Economy Compliance Program 2024
URL: https://rulesmate.com.au/enforcement/ato-cash-economy-2024
Regulator: ato · Type: administrative · Date: 2024-09-30

**Facts:** ATO renewed focus on cash economy + omitted income detection — hospitality, building, hair + beauty, cleaning.

**Outcome:** Targeted audits + omitted income assessments + penalties.

**So what:** Cash-receipting businesses face data-matching against benchmarks + suppliers — disclosure + record-keeping vital.

**Source:** https://ato.gov.au/businesses-and-organisations/preparing-lodging-and-paying/preparing-for-an-ato-review-or-audit

### ASIC pre-NCCP BNPL guidance + intervention powers
URL: https://rulesmate.com.au/enforcement/asic-bnpl-intervention-2024
Regulator: asic · Type: intervention · Date: 2024-06-10

**Facts:** ASIC used product intervention + RG guidance pending BNPL NCCP commencement (10 June 2025).

**Outcome:** Industry signalled cooperation; some smaller BNPL operators exited the market.

**So what:** Pre-licensing regulatory expectations matter — non-cooperation locks in adverse RG positions.

**Source:** https://asic.gov.au/regulatory-resources/credit/

### ABF + Border Force employer sponsor sanctions 2024
URL: https://rulesmate.com.au/enforcement/abf-illegal-work-2024
Regulator: abf · Type: sanctions · Date: 2024-11-22

**Facts:** Multiple employer sponsors sanctioned for illegal work / sponsor obligation breaches; sponsorship bars + criminal referrals.

**Outcome:** Bars on future sponsorship; criminal prosecutions in serious cases.

**So what:** VEVO verification + sponsor obligations must be operationalised; ABF enforcement is active.

**Source:** https://www.abf.gov.au/news-media

### EPBC Act prosecutions — mining + agriculture clearings
URL: https://rulesmate.com.au/enforcement/epbc-mining-2024
Regulator: asic · Type: civil_penalty · Date: 2024-10-08

**Facts:** Multiple EPBC civil penalty proceedings 2024 against mining + agricultural entities for unauthorised clearing impacting MNES.

**Outcome:** Substantial civil penalties; remediation orders.

**So what:** EPBC controlled action triage is essential before any major land use change.

**Source:** https://www.dcceew.gov.au/environment/epbc/compliance-and-enforcement

### CAV real estate underquoting prosecutions 2024
URL: https://rulesmate.com.au/enforcement/consumer-affairs-vic-real-estate-2024
Regulator: cav · Type: criminal_conviction · Date: 2024-12-04

**Facts:** Multiple Vic real estate agencies prosecuted for underquoting offences; convictions + fines.

**Outcome:** Convictions + fines + licence consequences.

**So what:** Underquoting prosecutions ongoing; agencies must maintain price-quoting documentation.

**Source:** https://consumer.vic.gov.au/about-us/news-and-publications

### FWC right-to-disconnect stop orders 2024-2025
URL: https://rulesmate.com.au/enforcement/fwc-rtd-stop-orders-2024
Regulator: fwc · Type: stop_order · Date: 2025-02-01

**Facts:** Multiple FWC stop orders issued under s 333M of the Fair Work Act since August 2024 commencement.

**Outcome:** Orders typically specify protective measures + behavioural directives for managers.

**So what:** Right to disconnect enforcement live + accumulating. Workplace policies + manager training must be in place.

**Source:** https://fwc.gov.au/issues-we-help/protections-disputes/right-disconnect

### ACCC v Telstra (in-store sales misleading representations)
URL: https://rulesmate.com.au/enforcement/accc-v-telstra-2024-misleading-pricing
Regulator: accc · Type: civil_penalty · Date: 2024-06-26
Penalty: AUD 50,000,000

**Facts:** Telstra admitted unconscionable in-store sales conduct affecting Indigenous customers in remote NT + WA stores from 2016-2018.

**Outcome:** Federal Court ordered $50M penalty + remediation.

**So what:** Telco retail sales conduct in vulnerable customer settings under sustained scrutiny — training + customer protection essential.

**Source:** https://accc.gov.au/media-release/

### ARNECC monitoring of e-conveyancing platform incidents
URL: https://rulesmate.com.au/enforcement/arnecc-pexa-incident-2025
Regulator: nsw-fair-trading · Type: review · Date: 2025-01-15

**Facts:** Periodic ARNECC review of PEXA + Sympli outages + cyber incidents affecting settlement workflows.

**Outcome:** ARNECC reporting; subscriber + provider obligations enforced.

**So what:** E-conveyancing platform resilience is critical infrastructure for property transactions; subscribers face direct exposure.

**Source:** https://www.arnecc.gov.au

### AUSTRAC compliance assessments — PEP detection 2024
URL: https://rulesmate.com.au/enforcement/austrac-pep-detection-2024
Regulator: austrac · Type: review · Date: 2024-08-15

**Facts:** AUSTRAC concluded compliance assessments of multiple reporting entities focusing on PEP detection + enhanced due diligence.

**Outcome:** Remediation programs; some referrals to enforcement.

**So what:** PEP screening + EDD must be operationalised — screening lists + decision-record by senior management.

**Source:** https://austrac.gov.au/news-and-media/media-release/

### Class actions — superannuation greenwashing 2023-2024
URL: https://rulesmate.com.au/enforcement/class-action-greenwashing-2024
Regulator: asic · Type: class_action · Date: 2024-08-15

**Facts:** Class actions filed against multiple super funds alleging greenwashing in product marketing.

**Outcome:** Class actions ongoing; multiple settlements being negotiated.

**So what:** Greenwashing exposure now extends from regulator enforcement to class action recovery for member compensation.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### AHPRA + Medical Board cosmetic surgery action 2024
URL: https://rulesmate.com.au/enforcement/ahpra-cosmetic-2024
Regulator: ahpra · Type: registration_action · Date: 2024-11-04

**Facts:** AHPRA + Medical Board took action against multiple practitioners post-Four Corners cosmetic surgery investigation.

**Outcome:** Registration consequences; endorsement requirements + advertising rules tightened from 2025.

**So what:** Cosmetic surgery practitioners face structurally tighter scrutiny + new endorsement model.

**Source:** https://ahpra.gov.au/News.aspx

### ACNC charity revocations 2024
URL: https://rulesmate.com.au/enforcement/acnc-2024-revocations
Regulator: acnc · Type: registration_action · Date: 2024-12-31

**Facts:** ACNC revoked registration of multiple charities throughout 2024 for non-lodgement of AIS, governance standard breaches, or misuse of funds.

**Outcome:** Loss of charity status + DGR endorsement; ATO tax concession recovery.

**So what:** Charity status maintenance requires governance + AIS lodgement; revocation has significant tax consequences.

**Source:** https://acnc.gov.au/charity/charities/news-and-resources/news/charity-register-removals

### ASIC v REST Super (greenwashing infringement)
URL: https://rulesmate.com.au/enforcement/asic-v-rest-2018-greenwashing
Regulator: asic · Type: infringement · Date: 2023-06-13

**Facts:** REST infringement notice for misleading ESG product claim.

**Outcome:** Infringement notice paid; corrective communications + RG 270 alignment.

**So what:** Super funds + ESG product claims under continued ASIC scrutiny.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v CBA (mortgage broker dual-status)
URL: https://rulesmate.com.au/enforcement/asic-v-cba-mortgage-broker-2024
Regulator: asic · Type: court_judgment · Date: 2024-09-15

**Facts:** ASIC proceedings on mortgage broker best interests duty + appropriate-product test.

**Outcome:** Proceedings advanced; remediation programs initiated.

**So what:** BID enforcement against major banks signals broker-channel + lender behaviour both attract scrutiny.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v REST (investment performance + member outcomes)
URL: https://rulesmate.com.au/enforcement/asic-v-rest-2024-investment-failure
Regulator: asic · Type: review · Date: 2024-11-05

**Facts:** ASIC reviews of investment-performance + member-outcomes processes across major super funds.

**Outcome:** Remediation programs + governance changes.

**So what:** YFYS performance test + SPS 515 outcomes assessment closely linked.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC v AMP (mortgage broker BID)
URL: https://rulesmate.com.au/enforcement/asic-v-amp-2024-bid
Regulator: asic · Type: civil_penalty · Date: 2024-08-21
Penalty: AUD 4,000,000

