7.3 Regulatory Architecture: ASIC, APRA, ACCC, and the Banking Royal Commission

7.3 Regulatory Architecture: ASIC, APRA, ACCC, and the Banking Royal Commission

Core Principle: Corporate governance does not operate in a legal vacuum. In Australia, corporate behavior is governed, monitored, and disciplined by a sophisticated multi-agency regulatory architecture. Designed following the 1997 Wallis Financial System Inquiry, Australia's "Twin Peaks" model separates market conduct and investor protection (ASIC) from prudential safety and financial system solvency (APRA), while the ACCC safeguards competitive markets. Understanding the distinct jurisdictions, overlapping remits, and transformed enforcement postures of these statutory regulators post-Hayne Royal Commission is vital for professional accountants exercising governance and advisory responsibilities.

---

1. Australia's Multi-Regulator Architecture: The "Twin Peaks" Model Plus Competition

Following the financial deregulation of the 1980s, the Australian Commonwealth Government appointed the Financial System Inquiry (chaired by Stan Wallis), which presented its final report in 1997. The Wallis Inquiry recommended dismantling fragmented industry-based regulatory silos (which had separate regulators for banks, building societies, friendly societies, and securities exchanges) and replacing them with a functional, objective-based regulatory architecture known internationally as the Twin Peaks model.

+-------------------------------------------------------------------------------------------------+
|                            AUSTRALIA'S TWIN PEAKS REGULATORY ARCHITECTURE                      |
+-------------------------------------------------------------------------------------------------+
|                                 COUNCIL OF FINANCIAL REGULATORS (CFR)                           |
|               (Non-statutory coordination forum: RBA [Chair], APRA, ASIC, Treasury)             |
+-----------------------------------+-----------------------------------+-------------------------+
| PEAK 1: CONDUCT & DISCLOSURE      | PEAK 2: PRUDENTIAL SAFETY         | COMPETITION PEAK        |
| Australian Securities and         | Australian Prudential Regulation  | Australian Competition  |
| Investments Commission (ASIC)     | Authority (APRA)                  | & Consumer Commission   |
+-----------------------------------+-----------------------------------+-------------------------+
| STATUTORY MANDATE:                | STATUTORY MANDATE:                | STATUTORY MANDATE:      |
| * Market integrity & conduct      | * Systemic financial stability    | * Market competition    |
| * Consumer protection in finance  | * Depositor & policyholder safety | * Anti-trust & mergers  |
| * Corporations Act administration | * Prudential institution solvency | * Consumer fair trading |
|                                   |                                   |                         |
| REGULATED POPULATION:             | REGULATED POPULATION:             | REGULATED POPULATION:   |
| * All 3M+ Australian companies    | * Authorized Deposit-taking       | * All trading entities  |
| * Financial service licensees     |   Institutions (ADIs / Banks)     |   across all Australian |
| * Credit licensees & markets      | * General & Life Insurers, RSEs   |   economic sectors      |
+-----------------------------------+-----------------------------------+-------------------------+

The Coordinating Forums

Because commercial financial institutions interact across both peaks, inter-agency coordination is critical:

• Council of Financial Regulators (CFR): The non-statutory coordinating body for Australia's main financial regulatory agencies. Chaired by the Governor of the Reserve Bank of Australia (RBA), its members comprise APRA, ASIC, and the Commonwealth Department of the Treasury. The CFR meets quarterly to identify systemic macro-prudential risks, coordinate crisis management, and ensure regulatory alignment.
• Financial Reporting Council (FRC): A statutory body established under Part 12 of the ASIC Act 2001. The FRC provides broad oversight of the Australian accounting and auditing standard-setting processes (monitoring the Australian Accounting Standards Board - AASB, and the Auditing and Assurance Standards Board - AUASB) and advises the Minister on audit quality and auditor independence.

---

2. Australian Securities and Investments Commission (ASIC)

Statutory Charter and Jurisdiction

Established under the ** Australian Securities and Investments Commission Act 2001 (ASIC Act), ASIC is Australia's integrated corporate, markets, financial services, and consumer credit regulator. ASIC administers the ** Corporations Act 2001 (Cth) across the entire Australian economy.

