Consumer financial services are heavily regulated in Australia. The laws impose licensing regimes on certain consumer financial services activities. These licensing regimes impose heavy upfront costs in order to achieve compliance prior to business or product launch.

The policy underpinning the regulation of consumer financial services in Australia has evolved in recent years. Laws regulating consumer financial services initially focused on ensuring that consumers were adequately informed about financial products and services offered to them. Recent law reforms impose obligations on providers of financial services to prevent unsuitable financial services being offered to consumers.


i Legislation

The Australian regulatory framework recognises two types of financial services: consumer credit, including consumer leases of goods; and 'other' financial services.

Consumer credit and leases

Consumer credit in Australia is regulated by the National Consumer Credit Protection Act 2009 (Cth) (NCCP Act) and the National Credit Code (NCC) set out in Schedule 1 to that Act.

For credit to be covered by the NCC, it must have four elements:

  1. the debtor is a natural person or strata corporation;
  2. the credit is to be provided or intended to be provided wholly or predominantly:
    • for personal, household or domestic purposes (i.e., not businesses or investment purposes);
    • to purchase, renovate or improve residential property for investment purposes; or
    • to refinance credit that has been provided wholly or predominantly to purchase, renovate or improve residential property for investment purposes;
  3. a charge (interest or otherwise) is or may be made for providing the credit; and
  4. the credit provider provides the credit in the course of carrying on a business or providing credit in Australia or as part of or incidentally to any other business it carries on in Australia.2

There are no monetary or interest rate limits3 – credit that has the four elements described above will be regulated regardless of the amount of the credit provided and of the interest rate charged, unless a specific exemption applies.

The NCCP Act also regulates consumer leases, which are defined as leases of goods under which:

  1. the goods are hired wholly or predominantly for personal, household or domestic purposes;
  2. a charge is or may be made for hiring the goods and the charge, together with any other amount payable under the lease, exceeds the 'cash price' (i.e., retail price) of the goods; and
  3. the lessor hires the goods in the course of a business of hiring goods or as part of or incidentally to any other business it carries on in Australia.4

The NCCP Act has four key limbs. The first creates a licensing regime with respect to consumer credit. Under this licensing regime, any person who wishes to engage in 'credit activities' must hold an Australian Credit Licence (ACL) authorising them to engage in those credit activities, or be an employee, director or authorised representative of such a person.5 'Credit activities' is defined to include providing credit, exercising the rights and obligations of a credit provider, taking the benefit of a mortgage or guarantee, exercising the rights and obligations of a mortgagee or beneficiary of a guarantee, or providing broker or intermediary-type services in relation to consumer credit or consumer leases.6 The Australian Securities and Investments Commission (ASIC), the general corporations, markets and financial services regulator in Australia, is responsible for granting ACLs.

There are several exemptions from the requirement to hold an ACL. These are provided for in the NCCP Act and the National Consumer Credit Protection Regulations 2010 (Cth) (the NCCP Regulations). Employees of an ACL holder and directors of a body corporate ACL holder are exempt from obtaining an ACL and can act as representatives of the ACL holder, when acting within the scope of their authority.7 A temporary employee is treated in the same manner as an employee who replaces another employee who is absent from work, or where they are performing substantially the same duties as that employee and are subject to similar controls or directions by the employer. There are also several otherSexemptions, including credit activities in connection with pawnbroking,8 employee loans,9 referral arrangements,10 employment agencies providing temporary staff or locums,11 and clerks' and cashiers' activities.12

The second key limb under the NCCP Act is set out in the NCC, which contains operational provisions relating to credit contracts and consumer leases. It prescribes:

  1. the form and content of credit and lease contract documents;
  2. disclosure requirements for fees and charges;
  3. procedures for varying consumer credit and lease contracts;
  4. the circumstances in which interest may be debited to a loan account;
  5. rights to terminate consumer credit and lease contracts;
  6. procedures that must be followed by a credit provider or lessor when enforcing rights under a credit or lease contract or associated security interest;
  7. matters relating to mortgages and guarantees;
  8. advertising and marketing requirements; and
  9. related sales and issuance contracts.

The NCC contains the following notable provisions:

  1. a maximum annual cost rate (an effective interest rate taking into account non-interest charges payable) of 48 per cent per annum for consumer credit contracts;13
  2. a right for consumer debtors and lessees to request variation of their credit contracts or leases if they are suffering financial hardship;14
  3. the ability for a court to, on application by a consumer debtor or lessee, reopen and set aside or revise a transaction that is found to be unjust;15 and
  4. the ability for a court to, on application by a consumer debtor or lessee, annul or reduce certain unconscionable fees and charges.16

The third key limb under the NCCP Act is the 'responsible lending' regime. It requires credit providers and persons who advise or assist a consumer to enter into a credit contract or consumer lease to:

  1. provide a credit guide to the consumer setting out their fees, dispute resolution processes and other information required by the regulations;
  2. make reasonable enquiries about the consumer's financial situation and requirements and objectives in relation to the proposed credit contract or lease;
  3. take reasonable steps to verify the consumer's financial situation;
  4. assess whether the proposed credit contract or lease is unsuitable for the consumer;
  5. provide the consumer with a copy of the assessment on request; and
  6. not enter into the credit contract or lease, or advise or assist the consumer to enter into the credit contract or lease, if the credit contract or lease is assessed as unsuitable.17

A credit contract or lease is unsuitable if it will not meet the consumer's requirements or objectives. This includes if the consumer will not be able to comply with his or her obligations under the credit contract or lease or if the consumer could only comply with their obligations with substantial hardship. Whether or not a credit contract or consumer lease is unsuitable depends on the particular circumstances of each consumer. A separate assessment will need to be made with respect to each consumer who applies for credit or seeks advice or assistance in obtaining credit.18 Responsible lending enquiries are scalable according to the nature of the credit obtained. However, in all cases, it requires at least some information about actual living expenses to be collected from the consumer, as opposed to mere reliance on benchmarks for living expenses.19 The responsible lending provisions in the NCCP Act also contain miscellaneous rules about the need to give Key Facts Sheets in relation to credit card contracts and standard home loans, and conduct in relation to credit cards.

The fourth key limb under the NCCP Act is the imposition of criminal and civil penalties for failure to comply with an obligation in the NCCP Act or the NCC (including licensing conditions). ACLs have a general condition obliging their holder to comply with the credit legislation.20 This includes ancillary legislation discussed later in this chapter, dealing with privacy, anti-money laundering and counter-terrorism financing, and consumer protection. ASIC may take administrative action in response to non-compliance with the NCCP Act or NCC by banning a person from engaging in credit activities or imposing conditions on the person's ACL.

'Other' financial services

The provision of financial services (excluding credit) in Australia is regulated by Chapter 7 of the Corporations Act 2001 (Cth) (the Corporations Act). A person provides a financial service if they deal in, make a market for or provide advice with respect to a 'financial product'.21 A financial product is a facility through which, or through the acquisition of which, a person makes a financial investment, manages a financial risk or makes non-cash payments.22 Banking deposit products, payment facilities (e.g., stored-value cards and purchased payment facilities) and most insurance contracts are 'financial products' within the meaning of the Corporations Act.23 Credit facilities (both consumer and non-consumer) are expressly excluded from the definition of a financial product.24

Chapter 7 of the Corporations Act creates a licensing regime for the provision of financial services. Under that regime, any person who carries on in Australia a business of providing financial services must hold an Australian Financial Services Licence (AFSL) covering the provision of the particular financial services being provided, be an employee or director of a holder of an AFSL, or be the authorised representative of the holder of an AFSL. AFSLs are granted by ASIC.

The Corporations Act distinguishes between retail and wholesale clients in relation to financial services. A person is a retail client unless they satisfy one of the conditions that qualify them to be a wholesale client.25 Broadly speaking, a retail client is the equivalent of a consumer (although the concept captures other persons, such as small businesses) and a wholesale client is someone who, because of their experience in financial services or the value of the transaction, is taken to be better able to protect their interests with regard to providers of financial services.

The Corporations Act imposes additional obligations when offering financial services to retail clients, rather than wholesale clients. A provider of financial services is required to give a retail client their Financial Services Guide, which sets out information about the kinds of financial services provided, the remuneration of the provider, relationships of the provider that may give rise to conflicts of interest and other matters prescribed by the Corporations Act or the Corporations Regulations 2001 (Cth) (the Corporations Regulations).26 A provider of personal financial advice to a retail client must give that client a Statement of Advice setting out the advice, the basis on which the advice is given and other matters prescribed by the Act or the Corporations Regulations.27 A provider of financial advice to a retail client is also required to act in the best interests of the client and is prohibited from being a party to particular remuneration arrangements that are taken to carry a higher risk of creating conflicts of interest.28 A person issuing or (in certain circumstances) selling a financial product to a retail client, or advising a retail client to acquire a financial product in such circumstances, is required to give the client a Product Disclosure Statement containing information about the benefits, risks, costs, returns and other significant characteristics of the financial product.29 The objective of these and other provisions in the Corporations Act is to ensure that retail clients have adequate information to make decisions in their interest about financial products and services. This means that some financial services are made available only to wholesale investors in order to reduce the costs of complying with the additional obligations arising from transactions with retail clients.

