Reportable Situations Regime.
Reportable Situations Regime (RSR)
The Reportable Situations Regime (RSR) is a mandatory breach reporting framework under the Corporations Act 2001 (Cth) that requires certain Australian Financial Services (AFS) licensees and Australian Credit License (ACL) holders to report specific misconduct and breaches to the regulator, the Australian Securities and Investments Commission (ASIC).
It was significantly strengthened by the Financial Sector Reform (Hayne Royal Commission Response) Act 2020, following findings of the Royal Commission into Misconduct in the Banking, Superannuation and Financial Services Industry.
1. Legislative Framework
The regime is contained in:
Part 7.6 (AFS licensees) – ss 912D–912DAA
National Consumer Credit Protection Act 2009 (Cth) – s 50A
Corporations Act 2001 (Cth) – general obligations under s 912A
The purpose of the RSR is to:
Improve early detection of systemic misconduct
Increase accountability of financial institutions
Protect consumers
Strengthen ASIC’s enforcement capabilities
2. Who Must Report?
The regime applies to:
AFS licensees
ACL holders
Mortgage intermediaries
Credit representatives
Financial advisers (in certain circumstances)
3. What Must Be Reported?
A report must be lodged with ASIC within 30 calendar days after the licensee first knows (or is reckless with respect to whether) there are reasonable grounds to believe a reportable situation has arisen.
(A) Significant Breaches
A breach (or likely breach) of a core obligation that is significant must be reported.
Core Obligations Include:
General obligations under s 912A
Financial services laws
Credit legislation obligations
Significance Test
A breach is deemed significant if it:
Is a criminal offence
Results in material loss/damage
Involves misleading conduct
Indicates systemic compliance failure
Is determined significant by ASIC regulations
Some breaches are automatically deemed significant (no discretion required).
(B) Investigations
If a licensee begins an investigation into whether a significant breach has occurred and the investigation continues for more than 30 days, it must be reported.
(C) Gross Negligence or Serious Fraud
If a representative engages in:
Gross negligence
Serious fraud
The licensee must report it.
(D) Reportable Situations About Representatives
If a financial adviser leaves and the licensee becomes aware of reportable conduct, the licensee must notify ASIC within 30 days.
4. Timeframes
Report to ASIC within 30 calendar days
Investigations exceeding 30 days must be reported
Additional reporting obligations may apply to affected clients
5. Penalties for Non-Compliance
Failure to comply can result in:
Civil penalties
Criminal liability
License suspension or cancellation
Enforceable undertakings
ASIC has actively enforced breach reporting obligations following Royal Commission reforms.
6. Key Case Law Relevant to the Reportable Situations Regime
Although the RSR itself is relatively recent, courts have long considered breach reporting and compliance obligations under s 912A and related provisions. The following cases illustrate principles relevant to reporting, systemic misconduct, and compliance failures.
1. Australian Securities and Investments Commission v Westpac Banking Corporation
Issue: Responsible lending obligations and systemic compliance failure.
Held: The Federal Court found Westpac contravened responsible lending provisions under the NCCP Act.
Relevance to RSR:
Demonstrates how systemic compliance failures constitute significant breaches.
Highlights the importance of robust compliance systems that would trigger breach reporting under the RSR.
2. Australian Securities and Investments Commission v AMP Financial Planning Pty Ltd
Issue: Charging fees for no service and misleading conduct.
Held: AMP engaged in misleading conduct and compliance failures.
Relevance to RSR:
Failure to report significant breaches in a timely manner.
Demonstrates how internal knowledge of misconduct can trigger reporting obligations.
Reinforces duty to act efficiently, honestly, and fairly (s 912A).
3. Australian Securities and Investments Commission v Commonwealth Bank of Australia
Issue: Delayed breach reporting.
Held: CBA failed to lodge breach reports within required timeframes.
Relevance:
Directly concerns breach reporting failures.
Clarifies that delay itself constitutes contravention.
Emphasizes strict interpretation of reporting timelines.
4. Australian Securities and Investments Commission v RI Advice Group Pty Ltd
Issue: Cybersecurity failures and compliance systems.
Held: Licensee breached s 912A by failing to have adequate risk management systems.
Relevance:
Inadequate systems can amount to significant breaches.
Demonstrates that systemic risk failures are reportable under RSR.
5. Australian Securities and Investments Commission v MLC Nominees Pty Ltd
Issue: Fees charged after members’ deaths.
Held: Breach of financial services laws and failure to act efficiently, honestly and fairly.
Relevance:
Illustrates ongoing systemic misconduct.
Significant breaches of core obligations requiring reporting.
6. Australian Securities and Investments Commission v National Australia Bank Ltd
Issue: Fees for no service and compliance failures.
Held: NAB breached financial services obligations.
Relevance:
Shows circumstances where misconduct would be automatically reportable under the strengthened RSR.
Reinforces accountability for systemic breaches.
7. Practical Compliance Steps for Licensees
To comply with the RSR, licensees should:
Establish internal breach reporting frameworks
Maintain clear breach identification criteria
Conduct timely investigations
Keep detailed records of breach assessments
Train staff in reporting triggers
Implement automated compliance monitoring systems
8. Key Differences from Old Regime
| Old Regime | New Reportable Situations Regime |
|---|---|
| “As soon as practicable” | 30-day fixed deadline |
| Subjective significance test | Deemed significance categories |
| Limited investigation reporting | Mandatory investigation reporting |
| Less clarity | Prescriptive statutory triggers |
Conclusion
The Reportable Situations Regime represents a major shift toward strict, time-bound, and transparent breach reporting in Australia’s financial services sector. It reinforces the core obligation under s 912A of the Corporations Act 2001 (Cth) to act efficiently, honestly, and fairly.
The cases above demonstrate how courts interpret:
Systemic compliance failures
Significant breaches
Timeliness of reporting
Adequacy of compliance systems
The regime reflects post-Royal Commission reforms designed to ensure that misconduct is identified, escalated, and reported promptly to ASIC to protect consumers and maintain market integrity.

comments