Under Section 1(2) of the ASIC Act, ASIC's statutory objectives include:

1. Maintaining, facilitating, and improving the performance of the financial system and the entities within it in the interests of commercial certainty and economic development;
2. Promoting the confident and informed participation of investors and consumers in the financial system;
3. Administering the law effectively with minimum procedural requirements; and
4. Taking whatever action is necessary to enforce and give effect to the law.

Core Regulatory Functions

• Corporate Registrar: Registers companies, maintains public registers of company directors, corporate documents, and charges, and oversees corporate insolvencies.
• Market Integrity: Surveils Australia's domestic licensed financial markets (including the ASX and Cboe Australia) to detect and penalize insider trading, market manipulation, continuous disclosure breaches, and misleading market communications.
• Financial Services & Credit Licensing: Issues and cancels Australian Financial Services Licences (AFSL) under Chapter 7 of the Corporations Act and Australian Credit Licences (ACL) under the National Consumer Credit Protection Act 2009.
• Consumer Protection in Financial Services: Regulates conduct regarding financial products and advice, policing misleading or deceptive conduct (s 12DA ASIC Act) and unconscionable conduct (ss 12CA/12CB ASIC Act).

Enforcement Powers and Remedies

ASIC possesses an extensive toolkit of administrative, civil, and criminal enforcement powers:

+-------------------------------------------------------------------------------------------------+
|                                 ASIC'S ENFORCEMENT & REMEDY SPECTRUM                            |
+-----------------------------------+-------------------------------------------------------------+
| ENFORCEMENT CATEGORY              | SPECIFIC STATUTORY MECHANISMS & REMEDIES                    |
+-----------------------------------+-------------------------------------------------------------+
| 1. ADMINISTRATIVE POWERS          | * Refusing, suspending, or cancelling AFSLs and ACLs        |
|                                   | * Banning individuals from providing financial services     |
|                                   | * Disqualifying directors from managing corporations (s 206F)|
|                                   | * Issuing Infringement Notices for continuous disclosure    |
|                                   | * Issuing Stop Orders on defective Product Disclosure Stmts |
+-----------------------------------+-------------------------------------------------------------+
| 2. ENFORCEABLE UNDERTAKINGS (EUs) | * Statutory court-enforceable promises under s 93AA ASIC Act|
|                                   | * Company agrees to redress conduct, compensate victims,    |
|                                   |   and submit to independent external governance audits      |
+-----------------------------------+-------------------------------------------------------------+
| 3. CIVIL PENALTY PROCEEDINGS      | * Commenced by ASIC in the Federal Court of Australia       |
|                                   | * Applies to breaches of directors' duties (ss 180-183),   |
|                                   |   continuous disclosure (s 674), and market manipulation    |
|                                   | * Penalties: Pecuniary fines exceeding $15M+ for corporates, |
|                                   |   disqualification orders (s 206C), and compensation orders |
+-----------------------------------+-------------------------------------------------------------+
| 4. CRIMINAL PROSECUTIONS          | * Handled in coordination with Commonwealth DPP (CDPP)      |
|                                   | * Reserved for intentional fraud, dishonest director breach |
|                                   |   (s 184), insider trading (s 1043A), and market rigging    |
|                                   | * Penalties: Up to 15 years imprisonment and criminal fines |
+-----------------------------------+-------------------------------------------------------------+

---

3. Australian Prudential Regulation Authority (APRA)

Statutory Charter and Core Objective

Established on 1 July 1998 by the ** Australian Prudential Regulation Authority Act 1998 (APRA Act)**, APRA is the prudential regulator of the Australian financial services industry. While ASIC focuses on conduct and disclosures, APRA focuses on safety, soundness, and institutional solvency.

APRA supervises institutions that hold the public's savings and insurance protections:

• Authorized Deposit-taking Institutions (ADIs): Commercial banks, retail banks, credit unions, and building societies under the Banking Act 1959.
• Insurance Companies: General insurers, life insurance companies, and friendly societies under the Insurance Act 1973 and Life Insurance Act 1995.
• Superannuation Funds: Registrable Superannuation Entity (RSE) licensees under the Superannuation Industry (Supervision) Act 1993 (SIS Act) (excluding self-managed super funds, which are regulated by the ATO).