Failure to comply with an obligation in the Corporations Act may attract criminal or civil penalties. AFSL holders have a general obligation to comply with financial services laws, including the NCCP Act and the NCC (if applicable).30 ASIC may take administrative action in response to non-compliance with the Corporations Act by banning a person from engaging in financial services or imposing conditions on the person's AFSL.

Consumer protection under the ASIC Act

Division 2 of Part 2 of the Australian Securities and Investments Commission Act 2001 (Cth) (the ASIC Act) contains further consumer protections with respect to financial services – defined in substantially the same way as in the Corporations Act but including credit facilities. Consequently, the protections in the ASIC Act apply to financial services regulated by the Corporations Act and consumer credit and leases regulated by the NCCP Act. The ASIC Act prohibits unconscionable conduct (the unconscientious exploitation of a disadvantage suffered by another person), conduct that is misleading, deceptive or likely to mislead or deceive, and other unfair practices in connection with financial services.

The ASIC Act also provides that a term of a consumer or small business standard form contract for the supply of financial services is void if it is 'unfair'. A term of a contract is unfair if:

  1. it would cause a significant imbalance in the parties' rights and obligations arising under the contract;
  2. it is not reasonably necessary to protect the legitimate interests of the party who would be advantaged by it; and
  3. it would cause detriment to a party if it were to be relied on.

A contract is a standard form contract if it was prepared entirely by one party with no effective opportunity for the other party to negotiate the terms of the contract. In proceedings seeking a declaration that a contractual term is void, a contract is presumed to be a standard form contract unless a party to the proceedings proves otherwise.

Banking regulation

Banking business – the taking of money on deposit from customers31 – is regulated by the Banking Act 1959 (Cth) (the Banking Act). Under the Banking Act, a person must not carry on banking business unless they are authorised to do so by the Australian Prudential Regulation Authority (APRA).32 The Banking Act is not primarily concerned with conduct towards consumers, but rather with the protection of consumers' deposited funds. Consequently, the chief obligation for an authorised deposit-taking institution (ADI) under it is to comply with prudential standards issued by APRA.

From 4 May 2018, entities wishing to commence carrying on banking business can obtain, subject to meeting APRA's standards, a restricted ADI (RADI) authorisation from APRA, as opposed to a full or standard ADI authorisation. RADI authorisation imposes less stringent obligations than full ADI authorisation, including minimum capital requirements of only A$3 million plus a reserve for costs of winding down of 20 per cent of adjusted assets. RADIs are subject to a protected deposit limit of A$250,000 per customer and A$2 million in aggregate. RADIs are also subject to a two-year time limit to achieve the requirements for full ADI authorisation or to exit the industry. The purpose of the RADI licence is to enable the holder to build resources and capability in a restricted environment. During this stage, the holder is expected to progress to fully meet the prudential requirements to ultimately secure a full ADI licence. The RADI licence regime is likely to reduce a major barrier to entry into the banking market in Australia, resulting in greater competition and choice in relation to deposit account products. The restricted ADI licence is expected to assist those with traditional and non-traditional business models and start-up institutions,33 and at the time of writing one entity has successfully obtained a RADI licence.

The provision of purchased payment facilities (PPF) is banking business under Australian law and so requires authority or an exemption from the Payment Systems Board (PSB) of Australia's central bank, the Reserve Bank of Australia (RBA) or a limited form of ADI authorisation from APRA. This is dealt with in further detail in Section III.i.

Payment systems

Providers of payments systems – funds transfer systems that facilitate the circulation of money – are subject to the Payment Systems (Regulation) Act 1998 (Cth) (the PSR Act). Under the PSR Act, the RBA through the PSB may designate a payment system if it considers it to be in the public interest to do so. The RBA may then impose access regimes and standards on participants in a designated payment system, and arrange for the arbitration of disputes between participants in a designated payment system. At the time of writing, the major credit, debit and prepaid card payment systems (Mastercard, Visa, American Express and EFTPOS) have been designated by the RBA and have had standards imposed on them. The Mastercard and Visa payment systems have also had access regimes imposed on them.34 Since 1 September 2017, all merchants have been prohibited from imposing surcharges on card transactions that exceed their cost of acceptance of cards for that payment system.35 The automated teller machine (ATM) system has also been designated and had an access regime imposed on it.36

The Privacy Act

Providers of consumer financial services in Australia are subject to the Privacy Act 1988 (Cth) (the Privacy Act) if they have, or have ever had, annual turnover greater than A$3 million.37 This is subject to certain exemptions, including in relation to media acts, employment records, political acts and practices, and related body corporate disclosures. In addition, there are some types of businesses to which the Privacy Act applies, irrespective of the size of the business. These include businesses providing health services, businesses that collect or disclose personal information for profit and contractors under contracts with the Commonwealth government.

The Privacy Act requires regulated entities to have and publish a privacy policy setting out how they deal with personal information; give certain disclosures when collecting personal information (called a privacy statement); use personal information only for the purposes for which it was collected and related secondary purposes; take reasonable steps to protect personal information and to ensure that it is correct and up to date; and give access to a person's personal information on request by the person.38

The Privacy Act, together with the Privacy (Credit Reporting) Code 2014, also regulates credit providers' abilities to provide information to credit reporting bodies (CRBs) and to use information obtained from CRBs. The types of information – 'credit information' – that credit providers may provide to CRBs are narrowly defined and, in the case of information about a person's default on a debt, a credit provider is required to give a grace period and at least two notices to the debtor before reporting the information to a CRB.39

The Privacy Act also contains a mandatory data breach notification regime40 requiring entities subject to the Privacy Act to investigate and notify both the regulator and affected individuals about 'eligible data breaches'. An 'eligible data breach' occurs if:

  1. there is unauthorised access to, or unauthorised disclosure of, information and a reasonable person would conclude that the access or disclosure would be likely to cause serious harm to any of the individuals to whom the information relates; or
  2. information is lost in circumstances where unauthorised access or disclosure is likely to occur and a reasonable person would conclude that the access or disclosure would be likely to cause serious harm to any of the individuals to whom the information relates.

Anti-money laundering and counter-terrorism financing

The lending of money, provision of a deposit account and provision of certain financial services (among others) are 'designated services' under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (the AML/CTF Act).41 Consequently, providers of such services are required to:

  1. become enrolled on the Reporting Entities Roll maintained by the Australian Transaction Reports and Analysis Centre (AUSTRAC);42
  2. adopt and maintain an anti-money laundering and counter-terrorism financing programme (the AML/CTF programme);43
  3. ensure that the board and senior management approve and oversee the operation and implementation of the AML/CTF programme;44
  4. perform customer identification procedures on customers before starting to provide a designated service to them;45
  5. provide to AUSTRAC an annual report self-certifying compliance with the AML/CTF Act;46
  6. report to AUSTRAC all international funds transfer instructions,47 transactions involving the transfer of more than A$10,000 in physical currency48 and certain suspicious matters;49
  7. appoint an AML/CTF compliance officer;50
  8. conduct pre- and post-employment screenings on employees;51 and
  9. comply with document retention obligations.

ii Regulation

ASIC is the primary regulator of financial services in Australia, responsible for administering the NCCP Act, the Corporations Act and the ASIC Act. In addition to administering the statutes for which it is responsible, ASIC also has the function of promoting:

  1. the adoption of approved industry standards and codes of practice;
  2. the protection of consumer interests;
  3. community awareness of payments system issues; and
  4. sound customer–banker relationships, including through monitoring the operation of industry standards and codes of practice and monitoring compliance with such standards and codes.52

Under the NCCP Act and Corporations Act respectively, ASIC is responsible for granting ACLs and AFSLs.

ASIC has a wide range of investigative powers at its disposal, including the power to conduct investigations of its own motion,53 to compel the production of documents54 and to compel a person to attend an examination and answer questions under oath.55

ASIC has standing to commence proceedings against persons whom it believes have contravened the NCCP Act or the Corporations Act in relation to consumer financial services. Only ASIC can seek civil penalties for contraventions of these statutes. Consumers' remedies in private proceedings are limited to compensation for losses actually suffered and injunctive and declaratory relief to restrain further contraventions of the law.56

As an alternative to court proceedings, ASIC may issue infringement notices if it has reasonable grounds to believe that a person has contravened a legislative provision eligible to be dealt with by way of infringement notice. Payment of an infringement notice is not taken to be an admission of guilt, does not amount to a conviction for an offence and bars further proceedings against the recipient in relation to the conduct to which the infringement notice relates.

