{"id":"F2016L01687","name":"Financial Sector (Collection of Data) (reporting standard) determination No. 23 of 2016","slug":"financial-sector-collection-of-data-reporting-standard-determination-no-23-of-2016","collection":"legislative_instrument","jurisdiction":"commonwealth","status":"in_force","isInForce":true,"actNumber":null,"makingDate":null,"administeringDepartment":null,"currentVersion":{"id":95339,"registerId":"commonwealth-F2016L01687-current","compilationNumber":null,"startDate":"2026-04-02","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"Reporting Standard ARS 796.0","sectionType":"part","heading":"Reporting Standard ARS 796.0","content":"## ![](image.001.png)\n\n## Reporting Standard ARS 796.0\n\n# Points of Presence\n\n### Objective of this Reporting Standard\n\nThis Reporting Standard outlines the overall requirements for the provision of information to APRA relating to an authorised deposit-taking institution’s points of presence.\n\nIt includes Reporting Form ARF 796.1 Points of Presence - Face-to-face service channels (ARF 796.1), Reporting Form ARF 796.2 Points of Presence – ATMs (ARF 796.2), Reporting Form ARF 796.3 Points of Presence - EFTPOS Terminals (ARF 796.3) and the associated specific instructions.\n\n# Authority\n\n1.  This Reporting Standard is made under section 13 of the Financial Sector (Collection of Data) Act 2001.\n\n# Purpose\n\n2. Information collected by this Reporting Standard is used by APRA for the purpose of publication.\n\n# Application\n\n3. This Reporting Standard applies to all authorised deposit-taking institutions (ADIs) other than purchased payment facility providers (PPF providers).\n\n4. This Reporting Standard applies for reporting periods ending on or after 30 June 2017.\n\n# Information required\n\n5. An ADI, to which this Reporting Standard applies, must provide APRA with the information required by ARF 796.1, ARF 796.2 and ARF 796.3 for those points of presence located within Australia in respect of each reporting period.\n\n# Form and method of submission\n\n6. The information required by this Reporting Standard must be given to APRA in electronic format using the ‘Direct to APRA’ (also known as ‘D2A’) application or, where ‘Direct to APRA’ is not available, by a method notified by APRA, in writing, prior to submission.\n\nNote: the ‘Direct to APRA’ application software (also known as ‘D2A’) may be obtained from APRA.\n\n# Reporting periods and due dates\n\n7. Subject to paragraph 8, an ADI to which this Reporting Standard applies must provide the information required by this Reporting Standard in respect of each year ending on 30 June.\n\n8. APRA may, by notice in writing, change the reporting periods, or specified reporting periods, for a particular ADI, to require it to provide the information required by this Reporting Standard more frequently, or less frequently, having regard to the particular circumstances of the ADI.\n\n9. The information required by this Reporting Standard must be provided to APRA within 28 calendar days after the end of the reporting period to which the information relates.\n\n10. APRA may grant an ADI an extension of a due date, in writing, in which case the new due date for the provision of the information will be the date on the notice of extension.\n\n    Note: for the avoidance of doubt, if the due date for a particular reporting period falls on a day other than a usual business day, an ADI is nonetheless required to submit the information required no later than the due date.\n\n# Quality control\n\n11. All information provided by an ADI under this Reporting Standard must be subject to processes and controls developed by the ADI for the internal review and authorisation of that information. These systems, processes and controls are to assure the completeness and reliability of the information provided.\n\n# Authorisation\n\n12. When an ADI submits information under this Reporting Standard using the D2A software, it will be necessary for an officer of the ADI to digitally sign, authorise and encrypt the relevant information. For this purpose, APRA’s certificate authority will issue ‘digital certificates’, for use with the software, to officers of the ADI who have authority from the ADI to transmit the information to APRA.\n\n# Minor alterations to forms and instructions\n\n13. APRA may make minor variations to:\n\n(a) a form that is part of this Reporting Standard, and the instructions to such a form, to correct technical, programming or logical errors, inconsistencies or anomalies; or\n\n(b) the instructions to a form, to clarify their application to the form\n\nwithout changing any substantive requirement in the form or instructions.\n\n14. If APRA makes such a variation, it must notify in writing each ADI that is required to report under this Reporting Standard.\n\n# Transitional\n\n15. An ADI must report under the old reporting standard in respect of a transitional reporting period. For these purposes:\n\nold reporting standard means the reporting standard revoked in the determination making this reporting standard (being the reporting standard which this reporting standard replaces).