Lead signal
ASIC has been reading lending files at scale: $55m in compensation over offset accounts that were never properly linked, 350,000 car loans reviewed across eight lenders, and broker files now under the same lens. Behind them sit APRA's lodgement cutover on 30 September, a breach reporting penalty and DDO stop orders that bind every licensee, and privacy determinations on insider access and tracking pixels.
Show radar
Regulatory radar overview
Angle shows the regulatory category, distance from the centre shows when it bites, and size and colour show severity. Select a numbered signal to read its detail.
On a small screen, scroll the radar horizontally to see the full graphic.
Regulatory changes on the radar
$55m for unlinked accounts
- Who it affects
- mortgage brokers, aggregators and non-bank lenders whose customers rely on offset features
- What it can disrupt
- origination and linking processes with nothing downstream watching whether the link held
- Why it matters now
- review of eight banks published 29 July. ASIC says all banks should check. Further compensation expected
350,000 car loans, one warning
- Who it affects
- vehicle finance lenders, broker and dealer networks, and collections teams
- What it can disrupt
- distributor oversight, hardship workflows and fee disclosure that cannot show consumer outcomes
- Why it matters now
- REP 832 published across eight lenders. Enforcement flagged where obligations are not met.
Broker files are being read
- Who it affects
- mortgage broker licensees, aggregators and advice businesses under the best interests duty
- What it can disrupt
- recommendation records and complaints handling that cannot show the reasoning behind each loan
- Why it matters now
- thematic review underway now, with findings to be published later this year
The old reporting route is closing
- Who it affects
- finance companies registered with APRA as RFCs, and any provider lodging on their behalf
- What it can disrupt
- reporting workflows and third-party lodgement tooling still built for the alternate path
- Why it matters now
- liquidity returns cut over 31 July. EFS from 31 August. Everything else by 30 September
Insider access just got expensive
- Who it affects
- lenders and brokers whose staff can browse applicant and account records beyond their role
- What it can disrupt
- role based access controls and audit logging that cannot prove who viewed which account, and when
- Why it matters now
- determination made: compensation, apology, technical access controls and account level logging all ordered.
Credit reporting scope just narrowed
- Who it affects
- credit providers with mandatory credit reporting obligations
- What it can disrupt
- data extraction rules and reporting configurations still submitting the newly exempt account category
- Why it matters now
- in force 9 June 2026. Relief now runs to 1 October 2031.
Tracking pixels triggered determinations
- Who it affects
- lenders and brokers running third-party pixels on application, quote or hardship pages
- What it can disrupt
- consent mechanisms and data flows quietly shipping sensitive signals to advertising platforms
- Why it matters now
- determinations made. The OAIC has told every APP entity to review its pixels.
$10.3m for unreported investigations
- Who it affects
- credit and AFS licensees under the reportable situations regime, including non-bank lenders and brokers
- What it can disrupt
- breach identification and escalation systems that let investigations go unreported or late
- Why it matters now
- penalty ordered by the Federal Court. Trustee accountability is a named 2026 priority.
Late lodgements cost a licence
- Who it affects
- AFS and credit licensees with statutory audit and financial report lodgement obligations
- What it can disrupt
- audit and lodgement deadline tracking that relies on someone remembering
- Why it matters now
- AFS licence suspended 17 July over unlodged reports. Lifted 3 August once they were filed
Stop orders over target markets
- Who it affects
- lenders and brokers issuing credit products with target market determinations under DDO
- What it can disrupt
- target market determinations that drift from what the product actually is: objectives, liquidity, holding period
- Why it matters now
- interim stop orders issued. Private credit products remain in the spotlight.
Company search gets an API
- Who it affects
- lenders and brokers doing company checks in onboarding, KYC or credit assessment
- What it can disrupt
- brittle ASIC Connect lookups and scraped registry data, which now have a supported replacement
- Why it matters now
- public beta live, part of the RegistryConnect modernisation programme.
Compiled with care from public sources; errors and omissions excepted. Always check the linked source before acting. Regulatory Radar is general information, not legal or compliance advice.