ASIC may also impose conditions on a person's ACL or AFSL, or make orders banning a person from engaging in credit activities or providing financial services.

All ACL holders and AFSL holders who are authorised to provide financial services to retail clients must be a member of the Australian Financial Complaints Authority (AFCA) scheme.57 The AFCA scheme is a non-judicial external dispute resolution scheme established under legislation to replace the pre-existing private schemes – the Financial Ombudsman Service, and the Credit and Investments Ombudsman and Superannuation Complaints Tribunal. External dispute resolution offers a less formal and more consumer-friendly means of resolving disputes with financial services providers, as it is not constrained by the rules of evidence and may look to legal principles, applicable industry codes or guidance, good industry practice, previous decisions and fairness in all the circumstances when deciding disputes.58

Providers of electronic payment facilities may voluntarily subscribe to the ePayments Code administered by ASIC. The ePayments Code provides additional protections to consumer users of electronic payment facilities, beyond those provided for by the law (e.g., rights to require the payment facility provider to recover mistaken payments on the consumer's behalf). Being voluntary, the ePayments Code does not have legal force, though its terms are usually incorporated into subscribers' agreements with customers and so have contractual force.

APRA is responsible for administering the Banking Act. It is empowered to authorise corporations to carry on banking business and to issue prudential standards. It also oversees credit unions, building societies, general insurance and reinsurance companies, life insurance, private health insurance, friendly societies, most members of the superannuation industry and purchased payment facility providers. All financial institutions regulated by APRA have attendant reporting obligations. For example, most banks are required under the Financial Sector (Collection of Data) Act 2001 (Cth) (FSCODA) to provide statistical information to APRA (though FSCODA also imposes reporting obligations on some financial institutions not otherwise subject to APRA supervision). APRA is funded largely by the industries that it supervises.59

The RBA is responsible for administering the PSR Act, including designating payment systems, imposing access regimes and standards on participants in designated payment systems, and arranging the arbitration of disputes between participants in designated payment systems.

The Office of the Australian Information Commissioner (OAIC) is responsible for administering the Privacy Act. The Privacy Act confers on the Information Commissioner a range of privacy regulatory powers. These include powers that allow the OAIC to work with entities to facilitate legal compliance and best privacy practice, as well as investigative and enforcement powers to use in cases where a privacy breach has occurred.

AUSTRAC is responsible for administering the AML/CTF Act. Like ASIC, it may commence court proceedings seeking penalties for contraventions of the AML/CTF Act. In recent times, AUSTRAC appears to have increased its enforcement efforts and has enjoyed some success in civil penalty proceedings. In 2018, it achieved by far the largest corporate penalty in Australian history when it imposed a A$700 million penalty against the Commonwealth Bank of Australia for contraventions of AML/CTF programme compliance and transaction reporting obligations under the AML/CTF Act.60

The Australian Competition and Consumer Commission (ACCC) is responsible for protecting consumer, business and communal interests through promoting competition and fair trade in the market.61 It ensures that all individuals and businesses comply with the Competition and Consumer Act 2010 (Cth), including the Australian Consumer Law (the Consumer Law). It also issues debt collection guidelines in conjunction with ASIC.62


All the regulators outlined above play a role in relation to payments.

i Overview

The primary day-to-day payment methods are currently physical currency, cards, cheques and electronic funds transfers. Australian Payments Network Ltd (AusPayNet), a corporation owned by payment system participants, coordinates the clearing and settlement of payments by cheque, direct entry payments, ATMs, debit cards and high-value payments. The major card payment schemes and the BPAY system for the payment of bills operate with their own membership and rules independently of AusPayNet.63 The domestic card system is managed by eftpos Payments Australia Limited. The New Payments Platform (NPP), operated by NPP Australia Ltd, commenced operation in 2018, allowing near instantaneous direct electronic funds transfers.64

Licensing requirements

Providers of facilities by which persons can make non-cash payments must hold an AFSL authorising them to provide such a facility. However, there are exemptions from this requirement – including for providers of facilities used to make payments to one person only,65 loyalty schemes, road toll payment facilities, low value (i.e., up to A$1,000) non-cash payment facilities, gift card, scheme facilities and prepaid mobile facilities.66 Electronic funds transfer facilities offered by ADIs are deemed not to be financial products by the Corporations Regulations and so do not require an AFSL to provide to consumers.67

The PSR Act does not itself impose any licensing scheme. It allows the RBA to designate a payment system and impose access regimes and standards if it considers it to be in the public interest.68 The payment systems that have currently been designated and that have had standards or access regimes imposed on them are identified in Section II.i, under the subheading 'Payment systems'. The ATM system is also designated and subject to an access regime.69

Standards issued by the RBA govern (1) interchange fees in Mastercard, Visa, American Express and EFTPOS credit card and debit card schemes – interchange fees for credit card transactions must not exceed 0.8 per cent of the value of the transaction70 and interchange fees for debit card transactions must not exceed A$0.015 per transaction or 0.2 per cent of the value of the transaction (depending on whether a fixed fee or proportion of value is charged);71 and (2) merchant pricing – merchants are prohibited from imposing surcharges for card transactions greater than their cost of acceptance for those card transactions.72

Otherwise, the scheme rules of each payment system function as a contract between members of that payment system and between each member and the operator of the payment system.

PPF as a banking business

If a payment product is likely to be a PPF under the PSR Act, two regulatory issues are raised:

  1. the PPF may be a banking business under the Banking Act and Banking Regulations.73 A provider of a PPF may only engage in 'banking business' if it is an ADI regulated by APRA; and
  2. the holder of stored value (as defined by the PSR Act)74 that makes payments in relation to a PPF that has been determined to be a banking business must be an ADI or authorised or exempted from the requirement to be an ADI before it can be the holder of the stored value.75

A PPF is a facility (other than cash) in relation to which the following conditions are satisfied:

    1. the facility is purchased by a person from another person;
    2. the facility is able to be used as a means for making payments up to the amount that, from time to time, is available for use under the conditions applying to the facility; and
    3. those payments are to be made by the provider of the facility or by a person acting under an arrangement with the provider (rather than by the user of the facility).76

A PPF will be a 'banking business' if APRA determines that the facility:

    1. is of a type for which the purchaser of the facility is able to demand payment, in Australian currency, of all, or any part, of the balance of the amount held in the facility that is held by the holder of the stored value; and
    2. is widely available as a means of payment, having regard to:
    1. any restrictions that limit the number or types of people who may purchase the facility; and
    2. any restrictions that limit the number or types of people to whom payments may be made using the facility.77

If a PPF falls within Declaration No. 2 2006 regarding Purchased Payment Facilities (the PPF Declaration), the provider will not be required to become an ADI. The PPF Declaration states that the PSR Act does not regulate facilities where the total amount of obligations to make payments does not exceed A$10 million or the number of people to whom payments may be made using the facility does not exceed 50 people.

A PPF provider is a special kind of ADI. It must only conduct 'banking business' as specified in Regulation 6 of the Banking Regulations. It cannot hold out that it is a fully authorised ADI. Its business activities are restricted to PPF business operations and closely related services and must be incorporated in Australia (unless APRA determines otherwise). It must also provide APRA with financial data on periodically as specified in its ADI authority.

ePayments Code

The ePayments Code78 includes consumer protections exceeding those found in legislation, including:

  1. at least 20 days' advance written notice of changes to the terms and conditions of the facility that may be adverse to the consumer;79
  2. no liability for the consumer as a result of an unauthorised transaction occurring after the consumer informed the provider that a device used to make payments (e.g., a card) has been misused, lost or stolen or that the security of a passcode has been breached;80 and
  3. requiring their ADI to investigate and take steps to recover internet payments made mistakenly by the consumer, and to cooperate with other ADIs in recovering mistaken payments for their customers.81

While the ePayments Code is voluntary, it gains legal force by being incorporated into the contracts between the payment facility provider and the consumer.

ii Recent developments

NPP Australia Ltd, a company formed and owned by the major ADI participants in the payments system, had been developing the NPP payment system since 2014. The NPP is intended to enable consumers, businesses and government agencies to make simply addressed payments in real time, with the continuous availability of the payment system. The material differences between the NPP and the current direct entry system are:82

  1. speed – the NPP provides near instantaneous settlement;
  2. continuous availability – the NPP is available all day, every day (as opposed to settlement only during business hours);
  3. data capability – the NPP enables more information to be sent with payments; and
  4. simple addressing – payers are able to address payments to recipients by a unique, commonly known identifier, such as a mobile phone number or email address. This new form of identification, which is called PayID, is expected to facilitate more consumer-to-consumer payments by simplifying identification requirements.83

The NPP became publicly available in 2018.


i Overview

Access to banking services

Deposit-taking is the defining feature of banking business in Australia. Consequently, all providers of deposit accounts must be authorised as ADIs by APRA. Further, deposit products are financial products and so their providers must, subject to some exceptions in the Corporations Act, hold an AFSL if they wish to provide such products to retail clients.

