{"id":"F2023L01292","name":"ASIC Derivative Trade Repository Rules 2023","slug":"asic-derivative-trade-repository-rules-2023","collection":"legislative_instrument","jurisdiction":"commonwealth","status":"in_force","isInForce":true,"actNumber":null,"makingDate":null,"administeringDepartment":null,"currentVersion":{"id":392140,"registerId":"commonwealth-F2023L01292-current","compilationNumber":null,"startDate":"2026-04-10","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"1","sectionType":"section","heading":"ASIC Derivative Trade Repository Rules 2023","content":"![Commonwealth Coat of Arms and ASIC logo](image.001.jpeg)\n\nASIC Derivative Trade Repository Rules 2023\n\nmade under section 903A of the Corporations Act 2001\n\nCompilation No. 1\n\nCompilation date: 18/03/2026\n\nIncludes amendments up to: ASIC Derivative Trade Repository Rules (Amendment) Instrument 2026/52 (F2026L00263)\n\n  \n\nAbout this compilation\n\nThis compilation\n\nThis is a compilation of the ASIC Derivative Trade Repository Rules 2023 that shows the text of the law as amended and in force on 18/03/2026 (the compilation date).\n\nThe notes at the end of this compilation (the endnotes) include information about amending laws and the amendment history of provisions of the compiled law.\n\nUncommenced amendments\n\nThe effect of uncommenced amendments is not shown in the text of the compiled law. The details of amendments made up to, but not commenced at, the compilation date are underlined in the endnotes. Any uncommenced amendments affecting the law are accessible on the Register (www.legislation.gov.au).\n\nApplication, saving and transitional provisions\n\nIf the operation of a provision or amendment of the compiled law is affected by an application, saving or transitional provision that is not included in this compilation, details are included in the endnotes.\n\nModifications\n\nIf the compiled law is modified by another law, the compiled law operates as modified but the modification does not amend the text of the law. Accordingly, this compilation does not show the text of the compiled law as modified. Any modifications affecting the law are accessible on the Register.\n\nSelf‑repealing provisions\n\nIf a provision of the compiled law has been repealed in accordance with a provision of the law, details are included in the endnotes.\n\nContents\n\nChapter 1: Introduction\n\nPart 1.1 Preliminary\n\nPart 1.2 Interpretation\n\nChapter 2: Obligations of Officers and Operators\n\nPart 2.1 Obligations of Officers\n\nPart 2.2 Manner in which the Trade Repository provides its services\n\nPart 2.3 Handling and use of Derivative Trade Data by Trade Repositories and their Officers and employees\n\nPart 2.4 Governance, management and resources\n\nPart 2.5 Disclosure of conditions (including fees) on which Trade Repositories provide their services\n\nPart 2.6 Reporting to Australian Regulators on matters related to Trade Repositories\n\nPart 2.7 Keeping of records, or the provision of records or other information, relating to compliance with (or determining whether there has been compliance with) the Rules\n\nEndnotes\n\nEndnote 1—About the endnotes\n\nEndnote 2—Abbreviation key\n\nEndnote 3—Legislation history\n\nEndnote 4—Amendment history\n\nChapter 1: Introduction\n\nPart 1.1 Preliminary\n\n1.1.1 Enabling legislation\n\nASIC makes this instrument under section 903A of the Corporations Act.\n\n1.1.2 Title\n\nThis instrument is the ASIC Derivative Trade Repository Rules 2023.\n\n1.1.4 Penalties for a contravention of these Rules\n\nThe maximum pecuniary penalty payable for a contravention of a provision of these Rules is an amount determined by the Court under section 1317G of the Corporations Act.\n\nPart 1.2 Interpretation\n\n1.2.1 References to time\n\nIn these Rules, unless the contrary intention appears, a reference to time is to Australian Eastern Standard Time or Australian Eastern Daylight Time, as relevant, in Sydney, Australia.\n\n1.2.2 Words and expressions defined in the Corporations Act\n\nWords and expressions defined in the Corporations Act will, unless otherwise defined or specified in these Rules or the contrary intention appears, have the same meaning in these Rules.\n\n1.2.3 Definitions\n\nIn these Rules, unless the contrary intention appears:\n\nAncillary Services means services ancillary to the Trade Reporting Services (e.g. collateral management, portfolio reconciliation or portfolio compression services).\n\nAPRA means the Australian Prudential Regulation Authority.\n\nASIC means the Australian Securities and Investments Commission.\n\nAustralian Regulator means each of ASIC, APRA and RBA.\n\nCorporations Act means the Corporations Act 2001.\n\nDerivative Position Information means information about positions relating to Derivative Transactions reported in accordance with the Reporting Requirements.\n\nDerivative Trade Data has the meaning given by section 9 of the Corporations Act and includes Derivative Transaction Information and Derivative Position Information.\n\nDerivative Transaction Information means information about Derivative Transactions reported in accordance with the Reporting Requirements.\n\nIndirect Participant means a Reporting Entity that is not a Participant but that complies with the Reporting Requirements under an arrangement to do so with a Participant.\n\nLicence means an Australian derivative trade repository licence within the meaning of section 9 of the Corporations Act.\n\nLinked Entities means other Derivative Trade Repositories, payment systems, central securities depositories, securities settlement systems, central counterparties and other service providers (e.g. collateral management, portfolio reconciliation or portfolio compression service providers) with which an Operator has operational and contractual arrangements in connection with the acceptance, retention, use, disclosure and provision of access to Derivative Trade Data.\n\nNon-Trade Reporting Services means services other than Trade Reporting Services, and includes Ancillary Services.\n\nOperator means the operator of a Trade Repository.\n\n> Note: See paragraph 903B(a) of the Corporations Act. Under section 905B of the Corporations Act, a body corporate may, by lodging an application with ASIC in the prescribed form, apply for a Licence authorising the body corporate to operate a Trade Repository.\n\nParticipant means a Reporting Entity, or a person that reports Derivative Transaction Information or Derivative Position Information on behalf of a Reporting Entity, to which a Trade Repository provides Trade Reporting Services.\n\n> Note: A Participant that reports on behalf of a Reporting Entity may be a central counterparty, trading, confirmation or matching platform, service provider, broker or any other third party.\n\nPrescribed Foreign Regulator means a person or body that has functions or powers relating to the regulation of Derivative Trade Repositories or markets in Derivatives in a foreign jurisdiction, and that is prescribed under regulations made for the purposes of paragraph 904B(2)(d) of the Corporations Act.\n\nRBA means the Reserve Bank of Australia.\n\nReporting Entity means a person that is required to report Derivative Transaction Information or Derivative Position Information in accordance with the Reporting Requirements.\n\nReporting Requirements means reporting requirements within the meaning of subsection 901A(6) of the Corporations Act, imposed under the Reporting Rules.