\n\ntransitional reporting period means a reporting period under the old reporting standard:\n\n(a) which ended before the date of revocation of the old reporting standard; and\n\n(b) in relation to which the ADI was required, under the old reporting standard, to report by a date on or after the date of revocation of the old reporting standard.\n\nNote: for the avoidance of doubt, if an ADI was required to report under an old reporting standard, and the reporting documents were due before the date of revocation of the old reporting standard, the ADI is still required to provide the overdue reporting documents in accordance with the old reporting standard.\n\n# Interpretation\n\n16. In this Reporting Standard:\n\nADI refers to an authorised deposit-taking institution, meaning a body corporate authorised under section 9 of the Banking Act 1959, to carry on banking business in Australia;\n\nAPRA means the Australian Prudential Regulation Authority established under the Australian Prudential Regulation Authority Act 1998;\n\nAustralia includes Australia and its offshore territories;\n\ndue date means the relevant due date under paragraph 9 or, if applicable, paragraph 10;\n\npurchased payment facility provider means an ADI that is subject to a condition on its authority under section 9 of Banking Act 1959 confining the banking business that the ADI is authorised to carry on to providing purchased payment facilities; and\n\nreporting period means a period mentioned in paragraph 7 or, if applicable, paragraph 8.","sortOrder":0},{"sectionNumber":"Points of Presence","sectionType":"part","heading":"Points of Presence","content":"# Points of Presence\n\n### Objective of this Reporting Standard\n\nThis Reporting Standard outlines the overall requirements for the provision of information to APRA relating to an authorised deposit-taking institution’s points of presence.\n\nIt includes Reporting Form ARF 796.1 Points of Presence - Face-to-face service channels (ARF 796.1), Reporting Form ARF 796.2 Points of Presence – ATMs (ARF 796.2), Reporting Form ARF 796.3 Points of Presence - EFTPOS Terminals (ARF 796.3) and the associated specific instructions.\n\n# Authority\n\n1.  This Reporting Standard is made under section 13 of the Financial Sector (Collection of Data) Act 2001.\n\n# Purpose\n\n2. Information collected by this Reporting Standard is used by APRA for the purpose of publication.\n\n# Application\n\n3. This Reporting Standard applies to all authorised deposit-taking institutions (ADIs) other than purchased payment facility providers (PPF providers).\n\n4. This Reporting Standard applies for reporting periods ending on or after 30 June 2017.\n\n# Information required\n\n5. An ADI, to which this Reporting Standard applies, must provide APRA with the information required by ARF 796.1, ARF 796.2 and ARF 796.3 for those points of presence located within Australia in respect of each reporting period.\n\n# Form and method of submission\n\n6. The information required by this Reporting Standard must be given to APRA in electronic format using the ‘Direct to APRA’ (also known as ‘D2A’) application or, where ‘Direct to APRA’ is not available, by a method notified by APRA, in writing, prior to submission.\n\nNote: the ‘Direct to APRA’ application software (also known as ‘D2A’) may be obtained from APRA.\n\n# Reporting periods and due dates\n\n7. Subject to paragraph 8, an ADI to which this Reporting Standard applies must provide the information required by this Reporting Standard in respect of each year ending on 30 June.\n\n8. APRA may, by notice in writing, change the reporting periods, or specified reporting periods, for a particular ADI, to require it to provide the information required by this Reporting Standard more frequently, or less frequently, having regard to the particular circumstances of the ADI.\n\n9. The information required by this Reporting Standard must be provided to APRA within 28 calendar days after the end of the reporting period to which the information relates.\n\n10. APRA may grant an ADI an extension of a due date, in writing, in which case the new due date for the provision of the information will be the date on the notice of extension.\n\n    Note: for the avoidance of doubt, if the due date for a particular reporting period falls on a day other than a usual business day, an ADI is nonetheless required to submit the information required no later than the due date.\n\n# Quality control\n\n11. All information provided by an ADI under this Reporting Standard must be subject to processes and controls developed by the ADI for the internal review and authorisation of that information. These systems, processes and controls are to assure the completeness and reliability of the information provided.