Opening a deposit account and allowing transactions to be conducted on a deposit account are designated services under the AML/CTF Act.84 Consequently, an ADI must carry out customer identification procedures and verify information about the identity of the customer before opening a deposit account for them or allowing them to conduct transactions on a deposit account. If customer identification procedures and the circumstances of the case indicate a high risk that the account will be used to facilitate money laundering or terrorism financing, the ADI may, in accordance with its AML/CTF programme, refuse to provide an account to the customer.

Otherwise, there is no law preventing ADIs from providing deposit accounts to consumers, nor is there any law compelling them to provide a deposit account to every consumer.

Deposit guarantee

Since the global financial crisis, the Banking Act has provided for the Financial Claims Scheme (FCS). The FCS allows deposit account holders at a declared insolvent ADI to be paid an amount by APRA equal to the balance of their account and accrued but uncredited interest up to the date of the ADI being declared insolvent,85 up to a limit of A$250,000 for all accounts held with that ADI.86 The A$250,000 limit applies in respect of accounts held with a particular ADI, meaning that a person who holds deposit accounts with multiple declared insolvent ADIs can potentially recover more than A$250,000 in total FCS payments.

Upon payment of an amount to a deposit account holder under the FCS, APRA is subrogated to the deposit account holder's rights against the ADI.87

RADIs are not able to rely on the FCS88 to exit the industry if they do not proceed to a full ADI licence within two years. However, during the RADI licence phase, RADIs are subject to FCS-eligible deposit limits of no more than A$250,000 per account holder and no more than A$2 million in aggregate.


The NCCP Act and NCC generally regulate overdraft facilities, as they are credit provided to a consumer for personal, household or domestic purposes and for which a charge is imposed. However, the NCCP Act and NCC do not apply to 'the provision of credit if, before the credit was provided, there was no express agreement between the credit provider and the debtor for the provision of credit'.89 Deposit account terms should allow the ADI, in its absolute discretion, to choose to honour or decline a transaction for which the account has insufficient credit balance, with the terms of any credit provided being those notified on its website at the time the transaction is made. This will ensure that any incidental overdraft credit provided is not subject to the NCCP Act and the NCC, as it is not expressly agreed in advance.

If the deposit terms include an obligation that the deposit account must always be in credit, fees imposed for incidental overdraft credit could risk being characterised as contractual penalties and be voided.90 Therefore, deposit terms should not include an obligation to maintain a credit balance.

ii Recent developments

Consumer data right – open banking

Following the lead of the United Kingdom, the Australian government announced in 2017 that it will introduce an 'open banking' regime in Australia.91 The Commonwealth Treasury has published draft legislation setting out a consumer data right framework in which data holders in designated sectors will be required to provide a consumer with certain data about him or her in machine-readable format or to transfer that data to an accredited data recipient, at the consumer's direction. Banking is the first sector to be designated, with current plans being for the four major banks to be required to provide data about deposit, credit and debit card, and transaction accounts by 1 July 2019 and mortgages by 1 February 2020. Other banks will be required to provide data within 12 months after the four major banks for the relevant account type. After banking, telecommunications and energy have been flagged as the next sectors to be subject to a consumer data right.92

While the legislation to implement a consumer data right in banking is yet to be enacted, the objective of introducing an open banking regime is to increase competition in consumer financial services markets, leading to better outcomes for consumers. It is reasoned that it will improve competition by reducing switching costs for consumers and by reducing barriers to entry for providers of financial services that rely on account data (such as credit providers, who will be able to use the newly available data to better assess credit risk).


i Overview

Continuing credit contracts

The NCC defines a 'continuing credit contract' as a credit contract in which multiple advances of credit are contemplated, and the amount of available credit ordinarily increases as the amount of credit is reduced.93

This definition covers consumer line of credit facilities, regardless of whether they are for a fixed or indefinite term.

The NCCP Act and NCC apply to all continuing credit contracts on which interest is charged. They do not regulate continuing credit contracts for which the only charge is a fixed periodic fee that does not vary according to the amount of credit provided. However, the fixed fee must be no more than A$200 for the first 12 months of the contract and no more than A$125 for any subsequent 12-month period while the contract is on foot. If the consumer is already party to a continuing credit contract with the credit provider or an associate of the credit provider, then the imposition of any periodic fee brings the continuing credit contract within the scope of the NCCP Act and NCC.94

Continuing credit contracts are subject to largely the same obligations as ordinary principal and interest repayment contracts, with some modifications to suit the nature of continuing credit contracts. This includes contract documents and precontractual disclosure requirements discussed in Section VI.i below, under the subheading 'Contract documents and precontractual disclosure'.

Continuing credit contracts do not require disclosure in the credit contract95 of the total number of repayments, frequency of repayments and the total amount of repayments, even if these amounts are ascertainable.

When calculating the annual cost rate (a measure of the effective interest rate) of a continuing credit contract, it must be assumed that the consumer at the commencement of the contract will draw down the entire credit limit of the contract.96 The maximum period for a statement of account for a credit card contract is 40 days.97

The NCC requires statements of account to be given no less frequently than every three months for a continuing credit contract, or every 40 days if there is no express agreement about statement frequency between the credit provider and debtor.98 However, if a continuing credit contract is a 'reverse mortgage' credit contract – a credit contract secured by a mortgage over real property for which there is no obligation on the debtor to make repayments99 – then statements of account need to be given only every 12 months. Also, a statement of account need not be given for a continuing credit contract if:

the debtor was in default . . . during the preceding 120 days, or during the statement period and the 2 immediately preceding statement periods, whichever is the shorter time, and the credit provider has, before the commencement of the statement period, exercised a right not to provide further credit under the contract and has not provided further credit during the period.100

A guarantee in relation to a continuing credit subject to the NCC cannot be irrevocable, even if consideration was given for it to not be revoked. Section 60(4) of the NCC allows a guarantor, at any time, to limit his or her liability to credit previously provided to the debtor by providing written notice to the credit provider.

The credit limit of a continuing credit contract can only be increased at the request of or with the written consent of the debtor.101 This prevents a credit provider from making unsolicited credit limit increase offers. However, before providing any increase in the credit limit of a continuing credit contract, the credit provider must undertake responsible lending enquiries to determine whether the increase is unsuitable for the debtor.102

Continuing credit contracts may not be secured over all goods supplied under the contract (if the credit is provided by supplying goods rather than advancing money). Rather, they may only be secured over specifically identified goods.103

The NCC provides that a credit provider may not take possession of mortgaged goods if the amount owing under the credit contract is less than 25 per cent of the initial amount of credit provided or A$10,000, whichever is the lesser.104 This is to protect debtors so that if they have substantially repaid their debt, the right to repossess mortgaged goods can only be exercised with court consent. However, this debtor protection does not apply to continuing credit contracts.105

The NCC requires that a credit advertisement106 that contains an annual percentage rate (APR) must also contain the relevant comparison rate, and an advertisement that does not contain an APR may also contain the relevant comparison rate. A comparison rate is a tool intended to help consumers identify the true cost of credit arising from interest charges and other fees and charges. It is to enable consumers to compare the costs of competing loan products.107 However, advertisements for continuing credit contracts need not provide a comparison rate.108

Credit cards

The NCCP Act imposes additional regulations on credit card contracts. It defines a credit card contract as 'a continuing credit contract under which credit is ordinarily obtained only by use of a credit card'.109 Credit card contracts are a type of continuing credit contract and are subject to the following additional requirements:

  1. an application form for a credit card contract must be accompanied by a Key Facts Sheet setting out key information about the contract in a standardised table format;110
  2. a credit provider must not enter into a credit card contract unless a Key Facts Sheet has been provided to the prospective debtor;111
  3. a credit provider must not invite a debtor to request an increase in the credit limit of a credit card contract;112 the credit limit can only be increased pursuant to a request made on the debtor's own motion;
  4. a credit provider must not enter into a credit card contract unless the contract allows the credit limit to be reduced and the credit provider must provide an online facility for the debtor to request a reduction of his or her credit limit;113
  5. a credit provider must not suggest to a consumer that they not reduce the credit limit of his or her credit card contract or reduce it by a smaller amount than the consumer requested;114
  6. if a debtor uses his or her credit card in a transaction that results in him or her exceeding the credit limit on their credit card contract, the credit provider must notify the debtor that they have exceeded their credit limit within two business days of becoming aware of that fact;115
  7. a credit provider may not impose any fees or a higher rate of interest on the debtor for exceeding the credit limit of a continuing credit contract, unless it has obtained the debtor's express consent in advance of charging the fees or imposing the higher rate of interest116 (this is best done by including those fees and interest in the contract document provided to the debtor);
  8. repayments made by a debtor must be applied first to the part of the amount owing to which the highest rate of interest applies, then to the part of the amount owing with the next highest rate of interest, and so on, unless the debtor requests that a repayment be applied to a specific part of the amount owing.117
  9. a credit provider must not enter into a credit card contract unless the contract allows the contract to be terminated by the debtor and the credit provider must provide an online facility for the debtor to request termination of their contract;118 and
  10. a credit provider must not suggest to a consumer that they refrain from terminating their credit contract.

ii Recent developments

Credit card reforms

The provisions described in points (d), (e), (i) and (j) under the subheading 'Credit cards' in Section V.i were inserted into the NCCP Act by the Treasury Laws Amendment (Banking Measures No. 1) Act 2018 (Cth). Points (d) and (e) commenced operation on 1 July 2018 and points (i) and (j) commence operation on 1 January 2019.