Under Section 8(2) of the APRA Act, APRA is required to balance the objectives of financial safety and efficiency, competition, contestability, and competitive neutrality, and in doing so promote financial system stability in Australia.

Key Prudential Standards Affecting Corporate Governance

APRA exercises its regulatory authority by issuing legally binding Prudential Standards. Regulated institutions must strictly comply; breaches attract statutory directions, capital penalties, or licence revocations. Three prudential standards are essential for CPA candidates:

1. Prudential Standard CPS 510 (Governance):

   • Mandates that the board must have a majority of independent non-executive directors at all times.
   • Requires an independent Chair who cannot have been the CEO of the institution within the prior three years.
   • Mandates standalone Board Audit Committees and Board Remuneration Committees with specific charters.
   • Requires comprehensive board renewal policies, director independence assessments, and independent evaluations.

2. Prudential Standard CPS 220 (Risk Management):

   • Requires institutions to maintain an Enterprise Risk Management (ERM) framework appropriate to the size and complexity of the institution.
   • Mandates a formal Board-approved Risk Appetite Statement (RAS) defining the degree of risk the entity is willing to accept.
   • Requires an independent Board Risk Committee and an independent Chief Risk Officer (CRO) with direct unfettered access to the board, protected from operational business interference.

3. Prudential Standard CPS 230 (Operational Resilience):

   • Requires regulated entities to effectively manage operational risks, maintain business continuity during disruptions, and manage risks arising from service providers and outsourcing.
   • Mandates that boards actively oversee operational risk profiles and approve critical operation tolerances.

The Financial Accountability Regime (FAR)

Originally enacted in 2018 for the banking sector as the Banking Executive Accountability Regime (BEAR) following the recommendations of the Hayne Royal Commission, the regime was substantially broadened into the Financial Accountability Regime Act 2023 (FAR). FAR is administered jointly by APRA and ASIC:

• Scope: Extends individual accountability beyond banks to general insurers, life insurers, and superannuation trustees.
• Accountability Statements and Maps: Entities must maintain detailed "accountability maps" identifying specific Accountable Persons (directors, CEO, CFO, CRO, head of audit) and articulating their exact spheres of personal responsibility.
• Statutory Obligations: Accountable Persons must take reasonable steps to prevent regulatory breaches, ensure good governance, and operate with honesty, integrity, and skill.
• Remuneration Deferral: Mandates that a minimum percentage (typically 40% to 60%) of an executive's variable remuneration must be deferred for at least four years, subject to clawback if accountability standards are breached.
• Direct Sanctions: APRA and ASIC can directly disqualify Accountable Persons and impose civil penalties of up to 5,000 penalty units (approximately $1.82 million) on individuals without the company being permitted to indemnify them.

---

4. Australian Competition and Consumer Commission (ACCC)

Statutory Charter and Functions

The ACCC is an independent Commonwealth statutory authority administering the ** Competition and Consumer Act 2010 (CCA)** (formerly the Trade Practices Act 1974) and the Australian Consumer Law (ACL) (set out in Schedule 2 of the CCA).

While ASIC regulates consumer protection in financial services, the ACCC regulates competition and consumer protection across all other goods, services, and industrial sectors of the Australian economy.

+-------------------------------------------------------------------------------------------------+
|                                 CORE JURISDICTIONS OF THE ACCC                                  |
+-----------------------------------+-------------------------------------------------------------+
| 1. ANTI-COMPETITIVE AGREEMENTS    | * Strict prohibitions on cartels (price fixing, bid rigging,|
|    & CARTELS                      |   market sharing, output restrictions) under Part IV of CCA |
|                                   | * Cartels carry dual CIVIL penalties and CRIMINAL prison    |
|                                   |   sentences up to 10 years for participating directors      |
+-----------------------------------+-------------------------------------------------------------+
| 2. MISUSE OF MARKET POWER (s 46)  | * A corporation with substantial market power must not engage|
|                                   |   in conduct that has the purpose, effect, or likely effect |
|                                   |   of substantially lessening competition in a market        |
+-----------------------------------+-------------------------------------------------------------+
| 3. MERGER CONTROL (s 50)          | * Prohibits mergers or acquisitions that would have the     |
|                                   |   effect, or be likely to have the effect, of substantially |
|                                   |   lessening competition in any Australian market            |
|                                   | * Operates informal and formal merger review clearance      |
+-----------------------------------+-------------------------------------------------------------+
| 4. CONSUMER PROTECTION (ACL)      | * Section 18 ACL: Prohibition of misleading/deceptive conduct|
|                                   | * Unconscionable conduct in business transactions (ss 20-22)|
|                                   | * Unfair contract terms in consumer and small business cases|
|                                   | * Mandatory product safety and consumer guarantee regimes   |
+-----------------------------------+-------------------------------------------------------------+