**Facts:** AMP admitted Best Interests Duty failures.

**Outcome:** $4M penalty + remediation.

**So what:** BID enforcement against AFSL-related credit licensees expanding.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC investigations — ASX greenwashing across 2024-2025
URL: https://rulesmate.com.au/enforcement/asic-v-westpac-2025-greenwash-investigation
Regulator: asic · Type: review · Date: 2025-01-10

**Facts:** ASIC published 2 reports + 35+ infringement notices on ASX greenwashing 2023-2024.

**Outcome:** Infringement notices + civil proceedings progressing; ongoing enforcement program.

**So what:** Greenwashing enforcement program continues at scale; ASX entities + super funds primary targets.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ACCC v ASICS Oceania (consumer guarantees)
URL: https://rulesmate.com.au/enforcement/accc-v-asics-2024-consumer-guarantees
Regulator: accc · Type: civil_penalty · Date: 2024-05-30
Penalty: AUD 950,000

**Facts:** ASICS Oceania misled consumers about their rights to refunds/replacements under consumer guarantees.

**Outcome:** $950,000 penalty + court orders.

**So what:** Retail return policies must align to ACL consumer guarantees — 'no refund' or 30-day windows attract penalty.

**Source:** https://accc.gov.au/media-release/

### ACCC further investigation — Bunnings (pricing claims)
URL: https://rulesmate.com.au/enforcement/accc-v-bunnings-2025-misleading-pricing
Regulator: accc · Type: investigation · Date: 2025-03-04

**Facts:** Ongoing ACCC supermarket-style pricing claim investigations extended to large retailers.

**Outcome:** Investigation ongoing.

**So what:** Pricing claim transparency increasingly scrutinised across all major retail.

**Source:** https://accc.gov.au/media-release/

### ACCC v Coca-Cola (sugar tax + advertising)
URL: https://rulesmate.com.au/enforcement/accc-v-coca-cola-amatil-2024
Regulator: accc · Type: investigation · Date: 2024-09-14

**Facts:** ACCC reviewed Coca-Cola product claims + sugar-tax advertising.

**Outcome:** Resolution + advertising changes.

**So what:** Sugar/health claims subject to ACL misleading conduct scrutiny.

**Source:** https://accc.gov.au/media-release/

### Class action settlement — Uber + taxi industry
URL: https://rulesmate.com.au/enforcement/accc-v-uber-2024-class-action
Regulator: accc · Type: class_action · Date: 2024-03-15

**Facts:** Class action by AU taxi + hire car operators alleging unlawful entry into Australian market.

**Outcome:** $272M settlement approved 2024.

**So what:** Disruptive entrant strategies may face structural-conduct + ACL liability + class action exposure.

**Source:** https://accc.gov.au/media-release/

### AUSTRAC v SkyCity Adelaide
URL: https://rulesmate.com.au/enforcement/austrac-skycity-adelaide-2024
Regulator: austrac · Type: civil_penalty · Date: 2024-06-13
Penalty: AUD 67,000,000

**Facts:** SkyCity admitted serious + systemic AML/CTF non-compliance including failure to identify high-risk customers + insufficient program.

**Outcome:** $67M civil penalty.

**So what:** Mid-tier casinos under same AUSTRAC scrutiny as majors; remediation expectations high.

**Source:** https://austrac.gov.au/news-and-media/media-release/

### AUSTRAC v Entain (Ladbrokes / Neds parent)
URL: https://rulesmate.com.au/enforcement/austrac-entain-2025
Regulator: austrac · Type: civil_penalty · Date: 2024-12-12

**Facts:** AUSTRAC alleges Entain failed to maintain compliant AML/CTF program + Customer Due Diligence over a multi-year period.

**Outcome:** Civil penalty proceedings advanced; settlement under negotiation.

**So what:** Wagering operators under AUSTRAC sustained focus + significant penalty exposure.

**Source:** https://austrac.gov.au/news-and-media/media-release/

### OAIC determination — Bunnings facial recognition + biometric
URL: https://rulesmate.com.au/enforcement/oaic-bunnings-determination-2024
Regulator: oaic · Type: determination · Date: 2024-11-19

**Facts:** Bunnings operated facial recognition in stores for loss prevention without proper notice + consent for sensitive (biometric) information.

**Outcome:** Commissioner determined APP 3.3 + 5 + 6 breaches. Ordered cessation + destruction of biometric data + remediation.

**So what:** Sensitive-information collection requires consent — loss prevention is not a sufficient justification for facial recognition deployment.

**Source:** https://oaic.gov.au/news/media-centre/

### OAIC enforcement — multiple SMB breach investigations 2024
URL: https://rulesmate.com.au/enforcement/oaic-isis-2024-pageup
Regulator: oaic · Type: investigation · Date: 2024-12-31

**Facts:** OAIC investigated multiple SMB-scale breaches in 2024 — including in legal, retail, healthcare. Most resolved without penalty but documented APP 11 reasonable-steps + NDB notification expectations.

**Outcome:** Determinations + remediation undertakings.

**So what:** OAIC pre-Privacy Act 2026 SMB exemption removal is increasing SMB investigation tempo.

**Source:** https://oaic.gov.au/news/media-centre/

### FWO v Rockpool Dining Group (underpayment)
URL: https://rulesmate.com.au/enforcement/fwo-v-rockpool-2024
Regulator: fwo · Type: civil_penalty · Date: 2024-08-15

**Facts:** Rockpool admitted underpayment of ~1,500 staff across multiple venues over 5+ years; $1.6M backpaid + court penalties.

**Outcome:** Civil penalties; remediation paid.

**So what:** Hospitality industry top FWO enforcement target; self-disclosure attracts civil resolution.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### FWO v Grill'd (franchisor liability)
URL: https://rulesmate.com.au/enforcement/fwo-v-grill-d-2024
Regulator: fwo · Type: investigation · Date: 2024-04-30

**Facts:** FWO investigation into Grill'd franchisor / franchisee underpayment matters.

**Outcome:** Remediation programs; franchisor accountability ongoing.

**So what:** Franchisor accountability under FW Amendment (Protecting Vulnerable Workers) Act 2017 extends to oversight obligations.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### Merivale class action settlement (underpayment)
URL: https://rulesmate.com.au/enforcement/fwo-v-merivale-2023-class-action
Regulator: fwo · Type: class_action · Date: 2024-02-29

**Facts:** Class action by ~6,000 Merivale workers alleging systematic underpayment under flat-rate weekly arrangements rather than award.

**Outcome:** $19.25M settlement approved 2024.

**So what:** Flat-rate / annualised salary arrangements must reconcile to award every pay period; class action recovery alongside FWO enforcement.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### FWO v Deliveroo Australia (sham contracting)
URL: https://rulesmate.com.au/enforcement/fwo-v-deliveroo-2024-sham
Regulator: fwo · Type: investigation · Date: 2024-06-19

**Facts:** Multi-year disputes around gig-economy worker status; FWC determined Deliveroo rider was employee (overturned on appeal); ongoing reform under Closing Loopholes Act.

**Outcome:** Mixed outcomes; minimum standards regime now in place via 2024 reform.

**So what:** Gig economy worker status now governed by FWC minimum standards under Closing Loopholes — pure contractor model harder to maintain.

**Source:** https://fairwork.gov.au/about-us/news-and-media-releases/

### APRA credit growth caps + macroprudential limits
URL: https://rulesmate.com.au/enforcement/apra-cba-2024-credit-cap
Regulator: apra · Type: macroprudential · Date: 2024-09-30

**Facts:** APRA periodic macroprudential interventions including interest rate buffers + investor lending limits.

**Outcome:** Buffers + caps adjusted periodically; current 3% serviceability buffer.

**So what:** Macroprudential settings affect lender underwriting + borrower capacity directly.

**Source:** https://apra.gov.au/news-and-publications/

### APRA fine against Mercer (super governance)
URL: https://rulesmate.com.au/enforcement/apra-mercer-superannuation-2024
Regulator: apra · Type: regulatory_review · Date: 2024-06-26

**Facts:** APRA review concluded Mercer Super governance + risk management did not meet prudential expectations; required undertakings.