\n\nReporting Rules means the ASIC Derivative Transaction Rules (Reporting) 2022 and from 21 October 2024 means the ASIC Derivative Transaction Rules (Reporting) 2024.\n\nRules means these derivative trade repository rules.\n\nTrade Reporting Services means all services provided by a Trade Repository for the acceptance, retention, use, disclosure and provision of access to Derivative Trade Data, including any services for the acceptance, retention, use, disclosure and provision of access to Derivative Trade Data that are outsourced by the Operator. Trade Repository means a licensed derivative trade repository as defined in section 9 of the Corporations Act.\n\nUsers means Participants and Linked Entities.\n\nChapter 2: Obligations of Officers and Operators\n\nPart 2.1 Obligations of Officers\n\n2.1.1 Obligations of Officers\n\nAn Officer of a Trade Repository must take all reasonable steps to ensure the Operator of the Trade Repository complies with its obligations under these Rules.\n\n> Note: See paragraph 903B(b) of the Corporations Act.\n\nPart 2.2 Manner in which the Trade Repository provides its services\n\n2.2.1 Legal basis\n\n(1) An Operator must ensure there is a clear, transparent and enforceable legal basis, including rules, procedures and contractual arrangements, for each material aspect of the Trade Repository’s services.\n\n> Note: For example, there must be a high degree of certainty that actions taken by the Operator under its rules, procedures and contractual arrangements will be enforceable and will not be voided, reversed or subject to stays.\n\n(2) Without limiting subrule (1), an Operator must have documented and enforceable rules, procedures and contractual arrangements in relation to the acceptance, retention, use, disclosure and provision of access to Derivative Trade Data.\n\n(3) The rules, procedures and contractual arrangements referred to in subrule (2) must clearly define:\n\n    (a) the rights and obligations of the Operator, Users and, if applicable, Indirect Participants, with respect to acceptance, retention, use, disclosure and provision of access to Derivative Trade Data, including, without limitation:\n      (i) the obligations of the Operator with respect to minimum service levels, operational reliability and maintaining the integrity, security and confidentiality of Derivative Trade Data; and\n      (ii) the rights of Users with respect to access to the Derivative Trade Data; and\n    (b) procedures for the resolution of disputes between the Operator and Users.\n\n(4) The rules, procedures, and contractual arrangements referred to in subrules (1)–(3) must be consistent with these Rules, the Reporting Rules, the Corporations legislation and any other applicable law of a State or Territory or law of the Commonwealth.\n\n(5) If the Trade Repository provides services in more than one jurisdiction, the Operator must take all reasonable steps to identify and mitigate any risks arising from any potential conflict of laws across those jurisdictions.\n\n2.2.2 Access and participation requirements\n\n(1) An Operator must have and apply objective conditions for access to and participation in the Trade Repository’s services that permit open and non-discriminatory access to and participation in the Trade Repository by Users and, if applicable, Indirect Participants.\n\n(2) The access and participation conditions referred to in subrule (1) must include conditions reasonably designed to ensure Users and, if applicable, Indirect Participants do not pose undue risks to the secure, efficient and effective operation of the Trade Repository.\n\n(3) The access and participation conditions referred to in subrule (1), other than the conditions in subrule (2), must not unreasonably prohibit or limit access to or participation in the Trade Repository, and the Operator must not impose unreasonable conditions on participation or access.\n\n(4) An Operator must monitor compliance with its access and participation conditions on an ongoing basis and have clearly defined procedures for facilitating the disciplining, suspension or orderly exit of a User that breaches or no longer meets the access or participation conditions.\n\n2.2.3 Security, efficiency and effectiveness of services\n\n(1) An Operator must ensure that the Trade Repository’s services are provided at all times in a secure, efficient and effective manner.\n\n(2) An Operator must establish, implement, maintain and enforce mechanisms for regularly reviewing whether the Trade Repository is efficient and effective in meeting the requirements of Users, Australian Regulators, and the markets it serves.\n\n> Note: For example, the Operator should regularly review its minimum service levels, operational reliability, cost-effectiveness and pricing.\n\nPart 2.3 Handling and use of Derivative Trade Data by Trade Repositories and their Officers and employees\n\n2.3.1 Acceptance of Derivative Trade Data\n\n(1) An Operator must accept from Participants Derivative Trade Data for all classes of Derivatives specified in the conditions of the Operator’s Licence.\n\n> Note: Under paragraph 905F(4)(b) of the Corporations Act, a Licence must be subject to conditions that specify the class or classes of Derivatives in respect of which the Trade Repository can provide services for the purposes of Part 7.5A of the Corporations Act.\n\n(2) An Operator must establish, implement, maintain and enforce policies, procedures, systems and controls for the reporting of Derivative Trade Data to the Trade Repository.\n\n(3) Without limiting subrule (2), an Operator must establish, implement, maintain and enforce policies, procedures, systems and controls:\n\n    (a) reasonably designed to maintain a continuous, reliable and secure connection between the Trade Repository and Participants for the purposes of accepting Derivative Trade Data; and\n    (b) designed to provide reasonable assurance that Derivative Trade Data reported to the Trade Repository by Participants is and remains at all times complete, accurate and current.\n\n2.3.2 Retention of Derivative Trade Data\n\n(1) An Operator must ensure that all Derivative Trade Data accepted by the Trade Repository, and each alteration and correction to that Derivative Trade Data, is recorded on a timely basis.\n\n(2) An Operator must retain all records of Derivative Trade Data accepted by the Trade Repository, and records of each alteration or correction to that Derivative Trade Data, from the date the record is first made until five years have elapsed since the Derivative to which the record relates expires or terminates.\n\n(3) An Operator must ensure that each record referred to in subrule (2) is, for the period of time that the record must be retained under that subrule, retained in a secure location and in an electronic format, and is immediately accessible by the Operator.\n\n(4) An Operator must create at least one backup copy of each record referred to in subrule (2) and must ensure that, for the period of time that the record must be retained under that subrule, the backup copy is retained in a secure location and in an electronic format, separate from the location of the record, and is accessible by the Operator within 3 business days.\n\n(5) This Rule applies subject to any direction given by ASIC under section 904K of the Corporations Act.