ASIC Corporations (CSSF-Regulated Financial Services Providers) Instrument 2016/1109

CSSF-regulated financial services provider is the defined entity that can rely on the exemption. The definition has several limbs: the body must be incorporated in Luxembourg; it must hold a current CSSF authorisation to carry on business in Luxembourg as either (i) an investment company that has adopted a status of self-managed under Part I of the Law relating to UCITS or having effect as if under that Part, or (ii) a management company under Chapter 15 of Part IV of the Law relating to UCITS or having effect as if under that Chapter. The definition also requires the body to be either registered under Division 2 of Part 5B.2 of the Act (foreign companies) or, if not registered, to have an agent at the time it first relies on the instrument and to have not failed to have an agent for any consecutive period of 10 business days. Finally, the body’s primary business must be the provision of financial services. This last limb may disqualify entities that only incidentally provide financial services.

CSSF regulatory requirements means the rules applying in Luxembourg to the financial services the provider offers, including legislation, instruments made under it, and policies or documents issued by the CSSF. This is a broad category that covers both hard law and soft guidance. The instrument requires the provider to conduct its Australian services in a manner that would comply, so far as possible, with those requirements as if the service were provided in Luxembourg in like circumstances. That creates an obligations gap: the provider must apply Luxembourg rules extraterritorially, to the extent feasible, but the instrument does not specify what “so far as possible” means. It invites factual and legal disputes about whether a particular practice could have been modified to match Luxembourg standards while still being offered in Australia.

Agent is defined as a natural person ordinarily resident in Australia or a company, whose name and address have been provided to ASIC in writing, authorised to accept service of process from ASIC and, in relation to proceedings relating to a financial services law, from any person referred to in subsection 659B(1) of the Act (which covers parties to takeover proceedings). The agent is a critical compliance point; a gap of 10 consecutive business days without an agent destroys eligibility to rely on the instrument.

Eligible deposit product is defined by exclusion: a deposit-taking facility that is not a “deposit product” as defined in s 761A of the Act. This means that ordinary term deposits, at call accounts, and similar retail deposit products (which are deposit products) are not covered. The exemption only extends to deposit facilities that fall outside that definition, such as certain wholesale or structured deposits.

UCITS refers to undertakings for collective investment in transferable securities, the European Union framework for collective investment schemes. The instrument draws on Luxembourg implementation: the Amended Law of 17 December 2010. This link to a specific foreign statutory regime means any amendment to that Luxembourg Law may indirectly affect whether a provider continues to satisfy the definition.

Wholesale clients is not defined in the instrument but takes its meaning from the Act (s 761G and related provisions). The exemption is limited to wholesale clients; retail clients must be serviced under a full AFSL or another exemption.

The primary class affected is Luxembourg incorporated bodies that are self managed investment companies under Part I of the 2010 UCITS Law or management companies under Chapter 15 of Part IV of that Law. These are typically fund managers, investment companies, and collective investment scheme operators that are authorised by the CSSF and whose primary business is financial services. The instrument allows them to provide certain financial services to Australian wholesale clients without obtaining an Australian financial services licence. This reduces the regulatory duplication for such firms, but only if they meet the preconditions.

ASIC is affected as the regulator that receives notifications, assesses compliance, and can exclude providers by notice. The instrument also imposes a duty on ASIC to receive and potentially act on notifications from providers about changes and enforcement actions. ASIC may also issue directions requiring information.

Wholesale clients in Australia are affected because they may receive financial services from foreign providers that do not hold an AFSL and are not subject to Australian conduct obligations (except those in Divisions 4 and 8 of Part 7.6 and the conditions in the instrument). The disclosure requirement is meant to alert clients to the foreign regulatory regime and the absence of an Australian licence. However, the client bears the risk that the provider is primarily regulated in Luxembourg, with different investor protections, compensation arrangements, and dispute resolution mechanisms.

Australian financial services licensees that compete with these Luxembourg providers are affected. The exemption potentially allows foreign firms to undercut Australian licensees on compliance cost, since the foreign firms need not bear the cost of an AFSL, though they must incur the cost of compliance with the instrument’s conditions. The competitive effect depends on how many firms take up the exemption and whether the cost savings outweigh the condition compliance costs.

The Luxembourg regulator, the CSSF, is also affected because the instrument contemplates information sharing between ASIC and the CSSF. The provider must consent to such disclosure and, via a deed, covenant to assist in information sharing.

Finally, directors and officers of the Luxembourg provider are indirectly affected because the deed of submission to Australian courts and the requirement to comply with CSSF regulatory requirements in an Australian context create personal and corporate exposure.