**Outcome:** Court-enforceable undertaking; board reforms.

**So what:** APRA expectations on RSE governance + risk management embedded in CPS 220 + SPS 515.

**Source:** https://apra.gov.au/news-and-publications/

### NDIS Commission multiple banning orders 2024
URL: https://rulesmate.com.au/enforcement/ndis-commission-2024-banning-2
Regulator: ndis-commission · Type: banning_order · Date: 2024-12-15

**Facts:** NDIS Commission issued banning orders against multiple support workers + providers in 2024 — abuse, neglect, fraud cases.

**Outcome:** Indefinite banning orders; criminal referrals where applicable.

**So what:** Banning orders are personal + permanent — pre-hire screening of NDIS workers vital.

**Source:** https://ndiscommission.gov.au/news

### ACQSC Bupa Aged Care sanctions
URL: https://rulesmate.com.au/enforcement/acqsc-bupa-sanctions-2024
Regulator: aged-care-quality · Type: sanctions · Date: 2024-09-30

**Facts:** Multiple Bupa facilities sanctioned across 2023-2024 for non-compliance with quality standards + SIRS notification failures.

**Outcome:** Sanctions including conditions, halt on new admissions, additional reporting.

**So what:** Even large operators face structured sanctioning when standards breached; Star Ratings + transparency drive customer churn.

**Source:** https://agedcarequality.gov.au/news-and-events

### ACMA Spam Act enforcement — 2024 wave
URL: https://rulesmate.com.au/enforcement/acma-marketing-2024-multi
Regulator: acma · Type: infringement · Date: 2024-12-31

**Facts:** ACMA infringement notices across 2024 against multiple companies for Spam Act + DNCR breaches — totals exceed $10M in penalties.

**Outcome:** Infringement notices + court-enforceable undertakings.

**So what:** Marketing automation + outbound sales platforms under sustained ACMA enforcement.

**Source:** https://acma.gov.au/news

### eSafety multiple platform notices 2024-2025
URL: https://rulesmate.com.au/enforcement/esafety-investment-2024-multi
Regulator: ic-australia · Type: transparency_notice · Date: 2025-01-15

**Facts:** eSafety issued BOSE transparency notices to multiple platforms 2024-2025 — Meta, X, TikTok, Telegram, Discord etc.

**Outcome:** Platforms responded with transparency reports; some failures attracted infringement notices.

**So what:** Tech platforms operationalising BOSE compliance with increased seriousness.

**Source:** https://esafety.gov.au/newsroom

### CASA + ATSB — Bonza Aviation operational issues 2024
URL: https://rulesmate.com.au/enforcement/casa-bonza-2024
Regulator: casa · Type: regulatory_review · Date: 2024-05-22

**Facts:** Bonza voluntary administration April 2024; CASA + ATSB regulatory attention on safety oversight during financial distress.

**Outcome:** Operations ceased; CASA continued safety oversight through wind-down.

**So what:** Aviation regulator engagement during financial distress is intensive — both safety + AOC at risk.

**Source:** https://casa.gov.au/news

### FIRB residential divestment orders 2024
URL: https://rulesmate.com.au/enforcement/firb-multiple-divestment-2024
Regulator: asic · Type: divestment_order · Date: 2024-12-15

**Facts:** FIRB compliance program detected residential property + business acquisitions in breach.

**Outcome:** Multiple forced divestments + significant pecuniary penalties.

**So what:** Foreign investment compliance increasingly enforced via data matching + active sweeps.

**Source:** https://firb.gov.au/about-firb/foreign-investment-data

### OAIC follow-up enforcement — Clearview AI compliance
URL: https://rulesmate.com.au/enforcement/oaic-clearview-followup-2024
Regulator: oaic · Type: follow_up · Date: 2024-09-12

**Facts:** Follow-up compliance from 2021 determination + ongoing biometric processing detected.

**Outcome:** Additional remediation orders; compliance monitoring.

**So what:** OAIC follows through on prior determinations — biometric processing under sustained scrutiny.

**Source:** https://oaic.gov.au/news/media-centre/

### IPC NSW privacy investigations — government breaches
URL: https://rulesmate.com.au/enforcement/ipc-nsw-2024-government-breaches
Regulator: ipc-nsw · Type: review · Date: 2024-11-15

**Facts:** Multiple NSW government agency privacy reviews including data breaches + PPIPA failures.

**Outcome:** Recommendations + agency remediation.

**So what:** NSW government privacy + GIPA compliance under sustained IPC review.

**Source:** https://ipc.nsw.gov.au

### EPBC Act prosecutions — multiple mining + ag 2024
URL: https://rulesmate.com.au/enforcement/epbc-2024-mining-prosecutions
Regulator: asic · Type: civil_penalty · Date: 2024-12-31

**Facts:** Substantial EPBC prosecutions through 2024 against mining + ag entities for unauthorised clearing / MNES impacts.

**Outcome:** Civil penalties + remediation orders.

**So what:** EPBC compliance pre-action review is critical for any major land use change.

**Source:** https://www.dcceew.gov.au/environment/epbc/compliance-and-enforcement

### ACCC CDR Banking compliance reviews 2024
URL: https://rulesmate.com.au/enforcement/accc-cdr-banking-2024
Regulator: accc · Type: review · Date: 2024-10-31

**Facts:** Periodic ACCC + OAIC compliance reviews of CDR Banking data holders + accredited recipients.

**Outcome:** Findings + remediation programs; civil penalty cases progressing for serious breaches.

**So what:** CDR compliance increasingly enforced — Privacy Safeguards + data quality + accreditation conditions tracked.

**Source:** https://accc.gov.au/about-us/policies-and-publications/consumer-data-right

### NSW Fair Trading real estate trust account prosecutions
URL: https://rulesmate.com.au/enforcement/nsw-fair-trading-2024-real-estate-trust
Regulator: nsw-fair-trading · Type: criminal_conviction · Date: 2024-09-30

**Facts:** Multiple prosecutions of NSW real estate agencies for trust account misuse + non-lodgement of audits.

**Outcome:** Convictions + licence cancellations + prison sentences for serious misappropriation.

**So what:** Real estate trust account compliance has both criminal + licensing dimension.

**Source:** https://www.fairtrading.nsw.gov.au

### Home Affairs SOCI directions 2024
URL: https://rulesmate.com.au/enforcement/home-affairs-soci-2024-multiple-directions
Regulator: home-affairs-soci · Type: direction · Date: 2024-11-22

**Facts:** Multiple SOCI Part 3A directions issued to responsible entities for critical infrastructure assets following cyber incidents + risk assessments.

**Outcome:** Directions complied with; remediation programs activated.

**So what:** SOCI direction powers actively used; critical infrastructure must have robust CIRMP + cyber posture.

**Source:** https://cisc.gov.au

### Bupa Aged Care class action — care standards
URL: https://rulesmate.com.au/enforcement/class-action-bupa-2024
Regulator: aged-care-quality · Type: class_action · Date: 2024-08-15

**Facts:** Class action by Bupa residents + families alleging substandard care + breach of contract.

**Outcome:** Class action progressing; potential significant settlement.

**So what:** Aged care class action exposure on top of ACQSC enforcement — investor + insurance impact.

**Source:** https://agedcarequality.gov.au

### ABF employer prosecutions — illegal work 2024
URL: https://rulesmate.com.au/enforcement/abf-multiple-employer-2024
Regulator: abf · Type: criminal_conviction · Date: 2024-12-15

**Facts:** Multiple employer prosecutions through 2024 for allowing illegal work — primarily hospitality + cleaning + construction.

**Outcome:** Convictions + significant fines + sponsorship consequences.

**So what:** VEVO verification + sponsor obligations actively enforced; employer record-keeping defence essential.

**Source:** https://www.abf.gov.au/news-media

### CDPP foreign bribery convictions 2024
URL: https://rulesmate.com.au/enforcement/cdpp-foreign-bribery-2024
Regulator: cdpp · Type: criminal_conviction · Date: 2024-11-04

**Facts:** Multiple foreign bribery convictions through 2024 against ASX-listed entities + senior officers.

**Outcome:** Convictions; corporate fines + individual prison sentences.

**So what:** Foreign bribery prosecutions are now routine; failure-to-prevent offence pending application.

**Source:** https://www.cdpp.gov.au

### ASIC product intervention orders 2024
URL: https://rulesmate.com.au/enforcement/asic-product-intervention-2024
Regulator: asic · Type: intervention · Date: 2024-12-31

**Facts:** Multiple ASIC product intervention orders + extensions through 2024 across CFDs, binary options (now banned), pre-NCCP BNPL, short-term credit.

