Compliance playbooks
Bottom-funnel playbooks: every obligation for one persona on one page
Compliance buyers don't want twelve URLs — they want one page that says "here is everything you have to do, here is the section of the Act, here is the deadline, here is the penalty, here is the form." MinterEllison gates this material behind PDFs. Rules Mate publishes it open.
Persona playbook
AML/CTF playbook for registered tax agents and accounting firms
Everything a registered tax agent, BAS agent or accounting practice has to do under AML/CTF Tranche 2 from 1 July 2026 — enrolment, AMLCO, Part A and Part B program, customer due diligence, suspicious matter reports, threshold transaction reports, the annual ACR, tipping-off, record-keeping and training.
Next: 29 July 2026 — AUSTRAC enrolment deadline (Tranche 2)
Persona playbook
Privacy Act 2026 playbook for Australian SMBs
A practical, citation-first walk-through of the Privacy Act 1988 (Cth) — covering the small business carve-out, the employee records exemption, every APP 1 through 13 obligation, the Notifiable Data Breach scheme, the new statutory tort, the 10 December 2026 ADM transparency obligation, and what to do now if your turnover is climbing toward $3M.
Next: 10 December 2026 — ADM transparency obligation commences
Persona playbook
Modern Slavery Statement playbook for Australian manufacturers
The full obligation stack for an Australian-revenue manufacturer over the $100M consolidated revenue threshold — the seven mandatory criteria under s 16 of the Modern Slavery Act 2018 (Cth), supply chain mapping by tier, risk assessment, action verification, effectiveness measures, board approval, the 6-month statement deadline and the public register.
Next: 31 December 2026 — Modern Slavery Statement (FY26 ending 30 June)
Persona playbook
AML/CTF playbook for real estate agencies
Tranche 2 from 1 July 2026 — which agency activities are designated services, AUSTRAC enrolment, the Part A and Part B program, KYC for vendors and purchasers, beneficial owner identification, trust account interaction, PEP screening, SMR + TTR reporting, tipping-off, record-keeping, and the role of the AMLCO in a real-estate practice.
Next: 29 July 2026 — AUSTRAC enrolment deadline (Tranche 2)
Persona playbook
Director duties playbook for ACNC-registered charity boards
Every duty that sits on the responsible persons of an ACNC-registered charity — the ACNC Governance Standards 1 to 5, the External Conduct Standards, the AIS lodgement, conflict and related-party obligations, fundraising laws by state, the Director ID for charities that are companies limited by guarantee, WHS officer duties under s 27, Privacy Act and NDB obligations, and AML/CTF if the charity provides tax, legal or conveyancing services.
Next: 31 December 2026 — ACNC AIS due (FY-end 30 June)
Persona playbook
AML/CTF playbook for law firms and conveyancers
Tranche 2 from 1 July 2026 — which legal services are designated services under Schedule 1, Table 1 of the AML/CTF Act 2006, client identification and beneficial-owner verification, trust account interaction, PEP screening, ECDD, SMR triggers, the tipping-off offence, Part A and Part B program design, the AMLCO role, and how Tranche 2 sits with the Legal Profession Uniform Law trust account regime.
Next: 29 July 2026 — AUSTRAC enrolment deadline (Tranche 2)
Persona playbook
Compliance playbook for Australian medical practitioners
AHPRA registration, mandatory notifications under s 140 of the National Law, Medicare provider obligations under ss 19AA + 19AB of the Health Insurance Act 1973, PBS prescriber requirements, federal Privacy Act + state health-privacy regimes, the My Health Records Act, AHPRA advertising guidelines + the Therapeutic Goods Advertising Code, professional indemnity, scope-of-practice + endorsements, CPD, mandatory child-abuse reporting by state, and telehealth MBS rules — every obligation a medical practitioner faces on one page.
Next: 30 September annually — AHPRA medical registration renewal
Persona playbook
Compliance playbook for Australian tech and SaaS startups
Privacy Act 2026 (the $3M threshold + reform timeline), Spam Act + Do Not Call Register, Australian Consumer Law guarantees + misleading conduct, ASRS climate-disclosure tier (when applicable), Modern Slavery Act 2018 threshold, payroll tax + super guarantee + STP Phase 2, R&D Tax Incentive, APP 8 cross-border data, Consumer Data Right (if Banking / Energy / non-bank lender), employee equity (Division 1A of Part 7.12 of the Corporations Act), BNPL ACL changes from 10 June 2025, and Cyber Security Act ransomware reporting (if SOCI critical infrastructure).
Next: 1 July 2026 — Payday Super commences (per-pay-event SG)
Persona playbook
Compliance playbook for mining and construction businesses
WHS primary duty s 19, high-risk plant registration under Schedule 5 of the model WHS Regulations, High Risk Work Licences (29 classes), white-card construction induction, state Mining Act tenement obligations, Aboriginal heritage protection by state, EPBC Act + state environment regimes, NGER Act reporting above 50kt CO2-e, Safeguard Mechanism above 100kt, Modern Slavery if consolidated revenue >$100M, Heavy Vehicle National Law chain of responsibility, state Security of Payment Acts, and industrial manslaughter laws by state — every obligation a mining or construction PCBU faces on one page.