\n\n# Authorisation\n\n12. When an ADI submits information under this Reporting Standard using the D2A software, it will be necessary for an officer of the ADI to digitally sign, authorise and encrypt the relevant information. For this purpose, APRA’s certificate authority will issue ‘digital certificates’, for use with the software, to officers of the ADI who have authority from the ADI to transmit the information to APRA.\n\n# Minor alterations to forms and instructions\n\n13. APRA may make minor variations to:\n\n(a) a form that is part of this Reporting Standard, and the instructions to such a form, to correct technical, programming or logical errors, inconsistencies or anomalies; or\n\n(b) the instructions to a form, to clarify their application to the form\n\nwithout changing any substantive requirement in the form or instructions.\n\n14. If APRA makes such a variation, it must notify in writing each ADI that is required to report under this Reporting Standard.\n\n# Transitional\n\n15. An ADI must report under the old reporting standard in respect of a transitional reporting period. For these purposes:\n\nold reporting standard means the reporting standard revoked in the determination making this reporting standard (being the reporting standard which this reporting standard replaces).\n\ntransitional reporting period means a reporting period under the old reporting standard:\n\n(a) which ended before the date of revocation of the old reporting standard; and\n\n(b) in relation to which the ADI was required, under the old reporting standard, to report by a date on or after the date of revocation of the old reporting standard.\n\nNote: for the avoidance of doubt, if an ADI was required to report under an old reporting standard, and the reporting documents were due before the date of revocation of the old reporting standard, the ADI is still required to provide the overdue reporting documents in accordance with the old reporting standard.\n\n# Interpretation\n\n16. In this Reporting Standard:\n\nADI refers to an authorised deposit-taking institution, meaning a body corporate authorised under section 9 of the Banking Act 1959, to carry on banking business in Australia;\n\nAPRA means the Australian Prudential Regulation Authority established under the Australian Prudential Regulation Authority Act 1998;\n\nAustralia includes Australia and its offshore territories;\n\ndue date means the relevant due date under paragraph 9 or, if applicable, paragraph 10;\n\npurchased payment facility provider means an ADI that is subject to a condition on its authority under section 9 of Banking Act 1959 confining the banking business that the ADI is authorised to carry on to providing purchased payment facilities; and\n\nreporting period means a period mentioned in paragraph 7 or, if applicable, paragraph 8.","sortOrder":1},{"sectionNumber":"Objective of this Reporting Standard","sectionType":"division","heading":"Objective of this Reporting Standard","content":"### Objective of this Reporting Standard\n\nThis Reporting Standard outlines the overall requirements for the provision of information to APRA relating to an authorised deposit-taking institution’s points of presence.\n\nIt includes Reporting Form ARF 796.1 Points of Presence - Face-to-face service channels (ARF 796.1), Reporting Form ARF 796.2 Points of Presence – ATMs (ARF 796.2), Reporting Form ARF 796.3 Points of Presence - EFTPOS Terminals (ARF 796.3) and the associated specific instructions.","sortOrder":2},{"sectionNumber":"Authority","sectionType":"part","heading":"Authority","content":"# Authority\n\n1.  This Reporting Standard is made under section 13 of the Financial Sector (Collection of Data) Act 2001.","sortOrder":3},{"sectionNumber":"Purpose","sectionType":"part","heading":"Purpose","content":"# Purpose\n\n2. Information collected by this Reporting Standard is used by APRA for the purpose of publication.","sortOrder":4},{"sectionNumber":"Application","sectionType":"part","heading":"Application","content":"# Application\n\n3. This Reporting Standard applies to all authorised deposit-taking institutions (ADIs) other than purchased payment facility providers (PPF providers).\n\n4. This Reporting Standard applies for reporting periods ending on or after 30 June 2017.","sortOrder":5},{"sectionNumber":"Information required","sectionType":"part","heading":"Information required","content":"# Information required\n\n5. An ADI, to which this Reporting Standard applies, must provide APRA with the information required by ARF 796.1, ARF 796.2 and ARF 796.3 for those points of presence located within Australia in respect of each reporting period.","sortOrder":6},{"sectionNumber":"Form and method of submission","sectionType":"part","heading":"Form and method of submission","content":"# Form and method of submission\n\n6. The information required by this Reporting Standard must be given to APRA in electronic format using the ‘Direct to APRA’ (also known as ‘D2A’) application or, where ‘Direct to APRA’ is not available, by a method notified by APRA, in writing, prior to submission.