\n\n> Note: Under section 904K, ASIC may make a direction relating to Derivative Trade Data if the Trade Repository ceases to be licensed, including a direction requiring an Operator or former Operator to destroy or transfer to another Trade Repository or a Prescribed Derivative Trade Repository all records of the Derivative Trade Data over which the Operator or former Operator has control.\n\n2.3.3 Use and disclosure of Derivative Trade Data\n\n(1) An Operator must establish, implement, maintain and enforce policies, procedures, systems and controls designed to ensure that the Operator, its Officers and employees comply with section 904B of the Corporations Act in handling, using and disclosing Derivative Trade Data.\n\n(2) For subparagraph 904B(1)(b)(ii) of the Corporations Act, an Operator is permitted to use and disclose:\n\n    (a) statistical data that the Operator has disclosed in accordance with Rule 2.3.5 or Rule 2.3.6;\n    (b) Derivative Trade Data other than statistical data referred to in paragraph (a) that is, or that is created or derived from, Derivative Trade Data that has been reported to the Operator by a Participant, only if:\n      (i) the Participant that reported the Derivative Trade Data has given prior written consent to the use or disclosure of the Derivative Trade Data by the Operator; and\n      (ii) where the Derivative Trade Data is capable of identifying a counterparty to a Derivative Transaction, that counterparty has consented in writing to the use or disclosure of the Derivative Trade Data.\n\n(3) For the purposes of paragraph (2)(b), an Operator:\n\n    (a) must not require a Participant to consent to the use or disclosure of Derivative Trade Data reported by the Participant as a condition of the Participant’s access to the Trade Repository’s services; and\n    (b) must not induce or attempt to induce a Participant to consent to the use or disclosure of the Participant’s Derivative Trade Data by offering or providing to the Participant incentives or benefits that are not offered or provided to Participants that do not consent to the use or disclosure of their Derivative Trade Data, unless the incentive or benefit is reasonably related to the value to the Operator of using or disclosing the Participant’s Derivative Trade Data.\n\n> Note: An example of an incentive or benefit for the purposes of paragraph (3)(b) is a reduced fee, rate or charge for access to the Trade Repository’s services.\n\n2.3.4 Provision of access to Derivative Trade Data\n\n#### Participant access\n\n(1) Subject to subrule (4), an Operator must provide each Participant with access to the records of the Derivative Trade Data that the Participant has reported to the Trade Repository, including access for the purposes of making necessary corrections or alterations to that Derivative Trade Data.\n\n(2) To the extent not provided under subrule (1) and subject to subrule (4), an Operator must provide each Participant with access to the records of each Derivative for which the Participant is a counterparty or for which the Participant reported on behalf of the counterparty.\n\n(3) An Operator must ensure that its rules, procedures and contractual arrangements relating to the provision of access to Derivative Trade Data clearly define the categories of access available to Participants, if there is more than one category.\n\n(4) An Operator is not required to provide access under this Rule to an entity that is suspended from being, or has ceased to be, a Participant in the Trade Repository.\n\n> Note: Under Rule 2.2.1, the Operator’s rules, procedures and contractual arrangements must also clearly define the rights and obligations of Users with respect to the provision of access to Derivative Trade Data.\n\n(5) ASIC may give a written direction to an Operator requiring the Operator deal, in a specified way, with Derivative Trade Data reported by or on behalf of a Reporting Entity, if:\n\n1.  the Reporting Entity, or a person reporting on behalf of a Reporting Entity:\n    1.  is suspended from being, or has ceased to be, a Participant in the Trade Repository; or\n    2.  becomes a Chapter 5 Body Corporate, or becomes subject to a similar regime in a foreign jurisdiction; and\n2.  ASIC reasonably believes the direction will ensure the Derivative Trade Data the subject of the direction is accurate and current.\n\n1.  An Operator must comply with a subrule (5) direction as soon as reasonably practicable.\n\n#### Provision of access to Australian Regulators\n\n(7) An Operator must provide to each Australian Regulator, if requested by that Australian Regulator and at no charge, continuous, direct and immediate electronic access to the following information retained in the Trade Repository:\n\n    (a) all Derivative Trade Data reported by Participants in accordance with the Reporting Requirements; and\n    (b) all information (including statistical data) that is created or derived from Derivative Trade Data referred to in paragraph (a).\n\n> Note 1: Direct access may be provided through an electronic system, platform or framework that provides secure internet or web-based access to Derivative Trade Data, or by way of a direct real-time feed of Derivative Trade Data.\n\n> Note 2: Under this Rule, an Operator may be required to provide access to aggregate-level data, position-level data and transaction-level data (including the identity of counterparties).\n\n#### Requests to provide data to Australian Regulators and Prescribed Foreign Regulators\n\n(8) For the purposes of subparagraph 904B(5)(b)(ii) of the Corporations Act, an Operator that receives a request from an Australian Regulator under subsection 904B(2) of the Corporations Act for Derivative Trade Data retained in the Trade Repository, including a request for information referred to in subrule (7), is excused from complying with the request unless the request is for Derivative Trade Data that is required by the Australian Regulator in connection with the performance of its functions or exercise of its powers.\n\n(9) An Operator that receives a request from an Australian Regulator under subsection 904B(2) of the Corporations Act for Derivative Trade Data retained in the Trade Repository, including a request for Derivative Trade Data referred to in subrule (7), must comply with any reasonable requirement specified in the request to provide the Derivative Trade Data:\n\n    (a) on an ad hoc or periodic basis, or each time a particular circumstance or event occurs;\n    (b) by a specified time; and/or\n    (c) in a specified format.\n\n(10) For the purposes of subparagraph 904B(5)(b)(ii) of the Corporations Act, an Operator that receives a request from a Prescribed Foreign Regulator under subsection 904B(2) of the Corporations Act for Derivative Trade Data retained in the Trade Repository, is excused from complying with the request unless:\n\n    (a) the request is for:\n      (i) Derivative Trade Data reported by Participants in accordance with the Reporting Requirements; or\n      (ii) information (including statistical data) that is created or derived from the Derivative Trade Data referred to in subparagraph (i);\n    (b) the Derivative Trade Data is required by the Prescribed Foreign Regulator in the performance of its functions or exercise of its powers; and\n    (c) the request is made subject to and in accordance with internationally accepted regulatory access standards applicable to Derivative Trade Repositories.