Australian Lenders & Brokers Regulatory Radar

September-October 2026. What's moving on the horizon for these firms and what it quietly breaks.

Lead signal

ASIC's review of eight large aggregator groups found gaps in best interests and complaints handling, and access to director details on the companies register is being tiered from mid-2027.

Regulatory changes on the radar

Show radar Hide radar

Regulatory radar overview

Select a numbered signal to read its detail. Size and colour show severity.

Australian Lenders & Brokers regulatory radar for September-October 2026 3 numbered regulatory signals arranged by category, timing and severity. The same signals are listed in full beneath this chart. 1 Signal 1: Broker best interests gaps found 2 Signal 2: Regulators want AI cyber plans tested 3 Signal 3: Company register access is being tiered
1 CREDIT & LENDING NOW MEDIUM

Broker best interests gaps found

Who it affects
mortgage brokers and aggregator groups
What it can disrupt
broker records that cannot show why a loan was in the customer's best interests, or how a complaint was handled
Why it matters now
Findings published from eight large aggregator groups. Non-binding, but it shows what ASIC will check.
Read the primary source
2 PRIVACY & DATA NOW MEDIUM

Regulators want AI cyber plans tested

Who it affects
ASIC-licensed lenders and brokers whose systems hold borrower data
What it can disrupt
incident playbooks, escalation paths and third-party maps never tested at the speed of AI-enabled attacks
Why it matters now
Board checklist published. APRA and ASIC point to existing standards, so the test is evidence, not new rules.
Read the primary source
3 PRIVACY & DATA ON THE HORIZON MEDIUM

Company register access is being tiered

Who it affects
lenders, brokers and collectors verifying directors and guarantors
What it can disrupt
KYC, credit and collections workflows that pull director details from open register searches
Why it matters now
Proposed, not final. Consultation closed 12 October; new access settings planned from 1 July 2027, fully in place by 1 August 2028.
Read the primary source

Compiled with care from public sources; errors and omissions excepted. Always check the linked source before acting. Regulatory Radar is general information, not legal or compliance advice.