\n\nNote: the ‘Direct to APRA’ application software (also known as ‘D2A’) may be obtained from APRA.","sortOrder":7},{"sectionNumber":"Reporting periods and due dates","sectionType":"part","heading":"Reporting periods and due dates","content":"# Reporting periods and due dates\n\n7. Subject to paragraph 8, an ADI to which this Reporting Standard applies must provide the information required by this Reporting Standard in respect of each year ending on 30 June.\n\n8. APRA may, by notice in writing, change the reporting periods, or specified reporting periods, for a particular ADI, to require it to provide the information required by this Reporting Standard more frequently, or less frequently, having regard to the particular circumstances of the ADI.\n\n9. The information required by this Reporting Standard must be provided to APRA within 28 calendar days after the end of the reporting period to which the information relates.\n\n10. APRA may grant an ADI an extension of a due date, in writing, in which case the new due date for the provision of the information will be the date on the notice of extension.\n\n    Note: for the avoidance of doubt, if the due date for a particular reporting period falls on a day other than a usual business day, an ADI is nonetheless required to submit the information required no later than the due date.","sortOrder":8},{"sectionNumber":"Quality control","sectionType":"part","heading":"Quality control","content":"# Quality control\n\n11. All information provided by an ADI under this Reporting Standard must be subject to processes and controls developed by the ADI for the internal review and authorisation of that information. These systems, processes and controls are to assure the completeness and reliability of the information provided.","sortOrder":9},{"sectionNumber":"Authorisation","sectionType":"part","heading":"Authorisation","content":"# Authorisation\n\n12. When an ADI submits information under this Reporting Standard using the D2A software, it will be necessary for an officer of the ADI to digitally sign, authorise and encrypt the relevant information. For this purpose, APRA’s certificate authority will issue ‘digital certificates’, for use with the software, to officers of the ADI who have authority from the ADI to transmit the information to APRA.","sortOrder":10},{"sectionNumber":"Minor alterations to forms and instructi","sectionType":"part","heading":"Minor alterations to forms and instructions","content":"# Minor alterations to forms and instructions\n\n13. APRA may make minor variations to:\n\n(a) a form that is part of this Reporting Standard, and the instructions to such a form, to correct technical, programming or logical errors, inconsistencies or anomalies; or\n\n(b) the instructions to a form, to clarify their application to the form\n\nwithout changing any substantive requirement in the form or instructions.\n\n14. If APRA makes such a variation, it must notify in writing each ADI that is required to report under this Reporting Standard.","sortOrder":11},{"sectionNumber":"Transitional","sectionType":"part","heading":"Transitional","content":"# Transitional\n\n15. An ADI must report under the old reporting standard in respect of a transitional reporting period. For these purposes:\n\nold reporting standard means the reporting standard revoked in the determination making this reporting standard (being the reporting standard which this reporting standard replaces).\n\ntransitional reporting period means a reporting period under the old reporting standard:\n\n(a) which ended before the date of revocation of the old reporting standard; and\n\n(b) in relation to which the ADI was required, under the old reporting standard, to report by a date on or after the date of revocation of the old reporting standard.\n\nNote: for the avoidance of doubt, if an ADI was required to report under an old reporting standard, and the reporting documents were due before the date of revocation of the old reporting standard, the ADI is still required to provide the overdue reporting documents in accordance with the old reporting standard.","sortOrder":12},{"sectionNumber":"Interpretation","sectionType":"part","heading":"Interpretation","content":"# Interpretation\n\n16. In this Reporting Standard:\n\nADI refers to an authorised deposit-taking institution, meaning a body corporate authorised under section 9 of the Banking Act 1959, to carry on banking business in Australia;\n\nAPRA means the Australian Prudential Regulation Authority established under the Australian Prudential Regulation Authority Act 1998;\n\nAustralia includes Australia and its offshore territories;\n\ndue date means the relevant due date under paragraph 9 or, if applicable, paragraph 10;\n\npurchased payment facility provider means an ADI that is subject to a condition on its authority under section 9 of Banking Act 1959 confining the banking business that the ADI is authorised to carry on to providing purchased payment facilities; and\n\nreporting period means a period mentioned in paragraph 7 or, if applicable, paragraph 8.","sortOrder":13},{"sectionNumber":"Instructions","sectionType":"part","heading":"Instructions","content":"# Instructions\n\nThese