Next: 31 October annually — NGER annual emissions and energy report
Persona playbook
Compliance playbook for financial advisers — post-DBFO
The whole stack after the Delivering Better Financial Outcomes reforms: AFSL and relevant-provider status, the Financial Planners and Advisers Code of Ethics 2019 (5 Values + 12 Standards), best interests duty under s 961B + the 7-step safe harbour, Statement of Advice + Record of Advice, the CSLR levy, FASEA-equivalent education + ethics, 40 hours CPD per year (9 hours ethics), and TPB registration plus the 2024 additional obligations if you provide tax-related financial advice.
Next: Annual (12 months from last) — Ongoing fee arrangement renewal + consent
Persona playbook
Compliance playbook for telecommunications carriers and eligible CSPs
Everything an Australian carrier or eligible carriage service provider has to do — Telecommunications Act 1997 (Schedule 1 standard carrier licence conditions, carrier vs CSP distinction), Annual Carrier Licence Charge, TCP Code C628 consumer protections, s 313 law-enforcement assistance, Telecommunications (Interception and Access) Act 1979 + Part 5-1A two-year metadata retention, SOCI Act 2018 critical infrastructure obligations, Cyber Security Act 2024 ransomware reporting, Privacy Act for telco customer data, ACMA reporting and complaints handling under Part 6, Do Not Call + Spam Act for outbound marketing, and the customer service guarantee.
Next: 28 September 2026 — SOCI CIRMP board attestation
Persona playbook
Compliance playbook for NDIS providers
The whole regulatory stack for registered NDIS providers — NDIS Act 2013, NDIS Practice Standards (verification + certification audit tiers), NDIS Code of Conduct, NDIS Worker Screening Check, restrictive-practices authorisation by state + behaviour support plans, reportable-incident notifications within 24 hours / 5 business days, NDIS Pricing Arrangements + Price Limits, 18-month audit cycle, banning orders and civil penalties for unregistered conduct, NDIA fraud reporting, Privacy Act + state health-records Acts, AHPRA for clinical staff, child-safety obligations, and Modern Slavery for larger providers.
Next: Every 18 months — Certification or verification audit
Persona playbook
Compliance playbook for hospitality and restaurant operators
Liquor licensing by state + RSA training, Food Standards Code + state Food Acts (registration + Food Safety Supervisor), gambling licensing for poker machines, employment under the Hospitality Industry (General) Award MA000009 (penalty rates, casual loading, public holidays), WHS Act primary duty + incident notification, GST + BAS + STP Phase 2, state payroll tax thresholds, unfair dismissal small-business qualifying period, tobacco + vaping licensing by state, allergen labelling, country-of-origin labelling, building compliance and fire safety — every obligation on a pub, restaurant, café, or function venue.
Next: 1 July 2026 — Annual Wage Review effective + Payday Super starts
Persona playbook
Compliance playbook for transport and logistics operators
Heavy Vehicle National Law + chain of responsibility, fatigue management with work-diary obligations, High Risk Work Licences (forklift, crane, hoist), CoR insurance, state Security of Payment Acts if subcontracting, Biosecurity Act 2015 + Customs Act 1901 imports/exports, dangerous goods (UN ADG Code), AS/NZS safety standards, maritime obligations (Navigation Act 2012 + AMSA Marine Orders) for shipping, aviation obligations (CASR Parts 121/135/137 + DAMP under Part 99) for airfreight, workers' compensation by state, Privacy Act for telematics data — every obligation a road, sea, or air freight operator carries.
Next: 28 September 2026 — SOCI CIRMP board attestation
Persona playbook
Compliance playbook for retail and e-commerce businesses
Australian Consumer Law (consumer guarantees, misleading conduct s 18/29, country-of-origin labelling, unsolicited consumer agreements, gift card 3-year minimum), product safety (mandatory standards + bans), pricing display (multiple-pricing rule + component pricing), Privacy Act 2026 (ADM transparency from 10 Dec 2026), Spam Act consent + unsubscribe, Do Not Call Register, CDR (if banking / energy), Designs Act + IP, ePayments Code, BNPL ACL from 10 June 2025 if BNPL offered, GST + BAS + low-value imported goods GST under $1,000, allergen labelling for food, country-of-origin labelling — every obligation a retail or e-commerce operator faces.
Next: 10 December 2026 — Privacy Act ADM transparency + Children's Code commence
More playbooks coming
TCSPs and precious-metals dealers (Tranche 2), APRA-regulated entities (CPS 230), aged-care providers (SIRS + RN 24/7), and education providers (CRICOS / Higher Ed standards) are next. Tell us which persona to build next.