Staying compliant with Australian mortgage regulations comes down to working under a current licence or credit-representative authorisation, meeting your responsible lending and Best Interests Duty obligations, keeping records that prove both and reviewing your processes often enough to catch drift. The framework is stable; the discipline varies between brokerages.
This guide sets out the regulators and legislation that govern your work, what each obligation requires in practice and a routine that keeps compliance current without consuming your week.
Effortlessly navigate compliance with comprehensive trail tracking.
Track My Trail makes it easy for brokers to analyse their lender distribution, identify their most profitable clients, and keep track of lost & gained trail.
Get Track My Trail for free today – no credit card required.
The rules that govern your broking work
Mortgage brokers answer to three regulators day to day. ASIC administers the credit regime and enforces the mortgage broker compliance rules that apply to you directly. APRA supervises the lenders themselves, which shapes lending policy you experience second-hand. The ACCC polices competition and fair dealing in how services like yours are marketed.
The National Consumer Credit Protection Act sits underneath everything. Chapter 3 sets the responsible lending conduct obligations for credit licensees, with ASIC’s RG 209 as the published guide on meeting them. Since January 2021 the Best Interests Duty has applied to mortgage brokers as well, and RG 273 confirms it operates on top of responsible lending rather than replacing it. The Anti-Money Laundering and Counter-Terrorism Financing Act adds its own reporting and verification duties, covered in our guide to the AML/CTF requirements.
Operating under an ACL or as a credit representative
Every broking business needs an authorisation pathway. Holding your own Australian Credit Licence (ACL) means demonstrating competence and integrity, supplying documentation and completing the online application process with ASIC along with the applicable fees. Most new brokers instead authorise as credit representatives of an existing licensee, which reduces the administrative load but leaves the same conduct standards applying to you personally.
A common mistake at renewal time: assuming a personal ASIC record needs its own licence renewal. In the representative arrangement, it is the licensee that lodges the annual compliance certificate with ASIC. Confirm who lodges yours before the reporting period closes.
Have you checked your trail book for missing trail?
Track My Trail makes it easy for brokers to keep track of lost & gained trail, discover clients who have paid off big chunks of their loans, and identify your most profitable clients.
Get Track My Trail for free today - no credit card required.
Responsible lending in practice
Responsible lending sits at the centre of mortgage compliance. It means making reasonable inquiries into the client’s situation, verifying what they tell you and judging whether a loan is not unsuitable. Verify income against documents, map real living expenses rather than accepting lowball estimates and list existing debts, then test whether the client could still meet repayments if rates rose. Present loan terms plainly enough that the client understands the commitment being made.
Best Interests Duty and what breach costs
The duty requires recommendations that suit the client’s circumstances and priorities, with conflicts identified and managed. Conflicted remuneration rules restrict what you can accept, so check any lender incentive against those settings before relying on it. Breach carries civil penalties and, frequently worse for a small brokerage, the reputational damage that follows: referrals stall and client relationships unravel when advice looks self-serving.
Records that prove your decisions
If it is not documented, you cannot demonstrate it. Keep the fact find and financial assessments, records of client communications and the reasoning behind each recommendation, including the options considered and rejected. Store them so a reviewer can reconstruct any file years later, because complaint and audit timelines run long.
A routine that keeps you compliant
Compliance fails quietly through drift, so schedule the checks rather than waiting for a trigger:
- Quarterly: review ASIC updates for changes to credit guidance, then confirm your templates still match current requirements.
- Ongoing: complete the professional development your authorisation requires and log it as you go.
- Annually: audit a sample of your own files end to end, checking inquiries, verification, suitability reasoning and disclosure are all present.
- Periodically: commission an external review of your processes, because an outside reviewer sees the gaps you have stopped noticing.
Where technology helps
Software will not make you compliant, but it removes failure points. Compliance management systems centralise document storage, task deadlines and audit trails. Analytics tools support structured risk assessment across your book. Whatever stack you choose, client data protection is part of the obligation: the Privacy Act 1988 applies to how you collect and hold borrower information, and your systems need data security measures proportionate to the sensitive material they store.
Start this week
Pick your three most recently settled files and read them as an auditor would: could someone reconstruct what the client told you, what you verified and why you recommended that loan? Wherever the answer is no, fix the template before the next file. Compliance improves one closed gap at a time, and brokers who can evidence their process find it easier to build trust with clients, aggregators and regulators alike.