instructions assist in the completion of the Points of Presence suite of forms. This suite consists of:\n\n(a) Reporting Form ARF 796.1 Points of Presence – Face-to-face service channels (ARF 796.1)\n\n(b) Reporting Form ARF 796.2 Points of Presence – ATMs (ARF 796.2)\n\n(c) Reporting Form ARF 796.3 Points of Presence – EFTPOS terminals (ARF 796.3)\n\nThese forms collect information about the type and location of service delivery channels, or ‘points of presence’, for authorised deposit\\-taking institutions (ADIs) within Australia. These forms require full disclosure of points of presence for face-to-face, Automatic Teller Machines (ATMs) and Electronic Funds Transfer at Point of Sale (EFTPOS) service channels, as defined in these instructions.\n\nReporting level\n\nThese forms are to be completed by all ADIs, other than purchased payment facility (PPF) providers, on a Level 1 basis.\n\nReporting basis and units of measurement\n\nItems on ARF 796.1, ARF 796.2 and ARF 796.3 must be reported as at the last day of the relevant reporting period, i.e. 30 June each year.\n\nThe scope of the information required is limited to only those points of presence located within Australia, where Australia includes Australia and its offshore territories.\n\nLongitude and latitude coordinates on ARF 796.1 and ARF 796.2 are to be reported as a number to four decimal places.\n\nNumber of points of presence on ARF 796.2 and ARF 796.3 are to be reported as a whole number.\n\nSpecific instructions\n\nTerms highlighted in bold italics indicate that the definition is provided in these instructions.\n\n  \nPoints of presence definitions\n\nInformation required under the heading of each service channel category in ARF 796.1, ARF 796.2 and ARF 796.3 is defined as follows:\n\nFace-to-face point of presence\n\nA face-to-face point of presence must satisfy the following criteria:\n\n(a) provide face-to-face services; and\n\n(b) maintain a fixed address.\n\nFace-to-face points of presence are to be categorised as either a branch or another face-to-face point of presence, based on whether or not the point of presence meets APRA’s minimum branch requirements.\n\nBranch\n\nFor a face-to-face point of presence to be categorised as a branch, the following minimum face-to-face services must all be provided.\n\nA branch:\n\n(a) accepts cash and other deposits (including business deposits) and provides change;\n\n(b) facilitates the keeping of accounts for customer access, including the provision of account balances;\n\n(c) opens and closes accounts;\n\n(d) can facilitate or arrange the assessment of the credit risk of existing and potential customers; and\n\n(e) offers additional services in the one establishment such as financial services, business banking and specialist lending, if these are generally available from the ADI.\n\nParagraph (e) above does not necessarily mean that a financial adviser or business credit manager is to be available in the branch — the staff of the branch may simply act as a referral point for customers interested in these kinds of services.\n\nOther face-to-face point of presence\n\nA point of presence that satisfies the criteria to be a face-to-face point of presence but does not provide all of the minimum face-to-face services to be categorised as a branch will fall into the category of other face-to-face point of presence.\n\nExamples of other face-to-face points of presence include but are not limited to agencies, head offices, mini-branches, etc.\n\nATM point of presence\n\nAn ATM point of presence is a terminal allowing an authorised cardholder to withdraw cash from either a cheque/savings or credit account. This can include Automatic Teller Machines (ATMs) and Cash Dispensers (CDs). Where the terminal is an ATM, it will also provide access to a varying range of other services such as balance inquiry, transfer of funds and acceptance of deposits. Authorisation is via a Personal Identification Number (PIN). Access is unassisted and may be 24 hours/day, depending on the terminal’s location.\n\nThe ADI that has ownership of the ATM and exchanges ATM transaction messages - such as a cash withdrawal or balance enquiry - in respect of that ATM (i.e. does not require a third-party switch to exchange transaction messages) is to report this terminal. ADIs are not to report ATMs that are supplied by other institutions even though the ADI has access to the third party owned ATM.\n\nEFTPOS point of presence\n\nAn EFTPOS point of presence is a terminal located at a retail outlet which enables an authorised cardholder to purchase goods and services using either deposit or credit funds and may also enable cash withdrawals using deposit funds. Authorisation may be via a PIN or contactless payment. Access is with the assistance of the retailer and is therefore restricted to the operating hours of the retail outlet.\n\nThe ADI that has ownership of the EFTPOS terminal is to report this terminal.