Lead signal
APRA put two banks under licence conditions within weeks of each other: one without a reliable view of its obligations and controls, one with a liquidity ratio overstated for years. Both banks were financially sound.
Regulatory changes on the radar
Show radar
Regulatory radar overview
Select a numbered signal to read its detail. Size and colour show severity.
Zoom and drag to explore. The radar stays open until you hide it.
Licence conditions over a risk framework
- Who it affects
- banks and mutuals under APRA's risk management standards
- What it can disrupt
- obligations registers and controls inventories that cannot show every obligation and who controls it
- Why it matters now
- Conditions imposed 18 August: a rectification program, an independent assurer and board attestation. The $50m capital add-on stays.
$50m add-on for a ratio error
- Who it affects
- banks, mutuals and other ADIs calculating liquidity and prudential returns
- What it can disrupt
- regulatory calculations that nobody re-derives independently from source data
- Why it matters now
- Licence conditions imposed 3 September. Years of miscalculation overstated the ratio, at times hiding breaches of the minimum.
Scam complaints get an external referee
- Who it affects
- banks designated under the scams framework, from complaints teams to IDR
- What it can disrupt
- complaint systems that cannot tag scam cases or show what the bank did to prevent, detect and respond
- Why it matters now
- AFCA takes scam complaints from 31 March 2027. ASIC's oversight guidance is proposed, not final; comments close 24 November.
Regulators want AI cyber plans tested
- Who it affects
- banks and mutuals under APRA's operational risk and security standards
- What it can disrupt
- incident playbooks, escalation paths and third-party maps never tested at the speed of AI-enabled attacks
- Why it matters now
- Board checklist published. APRA and ASIC point to existing standards, so the test is evidence, not new rules.
Company register access is being tiered
- Who it affects
- banks onboarding business customers and verifying officeholders
- What it can disrupt
- KYC, credit and collections workflows that pull director details from open register searches
- Why it matters now
- Proposed, not final. Consultation closed 12 October; new access settings planned from 1 July 2027, fully in place by 1 August 2028.
Compiled with care from public sources; errors and omissions excepted. Always check the linked source before acting. Regulatory Radar is general information, not legal or compliance advice.