The Treasury Laws Amendment (Banking Measures No. 1) Act 2018 also amended the NCCP Act to provide that a credit card contract will be unsuitable for a consumer, and therefore unable to be provided to the consumer, if the consumer will not be able to repay the fully drawn down credit limit within a prescribed period determined by ASIC.119 ASIC has determined the prescribed period to be three years.120


i Overview

Instalment credit contracts under the NCCP Act and NCC are regulated credit contracts other than continuing credit contracts.121 They are contracts with repayment obligations, where the amount of available credit does not increase as the amount of credit is reduced. They may require periodic payments of principal and interest, interest only, or interest only for a period followed by principal and interest.

Contract documents and precontractual disclosure

The NCC requires credit contracts to be in the form of a written document signed by at least the credit provider.122 The contract document must contain the following information:123

  1. the amount of credit to be provided or the credit limit;
  2. the interest rates that apply under the contract, or their method of calculation;
  3. the method of calculating interest;
  4. the total amount of interest payable, if ascertainable and if the loan is to be fully repaid within seven years;
  5. the number and total amount of repayments over the life of the contract;
  6. credit fees and charges that are payable or may be payable;
  7. if the interest rate and any fees or charges can be changed during the life of the contract, a statement of that fact;
  8. the frequency with which statements of account are given;
  9. any default interest rate that may become payable;
  10. if enforcement expenses are payable on breach of the contract, a statement of that fact;
  11. if there is any mortgage or guarantee securing obligations under the contract, a statement of that fact;
  12. a description of any property subject to a security interest securing obligations under the credit contract;
  13. information about any ascertainable commissions to be received or paid by the credit provider for the introduction of credit business or business financed by the contract (including insurance);
  14. information about any insurance financed by the credit contract and any commissions payable; and
  15. warnings prescribed by the NCCP Regulations.

The NCC also requires the matters required to be disclosed in the credit contract to be provided to the debtor prior to entry into the credit contract.124 The NCCP Regulations require select items of the information to be provided in the form of a table (the financial table) at the beginning of the precontractual disclosure.125 It is common practice for the precontractual disclosure to be incorporated into the contract document, which is given to the debtor prior to their entry into the contract.

Interest charges

The NCC prescribes the maximum amount of interest that may be charged under a credit contract. It introduces the concept of 'annual cost rate', which is the effective interest rate taking into account ascertainable interest charges and non-interest fees and charges. The annual cost rate does not take into account interest rates and fees that are contingent on the occurrence of an event other than the passage of time (for example, default or a late payment), as they are not ascertainable at the time of contract formation.126 The annual cost rate is a point in time calculation as at the time of contract formation.

The maximum annual cost rate for a credit contract is 48 per cent per annum. A credit provider is forbidden from entering into a credit contract if its annual cost rate exceeds 48 per cent per annum, or varying a contract in a manner that causes its annual cost rate to exceed 48 per cent per annum.

Calculating interest

Generally, interest must be calculated by applying a daily percentage rate to the unpaid balance.127 For all contracts where only one annual percentage rate (APR) applies to the unpaid balances, interest charged for each day must not be more than:128

unpaid daily balance ×



The unpaid daily balance for a day under a credit contract is the unpaid balance under the contract at the end of that day.129 A credit contract may specify, for the purposes of payments or any other purposes under the contract, when a day ends. Different times of the day may be specified for different purposes.130

If more than one APR applies to the unpaid balances, interest charges must not be more than the sum of each amount determined by applying:131

each daily percentage rate × that part of the unpaid daily balance to which the daily percentage rate applies

Interest can be calculated at monthly, quarterly or biannual rests using the average daily balance during the period.132

Interest must not be debited before the end of the day to which the interest relates (except for the first payment of interest under the contract, if it is for a period of less than the normal interest period under the contract; i.e., there is a broken first interest period).133

However, on the last day of an interest period, interest can be debited to an account provided that it is not included in the balance for the interest calculations on that day.

The prohibition that interest cannot be debited before the end of the day to which it applies does not apply to credit provided to purchase, renovate or improve residential investment property; or to refinance credit if, at the time the credit contract was entered into, the residential property was used for investment purposes.134

Unpaid interest charges for a period may be added to the unpaid daily balance immediately after the end of that period.135 The NCC thus permits a credit provider to capitalise interest daily (or at another longer interval such as weekly or monthly). However, every debit for interest charges must be separately itemised on the account statement so that the debtor can see the effects of the capitalisation.136

Default interest

Default interest cannot be charged unless the debtor defaults in payment and can be charged only on the amount in default and while the default continues. There are limited circumstances in which the balance of the amount owing may be accelerated and default interest charged on that accelerated amount.137

The default method is by dividing the annual percentage rate (the quoted or nominal interest rate) by 365 to obtain the 'daily percentage rate' and applying that daily percentage rate to the unpaid daily balance each day.138 This results in daily compounding of interest, but the NCC allows for interest to be compounded monthly, quarterly or biannually using the same principle of calculation.139

A higher rate of interest may be imposed in the event of default, but only in respect of the amount in default and not the entire amount owing under the credit contract.140 Default interest may only be imposed if the contract permits, if the debtor defaults in payment, on the amount in default, and while the default continues. This applies to both a default in paying an instalment and an accelerated amount.

Additional provisions apply before a credit provider can accelerate any part of the debt and, consequently, before default interest can become payable on the accelerated amount. In particular, an acceleration clause can only operate if a default notice explaining the effect of the acceleration clause is given and the default is not remedied within the time (at least 30 days) specified in the notice. There are limited exceptions.141

Security interests

The NCC defines 'mortgage' to include any interest in, or power over, property to secure obligations under a credit contract.142 The interest must be in the form of a written document signed by the consumer, unless the interest involves the credit provider being lawfully in possession of the goods (i.e., by way of pledge).143

Security interests in personal property (i.e., not land) must be perfected either by registration of a financing statement on the Personal Property Securities Register or by the secured party having possession or control of the property in order to obtain the maximum level of enforceability and priority.144 The NCC imposes additional requirements for security interests in personal property to be enforceable; it does not displace the Personal Property Securities Act 2009 (Cth) in this respect.

Security interests securing credit subject to the NCC must be in respect of specific property. A purported charge over all assets of a person to secure credit subject to the NCC is void.145 Further, security interests in property to be owned by the provider of the security interest are void unless the property in question is acquired with the credit it secures, relates to the property or class of property described in the document creating the security interest or relates to goods acquired in replacement of specific goods subject to the security interest.146

Third-party security interests – that is, security interests provided by persons who are neither the debtor nor a guarantor of a debtor's obligations – are not permitted in respect of credit subject to the NCCP Act and NCC. A person providing a security interest must either be the debtor or a guarantor of the debtor's obligations. A purported third-party security interest with respect to credit regulated by the NCC is unenforceable.147

Security interests may not be taken over the following types of property:

  1. employees' remuneration or employment benefits;
  2. superannuation benefits;
  3. essential household property;
  4. goods used by the person granting the security interest in earning income from personal exertion, if the goods are worth less than a prescribed amount; and
  5. a cheque, bill of exchange or promissory note endorsed or issued by the debtor or guarantor.148

The NCC also imposes additional obligations on credit providers when enforcing security interests securing credit subject to the NCC. In summary, a credit provider is required to provide a default notice and allow the debtor or guarantor 30 days to remedy the default, and to keep the debtor or guarantor informed throughout the process of disposing of the secured goods and realising their value.149

Home mortgage loans

The requirements described above with respect to security interests apply to a mortgage over real estate securing a loan to purchase that real estate.

Credit providers under standard form home loan contracts must provide prospective debtors with a Key Facts Sheet setting out material features of the credit contract in a table format specified by the NCCP Regulations.150 If a credit provider's website enables a consumer to enquire about or apply for a standard form home loan, the credit provider must also provide functionality on their website for the consumer to be able to generate a Key Facts Sheet for the home loan products offered by the credit provider.