**Outcome:** Orders in force or extended; consumer protection outcomes monitored.

**So what:** Product intervention is now standard ASIC tool — issuers must engage early on product design + consumer protection.

**Source:** https://asic.gov.au/regulatory-resources/financial-services/product-intervention-power/

### ACQSC restrictive practices compliance 2024
URL: https://rulesmate.com.au/enforcement/acqsc-restrictive-practices-2024
Regulator: aged-care-quality · Type: compliance · Date: 2024-11-30

**Facts:** ACQSC reviewed restrictive practices use across residential aged care; identified providers exceeding chemical restraint thresholds.

**Outcome:** Compliance plans + sanctions for repeat offenders.

**So what:** Chemical restraint usage tracked + benchmarked; deprescribing programs increasingly mandated.

**Source:** https://agedcarequality.gov.au

### ACMA scam call enforcement waves 2024
URL: https://rulesmate.com.au/enforcement/acma-scam-call-2024
Regulator: acma · Type: infringement · Date: 2024-10-31

**Facts:** Multiple infringement notices against smaller carriers for scam call code compliance failures.

**Outcome:** Infringement notices + court-enforceable undertakings; smaller carriers + resellers under audit.

**So what:** Scam call traceback obligations applied across the sector — smaller carriers face structural compliance gaps.

**Source:** https://acma.gov.au/scams-action

### ATO R&D Tax Incentive integrity reviews 2024
URL: https://rulesmate.com.au/enforcement/ato-r-d-tax-incentive-2024
Regulator: ato · Type: administrative · Date: 2024-09-30

**Facts:** ATO + AusIndustry continued integrity program identifying ineligible R&D claims.

**Outcome:** Claim disallowances + penalties; criminal referral for fraudulent claims.

**So what:** R&D Tax Incentive claims subject to robust integrity review — contemporaneous documentation essential.

**Source:** https://ato.gov.au/businesses-and-organisations/income-deductions-and-concessions/research-and-development-tax-incentive

### AFCA significant determinations 2024
URL: https://rulesmate.com.au/enforcement/afca-2024-determinations
Regulator: afca · Type: determinations · Date: 2024-12-31

**Facts:** AFCA published significant determinations through 2024 across financial advice, insurance, banking + super.

**Outcome:** Compensation orders ranging from thousands to millions of dollars per case.

**So what:** AFCA monetary jurisdiction now $5.5M for most disputes; significant exposure for firms.

**Source:** https://my.afca.org.au/searchafcadecisions/

### ATO JobKeeper recovery + integrity
URL: https://rulesmate.com.au/enforcement/ato-jobkeeper-recovery-2024
Regulator: ato · Type: administrative · Date: 2024-06-30

**Facts:** ATO continued JobKeeper integrity program — recovering payments from ineligible recipients + prosecuting fraud.

**Outcome:** Hundreds of millions recovered; multiple criminal prosecutions.

**So what:** Pandemic-era support program integrity reviews extend many years — record-keeping essential.

**Source:** https://ato.gov.au/about-ato/media-centre/

### FWC anti-bullying + sexual harassment stop orders 2024
URL: https://rulesmate.com.au/enforcement/fwc-bullying-stop-orders-2024
Regulator: fwc · Type: stop_order · Date: 2024-12-31

**Facts:** FWC issued multiple stop orders during 2024 across bullying + sexual harassment jurisdiction.

**Outcome:** Orders typically specify protective measures + behavioural directives.

**So what:** Workplace policy + manager training on bullying + sexual harassment + reasonable management action critical.

**Source:** https://fwc.gov.au/issues-we-help/bullying-and-sexual-harassment

### SIA + WADA bans 2024
URL: https://rulesmate.com.au/enforcement/sia-2024-multiple
Regulator: asic · Type: banning_order · Date: 2024-12-31

**Facts:** Multiple anti-doping bans across professional + amateur sport in 2024.

**Outcome:** Bans range from public reprimand to lifetime.

**So what:** NSO governance + education programs required; match-fixing referrals ongoing.

**Source:** https://www.sportintegrity.gov.au/news

### Revenue NSW grouping decisions 2024
URL: https://rulesmate.com.au/enforcement/revenue-nsw-2024-payroll-grouping
Regulator: revenue-nsw · Type: review · Date: 2024-08-31

**Facts:** Revenue NSW issued grouping determinations through 2024 across multi-entity SMB structures.

**Outcome:** Backdated payroll tax + interest + penalty tax; objection appeals continuing.

**So what:** NSW payroll tax grouping aggressive — common ownership / substantial influence + use of staff are key triggers.

**Source:** https://revenue.nsw.gov.au/taxes-duties-levies-royalties/payroll-tax

### SafeWork SA + WorkSafe Tas WHS prosecutions 2024
URL: https://rulesmate.com.au/enforcement/safework-sa-2024
Regulator: safework-sa · Type: criminal_conviction · Date: 2024-10-31

**Facts:** Multiple WHS prosecutions across SA + Tas through 2024 — construction, manufacturing, agriculture.

**Outcome:** Convictions + significant fines; industrial manslaughter regimes commencing in SA.

**So what:** Smaller state regulators active in WHS enforcement; SA industrial manslaughter from 2024.

**Source:** https://safework.sa.gov.au

### Food recalls coordinated by FSANZ 2024
URL: https://rulesmate.com.au/enforcement/fsanz-recall-2024
Regulator: fsanz · Type: recall_coordination · Date: 2024-12-31

**Facts:** FSANZ coordinated multiple food recalls during 2024 — undeclared allergens, microbial contamination, foreign matter.

**Outcome:** Recalls executed; supplier remediation programs.

**So what:** Food manufacturers must have robust recall procedures + traceability + supplier QA.

**Source:** https://foodstandards.gov.au/recalls

### ACNC charity revocations 2024 (round-up)
URL: https://rulesmate.com.au/enforcement/acnc-charity-revocations-2024
Regulator: acnc · Type: registration_action · Date: 2024-12-31

**Facts:** ACNC revoked registration of multiple charities throughout 2024 — typically for non-lodgement of AIS or governance failures.

**Outcome:** Loss of charity status + DGR endorsement + tax concession recovery.

**So what:** Charity status requires governance + AIS lodgement; revocation has significant tax consequences.

**Source:** https://acnc.gov.au/charity/charities/news-and-resources/news/charity-register-removals

### Class action — Mercer Super greenwashing
URL: https://rulesmate.com.au/enforcement/class-action-mercer-2024
Regulator: asic · Type: class_action · Date: 2024-12-15

**Facts:** Class action filed against Mercer Super following ASIC greenwashing finding.

**Outcome:** Class action progressing.

**So what:** Regulator enforcement (ASIC) frequently followed by class action — double exposure.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### AHPRA cosmetic surgery actions 2024
URL: https://rulesmate.com.au/enforcement/ahpra-cosmetic-2024-multiple
Regulator: ahpra · Type: registration_action · Date: 2024-12-31

**Facts:** Multiple registrations actions against cosmetic practitioners post-Four Corners + Medical Board reforms.

**Outcome:** Conditions + suspensions + cancellations.

**So what:** Cosmetic surgery + non-surgical cosmetic providers face structurally tighter oversight.

**Source:** https://ahpra.gov.au/News.aspx

### OAIC determination — Kmart facial recognition
URL: https://rulesmate.com.au/enforcement/oaic-kmart-2024
Regulator: oaic · Type: determination · Date: 2024-11-19

**Facts:** Kmart operated facial recognition for loss prevention; same proceedings as Bunnings determination 2024.

**Outcome:** Commissioner determined breaches; cessation + biometric data destruction.

**So what:** Aggressive biometric deployment is high-risk; sensitive-information consent + proportionality essential.

**Source:** https://oaic.gov.au/news/media-centre/

### ARNECC + ELN incident reports 2024
URL: https://rulesmate.com.au/enforcement/arnecc-pexa-incidents-2024
Regulator: nsw-fair-trading · Type: review · Date: 2024-11-30

**Facts:** ARNECC periodic reviews + ELN incident reports — PEXA + Sympli operational events affecting settlement workflows.