\n\n> Note: Under this Rule, an Operator may be required to provide the Prescribed Foreign Regulator with aggregate-level data, position-level data or transaction-level data (including the identity of counterparties), depending on the Prescribed Foreign Regulator’s regulatory mandate.\n\n#### Limitations on access and request\n\n(11) Subrules (7)–(10) operate subject to any requirements of regulations made for the purposes of subsection 904B(4) or subparagraph 904B(5)(b)(i) of the Corporations Act.\n\n#### Information taken to be given to ASIC in confidence\n\n(12) For subsection 903A(5) of the Corporations Act, information given to ASIC by an Operator (or an Officer of an Operator), under a provision of:\n\n    (a) Part 7.5A of the Corporations Act;\n    (b) regulations made for the purpose of Part 7.5A of the Corporations Act; or\n    (c) these Rules or the Reporting Rules,\n\nis to be taken, for the purpose of section 127 (confidentiality) of the Australian Securities and Investments Commission Act 2001, to be given to ASIC in confidence in connection with the performance of ASIC’s functions under the Corporations Act, unless the information has been made publicly available in accordance with the provisions referred to in paragraphs (a)–(c) or as otherwise required or permitted by law.\n\n(13) An Operator must not disclose that:\n\n    (a) a request for particular Derivative Trade Data was made under subsection 904B(2) of the Corporations Act, or that particular Derivative Trade Data was provided in compliance with such a request;\n    (b) access to particular Derivative Trade Data was provided in accordance with subrule (7),\n\nother than for the purposes of seeking legal advice or as required by law.\n\n2.3.5 Obligation to create and disclose weekly statistical data\n\n(1) An Operator must create and disclose in accordance with this Rule statistical data on Derivative Trade Data (in this Rule, Relevant Derivative Trade Data) that is retained in the Trade Repository and that was reported to the Trade Repository by Participants in accordance with the Reporting Rules.\n\n(2) For the purposes of subrule (1), an Operator must, for each 7-calendar day period (in this Rule, Relevant Period) commencing from the day the Operator first accepts a report of Relevant Derivative Trade Data, create the following statistical data from the Relevant Derivative Trade Data:\n\n    (a) all aggregate open positions as at the end of the last day in the Relevant Period for which the statistical data is created; and\n    (b) volumes by number and by value of Derivative Transactions reported during the Relevant Period.\n\n(3) The statistical data created in accordance with subrule (2) must include breakdowns by the following categories (if applicable):\n\n    (a) the asset class, currency of the notional amount, type and maturity of the Derivatives to which the statistical data relates; and\n    (b) whether the Derivatives to which the statistical data relates are cleared or uncleared.\n\n(4) Subject to subrule (6), an Operator must disclose the statistical data required under subrules (1)–(3) in relation to a Relevant Period, from a day that is between 3–5 business days after the day on which the Relevant Period ends.\n\n(5) An Operator must disclose the statistical data required under subrules (1)–(3) by making the statistical data available at no charge and through a publicly accessible website.\n\n(6) The statistical data published under this Rule must not include Derivative Trade Data capable of identifying a counterparty to a Derivative Transaction.\n\n2.3.6 Permission to create and disclose financial year-to-date statistical data\n\n(1) Subject to subrule (2), an Operator may publish the statistical data created and disclosed in accordance with paragraph 2.3.5(2)(b) aggregated in financial-year-to-date form, by making the aggregated financial year-to-date statistical data available at no charge and through a publicly accessible website.\n\n(2) The statistical data published under this Rule must not include Derivative Trade Data capable of identifying a counterparty to a Derivative Transaction.\n\n2.3.7 Communication procedures and standards\n\nAn Operator must use or, at a minimum, accommodate, relevant internationally accepted communication procedures and standards to facilitate accurate, consistent, efficient and reliable acceptance, retention, use, disclosure and provision of access to Derivative Trade Data by the Trade Repository.\n\nPart 2.4 Governance, management and resources\n\n2.4.1 Governance\n\n(1) An Operator must establish, implement, maintain and enforce documented arrangements for the governance and management of the Trade Repository that are clear and transparent, promote the secure, efficient and effective operation of the Trade Repository, and support the stability of the broader financial system, other relevant public interest considerations, and the objectives of Users.\n\n(2) The governance arrangements referred to in subrule (1) must provide for:\n\n    (a) clear and direct lines of accountability in the governance and management of the Trade Repository;\n    (b) clearly defined roles and responsibilities for the Operator’s Officers and members of its governing body and management in the governance and management of the Trade Repository, including roles and responsibilities in relation to the identification, measurement, monitoring and management of risks;\n    (c) clearly defined decision-making processes, including processes for:\n      (i) decision making in crises and emergencies; and\n      (ii) ensuring significant decisions in relation to the design, rules or overall strategy of the Trade Repository are made taking into account the objectives of Users and, where appropriate, are disclosed to Users; and\n    (d) internal control functions to be exercised by persons with adequate authority, independence, resources, and access to the governing body and senior management to perform the control function.\n\n> Note: For example, internal control functions include compliance, audit and review functions.\n\n2.4.2 Handling of conflicts of interest\n\nAn Operator must establish, implement, maintain and enforce documented arrangements for identifying and effectively managing (including by avoiding, controlling or disclosing) any actual or potential conflicts between:\n\n    (a) the interests of the Operator, its related bodies corporate or members of the Operator’s governing body, and the interests of Users;\n    (b) the interests of different Users; and\n    (c) the interests of the Operator, its related bodies corporate or members of the Operator’s governing body, and the need to ensure the Trade Repository’s services are provided in a secure, efficient and effective manner.\n\n2.4.3 Monitoring and enforcement of compliance with obligations\n\n(1) An Operator must establish, implement, maintain and enforce policies, procedures, systems and controls for monitoring and enforcing compliance by its Officers and employees with these Rules, the Reporting Rules, the Corporations legislation and any other applicable law of a State or Territory or law of the Commonwealth.\n\n(2) Without limiting subrule (1), the Operator must ensure that the arrangements, rules, procedures, policies, plans, systems and controls required by these Rules are reviewed, audited and tested periodically and after significant changes, to ensure compliance with these Rules.