Further, mortgages over real estate are subject to state and territory real property legislation. This means that the mortgage should be registered on the relevant state or territory land titles register to enjoy priority over unregistered and later registered security interests. Some state and territory real property legislation requires a longer grace period for a debtor to remedy a default.151

Ending credit contracts

A debtor under a credit contract has a right to be given a payout figure at any time and to end a credit contract by paying to the credit provider the amount owing under the credit contract.152

In the event of a default, a credit provider must provide the debtor with a notice in respect of the default and allow a 30-day period to remedy the default before the credit provider can commence court proceedings to enforce the credit contract.153 If the credit contract contains an acceleration clause, the default notice must set out how the debtor's liabilities will be affected by any acceleration clause enlivened by the default in order for that acceleration clause to be enforceable.154

Loan serviceability

Before entering into a credit contract or increasing the credit limit of a credit contract, a credit provider must make reasonable enquiries into the consumer's financial situation and verify information about it. A credit contract is unsuitable for a consumer if the consumer is unable to comply with his or her obligations under the contract, or could only comply with substantial hardship. A credit provider is prohibited from entering into a credit contract with a consumer if that contract is unsuitable for the consumer.155

Student loans

For Australian citizens,156 the government makes available the Higher Education Loan Program,157 under which students in eligible courses of study can borrow the cost of their tuition fees from the government. The loans are income-contingent and repaid through the income tax system once the borrower earns a minimum level of income (A$51,957 at the time of writing) and at a rate increasing with the borrower's income.

Private loans taken out to finance one's own education are for personal, household or domestic purposes and therefore subject to the NCCP Act and NCC. However, such loans are not afforded any special status under the NCC or any other legislation.

ii Recent developments

Commission arrangements in car finance

For some time, ASIC had expressed concerns about flex-commission arrangements in car finance – arrangements whereby a broker (usually the car dealer) is empowered to vary the interest rate on a vehicle finance loan and the amount of commission receivable by them depends on the interest rate charged to the borrower. ASIC was concerned that flex-commission arrangements have an inherent conflict of interest that disadvantages consumers because brokers will be inclined to maximise the interest rates charged to consumers in order to maximise their own commissions. Following recent law reform, credit providers (and certain other persons) are prohibited from giving benefits to an intermediary in circumstances where the intermediary can determine, propose or influence the interest rate payable on the credit contract.158 Credit providers (and certain other persons) are also prohibited from paying benefits to intermediaries where the intermediaries are empowered to charge consumers fees for procuring the credit greater than an amount determined by the credit provider (or other relevant person).

While the prohibition on flex-commissions is phrased generally and applies to all credit other than home loans, the reform is clearly targeted at commission arrangements in the car finance market.159

Buy now, pay later arrangements

One of the requirements for credit to be regulated by the NCCP Act and NCC is that a charge is or may be made for providing the credit. Recently, there has been a proliferation of providers offering short-term finance for the purchase of goods or services at the point of sale with no charge made for providing the credit. Instead, revenue is derived from retailers who are charged a fee for purchases financed by such credit and from exception fees charged when consumers fail to make a scheduled repayment. Other providers offer continuing credit contracts with only a periodic account charge within limits that qualify for the exemption in Section 6(5) of the NCC. As there is no charge for providing the credit, or the charge is less than the amount prescribed by the NCCP Regulations, such credit is not regulated by the NCCP Act and NCC.

This has led to concerns that consumers are being denied key protections in relation to credit and are at a greater risk of being provided credit that is unsuitable for them (as responsible lending obligations do not apply to credit that is not regulated by the NCCP Act). Throughout 2018, ASIC conducted a review of buy now, pay later arrangements and reported its findings in November 2018.160 ASIC's report found that users of such arrangements are overwhelmingly young people (18 to 34 years old) and flagged a number of risks inherent in such products, including the lack of consumer protections under the NCCP Act, overcommitment and higher total indebtedness, potentially unfair contract terms, and hidden costs in the form of higher prices charged by merchants for goods or services to cover the fees paid to the providers of these arrangements.

ASIC's report also suggests that buy now, pay later arrangements should be subject to ASIC's proposed product intervention power (discussed in Section VII) if such a power is successfully legislated for. Otherwise, ASIC's report does not propose any specific regulation (a task for the legislature and not ASIC) but rather states that ASIC will continue to monitor the buy now, pay later industry for misconduct and consumer harm.

VII Other areas

The NCCP Act and the NCC were amended with effect from 2013 to introduce concepts of small amount credit contracts (SACCs),161 medium amount credit contracts (MACCs)162 and reverse mortgages.163 SACCs are credit contracts that are:

  1. not provided by an ADI;
  2. for an amount or credit limit not more than A$2,000 (plus the establishment fee and first monthly fee) or less;
  3. for a term of at least 16 days but not longer than one year; and
  4. unsecured.164

MACCs are credit contracts that are:

  1. not provided by an ADI;
  2. for an amount of credit limit of at least A$2,001 and not more than A$5,000; and
  3. for a term of at least 16 days but not longer than two years.165

A reverse mortgage166 is a financial instrument aimed at seniors to allow them to access equity in their home and remain living there. The key difference from a traditional real property mortgage is that, generally, there are no principal or interest payments required to be made by the debtor while he or she continues to live in his or her home. Reverse mortgages are relatively new in Australia. The NCCP Act and the NCC prescribed different requirements for reserve mortgages in relation to precontractual conduct, contract disclosures and procedures during the loan term.167

SACCs differ from other credit contracts as the NCC tightly defines their terms. Notionally, interest cannot be charged on SACCs. Rather, a permitted monthly fee equal to 4 per cent of the first amount of credit provided (excluding fees capitalised in that amount) may be charged each month on a SACC.168 Apart from the monthly fee, a permitted establishment fee not exceeding 20 per cent of the first amount of credit provided (excluding fees capitalised in that amount) may be charged in relation to a credit contract. The effect of these fees is to allow for an effective interest rate greater than 48 per cent per annum – SACCs are excluded from the annual cost rate cap in the NCC.169 Default fees may be charged in relation to a SACC, but total default fees charged cannot exceed twice the first amount of credit provided (excluding fees capitalised in that amount).170

Additionally, for responsible lending purposes, it is presumed that a SACC will be unsuitable for a consumer if he or she (1) receives at least 50 per cent of his or her gross income from social security payments, and repayments under all SACCs entered into by the consumer would exceed 20 per cent of the consumer's gross income for a payment cycle during the life of the loan;171 (2) has been a debtor under two or more SACCs within the 90 days preceding the preliminary responsible lending assessment;172 or (3) is in default under another SACC.173

The NCCP Regulations prevent credit providers from providing credit to consumers by a series of SACCs or MACCs. If a consumer's requirements are to obtain a particular amount of credit, a credit contract is deemed to be unsuitable for a consumer if it forms part of an arrangements under which that amount of credit is provided by two or more SACCs or MACCs.174

Linked credit providers and tied credit contracts

A credit provider is a linked credit provider of a supplier of goods or services if, pursuant to an agreement or arrangement between the credit provider and the supplier:

  1. the credit provider finances consumers' purchases of goods or services from the supplier;
  2. the supplier regularly refers consumers to the credit provider to obtain credit;
  3. the credit provider's contract documents or application forms are made available to consumers at the supplier's premises; or
  4. the contract documents, applications or offers for credit from the credit provider may be signed by consumers at the supplier's premises.175

A credit contract provided by a linked credit provider of a supplier to finance the purchase of goods or services from the supplier is termed either a tied loan contract or tied continuing credit contract, depending on whether it is an instalment loan or line of credit.

A linked credit provider is vicariously liable for the following misconduct on the part of the supplier of goods or services financed by a tied credit contract: misrepresentations in relation to the tied credit contract; and misrepresentation, breach of contract or failure of consideration in relation to the contract for sale of the goods or services financed by the tied credit contract that results in loss or damage for the debtor.176

A linked credit provider's liability does not diminish the supplier's direct liability for the above misconduct, and proceedings must be brought jointly against both the supplier and linked credit provider unless the supplier is insolvent or a court is satisfied that it would not be able to satisfy any judgment ordered against it.177 A linked credit provider is entitled to be indemnified by the supplier in respect of its liability for the supplier's misconduct and to be subrogated to the consumer's rights against the supplier.178 Therefore, in effect, the NCC puts a linked credit provider in the position of a guarantor of the supplier's obligations in relation to the sale of goods or services to be financed by credit.