**Outcome:** Subscriber + provider obligations reinforced.

**So what:** E-conveyancing platform resilience material to property settlement system; subscriber + provider obligations key.

**Source:** https://www.arnecc.gov.au

### ABF enforcement focus 2025 — gig economy + cleaning
URL: https://rulesmate.com.au/enforcement/abf-2025-illegal-work-targets
Regulator: abf · Type: enforcement_focus · Date: 2025-02-15

**Facts:** ABF announced focus on gig economy + cleaning + agriculture sectors for illegal work in 2025.

**Outcome:** Increased audits + prosecutions; criminal referrals for serious cases.

**So what:** Platform operators + labour-hire intermediaries face increased scrutiny.

**Source:** https://www.abf.gov.au/news-media

### ACCC enforcement under mandatory F+G Code from April 2025
URL: https://rulesmate.com.au/enforcement/accc-food-grocery-code-mandatory-2025
Regulator: accc · Type: enforcement_focus · Date: 2025-04-01

**Facts:** ACCC commenced enforcement under the now-mandatory F+G Code from April 2025; significant civil penalty regime.

**Outcome:** Investigations underway; first civil penalty proceedings expected late 2025.

**So what:** Supermarket-supplier dynamics under structural review — supplier protections newly enforceable.

**Source:** https://accc.gov.au/business/industry-codes/food-and-grocery-code-of-conduct

### Aged Care Star Ratings transparency outcomes 2024
URL: https://rulesmate.com.au/enforcement/acqsc-star-ratings-disparities
Regulator: aged-care-quality · Type: transparency · Date: 2024-12-31

**Facts:** Star Ratings published quarterly + drove consumer + financial outcomes; 1-2 star facilities face market consequences.

**Outcome:** Provider response varied — some divestments, some major service redesigns.

**So what:** Star Ratings now a primary commercial signal for the sector.

**Source:** https://www.myagedcare.gov.au

### WGEA gender pay gap publication — first round (Feb 2024)
URL: https://rulesmate.com.au/enforcement/wgea-pay-gap-publication-2024
Regulator: wgea · Type: transparency · Date: 2024-02-27

**Facts:** First public WGEA employer-level gender pay gap publication — 2,500+ employers above 100-staff threshold.

**Outcome:** Public scrutiny + employer statement responses; ongoing annual cycle.

**So what:** Gender pay gap data + employer statement now part of HR governance + investor disclosures.

**Source:** https://wgea.gov.au/pay-gap

### AHPRA cosmetic advertising actions 2024
URL: https://rulesmate.com.au/enforcement/ahpra-cosmetic-advertising-2024
Regulator: ahpra · Type: registration_action · Date: 2024-12-31

**Facts:** AHPRA prepared + began enforcing tightened cosmetic advertising guidelines through 2024 ahead of 2025 endorsement model.

**Outcome:** Conditions + cessation orders + cosmetic surgery practitioners renaming.

**So what:** Cosmetic surgery / procedure marketing subject to compliance audit + before/after rules.

**Source:** https://www.medicalboard.gov.au

### TPB + Senate continued response — PwC tax leaks
URL: https://rulesmate.com.au/enforcement/pwc-tax-leaks-tpb-2024
Regulator: tpb · Type: registration_action · Date: 2024-08-26

**Facts:** TPB de-registered multiple PwC personnel through 2024; further confidentiality + breach-reporting legislation passed.

**Outcome:** Reformed TASA Code in force from 1 January 2025 + significantly expanded breach reporting + false-and-misleading-statement obligations.

**So what:** Tax practitioner confidentiality + governance reforms substantially tighter; firm + individual exposure.

**Source:** https://tpb.gov.au/news

### SRO Vic — Windfall Gains Tax 2024 assessments
URL: https://rulesmate.com.au/enforcement/sro-vic-windfall-gains-2024-assessments
Regulator: sro-vic · Type: administrative · Date: 2024-09-30

**Facts:** WGT first-year assessments + objections progressing through 2024; large rezoning uplifts triggering significant tax.

**Outcome:** Assessments + payments; some objections to VCAT.

**So what:** Vic property developers + landholders affected by rezoning face WGT exposure.

**Source:** https://sro.vic.gov.au/windfall-gains-tax

### CBA class action settlements 2024
URL: https://rulesmate.com.au/enforcement/class-action-cba-2024
Regulator: asic · Type: class_action · Date: 2024-10-15

**Facts:** Multiple CBA class action settlements in 2024 — fees-for-no-service, junk insurance, AML disclosure.

**Outcome:** Hundreds of millions in cumulative settlements.

**So what:** Banking class action exposure substantial alongside ASIC + APRA enforcement.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### FWC labour-hire 'same job same pay' orders 2024
URL: https://rulesmate.com.au/enforcement/fwc-labour-hire-orders-2024
Regulator: fwc · Type: regulated_labour_hire_order · Date: 2024-11-15

**Facts:** FWC made first labour-hire 'same job same pay' orders under Closing Loopholes regime affecting mining + construction.

**Outcome:** Orders binding labour-hire providers + host businesses to direct-employee terms.

**So what:** Labour-hire cost arbitrage closing — mining + construction first affected; expand to other industries.

**Source:** https://fwc.gov.au/issues-we-help/labour-hire/same-job-same-pay

### ASIC short-selling + market integrity actions 2024
URL: https://rulesmate.com.au/enforcement/asic-short-selling-2024
Regulator: asic · Type: compliance · Date: 2024-12-31

**Facts:** ASIC continued market integrity surveillance — short-selling disclosure, market manipulation, insider trading.

**Outcome:** Infringement notices + civil penalty proceedings against multiple participants.

**So what:** Market integrity surveillance continuous; trading desks + algos under tracking.

**Source:** https://asic.gov.au/regulatory-resources/markets/

### ASIC v Cassimatis (Storm Financial)
URL: https://rulesmate.com.au/enforcement/asic-v-cassimatis-2015
Regulator: asic · Type: court_judgment · Date: 2015-08-21

**Facts:** ASIC alleged directors breached duty of care + diligence (s 180) by causing AFSL to provide inappropriate advice to vulnerable clients.

**Outcome:** Court found contraventions; pecuniary penalties + 7-year disqualifications.

**So what:** Directors of advice licensees may be personally liable for systemic advice failures under s 180.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### Fees-for-no-service program (industry-wide)
URL: https://rulesmate.com.au/enforcement/westpac-cba-fees-no-service
Regulator: asic · Type: remediation · Date: 2018-04-30

**Facts:** Industry-wide remediation following Royal Commission — banks + AMP charged ongoing service fees without providing services.

**Outcome:** Cumulative $4B+ in customer remediation across banks + AMP through 2018-2023.

**So what:** Periodic services confirmation + fee disclosure obligations entrenched in DDO + RG 175.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### Hayne Royal Commission Final Report (Feb 2019)
URL: https://rulesmate.com.au/enforcement/hayne-royal-commission-2019
Regulator: asic · Type: royal_commission_report · Date: 2019-02-04

**Facts:** Hayne Royal Commission into Misconduct in the Banking, Superannuation + Financial Services Industry — 76 recommendations.

**Outcome:** Wave of legislation 2019-2024 implementing 70+ recommendations.

**So what:** Major regulatory tightening — DDO, FAR, hawking ban, ASIC litigation funder, enforceable codes.

**Source:** https://www.royalcommission.gov.au/banking

### BBSW rate-rigging settlements (ANZ + Westpac + NAB)
URL: https://rulesmate.com.au/enforcement/anz-westpac-westpac-rate-rigging
Regulator: asic · Type: civil_penalty · Date: 2018-10-30

**Facts:** ASIC alleged banks manipulated BBSW. ANZ + NAB + CBA settled; Westpac fought + lost in part.

**Outcome:** Combined ~$125M in penalties + $80M in enforceable undertakings.

**So what:** Major bank trading conduct + benchmark integrity governance materially uplifted.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### Qantas v TWU (illegal outsourcing)
URL: https://rulesmate.com.au/enforcement/qantas-2024-illegally-stood-down
Regulator: fwc · Type: court_judgment · Date: 2023-09-13

**Facts:** High Court (2023) confirmed Qantas's 2020 outsourcing of ~1,700 ground staff contravened FWA s 340 — taking adverse action to prevent exercise of workplace right.