\n\n2.4.4 Risk management\n\n(1) An Operator must establish, implement, maintain and enforce policies, procedures, systems and controls to enable the Operator to identify, measure, monitor and effectively manage risks to the secure or efficient or effective operation of the Trade Repository, including legal, operational and business risks.\n\n(2) In establishing, implementing, maintaining and enforcing the policies, procedures, systems and controls required by subrule (1), the Operator must take into account, at a minimum, legal, operational and business risks that arise or may arise:\n\n    (a) from Users and, if applicable, Indirect Participants;\n    (b) in relation to the Operator’s operational and contractual arrangements with Linked Entities; and\n    (c) from the provision of Non-Trade Reporting Services by the Operator, a related body corporate of the Operator, or any other company with which the Operator has a material agreement in connection with Trade Reporting Services.\n\n> Note: See also Rule 2.2.1 (Legal basis), Rule 2.4.5 (Resources), Rule 2.4.7 (Financial resources), Rule 2.4.8 (Integrity and security of computer systems and other systems), Rule 2.4.9 (Operational reliability), Rule 2.4.10 (Business continuity planning), Rule 2.4.11 (Recovery and resolution) and Rule 2.4.12 (Operational separation of functions).\n\n2.4.5 Resources\n\nAn Operator must establish and maintain sufficient and appropriate human, technological and financial resources to ensure that the Trade Repository operates at all times securely, efficiently and effectively.\n\n2.4.6 Human resources\n\nWithout limiting Rule 2.4.5, an Operator must at all times ensure its Officers, managers and employees are fit for office, taking into account the experience, qualifications and skills necessary to perform their respective roles and responsibilities in the governance, management and operation of the Trade Repository.\n\n2.4.7 Financial resources\n\n(1) Without limiting Rule 2.4.5, an Operator must hold at all times net assets funded by equity (such as shares, disclosed reserves or other retained earnings) that, at a minimum, are equal to an amount that would enable the Trade Repository to cover at least six months of current operating expenses, calculated on a rolling basis at the end of each month.\n\n> Note: ASIC may also specify financial resources that the Operator is required to hold, in the conditions of the Operator’s Licence.\n\n(2) An Operator must maintain a viable plan, approved by its governing body and updated regularly, for raising additional equity should its equity fall close to or below the amount needed under subrule (1).\n\n2.4.8 Integrity and security of computer systems and other systems\n\nAn Operator must establish, implement, maintain and enforce policies, procedures, and physical and electronic controls over its systems for accepting, retaining, using, disclosing and providing access to Derivative Trade Data designed to:\n\n    (a) maintain the integrity, security and confidentiality of Derivative Trade Data at all times during transmission between the Trade Repository, Australian Regulators and Users, and while retained in the Trade Repository; and\n\n> Note: For example, ensuring the Derivative Trade Data is protected from loss, leakage and corruption.\n\n    (b) prevent unauthorised use or disclosure of, or access to, Derivative Trade Data.\n\n2.4.9 Operational reliability\n\n(1) An Operator must ensure that its systems for accepting, retaining, using, disclosing and providing access to Derivative Trade Data are reliable and have sufficient, scalable capacity for the ongoing and planned operations of the Trade Repository, including, without limitation, the capacity to accept and retain for the period required by Rule 2.3.2 all Derivative Trade Data reported to the Trade Repository by Participants.\n\n(2) An Operator must establish, implement, maintain and enforce plans, including escalation plans, for its internal communications and its communications with Users and Australian Regulators in circumstances of an operational outage or other disruption to the Trade Repository’s services.\n\n2.4.10 Business continuity planning\n\nAn Operator must establish, implement, maintain and enforce business continuity, backup and data recovery plans designed to:\n\n    (a) address events that pose a significant risk of disruption to the Trade Repository’s operations or services, including events that could cause a wide-scale or major disruption; and\n    (b) in the event of any disruption to the Trade Repository’s operations or services, enable the timely restoration of those operations and services and enable the Operator to meet its obligations to Australian Regulators and Users.\n\n2.4.11 Recovery and resolution\n\n(1) An Operator must establish, implement, maintain and enforce policies, procedures and plans designed to:\n\n    (a) identify scenarios that may potentially prevent the Operator from being able to provide the Trade Repository’s critical operations or services as a going concern and assess the effectiveness of a full range of options for recovery or orderly wind-down; and\n    (b) provide for the recovery or orderly wind-down of the Trade Repository’s critical operations or services based on the results of the assessment referred to in paragraph (a).\n\n(2) An Operator must, on request by an Australian Regulator, provide the Australian Regulator with information reasonably required by the Australian Regulator for purposes of resolution planning in respect of the Operator or in respect of Users.\n\n(3) In establishing, implementing, maintaining and enforcing the policies, procedures and plans required under subrule (1), the Operator must take into account its obligations under Rules 2.3.2 and 2.3.4, and any obligations that may arise under section 904K of the Corporations Act in the event that the Trade Repository ceases to be licensed under section 905C of the Corporations Act.\n\n> Note: Under section 904K, ASIC may make a direction relating to Derivative Trade Data if the Trade Repository ceases to be licensed, including a direction requiring an Operator or former Operator to destroy or transfer to another Trade Repository or a Prescribed Derivative Trade Repository, all records of the Derivative Trade Data over which the Operator or former Operator has control.\n\n2.4.12 Operational separation of functions\n\nWhere the Operator, a related body corporate of the Operator, or any other company with which the Operator has a material agreement in connection with the Trade Reporting Services, provides Non-Trade Reporting Services, the Operator must:\n\n1.  disclose to ASIC a description of all of the Non-Trade Reporting Services, and update the disclosure as soon as practicable after any changes are made to the Non-Trade Reporting Services; and\n\n    (b) establish, implement, maintain and enforce policies, procedures, systems and controls designed to ensure operational separation between the Non-Trade Reporting Services and the Trade Reporting Services.\n\n> Note: Operational separation may be achieved, for example, by supervisory arrangements including information barriers.