\n\nFor non-ADI owned terminals, the party or ADI which is responsible for key management of the terminal is to report this terminal. The provision of key management involves securing the transaction message at the point of capture. This would also include the exchanging of transaction messages (i.e. switching the transactions). For example, a third party who owns the terminal and has an ADI ‘driving’ the transactions, the ADI is to report these terminals.\n\nBank@Post\n\nIn an endeavor to ensure consistent reporting of Bank@Post outlets, APRA will obtain this information directly from Australia Post for outlets that perform banking services. ADIs should not report Bank@Post outlets as their own service channel.\n\n  \nARF 796.1\n\nThis reporting form captures the number of face-to-face points of presence of an ADI.\n\nItem 1 collects the number of face-to-face points of presence of an ADI.\n\nAll reported face-to-face points of presence must satisfy the criteria outlined in the definition of a face-to-face point of presence.\n\nAll reported branches must meet APRA’s minimum branch requirements.\n\n| Item 1    | Report the latitude coordinate of each face-to-face point of presence in column 1.Report the longitude coordinate of each face-to-face point of presence in column 2.If the face-to-face point of presence meets APRA’s minimum branch requirements, report ‘Y’, otherwise, report ‘N’, in column 3. |\n| --------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| Latitude  | The geographic latitude of a point on the earth is a measurement in degrees north or south of the equator reference to a prescribed datum. Latitudes south of the equator are expressed as a negative number, north of the equator as positive.                                                      |\n| Longitude | The geographic longitude of a point on the earth is a measurement in degrees east or west of the Greenwich Meridian to a prescribed datum. Longitudes east of Greenwich are expressed as a positive number, west of Greenwich as negative.                                                           |\n\nARF 796.2\n\nThis reporting form captures the number of ATM points of presence of an ADI.\n\nItem 1 collects the number of ATM points of presence of an ADI.\n\nAll reported ATM points of presence must satisfy the criteria outlined in the definition of an ATM point of presence.\n\n| Item 1 | Report the latitude coordinate of each ATM point of presence in column 1.Report the longitude coordinate of each ATM point of presence in column 2.Report the number of ATM points of presence located at the reported latitude and longitude coordinates in column 3. |\n| ------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n\n  \nARF 796.3\n\nThis reporting form captures the number of EFTPOS points of presence of an ADI.\n\nItem 1 collects the number of EFTPOS points of presence of an ADI.\n\nAll reported EFTPOS points of presence must satisfy the criteria outlined in the definition of an EFTPOS point of presence.\n\n| Item 1 | Report the state or territory location of the points of presence in column 1.Report the number of EFTPOS points of presence in each state or territory in column 2. |\n| ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |","sortOrder":14}],"analysis":{"kimi_summary":{"content_quality":"ok","complexity_score":4,"scope_assessment":{"changed":false,"description":"This is a straightforward replacement of a previous reporting standard with the same scope — collecting points of presence data from ADIs. The 2017 version maintains the original purpose of tracking banking service accessibility through physical and electronic channels. No significant scope creep is evident; it remains a discrete data collection instrument."},"complexity_factors":["Multiple defined terms in interpretation section (5 definitions including nested references to other legislation)","Cross-references to three separate reporting forms (ARF 796.1, 796.2, 796.3) not fully contained in this instrument","Conditional logic for transitional reporting (paragraph 15) with nested definitions ('old reporting standard' and 'transitional reporting period')","Exception to main rule: PPF providers excluded from application (paragraph 3)","Discretionary powers granted to APRA (paragraphs 8, 10, 13) creating variable obligations","Technical specifications for data submission (GPS coordinates to 4 decimal places, digital certificates, D2A software)","Detailed definitional criteria for categorising face-to-face points of presence (5 specific branch requirements in paragraph (e) with clarifying note)"],"plain_english_summary":"This APRA reporting standard requires Australian authorised deposit‑taking institutions (banks, credit unions, building societies; excluding prepaid‑only PPFs) to annually disclose where and how customers can access services—listing branch/face‑to‑face locations (with coordinates), ATM locations (with coordinates and counts), and state/territory EFTPOS terminal counts. Reports are submitted electronically after year‑end and must meet APRA’s accuracy and timeliness requirements.