Related insurance contracts

A credit provider may require a consumer to take out insurance in relation to the consumer debtor's capacity to repay the loan or over property that secures the loan. The NCC regulates credit providers' actions in relation to that insurance. Care must be taken to ensure that any insurance is of benefit to the debtor (e.g., they satisfy any preconditions, such as not being unemployed).179

The NCC limits a credit provider's ability to require a consumer debtor or guarantor to pay for insurance arranged by it, require a debtor or guarantor to obtain insurance from a particular insurer or make unreasonable requirements as to the terms on which the debtor or guarantor is required to obtain insurance.180 It also prevents a credit provider from financing insurance premiums for more than one year at a time.181

If a credit contract is terminated (such as by being repaid early), any insurance contract insuring the debtor's capacity to repay the loan automatically terminates and the credit provider is liable to provide to the debtor a proportionate refund of any premiums paid. The credit provider's liability exists regardless of the term of the insurance contract. The credit provider may recover from the insurer any amount paid to the debtor.182

Facilitating innovation in consumer finance

ASIC has issued two legislative instruments183 providing limited exemptions from the need to hold an ACL or AFSL to test new credit activities or financial services. Under those legislative instruments, eligible persons – persons who do not hold an AFSL or ACL and are not a related body corporate or authorised representative of the holder of an AFSL or ACL – may, on giving written notice to ASIC about their intention to rely on the exemption, provide eligible credit activities and financial services for a period of up to 12 months without holding an ACL or AFSL or being an authorised representative of a holder of an ACL or AFSL. This exemption has been colloquially termed the 'regulatory sandbox exemption'.

The regulatory sandbox exemption is only available in respect of:

  1. providing credit services in respect of credit contracts not exceeding A$25,000 in amount, 24 per cent per annum interest rate and other conditions set out in the instrument; and
  2. providing financial product advice about or dealing in:
    • a non-cash payment facility issued by an ADI;
    • a home contents insurance product where the sum insured under the product does not exceed A$50,000;
    • a personal and domestic property insurance product where the sum insured under the product does not exceed A$50,000;
    • a managed investment product in relation to a simple managed investment scheme;
    • a quoted security; or
    • Commonwealth (federal) government securities (i.e., bonds).

    Additionally, a person relying on the regulatory sandbox exemption may only provide the credit services or financial services to no more than 100 consumers or retail clients and, in the case of financial services, the value of all financial products in relation to which financial services have been provided does not exceed A$5 million.

    In October 2017, draft legislation and regulations were published by the Commonwealth treasury for public comment and feedback that, if enacted, would increase the length of the regulatory sandbox exemption to two years and expand the range of credit activities and financial services that would qualify for the exemption.184 At the time of writing, the consultation period has closed but no action has been taken to enact the draft legislation and regulations.

    Financial product design and distribution obligations

    There is currently legislation185 before the Commonwealth Parliament which, if enacted, will require issuers of financial products under a disclosure document (essentially financial products issued to retail clients) to, among other things:

    1. determine the target market for the financial product
    2. supervise distribution channels to ensure that the financial product is issued or sold only to persons within the target market; and
    3. design the financial product so that it is reasonably likely to be consistent with the likely objectives, financial situation and needs of a retail client in the target market.

    If enacted, this would represent a significant change in the approach to the regulation of financial services in Australia. Historically, and still to a large extent today, financial services regulation was concerned with ensuring adequate disclosure so that clients could make properly informed decisions about financial products and services, rather than the design of financial products and services. These new obligations require issuers of financial products to design products that are appropriate for their target market, rather than leaving it to clients to determine what is appropriate for them.

    Product intervention power

    The Treasury Laws Amendment (Design and Distribution Obligations and Product Intervention Powers) Bill 2018 (Cth) also contains a power for ASIC, in relation to credit products regulated by the NCCP Act and financial products available to retail clients, to order persons to do something or refrain from doing something in order to prevent significant detriment to consumers or retail clients (product intervention order). ASIC will only be able to exercise the power if it considers that a credit or financial product has resulted in, or will or is likely to result in, significant detriment to consumers or retail clients, and will not be able to make product intervention orders against consumers and retail clients in that capacity. ASIC will be required to consult before making a product intervention order. Product intervention orders can remain in force for a maximum of 18 months, unless extended by the Minister (including for an indefinite period of time). As with the design and distribution obligations discussed above, the product intervention power, if enacted, will signal a change in the principles underlying financial services regulation from simply ensuring that consumers are able to make properly informed decisions to preventing consumers from being able to make decisions that may be harmful to them.

    Royal commission inquiry

    A royal commission – a commission of inquiry by the executive government with extensive powers to compel the production of documents and examine witnesses – into misconduct in the financial services industry is in progress at the time of writing.186 Its terms of reference require it to investigate not only contraventions of the law, but also conduct and practices which 'fall[s] below community standards and expectations'. The royal commission's hearings throughout 2018 exposed a number of instances of misconduct in the financial services industry, which its interim report attributed to 'greed – the pursuit of short term profit at the expense of basic standards of honesty'.187 The royal commission's final report is due to be released in February 2019, and it appears that it will recommend more vigorous enforcement of existing laws rather than the creation of new laws which would further complicate the regulation of consumer financial services.188

    VIII Outlook

    The Australian regulatory framework for consumer financial services is complex. The NCCP and the NCC regulate credit. Financial products (excluding credit) are regulated under the Corporations Act. The Corporations Act, the Payment Systems Act and the ePayments Code regulate payment systems and electronic payments. In addition, further obligations are set out in various pieces of legislation, including the AML/CTF Act, the ASIC Act, the Consumer Law and the Privacy Act. In addition, much guidance is published by the regulators, including APRA, RBA, ASIC, ACCC, OAIC and AUSTRAC. Following the royal commission inquiry, it is likely that regulators will adopt a more aggressive approach to enforcing the laws regulating consumer financial services.


    1 Andrea Beatty is a partner at Piper Alderman. This chapter was written with the assistance of Gabor Papdi and Chelsea Payne, lawyers at Piper Alderman.

    2 NCC Section 5(1).

    3 However, reg. 65C of the NCCP Regulations excludes credit provided to purchase, renovate or improve residential property for investment purposes (or to refinance credit provided for such purposes), where it is provided for the purpose of investment in more than one residence and is more than A$5 million in amount.

    4 NCC Section 170(1).

    5 Unless a specific exemption in the NCCP Regulations applies.

    6 NCCP Act Sections 6 to 10.

    7 NCCP Act Section 29(3).

    8 NCCP Regulations reg. 25(3).

    9 NCCP Regulations reg. 25(3).

    10 NCCP Regulations regs. 25 and 24(6).

    11 NCCP Regulations reg. 23D.

    12 NCCP Regulations reg. 24(9).

    13 NCC Section 32A.

    14 NCC Section 72.

    15 NCC Sections 76 and 77.

    16 NCC Section 78.

    17 NCCP Act Chapter 3.

    18 Australian Securities and Investments Commission v. Channic Pty Ltd [No 4] [2016] FCA 1174 (Channic) at [1725].

    19 Channic at [1736].

    20 NCC Section 47.

    21 Corporations Act Section 766A. Other activities that amount to providing a financial service, such as providing a custodial or depository service, operating a registered managed investment scheme and providing a crowdfunding platform, exclusively concern investment activities and are therefore beyond the scope of this chapter.

    22 Corporations Act Section 763A.

    23 Corporations Act Section 764A(1).

    24 Corporations Act Section 765A(1)(h).

    25 Corporations Act Section 761G.

    26 Corporations Act Part 7.7 Division 2.

    27 Corporations Act Part 7.7 Division 3.

    28 Corporations Act Part 7.7A.

    29 Corporations Act Part 7.9 Division 2.

    30 Corporations Act Section 912A.

    31 Banking Act Section 5.

    32 Banking Act Section 7.

    33 APRA, 'Discussion Paper – Licensing: A phased approach to authorising new entrants to the banking industry', 15 August 2017, https://www.apra.gov.au/sites/default/files/Phased-licence-discussion-paper.pdf, at p. 18.

    35 RBA, Standard No. 3 of 2016: Scheme Rules Relating to Merchant Pricing for Credit, Debit and Prepaid Card Transactions, Clause 4.

    37 The Australian Privacy Principles (APP) apply to agencies and organisations: Privacy Act Section 6. The definition of an agency is in Section 6 of the Privacy Act and the definition of an organisation is in Section 6C of the Privacy Act. The definition of organisation excludes small business operators, who are operators of a business that have an annual turnover of A$3 million or less in a financial year: Privacy Act Section 6D.

    38 Privacy Act Schedule 1.

    39 Privacy Act Sections 6Q and 21D, the Privacy (Credit Reporting) Code 2014 Clause 9.3.

    40 Privacy Act Part IIIC.

    41 AML/CTF Act Section 6.

    42 AML/CTF Act Section 51B.

    43 AML/CTF Act Section 81.

    44 AML/CTF Rules Parts 8.4 and 9.4.

    45 AML/CTF Act Section 32.

    46 AML/CTF Act Section 47.

    47 AML/CTF Act Section 45.

    48 AML/CTF Act Section 43.

    49 AML/CTF Act Section 41.

    50 AML/CTF Rules Parts 8.5 and 9.5.

    51 AML/CTF Rules Parts 8.3 and 9.3.

    52 ASIC Act Section 12A(3).

    53 ASIC Act Section 13; NCCP Act Section 248.

    54 ASIC Act Section 33; NCCP Act Section 267.

    55 ASIC Act Sections 19, 21; NCCP Act Sections 253, 255.

    56 Section 114 of the NCC states that for proceedings commenced on the application of the debtor or guarantor, a court may impose a penalty not exceeding the amount of interest charges payable. Section 118 of the NCC permits a court to order compensation for any loss suffered by a debtor or guarantor.