\n\n2.4.13 Outsourcing of functions\n\nIf an Operator outsources any of the Trade Reporting Services to another person (in this Rule, the Service Provider), the Operator must:\n\n    (a) ensure that the outsourcing arrangement is covered by a contract with the Service Provider that is in writing;\n    (b) establish, implement, maintain and enforce documented policies, procedures, systems and controls for ensuring the Operator continues to comply with its obligations under Part 7.5A of the Corporations Act, including under these Rules, in relation to the outsourced Trade Reporting Services;\n    (c) at all times be able to access books, records and other information of the Service Provider relating to the outsourced Trade Reporting Services; and\n    (d) ensure that Australian Regulators have the same access to all Derivative Trade Data, books, records and other information relating to the outsourced Trade Reporting Services and maintained by the Service Provider, that the Australian Regulator would have if not for the outsourcing arrangements.\n\nPart 2.5 Disclosure of conditions (including fees) on which Trade Repositories provide their services\n\n2.5.1 Disclosure of rules, procedures and other information\n\n(1) An Operator must disclose to Participants in writing:\n\n    (a) the Operator’s rules and procedures for accepting, retaining, using, disclosing and providing access to Derivative Trade Data;\n\n> Note: See also subrule 2.2.1(2).\n\n    (b) the Operator’s commitments in relation to minimum service levels and operational reliability;\n    (c) subject to subrule (2), a description of the design and operation of the Trade Repository’s systems for accepting, retaining and providing access to Derivative Trade Data; and\n    (d) subject to subrule (2) and to the extent not disclosed under paragraphs (a), (b) or (c) or Rule 2.5.2, any other information reasonably required by Participants to assess the risks and costs of participating in the Trade Repository.\n\n(2) The Operator is not required to comply with paragraph (1)(c) or (d) to the extent that such disclosure would comprise the integrity or security of the Trade Repository or require the disclosure of commercially sensitive information.\n\n(3) If the Operator proposes to make a change to the access and participation conditions referred to in Rule 2.2.2, or the fees, rates and charges for the Trade Reporting Services as referred to in paragraph 2.5.2(1)(g), the Operator must notify ASIC and Participants in writing about the change within a reasonable time before the change is implemented.\n\n2.5.2 Public disclosures\n\n(1) An Operator must disclose, on a publicly accessible section of its website and at no charge, a description of:\n\n    the Trade Reporting Services and any Ancillary Services;\n\n    (b) the class or classes of Derivatives for which the Trade Repository can provide services for the purposes of Part 7.5A of the Corporations Act, as specified in the conditions of the Operator’s Licence;\n\n> Note: See paragraph 905F(4)(b) of the Corporations Act.\n\n    (c) key elements of the Operator’s rules, procedures and contractual arrangements referred to in Rule 2.2.1, including the dispute resolution procedures referred to in paragraph 2.2.1(3)(b);\n    (d) the Operator’s access and participation conditions referred to in Rule 2.2.2;\n    (e) the organisational, legal and ownership structure of the Operator and the arrangements for the governance and management of the Trade Repository referred to in Rule 2.4.1;\n    (f) the Operator’s policies and procedures in relation to the commercial use of Derivative Trade Data retained in the Trade Repository; and\n\n> Note: See also Rule 2.3.3.\n\n    (g) the fees, rates and charges for the services referred to in paragraph (a), at an individual service level, and the Operator’s policies in relation to discounts and rebates, if any.\n\n(2) An Operator must ensure the disclosures required under subrule (1) are at all times complete, accurate and current.\n\nPart 2.6 Reporting to Australian Regulators on matters related to Trade Repositories\n\n2.6.1 Annual compliance report\n\n(1) An Operator must, within three months after the end of its financial year, give ASIC a written report (the Annual Compliance Report) on the extent to which the Operator has complied during the financial year with its obligations as an Operator under the Corporations legislation, including under these Rules and the Reporting Rules, unless ASIC relieves the Operator from this requirement in writing.\n\n(2) The Operator must, on request by ASIC, obtain an audit report on the Annual Compliance Report, prepared by such specified person or body as ASIC nominates or accepts as suitably qualified to prepare the audit report.\n\n(3) A request by ASIC for an audit report under subrule (2) must be in writing and allow the Operator a reasonable period to comply.\n\n2.6.2 Disclosure of proceedings\n\nAn Operator must notify ASIC in writing as soon as practicable after the Operator becomes aware that:\n\n    (a) any civil or criminal legal proceeding has been instituted against the Operator or an Officer of the Operator, other than by ASIC, whether or not in Australia;\n    (b) any disciplinary action has been taken against the Operator or an Officer of the Operator by any regulatory authority other than ASIC, whether or not in Australia; and\n    (c) any significant changes are made to the regulatory requirements imposed on the Operator or an Officer of the Operator by any regulatory authority other than ASIC, whether or not in Australia.\n\n2.6.3 Notification of acquisition of significant holding in the Operator\n\n(1) An Operator must notify ASIC of the information in subrule (2) as soon as practicable after the Operator becomes aware that a person has come to have, or has ceased to have, more than 15% of the total voting power in the Operator or in a holding company of the Operator.\n\n(2) For the purposes of subrule (1), the information to be given to ASIC by the Operator is:\n\n    (a) the person’s name and contact details;\n    (b) if known by the Operator, the date on which the person came to have, or ceased to have, more than 15% of the voting power; and\n    (c) if the Operator knows the voting power that the person had immediately before the person came to have, or ceased to have, more than 15% of the voting power, that voting power; and\n    (d) whether the Operator knows the manner in which the person came to have, or ceased to have, more than 15% of the voting power and, if the Operator knows the manner, details of what the Operator knows.\n\n> Note: Under subsection s904C(3) of the Corporations Act, the Operator must also notify ASIC as soon as practicable after a person becomes, or ceases to be, a director, secretary or senior manager of the Operator or its holding company.\n\n2.6.4 Delays, disruptions, suspension and termination, breaches of data security, integrity and confidentiality\n\nIf the Trade Repository experiences:\n\n    (a) a disruption of, delay in, or suspension or termination of any of the Trade Repository’s systems for the acceptance, retention, use, disclosure or provision of access to Derivative Trade Data, including as a result of any system failure; or\n    (b) a breach of the integrity, security, or confidentiality of the Derivative Trade Data retained in the Trade Repository,\n\nthe Operator must:\n\n    as soon as practicable, notify ASIC of the occurrence of the circumstance; and\n\n    (d) within 14 days of the occurrence of the circumstance, submit a report to ASIC describing the cause and results of the occurrence of the circumstance, and any remedial actions already taken or planned by the Operator in response to the occurrence of the circumstance.