**Outcome:** Quantum hearings ongoing 2024-2025; significant damages + penalties expected.

**So what:** Outsourcing decisions during workplace bargaining or industrial periods may breach s 340.

**Source:** https://www.fwc.gov.au

### ACCC v Qantas (ghost flights)
URL: https://rulesmate.com.au/enforcement/qantas-2024-ghost-flights
Regulator: accc · Type: civil_penalty · Date: 2024-05-06
Penalty: AUD 100,000,000

**Facts:** ACCC alleged Qantas sold tickets for cancelled flights ('ghost flights') + delayed advising 86,000+ customers.

**Outcome:** $100M civil penalty + $20M consumer remediation. Settlement May 2024.

**So what:** Airlines must promptly notify customers of cancelled flights + offer refunds; ACL applies to flight bookings.

**Source:** https://accc.gov.au/media-release/

### AUSTRAC v Westpac (LitePay child exploitation)
URL: https://rulesmate.com.au/enforcement/westpac-2020-austrac
Regulator: austrac · Type: civil_penalty · Date: 2020-09-24
Penalty: AUD 1,300,000,000

**Facts:** AUSTRAC alleged Westpac contravened AML/CTF Act 23M times — including via LitePay payments to child exploitation hotspots in SE Asia.

**Outcome:** $1.3B civil penalty — largest in AU corporate history.

**So what:** Correspondent banking + Letter of Credit relationships + correspondent risk assessment under intense AUSTRAC focus.

**Source:** https://austrac.gov.au/news-and-media/media-release/

### AUSTRAC v CBA (IDM machines)
URL: https://rulesmate.com.au/enforcement/cba-2018-austrac
Regulator: austrac · Type: civil_penalty · Date: 2018-06-04
Penalty: AUD 700,000,000

**Facts:** AUSTRAC alleged CBA failed to file 53K+ TTRs + had systemic IDM machine AML failures.

**Outcome:** $700M civil penalty — at the time, largest in AU corporate history.

**So what:** Cash-handling channels + IDM machines + transaction monitoring scrutinised; AUSTRAC enforcement focus on intelligence value.

**Source:** https://austrac.gov.au/news-and-media/media-release/

### AUSTRAC v Tabcorp
URL: https://rulesmate.com.au/enforcement/tabcorp-2017-austrac
Regulator: austrac · Type: civil_penalty · Date: 2017-03-16
Penalty: AUD 45,000,000

**Facts:** AUSTRAC alleged Tabcorp had systemic AML/CTF compliance failures over 5+ years.

**Outcome:** $45M penalty — at the time, largest AUSTRAC penalty.

**So what:** Wagering operators have been under AUSTRAC oversight since the 2017 case — sustained focus.

**Source:** https://austrac.gov.au/news-and-media/media-release/

### ASIC v Macquarie Bank (mass-market futures)
URL: https://rulesmate.com.au/enforcement/macquarie-bank-asic-2024
Regulator: asic · Type: civil_penalty · Date: 2024-09-11

**Facts:** ASIC alleged Macquarie Bank failed to monitor for + report suspicious activity in mass-market futures + CFD trading.

**Outcome:** $10M penalty + remediation.

**So what:** Brokers + market makers obliged to monitor + report suspicious trading regardless of retail/wholesale split.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### Juukan Gorge destruction — Rio Tinto
URL: https://rulesmate.com.au/enforcement/rio-tinto-juukan-2020
Regulator: asic · Type: incident · Date: 2020-05-24

**Facts:** Rio Tinto destroyed 46,000-year-old Aboriginal heritage rock shelters at Juukan Gorge with WA gov approval. Sparked national outrage.

**Outcome:** CEO + Iron Ore CEO + corporate affairs head departed; Senate inquiry; WA Aboriginal Cultural Heritage Act 2021 (subsequently repealed in 2023 reform). Federal EPBC reform.

**So what:** Mining + resources entities face heightened heritage + free prior + informed consent expectations + reputational + commercial consequences for incidents.

**Source:** https://www.aph.gov.au/Parliamentary_Business/Committees/Joint/Northern_Australia/CavesatJuukanGorge

### ACCC supermarkets price inquiry (2024-2025)
URL: https://rulesmate.com.au/enforcement/wesfarmers-coles-2025
Regulator: accc · Type: inquiry · Date: 2025-02-28

**Facts:** ACCC supermarkets inquiry (Coles + Woolworths) launched Jan 2024; final report Feb 2025. Found significant market power but limited per se misuse; recommended unit pricing reforms + supplier protections.

**Outcome:** F+G Code became mandatory April 2025 with civil penalties + supplier protections + supplier whistleblower protections.

**So what:** Supermarket-supplier dynamics being restructured by Code + ACCC enforcement.

**Source:** https://accc.gov.au/inquiries-and-consultations/supermarkets-inquiry-2024-25

### Volkswagen — emissions scandal (AU)
URL: https://rulesmate.com.au/enforcement/vw-emissions-2019
Regulator: accc · Type: civil_penalty · Date: 2019-12-19
Penalty: AUD 125,000,000

**Facts:** ACCC alleged VW + VW Australia engaged in misleading conduct re: emissions of certain diesel vehicles.

**Outcome:** $125M penalty + remediation + recall.

**So what:** Misleading conduct in product attribute claims attracts significant penalties.

**Source:** https://accc.gov.au/media-release/

### ASIC v 2025 — greenwashing civil penalty proceedings
URL: https://rulesmate.com.au/enforcement/asic-2025-greenwash-civil
Regulator: asic · Type: civil_penalty · Date: 2025-04-10

**Facts:** ASIC progressed multiple greenwashing civil penalty proceedings into 2025 — including against listed entities + super funds.

**Outcome:** Penalty quantum + settlement decisions ongoing.

**So what:** ESG claim substantiation + disclosure must align to AASB S2 + reasonable basis.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ASIC product intervention orders 2025
URL: https://rulesmate.com.au/enforcement/asic-2025-fortunehomes-product-intervention
Regulator: asic · Type: intervention · Date: 2025-01-30

**Facts:** ASIC product intervention orders continued in 2025 — short-term credit, BNPL post-Jun 2025 reform, CFDs (extension).

**Outcome:** Orders extended; new orders made; consumer protection outcomes monitored.

**So what:** Product intervention is now a routine ASIC tool — issuers must engage early on design + consumer protection.

**Source:** https://asic.gov.au/regulatory-resources/financial-services/product-intervention-power/

### ACCC v CBA (greenwashing in financial product marketing)
URL: https://rulesmate.com.au/enforcement/accc-2025-cba-greenwashing
Regulator: accc · Type: investigation · Date: 2025-04-14

**Facts:** ACCC investigation into CBA ESG marketing in financial products.

**Outcome:** Investigation ongoing; possible joint ACCC/ASIC outcome.

**So what:** ESG claims in financial product marketing under multi-regulator scrutiny.

**Source:** https://accc.gov.au/media-release/

### ACQSC + Department actions — Aged Care Act 2024 transition
URL: https://rulesmate.com.au/enforcement/ic-asic-aged-care-2025
Regulator: aged-care-quality · Type: enforcement_focus · Date: 2025-07-01

**Facts:** Aged Care Act 2024 commenced 1 July 2025. New rights-based framework + stronger Statement of Rights enforcement + Code of Conduct extended to non-residential care.

**Outcome:** Provider transition + ACQSC reorientation + new prudential rules.

**So what:** Aged care sector + community care providers face significant transition + uplift requirements 2025-2026.

**Source:** https://www.health.gov.au/our-work/aged-care-act

### FWO Closing Loopholes enforcement 2025
URL: https://rulesmate.com.au/enforcement/ic-fwo-cl2-2025
Regulator: fwo · Type: enforcement_focus · Date: 2025-03-15

**Facts:** FWO enforcement focus 2025: Closing Loopholes No. 2 reforms — casuals (new definition), right to disconnect, gig economy minimum standards, intentional wage theft criminal offence.

**Outcome:** First wage theft prosecutions; major dispute volumes at FWC on definitions + RTD.

**So what:** Multiple new compliance areas + reformed definitions + criminal exposure for wage theft from 1 January 2025.