    57 NCCP Act Section 47(1)(i); Corporations Act Sections 912A(1)(g) and 912A(2)(b).

    58 Australian Financial Complaints Authority Complaint Resolution Scheme Rules – 1 November 2018, rule A14.2 (https://www.afca.org.au/public/download.jsp?id=6893).

    59 http://www.apra.gov.au.

    60 See Chief Executive Officer of the Australian Transaction Reports and Analysis Centre v. Commonwealth Bank of Australia Ltd [2018] FCA 930.

    61 https://www.accc.gov.au/about-us.

    62 See https://www.accc.gov.au/publications/debt-collection-guideline-for-collectors-creditors.

    64 See https://www.nppa.com.au/ for more information about the NPP.

    65 Corporations Act Section 763D(2).

    66 ASIC Corporations (Non-cash Payment Facilities) Instrument 2016/211.

    67 Corporations Regulations 2001 (Cth) regulation 7.1.07G.

    68 PSR Act Section 11.

    70 Standard No. 1 of 2016: The Setting of Interchange Fees in the Designated Credit Card Schemes and Net Payments to Issuers Clause 4.1.

    71 Standard No. 2 of 2016: The Setting of Interchange Fees in the Designated Debit and Prepaid Card Schemes and Net Payments to Issuers Clause 4.1.

    72 Standard No. 3 of 2016: Scheme Rules Relating to Merchant Pricing for Credit, Debit and Prepaid Card Transactions Clause 4.1.

    73 See Section 5 of the Banking Act and reg. 6 of the Banking Regulations.

    74 PSR Act Section 9(1)(c).

    75 PSR Act Section 22.

    76 Payment Systems (Regulation) Act 1998 (Cth) (PSR Act) Section 9.

    77 Banking Regulations reg. 6.

    78 See Section II.ii above for further information.

    79 ePayments Code Clause 4.11.

    80 ePayments Code Clause 10.1(e).

    81 ePayments Code Clauses 24 to 34.

    82 NPP Australia Ltd, Frequently asked questions (webpage), http://www.nppa.com.au/more-information/frequently-asked-questions/.

    83 Currently in Australia, two items of information are required to make a payment to a deposit account held with an ADI. These items of information are a recipient's Bank State Branch number, which is a centrally assigned number identifying the branch of the ADI at which the account is held, and their account number, which is a number assigned by the ADI to identify the account.

    84 AML/CTF Act Section 6, Table 1 Items 1 and 3.

    85 Banking Act Section 16AF.

    86 Banking Act Section 16AG; Banking Regulation 2016 (Cth) regulation 11.

    87 Banking Act Section 16AI.

    88 See Section IV.i under the heading 'Deposit guarantee'.

    89 NCC Section 6(4).

    90 See Andrews v. Australia and New Zealand Banking Group Limited (2012) 247 CLR 205, [79] to [82].

    91 Commonwealth Treasurer, media release, 9 May 2017, http://sjm.ministers.treasury.gov.au/media-release/044-2017/.

    92 See https://static.treasury.gov.au/uploads/sites/1/2018/05/t286983_consumer-data-right-booklet.pdf.

    93 NCC Section 204.

    94 NCC Section 6(5); NCCP Regulations regulation 51.

    95 NCC Section 17(7).

    96 NCC Section 32B(8).

    97 NCC Section 33(2)(a).

    98 NCC Section 33(2).

    99 NCC Section 13A.

    100 NCC Section 33(3).

    101 NCC Section 67(4).

    102 See NCCP Act Part 3-2.

    103 NCC Section 46.

    104 NCC Section 91. See pp. 13, 387 and 388 of Annotated National Credit Code by Andrea Beatty and Andrew Smith, LexisNexis, 5th edition, 2014.

    105 NCC Section 91(2)(a).

    106 As defined in NCC Section 159.

    107 See [157.10] of Annotated National Credit Code by Andrea Beatty and Andrew Smith, LexisNexis, 5th edition, 2014.

    108 NCC Section 158.

    109 NCCP Act Section 133BA.

    110 NCCP Act Section 133BC; NCCP Regulations Schedule 6.

    111 NCCP Act Section 133BD.

    112 NCCP Act Sections 133BE.

    113 NCCP Act Sections 133BF and 133BFA.

    114 NCCP Act Section 133BFB.

    115 NCCP Act Section 133BH.

    116 NCCP Act Section 133BI.

    117 NCCP Act Section 133BQ.

    118 NCCP Act Sections 133BT and 133BU.

    119 NCCP Act Sections 131(3AA), 133(3AA) and 160F.

    120 ASIC Credit (Unsuitability – Credit Cards) Instrument 2018/753.

    121 See definition of 'continuing credit contract' in NCC Section 204.

    122 NCC Section 14.

    123 NCC Section 17; NCCP Regulations regulation 74, Forms 6 and 7.

    124 NCCP Act Section 16; NCCP Regulations.

    125 NCCP Regulations reg. 72.

    126 NCC Section 32B.

    127 NCC Section 28.

    128 NCC Section 28(1)(a).

    129 NCC Section 27.

    130 NCC Section 27.

    131 NCC Section ۲۸(۱)(b).

    132 NCC Section 28(2).

    133 NCC Section 29.

    134 NCCP Regulations reg. 78.

    135 NCC Section 29.

    136 NCC Section 34(6)(a).

    137 NCC Section 30.

    138 NCC Section 28(1).

    139 NCC Section 28(2).

    140 NCC Section 30.

    141 NCC Section 93.

    142 NCC Section 204.

    143 NCC Sction 42.

    144 See Personal Property Securities Act 2009 (Cth) Part 2.2.

    145 NCC Section 44.

    146 NCC Section 45.

    147 NCC Section 48.

    148 NCC Section 50.

    149 See NCC Part 5 Division 4.

    150 NCCP Act Section 133AD; NCCP Regulations regulation 28LB, Schedule 5.

    151 For example, Section 57(3)(d) of the Real Property Act 1900 (NSW) requires one month's notice to be allowed.

    152 NCC Sections 82-83.

    153 NCC Section 88.

    154 NCC Section 93.

    155 NCCP Act Part 3-2.

    156 And also holders of a New Zealand Special Category Visa or permanent humanitarian visa.

    157 Under the Higher Education Support Act 2003 (Cth).

    158 ASIC Credit (Flexible Credit Cost Arrangements) Instrument 2017/780 (Cth).

    159 ASIC Credit (Flexible Credit Cost Arrangements) Instrument 2017/780 Explanatory Statement.

    160 ASIC, 'Report 600: Review of buy now pay later arrangements' (November 2018).

    161 NCCP Act Section 5(1).

    162 NCC Section 204.

    163 NCC Section 13A.

    164 NCCP Act Section 5(1); NCCP Regulations regulation 4D.

    165 NCC Section 204.

    166 NCC Section 13A. See [13A.05] to [13A.80] of Annotated National Credit Code by Andrea Beatty and Andrew Smith, LexisNexis, 5th edition, 2014.

    167 See [13A.30] to [13A.45] of Annotated National Credit Code by Andrea Beatty and Andrew Smith, LexisNexis, 5th edition, 2014.

    168 Section 31A(3).

    169 NCC Section 32A(4).

    170 NCC Section 39B.

    171 NCCP Regulations regulation 28S.

    172 NCCP Act Sections 118(3A)(b), 119(3A)(b), 131(3A)(b).

    173 NCCP Act Sections 118(3A)(a), 119(3A)(a), 131(3A)(a).

    174 NCCP Regulations regulation 28XXF.

    175 NCC Section 127.

    176 NCC Sections 128 and 129.

    177 NCC Section 130.

    178 NCC Sections 131 and 133.

    179 See ASIC Report 492, 'A market that is failing consumers: The sale of add-on insurance through car dealers' (September 2016).

    180 NCC Section 133.

    181 NCC Section 144.

    182 NCC Section 148.

    183 ASIC Corporations (Concept Validation Licensing Exemption) Instrument 2016/1175 and ASIC Credit (Concept Validation Licensing Exemption) Instrument 2016/1176.

    184 See https://treasury.gov.au/consultation/c2017-t230052/.

    185 Treasury Laws Amendment (Design and Distribution Obligations and Product Intervention Powers Bill 2018 (Cth).

    186 Royal Commission into Misconduct in the Banking, Superannuation and Financial Services Industry.

    187 id., Interim Report (Executive Summary), https://financialservices.royalcommission.gov.au/Documents/interim-report/interim-report-exec-summary.pdf.

    188 ibid..