\n\nPart 2.7 Keeping of records, or the provision of records or other information, relating to compliance with (or determining whether there has been compliance with) the Rules\n\n2.7.1 Keeping of records\n\n(1) An Operator must keep records that enable the Operator to demonstrate that it has complied with the requirements of these Rules.\n\n(2) An Operator must keep the records referred to in subrule (1) for a period of at least five years from the date the record is made or amended, or for any longer period for which the record is required to be kept under any other Rule.\n\n2.7.2 Provision of records or other information\n\n(1) An Operator must, on request by ASIC, provide ASIC with records or other information relating to compliance with, or determining whether there has been compliance with, these Rules.\n\n(2) A request by ASIC under subrule (1) must be in writing and give the Operator a reasonable time to comply.\n\n(3) The Operator must comply with a request under subrule (1) within the time specified in the request or, if no time is specified, within a reasonable time.\n\n2.7.3 Language of records\n\n(1) All records required to be kept by these Rules must be kept in writing in the English language, or in a manner that enables them to be readily accessible and readily converted into writing in the English language.\n\n(2) If any of the records are not kept in writing in the English language, the Operator must, if required by ASIC to convert the records into writing in the English language, comply with that requirement within a reasonable time.\n\n  \n\nEndnotes\n\nEndnote 1—About the endnotes\n\n> Note: The endnotes provide information about this compilation and the compiled law.\n\n> Note: The following endnotes are included in every compilation:\n\n> Note: Endnote 1—About the endnotes\n\n> Note: Endnote 2—Abbreviation key\n\n> Note: Endnote 3—Legislation history\n\n> Note: Endnote 4—Amendment history\n\n> Note: Abbreviation key—Endnote 2\n\n> Note: The abbreviation key sets out abbreviations that may be used in the endnotes.\n\n> Note: Legislation history and amendment history—Endnotes 3 and 4\n\n> Note: Amending laws are annotated in the legislation history and amendment history.\n\n> Note: The legislation history in endnote 3 provides information about each law that has amended (or will amend) the compiled law. The information includes commencement details for amending laws and details of any application, saving or transitional provisions that are not included in this compilation.\n\n> Note: The amendment history in endnote 4 provides information about amendments at the provision (generally section or equivalent) level. It also includes information about any provision of the compiled law that has been repealed in accordance with a provision of the law.\n\n> Note: Misdescribed amendments\n\n> Note: A misdescribed amendment is an amendment that does not accurately describe how an amendment is to be made. If, despite the misdescription, the amendment can be given effect as intended, then the misdescribed amendment can be incorporated through an editorial change made under section 15V of the Legislation Act 2003.\n\n> Note: If a misdescribed amendment cannot be given effect as intended, the amendment is not incorporated and “(md not incorp)” is added to the amendment history.\n\nEndnote 2—Abbreviation key\n\n| ad = added or inserted                         | orig = original                          |\n| ---------------------------------------------- | ---------------------------------------- |\n| am = amended                                   | p = page(s)                              |\n| amdt = amendment                               | para = paragraph(s)/subparagraph(s)      |\n| C[x] = Compilation No. x                       | /sub‑subparagraph(s)                     |\n| ch = Chapter(s)                                | pres = present                           |\n| cl = clause(s)                                 | prev = previous                          |\n| cont. = continued                              | (prev…) = previously                     |\n| def = definition(s)                            | pt = Part(s)                             |\n| Dict = Dictionary                              | r = regulation(s)/Court rule(s)          |\n| disallowed = disallowed by Parliament          | reloc = relocated                        |\n| div = Division(s)                              | renum = renumbered                       |\n| exp = expires/expired or ceases/ceased to have | rep = repealed                           |\n| effect                                         | rs = repealed and substituted            |\n| gaz = gazette                                  | s = section(s)/subsection(s)             |\n| LA = Legislation Act 2003                      | /rule(s)/subrule(s)/order(s)/suborder(s) |\n| LIA = Legislative Instruments Act 2003         | sch = Schedule(s)                        |\n| (md not incorp) = misdescribed amendment       | SLI = Select Legislative Instrument      |\n| cannot be given effect                         | SR = Statutory Rules                     |\n| mod = modified/modification                    | sub ch = Sub‑Chapter(s)                  |\n| No. = Number(s)                                | sub div = Subdivision(s)                 |\n| Ord = Ordinance                                | sub pt = Subpart(s)                      |\n|                                                | underlining = whole or part not          |\n|                                                | commenced or to be commenced             |\n\n  \n\nEndnote 3—Legislation history\n\n| Name                                                                  | Registration            | Commencement | Application, saving and transitional provisions |\n| --------------------------------------------------------------------- | ----------------------- | ------------ | ----------------------------------------------- |\n| ASIC Derivative Trade Repository Rules 2023                           | 26/09/2023(F2023L01292) | 01/10/2023   |                                                 |\n| ASIC Derivative Trade Repository Rules (Amendment) Instrument 2026/52 | 17/03/2026(F2026L00263) | 18/03/2026   |                                                 |\n\nEndnote 4—Amendment history\n\n| Provision affected                                                | How affected                   |\n| ----------------------------------------------------------------- | ------------------------------ |\n| Rule 1.1.3 (Commencement)                                         | rep s48D LA                    |\n| Rule 1.2.2 (the note)                                             | rep F2026L00263, Sch 1, item 1 |\n| Rules 1.2.3 (definition of Chapter 5 Body Corporate)              | rep F2026L00263, Sch 1, item 2 |\n| Rule 1.2.3 (definition of Derivative)                             | rep F2026L00263, Sch 1, item 3 |\n| Rule 1.2.3 (definition of Derivative Trade Data)                  | am F2026L00263, Sch 1, item 4  |\n| Rule 1.2.3 (definition of Derivative Trade Repository)            | rep F2026L00263, Sch 1, item 5 |\n| Rule 1.2.3 (definition of Derivative Transaction)                 | rep F2026L00263, Sch 1, item 6 |\n| Rule 1.2.3 (definition of Licence)                                | am F2026L00263, Sch 1, item 7  |\n| Rule 1.2.3 (definition of Officer)                                | rep F2026L00263, Sch 1, item 8 |\n| Rule 1.2.3 (definition of Prescribed Derivative Trade Repository) | rep F2026L00263, Sch 1, item 9 |\n| Rule 1.2.3 (definition of Trade Repository)                       | am F2026L00263, Sch 1, item 10 |\n| Paragraph 2.4.4(2)(b)                                             | am F2026L00263, Sch 1, item 11 |","sortOrder":0}],"analysis":{"flash_summary":{"complexity_score":7,"scope_assessment":{"changed":true,"description":"The compilation reflects amendments up to ASIC Derivative Trade Repository Rules (Amendment) Instrument 2026/52 that altered several definitions and at least one substantive paragraph. Endnote 4 records amendments to definitions including Derivative Trade Data, Licence, Trade Repository and related terms, and an amendment to paragraph 2.4.4(2)(b) (Endnote 4). Those changes modify the instrument’s definitional scope and some wording relevant to which entities and data are captured and how certain risk provisions operate."