**Source:** https://fairwork.gov.au

### FAR Banking (in force 15 March 2024) — first ASIC/APRA actions
URL: https://rulesmate.com.au/enforcement/asic-2025-far-banking
Regulator: asic · Type: enforcement_focus · Date: 2025-01-15

**Facts:** FAR (Financial Accountability Regime) banking phase began 15 March 2024. First wave of accountability statements + maps + accountable persons; insurance + super phase from March 2025.

**Outcome:** Compliance phase + first enforcement engagement on accountability mapping + breaches by accountable persons.

**So what:** Bank + insurance + super accountable persons face personal regulatory exposure for areas of accountability.

**Source:** https://asic.gov.au/regulatory-resources/financial-services/financial-accountability-regime/

### BNPL licensing in force 10 June 2025
URL: https://rulesmate.com.au/enforcement/asic-2025-bnpl-licensing
Regulator: asic · Type: regulatory_implementation · Date: 2025-06-10

**Facts:** BNPL captured by NCCP from 10 June 2025 as Low Cost Credit Contracts; transition period for existing providers.

**Outcome:** Providers obtaining ACL; AFCA membership; modified responsible lending.

**So what:** BNPL providers now ACL-licensed with consumer credit protections; market consolidation likely.

**Source:** https://asic.gov.au/regulatory-resources/financial-services/credit/buy-now-pay-later-bnpl/

### ATO STP Phase 2 enforcement (post-transition)
URL: https://rulesmate.com.au/enforcement/asic-2025-stp2-finalised
Regulator: ato · Type: enforcement_focus · Date: 2025-04-30

**Facts:** ATO transition + enforcement focus on STP Phase 2 — payroll detail richer + integrated with Services Australia data sharing.

**Outcome:** Penalties for non-STP-2 lodgement; correction notices for income type errors.

**So what:** Employers must complete STP-2 transition + clean reporting. Data shared with Services Australia + SRO state revenues + DSS.

**Source:** https://www.ato.gov.au/businesses-and-organisations/hiring-and-paying-your-workers/single-touch-payroll

### ASIC v ASX (technology failure)
URL: https://rulesmate.com.au/enforcement/asic-asx-failures-2025
Regulator: asic · Type: review · Date: 2024-10-08

**Facts:** ASX abandoned CHESS replacement in 2022; ASIC + RBA intervened + ASX subject to special supervision.

**Outcome:** ASIC + RBA continued enhanced supervision; new replacement program selected; ASX board + management changes.

**So what:** Market infrastructure providers + critical financial infrastructure subject to enhanced regulatory engagement.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### OAIC + AFP Medibank determination 2024-2025
URL: https://rulesmate.com.au/enforcement/oaic-april-2025-medibank
Regulator: oaic · Type: determination · Date: 2024-12-17

**Facts:** Class action + OAIC determination on Medibank Oct 2022 data breach affecting ~9.7M customers + their families.

**Outcome:** OAIC class action settlement under negotiation; civil penalty proceedings ongoing.

**So what:** Major data breaches now attract regulator + class action exposure; APP 11 reasonable steps strictly scrutinised.

**Source:** https://oaic.gov.au/news/media-centre/

### ACQSC sanction — small + regional aged care
URL: https://rulesmate.com.au/enforcement/acqsc-yallambee-2025
Regulator: aged-care-quality · Type: sanctions · Date: 2025-02-28

**Facts:** ACQSC sanctioned multiple small + regional aged care providers in 2024-2025 — staffing shortfalls + non-compliance with revised standards.

**Outcome:** Sanctions + technical adviser appointments + some closures.

**So what:** Small + regional providers face structural difficulty meeting revised standards + 24/7 RN requirements.

**Source:** https://agedcarequality.gov.au

### SOCI CIRMP audit findings — first compliance phase 2025
URL: https://rulesmate.com.au/enforcement/home-affairs-soci-rmp-noncompliance-2025
Regulator: home-affairs-soci · Type: enforcement_focus · Date: 2025-04-30

**Facts:** First major SOCI CIRMP attestation cycle by 28 September 2024; Home Affairs audited + identified gaps in 2024-2025.

**Outcome:** Compliance notices + uplift programs; some directions issued.

**So what:** Critical infrastructure entities must have mature CIRMP including cyber + supply chain controls.

**Source:** https://cisc.gov.au

### ASIC v Binance Australia
URL: https://rulesmate.com.au/enforcement/asic-binance-2025
Regulator: asic · Type: civil_penalty · Date: 2024-12-20
Penalty: AUD 15,000,000

**Facts:** ASIC alleged Binance Australia Derivatives misclassified 500+ retail clients as wholesale; failed AFSL retail client protections.

**Outcome:** $15M civil penalty + governance reforms.

**So what:** Crypto + financial product classification of clients (retail vs wholesale) under strict scrutiny.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### ACNC data quality + governance enforcement 2025
URL: https://rulesmate.com.au/enforcement/acnc-charity-data-quality-2025
Regulator: acnc · Type: enforcement_focus · Date: 2025-03-31

**Facts:** ACNC focus on charity data quality, governance standards + DGR self-review (new from 1 July 2024).

**Outcome:** Multiple charity revocations + governance interventions.

**So what:** Charity governance + DGR maintenance now under structured annual review.

**Source:** https://acnc.gov.au

### ATO Large Business + International continuous compliance 2025
URL: https://rulesmate.com.au/enforcement/ato-large-business-2025
Regulator: ato · Type: review · Date: 2025-03-31

**Facts:** ATO LB+I program continued in 2025 across pillar one + two, GST, FBT, TP + Withholding Tax. JIT + JMT activities + Top 1000 reviews ongoing.

**Outcome:** Assessment adjustments + voluntary disclosures + R&D claim disallowances.

**So what:** Large taxpayers face sustained Justified Trust + Top 1000 engagement; documentation + tax governance essential.

**Source:** https://ato.gov.au/businesses-and-organisations/large-business

### Positive Duty enforcement (Sex Discrimination Act)
URL: https://rulesmate.com.au/enforcement/fwo-positive-duty-2024-2025
Regulator: ahrc · Type: enforcement_focus · Date: 2024-12-12

**Facts:** AHRC began enforcement of Positive Duty (s 47C SDA) from 12 December 2023. 2024-2025 enforcement focus on compliance audits + investigations.

**Outcome:** Compliance notices + voluntary undertakings; first formal compliance proceedings.

**So what:** Employers must take 'reasonable + proportionate' measures to eliminate sexual harassment + discrimination; cultural framework needed.

**Source:** https://humanrights.gov.au/our-work/sex-discrimination/positive-duty

### Wage theft criminal offence (s 327A FWA from 1 Jan 2025)
URL: https://rulesmate.com.au/enforcement/fwo-wage-theft-criminal-2025
Regulator: fwo · Type: regulatory_implementation · Date: 2025-01-01

**Facts:** Closing Loopholes No. 2 Act 2024 introduced criminal offence of intentional wage theft from 1 January 2025 — Up to 10 years imprisonment + significant fines.

**Outcome:** FWO + CDPP investigations underway; first prosecutions expected late 2025.

**So what:** Wage compliance is now criminal — directors + officers face personal liability for intentional underpayment.

**Source:** https://fairwork.gov.au/about-us/workplace-laws/wage-theft

### ASIC v American Express (DDO breaches)
URL: https://rulesmate.com.au/enforcement/asic-v-amex-2024
Regulator: asic · Type: court_judgment · Date: 2024-08-26

**Facts:** ASIC alleged AMEX distributed credit cards inconsistently with TMD via co-brand David Jones channel; failed to monitor early signals.

**Outcome:** Court found TMD breach; pecuniary penalty proceedings.

**So what:** DDO mandates active distribution monitoring + TMD review on triggers — broad TMDs not sufficient.

**Source:** https://asic.gov.au/about-asic/news-centre/find-a-media-release/

### CASA regulatory oversight — fleet safety + scheduling
URL: https://rulesmate.com.au/enforcement/casa-virgin-2024
Regulator: casa · Type: review · Date: 2024-08-31

**Facts:** CASA continued oversight of major + regional carriers including Virgin + Rex + Bonza wind-down. FRMS approvals + maintenance audits.