Inter-Agency Borderlines: ASIC vs. ACCC

A frequent area of confusion is the jurisdictional split between the ACCC and ASIC regarding consumer protection:

• If an alleged unfair practice, misleading advertisement, or unconscionable transaction involves a financial product or financial service (such as a bank account, mortgage, superannuation fund, insurance policy, or securities offering), ASIC holds exclusive statutory jurisdiction under the ASIC Act.
• If the transaction involves non-financial commercial goods or services (such as telecommunications, retail supermarket pricing, energy utilities, construction, or transport), the ACCC holds exclusive statutory jurisdiction under the Competition and Consumer Act.

---

5. The Hayne Royal Commission (2018–2019): Misconduct and Governance Failure

Catalysts, Terms of Reference, and Scope

In December 2017, following sustained public scandals, whistleblower leaks, and parliamentary inquiries, the Australian Federal Government established the Royal Commission into Misconduct in the Banking, Superannuation and Financial Services Industry, headed by former High Court Justice Kenneth Hayne AC QC. The Commission's Final Report was tabled in Parliament in February 2019, containing 76 sweeping recommendations.

Systemic Findings of the Commission

The Hayne Royal Commission uncovered institutionalized misconduct across the major banks (CBA, Westpac, ANZ, NAB), AMP, and retail superannuation funds. The Commission identified four systemic drivers:

+-------------------------------------------------------------------------------------------------+
|                        HAYNE ROYAL COMMISSION: ROOT CAUSES OF SYSTEMIC FAILURE                  |
+-------------------------------------------------------------------------------------------------+
| 1. UNCHECKED GREED:                                                                             |
|    Pursuit of short-term quarterly profit and sales volumes systematically prioritized over     |
|    basic compliance with the law and duty to customers. Misconduct was actively profitable.     |
|                                                                                                 |
| 2. CONFLICTS OF INTEREST (VERTICAL INTEGRATION):                                                |
|    Financial conglomerates manufactured financial products (wealth funds, insurance) while     |
|    employing financial planners who purported to give independent advice to retail clients.     |
|                                                                                                 |
| 3. PERVERSE REMUNERATION INCENTIVES:                                                            |
|    Frontline staff, brokers, and executives were rewarded via aggressive commissions and bonus  |
|    scorecards tied purely to sales targets, with zero clawback for ethical or legal violations. |
|                                                                                                 |
| 4. BOARD COMPLACENCY & NON-FINANCIAL RISK NEGLECT:                                              |
|    Boards maintained unquestioning faith in executive presentations, failed to verify compliance|
|    data, and treated non-financial risk (conduct, legal, regulatory) as subordinate to profit. |
+-------------------------------------------------------------------------------------------------+

The Failure of the Regulators: "Why Not Litigate?"

Commissioner Hayne reserved his most scathing critique for Australia's regulatory bodies—specifically ASIC and APRA. Hayne observed that for decades, regulators had adopted a collaborative, conciliatory approach toward corporate lawbreakers:

• When major banks engaged in systemic misconduct (e.g., "fees-for-no-service," where clients including deceased estates were charged monthly advisory fees for decades without any service), regulators entered into confidential negotiations.
• Infringements were routinely settled via Enforceable Undertakings (EUs) without admissions of guilt, nominal administrative fines, or customer compensation agreements that entities treated as routine "costs of doing business."

Commissioner Hayne asserted that the primary question a statutory regulator must ask when faced with serious contraventions of the law is not "How can we negotiate a settlement?" but:

"Why not litigate?"