},"complexity_factors":["Detailed, operationally specific obligations across multiple domains (data acceptance, retention, security, backups) (see Rules 2.3.1–2.3.2, 2.4.8).","Governance, risk-management and resource requirements including ongoing capacity and continuity planning (Rules 2.4.1–2.4.11).","Interaction with multiple external instruments and authorities: Corporations Act, Reporting Rules, ASIC, APRA, RBA and Prescribed Foreign Regulators (see Rule 1.1.1 and Rules 1.2.3; 2.3.4(7)–(10)).","Specific disclosure and publication schedules and anonymity constraints for statistical data (Rules 2.3.5–2.3.6).","Financial-capital requirement (equity equal to six months expenses) and solvency planning (Rule 2.4.7).","Outsourcing and operational separation obligations that preserve regulator access and internal control functions (Rules 2.4.12–2.4.13).","Regulator-directed actions and reporting obligations that create compliance timing pressures (Rules 2.3.4(5), 2.6.1–2.6.4).","Cross-jurisdiction conflict-of-law mitigation obligation for multi-jurisdictional services (Rule 2.2.1(5))."],"plain_english_summary":"These Rules set operational, governance, data‑handling and disclosure requirements for licensed derivative trade repositories in Australia. They govern how Operators, Officers, Participants, Users, service providers and regulators accept, retain, use, disclose, publish and secure derivative trade data.\n\nThey enforce data quality, backups, continuous regulator access, public aggregated statistics and limits on data commercialisation, while imposing governance, capital and compliance costs on Operators and strengthening ASIC’s supervisory powers."},"kimi_summary":{"content_quality":"ok","complexity_score":6,"scope_assessment":{"changed":false,"description":"The legislation appears to maintain its original scope as a regulatory framework for derivative trade repositories. The 2026 amendments (Instrument 2026/52) appear to be technical amendments removing redundant definitions (e.g., 'Derivative', 'Officer', 'Chapter 5 Body Corporate') that are already defined in the Corporations Act, and updating references to the 2024 Reporting Rules. There is no evidence of scope creep into unrelated areas."},"complexity_factors":["Extensive cross-referencing to the Corporations Act 2001 (particularly Part 7.5A and sections 903A, 904B, 904K, 905B, 905C, 905F, 1317G)","Multiple nested conditions in data disclosure rules (e.g., Rule 2.3.3 with sub-paragraphs (2)(b)(i) and (ii) plus prohibitions in (3)(a) and (3)(b))","Dual framework operation: rules apply subject to regulations made under the Corporations Act (see Rule 2.3.4(11))","17 defined terms in Rule 1.2.3, with some definitions incorporating external legislative references (e.g., 'Reporting Requirements' refers to subsection 901A(6) of the Corporations Act)","Conditional exceptions to obligations (e.g., Rule 2.3.4(4) excluding suspended Participants; Rule 2.3.4(8) and (10) providing excuses for non-compliance with regulator requests)","Temporal complexity in record-keeping (5-year retention from expiry/termination of derivative, not from reporting date - Rule 2.3.2(2))","Overlapping obligations between these Rules and the separate 'Reporting Rules' (ASIC Derivative Transaction Rules (Reporting) 2022/2024)","Outsourcing provisions (Rule 2.4.13) creating third-party compliance chains"],"plain_english_summary":"**What this legislation does:**\n\nThese rules set out how **derivative trade repositories** (specialised financial data warehouses) must operate in Australia. A derivative trade repository is a licensed facility that collects, stores, and manages information about **derivative transactions** (financial contracts like swaps, futures, and options that derive their value from underlying assets).\n\n**Who it affects:**\n\n*   **Operators** of trade repositories (the companies running these data warehouses)\n*   **Officers** of those operators (directors, senior managers)\n*   **Participants** (banks, brokers, and other entities that report derivative trades)\n*   **Indirect Participants** (entities that report through other participants)\n*   **Australian Regulators** (ASIC, APRA, and the Reserve Bank)\n*   **Prescribed Foreign Regulators** (overseas regulators with similar functions)\n\n**Key requirements:**\n\n*   **Data handling:** Repositories must accept, retain, and protect derivative trade data for at least five years after a contract expires. They must keep backups and ensure data is complete, accurate, and secure.\n*   **Access:** Participants must be able to access their own data. Australian regulators get free, direct, real-time electronic access to all data. Foreign regulators can access data under international standards.\n*   **Governance:** Operators need clear governance structures, risk management systems, and must manage conflicts of interest.\n*   **Financial resilience:** Operators must hold enough equity to cover six months of operating expenses and have plans for raising more capital if needed.\n*   **Transparency:** Operators must publish weekly statistical data (aggregate figures, not individual trades) and disclose their fees, rules, and service levels publicly.\n*   **Reporting:** Operators must submit annual compliance reports to ASIC and notify ASIC of disruptions, security breaches, legal proceedings, or significant ownership changes.\n\n**Why it matters:**\n\nThese rules ensure that regulators can monitor systemic risk in Australia's derivatives markets (worth trillions of dollars), protect the integrity of financial data, and ensure that if a trade repository fails, it can be wound down without destabilising the financial system. They align Australia with international standards (particularly the G20 commitments made after the 2008 financial crisis) to improve transparency in derivatives markets."}},"importantCases":[],"_links":{"self":"/api/acts/asic-derivative-trade-repository-rules-2023","history":"/api/acts/asic-derivative-trade-repository-rules-2023/history","analysis":"/api/acts/asic-derivative-trade-repository-rules-2023/analysis","conflicts":"/api/acts/asic-derivative-trade-repository-rules-2023/conflicts","importantCases":"/api/acts/asic-derivative-trade-repository-rules-2023/important-cases","documents":"/api/acts/asic-derivative-trade-repository-rules-2023/documents"}}