**Outcome:** Industry-wide engagement; some carriers required to enhance safety systems.

**So what:** CASA + ATSB activity intensified post-Bonza failure + COVID-recovery period.

**Source:** https://casa.gov.au/news

### ASIC AASB S2 first-cycle climate disclosures 2025
URL: https://rulesmate.com.au/enforcement/asic-2025-first-aasb-s2-disclosures
Regulator: asic · Type: review · Date: 2025-09-30

**Facts:** First AASB S2 climate disclosures by Group 1 entities for years ending 30 June 2025; ASIC + AASB review for compliance.

**Outcome:** Compliance review; remediation programs for inadequate disclosures + greenwashing follow-up.

**So what:** First-cycle AASB S2 disclosure quality + scenario analysis robustness under scrutiny.

**Source:** https://www.asic.gov.au

### AHPRA cosmetic surgery practitioner bans 2024
URL: https://rulesmate.com.au/enforcement/ahpra-2024-multiple-cosmetic-bans
Regulator: ahpra · Type: registration_action · Date: 2024-09-15

**Facts:** Multiple cosmetic surgery practitioner registration cancellations + conditions following Four Corners + Medical Board enforcement program.

**Outcome:** Strict reforms in cosmetic advertising + endorsement (from 1 July 2025) + CPD requirements.

**So what:** Cosmetic surgery + non-surgical cosmetic providers face significantly tighter regulatory framework.

**Source:** https://ahpra.gov.au/News.aspx

### Safe Work Australia psychosocial uplift across jurisdictions
URL: https://rulesmate.com.au/enforcement/swa-psychosocial-uplift-2025
Regulator: safework-nsw · Type: enforcement_focus · Date: 2025-01-31

**Facts:** Each state WHS regulator continued psychosocial hazards enforcement focus through 2024-2025 — SafeWork NSW, WorkSafe Vic + Qld particularly active.

**Outcome:** Improvement notices + prohibition notices + prosecutions for psychosocial breaches.

**So what:** PCBUs must have documented psychosocial risk management — RTW, bullying, harassment, workload all in scope.

**Source:** https://www.safeworkaustralia.gov.au/safety-topic/managing-health-and-safety/mental-health

### ACCC CDR enforcement progressing 2024-2025
URL: https://rulesmate.com.au/enforcement/accc-cdr-2025-enforcement
Regulator: accc · Type: civil_penalty · Date: 2025-03-31

**Facts:** ACCC + OAIC CDR enforcement progressed in 2024-2025 — first civil penalty proceedings + significant infringement notices.

**Outcome:** Civil penalty outcomes from late 2025; infringement notices for less serious breaches.

**So what:** CDR compliance is enforced; Privacy Safeguards + Accreditation Conditions material.

**Source:** https://accc.gov.au/about-us/policies-and-publications/consumer-data-right

### QRO payroll tax — medical practices + contractor cases
URL: https://rulesmate.com.au/enforcement/qld-osr-payroll-tax-cosmetic-2024
Regulator: qld-osr · Type: review · Date: 2024-08-31

**Facts:** QRO has aggressively pursued payroll tax against medical + dental practices for contractor arrangements deemed relevant contracts.

**Outcome:** Significant assessments; some appeals to QCAT. QLD released revised PTA ruling in 2023 acknowledging GP nuances.

**So what:** Medical + dental + allied health practices face material payroll tax exposure on contractor models.

**Source:** https://qro.qld.gov.au/payroll-tax

### Optus class action — 2022 data breach
URL: https://rulesmate.com.au/enforcement/class-action-optus-2024
Regulator: oaic · Type: class_action · Date: 2024-11-20

**Facts:** Class action by ~9.8M Optus customers affected by September 2022 data breach.

**Outcome:** Class action progressing alongside OAIC enforcement.

**So what:** Major data breaches now attract dual regulator + class action exposure.

**Source:** https://oaic.gov.au/news/media-centre/

### ACCC scrutiny — Virgin Australia + Bonza dynamics
URL: https://rulesmate.com.au/enforcement/accc-virgin-australia-2024
Regulator: accc · Type: review · Date: 2024-07-12

**Facts:** ACCC airline market monitoring + Sydney slot reform recommendations; Bonza failure analysed.

**Outcome:** Reform recommendations to government; ongoing market monitoring.

**So what:** Aviation competition focus increasing — slot allocation + market entry barriers being addressed.

**Source:** https://accc.gov.au/about-us/strategies-and-publications/airline-competition

### SRO Vic Windfall Gains Tax first major objections 2024-2025
URL: https://rulesmate.com.au/enforcement/sro-vic-windfall-gains-2025-first-objections
Regulator: sro-vic · Type: administrative · Date: 2025-02-28

**Facts:** First major WGT assessments + objections progressing into 2025; rezoning uplifts >$500K triggering significant tax.

**Outcome:** Assessments + payments; some VCAT objections.

**So what:** Vic property developers + landholders face significant WGT exposure on rezoning events.

**Source:** https://sro.vic.gov.au/windfall-gains-tax

### APRA CPS 230 in force from 1 July 2025
URL: https://rulesmate.com.au/enforcement/apra-cps-230-from-jul-2025
Regulator: apra · Type: regulatory_implementation · Date: 2025-07-01

**Facts:** APRA's CPS 230 (Operational Risk Management) commenced 1 July 2025. Replaces CPS 231 + 232. Outsourcing + business continuity + operational risk management standards.

**Outcome:** Compliance phase + APRA reviews + material service provider register filings.

**So what:** APRA-regulated entities + their material service providers must demonstrate CPS 230 compliance + governance.

**Source:** https://apra.gov.au/news-and-publications/cps-230-operational-risk-management

### ABF illegal work fines reach record level 2024-2025
URL: https://rulesmate.com.au/enforcement/abf-2025-fines-record
Regulator: abf · Type: enforcement_focus · Date: 2025-04-15

**Facts:** ABF illegal work fines reached record levels during 2024-2025; >$10M cumulative across hospitality, cleaning, construction + agriculture.

**Outcome:** Continued enforcement focus 2025.

**So what:** VEVO verification + record-keeping must be embedded; ABF data-matching active.

**Source:** https://www.abf.gov.au/news-media

### Sport Integrity Australia anti-doping actions 2024-2025
URL: https://rulesmate.com.au/enforcement/sia-2025-anti-doping-actions
Regulator: asic · Type: enforcement_focus · Date: 2025-03-31

**Facts:** SIA continued anti-doping enforcement across professional + amateur sport; significant focus on NRL + cycling + powerlifting.

**Outcome:** Bans range from reprimand to lifetime; match-fixing referrals.

**So what:** National Sporting Organisations + athletes face structured anti-doping enforcement regime.

**Source:** https://www.sportintegrity.gov.au/news

### AER retail authorisation actions 2024
URL: https://rulesmate.com.au/enforcement/aer-energy-retail-2024
Regulator: ic-aer · Type: registration_action · Date: 2024-11-30

**Facts:** AER actions against energy retailers — billing failures, hardship program compliance, BCS reform.

**Outcome:** Civil penalties + compliance directions + remediation programs.

**So what:** Energy retailers face active AER enforcement; BCS reform from 2025 raises customer protection bar.

**Source:** https://aer.gov.au

### VGCCC + NSW ILGA ongoing supervision — Crown Melbourne + Sydney
URL: https://rulesmate.com.au/enforcement/vgccc-crown-2024
Regulator: vgccc · Type: supervision · Date: 2024-12-19

**Facts:** Crown casinos remain under enhanced supervision following 2021-2022 royal commissions; suitability reviews ongoing.

**Outcome:** Continued supervision; Crown Melbourne suitability decision in 2024-2025; reform implementation.

**So what:** Casino sector permanent reform — AML/CTF, responsible gaming + governance significantly uplifted.

**Source:** https://www.vgccc.vic.gov.au

### APRA + ASIC sustainability-labelled super product reviews 2024-2025
URL: https://rulesmate.com.au/enforcement/apra-super-greenwashing-2025
Regulator: apra · Type: review · Date: 2024-12-31

**Facts:** Joint APRA + ASIC reviews of sustainability-labelled super products throughout 2024-2025 identified misalignment between marketing + actual portfolio.

**Outcome:** Remediation programs + product re-labelling + greenwashing enforcement.

**So what:** Sustainability labels in super require structured product governance + ASRS-aligned reporting.

**Source:** https://apra.gov.au/news-and-publications/