Hayne argued that the rule of law requires public court determination of corporate wrongdoing, public judicial denunciation, and severe civil/criminal deterrence rather than closed-door bureaucratic settlements.

---

6. Enduring Governance Reforms Post-Hayne

The findings of the Hayne Royal Commission fundamentally altered Australian corporate governance:

1. Elevation of Non-Financial Risk Oversight: Prior to Hayne, corporate boards focused almost exclusively on financial risk (credit, market, liquidity). Hayne established that non-financial risk (operational, compliance, regulatory, conduct, and cultural risk) can destroy an institution just as rapidly as financial insolvency. Boards are now legally expected to interrogate risk reports, seek independent assurance, and examine front-line customer complaints directly.
2. The Transformation of Corporate Culture: Culture is no longer regarded as an abstract human-resources slogan. Boards are directly accountable for assessing, monitoring, and reinforcing corporate culture. The Fourth Edition of the ASX Corporate Governance Principles (Principle 3) directly adopted this mandate.
3. Overhaul of Executive Remuneration: Financial institutions and listed entities decoupled executive bonuses from pure sales and profit targets. Under APRA Prudential Standard CPS 511 (Remuneration) and FAR, executive scorecards must incorporate significant non-financial risk metrics, with mandatory multi-year deferrals and robust malus/clawback mechanisms.
4. Design and Distribution Obligations (DDO): Enacted under Part 7.8A of the Corporations Act, financial product issuers must formulate a Target Market Determination (TMD) ensuring products are designed only for suitable consumers, and actively monitor distribution channels.
5. Aggressive Regulatory Enforcement: ASIC adopted its explicit "Why not litigate?" operational doctrine, dramatically escalating Federal Court civil penalty proceedings against major banks, boards, and superannuation trustees, resulting in record multi-hundred-million-dollar penalties.

---

7. Australian Regulators Comparison Matrix

---

8. Practical Case Study and Exam Traps

Practical Case Study: The CBA APRA Prudential Inquiry (2018)

The Context: In 2017, AUSTRAC commenced civil penalty proceedings against the Commonwealth Bank of Australia (CBA) for more than 53,000 serious contraventions of the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act) associated with its Intelligent Deposit Machines. CBA ultimately paid a $700 million penalty plus legal costs.

APRA's Intervention: APRA initiated an independent Prudential Inquiry into CBA's governance, culture, and accountability. The final report (April 2018) became a classic corporate governance text. APRA found that CBA's continued financial success had dulled its senses, creating widespread organizational complacency, a culture where bad news was filtered before reaching the board, an insular "we know best" attitude, and a complete failure by the board to oversee non-financial risks with the same tenacity applied to credit risk.

Regulatory Sanctions and Governance Remedies:

• APRA imposed a $1 billion operational risk capital add-on (forcing CBA to hold an extra $1 billion in regulatory capital until deficiencies were remediated);
• CBA was forced to enter into a court-enforceable undertaking to execute a comprehensive Remedial Action Plan;
• Executive remuneration scorecards were clawed back and reduced; and
• The board was thoroughly restructured with new independent directors possessing regulatory compliance expertise.

⚠️ Exam Alert: Common Regulatory Pitfalls

• Trap 1: Confusing ASIC and APRA Jurisdictions. A frequent exam error is claiming APRA investigates misleading advertising or insider trading. Correction: APRA focuses strictly on institutional solvency, capital adequacy, and prudential soundness of banks/insurers. ASIC investigates conduct, insider trading, corporate disclosures, and fraud.
• Trap 2: Confusing Consumer Protection Between ASIC and the ACCC. When an exam question describes deceptive conduct involving a home loan, credit card, or wealth fund, students frequently cite the ACCC and the Competition and Consumer Act. Correction: Financial services are carved out of the CCA; misleading conduct in finance is policed exclusively by ASIC under the ASIC Act 2001.
• Trap 3: Misunderstanding the FAR Regime. The Financial Accountability Regime (FAR) does not merely punish the corporate entity; it attaches personal, direct, non-indemnifiable liability and mandatory remuneration deferral/clawback to individual Accountable Persons.