\n\nThe data informs regulators and the public about geographic access to banking services across Australia."},"flash_summary":{"complexity_score":4,"scope_assessment":{"changed":false,"description":"This version is a replacement reporting standard but does not materially expand the subject matter compared with the earlier reporting regime. It retains the same core scope: collection of points-of-presence data for ADIs (excluding purchased payment facility providers) within Australia for APRA publication (paras 2–5, 16, 15). The instrument mainly formalises the submission process (D2A, digital certificates), standardises definitions and precisions (geocoordinates, counting rules) and clarifies allocation rules for third-party terminals (Instructions). APRA’s discretion to vary reporting frequency for specific ADIs (para 8) gives administrative flexibility but does not broaden the types of information covered."},"complexity_factors":["Three distinct reporting forms (ARF 796.1, ARF 796.2, ARF 796.3) with different data requirements (paras 5; Instructions)","Detailed definitions and classification rules (face-to-face vs branch; ATM ownership/exchange responsibility; EFTPOS owner vs key-manager) that require operational judgement (Instructions)","Precision requirements for geocoordinates (latitude/longitude to four decimal places) and whole-number reporting for terminal counts (Instructions)","Cross-references to other laws and instruments (Banking Act s9 for ADI definition; APRA digital-certificate process) (para 16; para 12)","Discretionary powers given to APRA to change reporting frequency for particular ADIs and to grant extensions (para 8–10)","Requirement for internal quality-control systems and digital authorisation (paras 11–12)","Provision for minor variations to forms and instructions by APRA without substantive change, plus notification obligations (paras 13–14)","Transitional provisions for reporting under a revoked prior standard (para 15)"],"plain_english_summary":"**What this instrument does (mechanics)\n\n- Requires authorised deposit-taking institutions (ADIs) — banks and other deposit-taking bodies authorised under the Banking Act — to report details of their \"points of presence\" located in Australia to APRA (Australian Prudential Regulation Authority). Points of presence are: face-to-face service channels (branches and other face-to-face outlets), ATMs, and EFTPOS terminals. (paras 3, 5; Instructions)\n\n- The reporting is done via three specific forms: ARF 796.1 (face-to-face), ARF 796.2 (ATMs) and ARF 796.3 (EFTPOS). Reports must be submitted in electronic format using APRA’s 'Direct to APRA' (D2A) system (or an APRA-notified alternative). Officers of the ADI must digitally sign and encrypt submissions using APRA-issued digital certificates. (paras 5–6, 12)\n\n- Reporting is annual as at 30 June each year, with reports due within 28 calendar days after the reporting period ends. APRA can change the reporting frequency for a particular ADI (more or less often) by written notice, and may grant extensions in writing. APRA can also make minor corrections or clarifications to the forms/instructions without changing substantive requirements, and must notify ADIs of those changes. (paras 7–10, 13–14)\n\n- The information is collected for APRA’s publication. ADIs must maintain internal processes and controls to assure the completeness and reliability of the information they submit. (para 2, para 11)\n\n- The instrument applies to ADIs generally but excludes purchased payment facility (PPF) providers (ADIs that are limited to providing purchased payment facilities). The scope of reporting is limited to points of presence within Australia (including offshore territories). (paras 3, 4, 16)\n\n\nWhy APRA says it matters (official rationale)\n\n- APRA states the information is collected for the purpose of publication (para 2). The forms capture the location and counts of service channels so APRA can publish an authoritative dataset of where ADIs deliver services. (paras 2, 5; Instructions)\n\n\nHow this affects who pays, who decides, and behaviour\n\n- Who pays: ADIs bear the compliance costs — collecting and validating location and channel data, implementing or using D2A, obtaining and managing digital certificates, and maintaining the internal review and authorisation processes required by paragraph 11. There is also the operational cost of ensuring geocoordinates, categorisation (branch vs other face-to-face), and counts are correct to the specified precision. (paras 6, 11; Instructions)\n\n- Who decides: APRA controls the reporting format (the three ARF forms), the electronic submission channel (D2A), the timetable for reports (subject to para 7 and APRA’s discretion in para 8), and may make minor, non‑substantive changes to forms/instructions (paras 6–8, 10, 13–14). APRA also obtains Bank@Post data directly from Australia Post, so ADIs should not report Bank@Post outlets themselves. (Instructions)\n\n- Behaviour changes required: ADIs must: (a) track and categorise all face-to-face outlets, ATMs and EFTPOS terminals within Australia according to APRA’s definitions; (b) collect latitude/longitude to four decimal places for face-to-face and ATM locations; (c) decide which party is responsible for reporting a terminal (owner vs key-manager/switching party, per the instructions); (d) put in place internal controls to verify the data before digital submission. These requirements change record-keeping and data‑validation practices at ADIs. (paras 5, 6, 11; Instructions)\n\n\nAssessment of costs, incentives, trade-offs and risks\n\n- Compliance burden: The standard imposes recurring administrative costs (annual data collection and control assurance). Smaller ADIs may face proportionally higher burdens because the standard is Level 1 reporting (Instructions) and requires specific technical elements (geocoordinates to 4 decimal places; whole-number counts; digital certificate use). (para 7; Instructions)\n\n- Discretion and uneven burden: APRA may change reporting frequency for particular ADIs (para 8). That discretion can concentrate additional reporting costs on specific ADIs with little change to the statutory text; it also allows APRA to reduce reporting for others. (para 8)\n\n- Data accuracy & operational risk: Requiring geocoordinates and a firm categorisation rule (branch vs other face-to-face) shifts a risk onto ADIs to ensure accuracy; mistakes could lead to mispublication. APRA allows minor form corrections (para 13) which mitigates some technical risks, but substantive classification disputes are not dealt with in the text and could require bilateral resolution.\n\n- Information externalities & market effects: Publication of outlet locations and counts (para 2) reduces information asymmetry for consumers and market observers. That published data could influence customer choice and competitive behaviour (e.g., advertising local presence), but the instrument itself does not mandate commercial responses — it only creates the informational resource. (para 2)\n\n- Boundary rules and possible under/over-counting: The instrument excludes Bank@Post outlets from ADI reporting because APRA will obtain those directly from Australia Post (Instructions). ADIs are explicitly instructed not to report third-party-owned ATMs unless the ADI owns the ATM or exchanges transaction messages (i.e. drives switching/key management). For EFTPOS, the terminal owner or the party responsible for key management reports. Those allocation rules reduce double-reporting but create practical judgement calls about who “drives” or “manages keys”, which can create disagreement or inconsistent disclosures across institutions. (Instructions)\n\n- Opportunity cost: Time spent aligning systems to this reporting standard is time not spent on other operational priorities. The instrument does not create fees or taxes but does impose admin costs.\n\n\nConcrete cross-references and practical notes (where to look in the instrument)\n\n- Legal basis: made under s.13 of the Financial Sector (Collection of Data) Act 2001 (para 1).\n- Who must report and who is excluded: paras 3–4; Interpretation (para 16).\n- What to report: para 5 and the Instructions sections for definitions and form details (ARF 796.1–796.3).\n- How to submit and authorisation: paras 6 and 12.\n- Timetable and APRA discretion about frequency and extensions: paras 7–10.\n- Quality control requirement: para 11.\n- Minor amendments to forms and notification obligations: paras 13–14.\n- Transitional arrangements when replacing an old standard: para 15.\n\n\nBottom line (practical summary)\n\n- The standard creates a stable, annual, APRA‑managed reporting regime requiring ADIs (except PPF providers) to report the location and counts of branches, other face-to-face outlets, ATMs and EFTPOS terminals within Australia for publication. It shifts data-collection, validation and submission costs to ADIs, gives APRA discretion over frequency and minor form changes, and contains detailed allocation rules about which party reports a particular terminal. (paras 2–6, 7–13; Instructions)\n\n"},"flash_summary_failed":{"failed":true,"reason":"Unauthenticated. Configure AI_GATEWAY_API_KEY or use a provider module. Learn more: https://ai-sdk.dev/unauthenticated-ai-gateway","source":"analysis-cron"}},"importantCases":[],"_links":{"self":"/api/acts/financial-sector-collection-of-data-reporting-standard-determination-no-23-of-2016","history":"/api/acts/financial-sector-collection-of-data-reporting-standard-determination-no-23-of-2016/history","analysis":"/api/acts/financial-sector-collection-of-data-reporting-standard-determination-no-23-of-2016/analysis","conflicts":"/api/acts/financial-sector-collection-of-data-reporting-standard-determination-no-23-of-2016/conflicts","importantCases":"/api/acts/financial-sector-collection-of-data-reporting-standard-determination-no-23-of-2016/important-cases","documents":"/api/acts/financial-sector-collection-of-data-reporting-standard-determination-no-23-of-2016/documents"}}