Right to exemption: A qualifying provider has the right not to comply with Part 7.6 of the Act (except Divisions 4 and 8) when providing the listed financial services to wholesale clients in Australia. This is a statutory exemption from the licensing and conduct obligations that would otherwise apply. The right is conditional and revocable.

Pre reliance duties: Before relying on the instrument, the provider must give ASIC four things: evidence that it satisfies the definition of CSSF-regulated financial services provider; written notice that it will provide financial services in Australia in reliance on the instrument; written consent to information disclosure between ASIC and the CSSF; and a deed in favour of ASIC and persons referred to in subsection 659B(1) of the Act. The deed must contain specific covenants: submission to non exclusive jurisdiction of Australian courts; covenant to comply with orders of Australian courts relating to the financial services; if not registered under Part 5B.2, provision for service of process on the agent; covenant to give or vary consent and take steps to assist information disclosure between ASIC and CSSF; and a clause that the deed is irrevocable except with ASIC’s prior written consent.

Client disclosure duty: Before providing financial services to a wholesale client, the provider must give the client written disclosure containing prominent statements that: the provider is exempt from the AFSL requirement; and the provider is regulated by the CSSF under foreign laws which differ from Australian laws. This is a one time disclosure per client, not ongoing.

Compliance with CSSF regulatory requirements: The provider must provide each financial service in Australia in a manner that would comply, so far as possible, with the CSSF regulatory requirements if the service were provided in Luxembourg in like circumstances. This is a continuous duty. The phrase “so far as possible” introduces uncertainty; it may be interpreted to allow deviations where Australian law or market practice prevents exact compliance, but creates a risk that ASIC could argue the provider did not try hard enough.

Notification duties: The provider must notify ASIC in writing no later than 15 business days after becoming aware, or should reasonably have become aware, of: each significant change to (including termination of) any licence or registration relevant to the financial services provided or intended to be provided in Australia; each significant exemption or other relief obtained from CSSF regulatory requirements relevant to those services; and each significant enforcement action, disciplinary action, or investigation taken by any other foreign regulatory authority against the provider in a foreign jurisdiction in relation to financial services. There is an exception for investigations where the provider is prohibited by law from giving notification, but only to the extent of the prohibition. The phrase “significant” is not defined, creating ambiguity about what must be reported.

Information provision duty: The provider must comply with a written notice from ASIC directing it to give a written statement containing specified information about the financial services provided or the financial service business operated in Australia, within the time specified.

Limitations on right: The provider cannot rely on the instrument if ASIC has notified it or its agent that it is excluded and ASIC has not withdrawn the notice. Also, if the provider fails to comply with a condition and does not remedy within cure periods, the exemption is lost. The cure periods are: 15 business days from when the provider became aware or should reasonably have become aware of the failure (other than an immaterial failure) to provide full particulars to ASIC, and if particulars are given, 30 business days from ASIC receiving them without ASIC notifying that the provider may continue to rely on the instrument. Additionally, the provider can only rely on the instrument on or after 1 April 2020 if it was able to rely on it on 31 March 2020 (a grandfathering rule that locks in existing users and prevents new entrants after that date).

The instrument does not create criminal or civil penalties itself. Contravening a condition does not attract a direct fine; instead, the consequence is that the provider loses the ability to rely on the exemption. Once the exemption is lost, the provider must either hold an AFSL or rely on another exemption, or cease providing services to Australian wholesale clients. Continuing to provide services without a licence would be a breach of the Act, carrying the penalties applicable under Part 7.6 (which can include criminal penalties, civil penalties, and ASIC administrative action).

The deed required by condition 7(a)(iv) is a key enforcement mechanism. The provider submits to the non exclusive jurisdiction of Australian courts and covenants to comply with any order of an Australian court relating to the financial services. The deed is enforceable by ASIC and by persons referred to in subsection 659B(1) of the Act (which includes parties in takeover proceedings). This means ASIC can sue on the deed to enforce compliance with court orders, and potentially recover damages or seek specific performance. The deed is irrevocable except with ASIC’s written consent, which gives ASIC leverage.

ASIC can also exclude a provider by written notice under section 8(1). This is a discretionary power; there are no criteria stated for when ASIC may issue such a notice. This creates uncertainty for providers, as their ability to rely on the instrument could be revoked at any time without cause shown, subject only to administrative law review.

The notification to ASIC of foreign enforcement actions under condition 7(d)(iii) does not itself trigger a penalty, but failure to notify could lead to loss of the exemption under section 8(2) if considered a failure to comply with a condition.

The information gathering power under condition 7(e) allows ASIC to compel a provider to furnish information within a specified time. Non compliance with that direction could also lead to loss of exemption.

Enforcement costs fall on the provider: the deed requires submission to jurisdiction, so any proceeding ASIC brings would involve legal costs for the provider, including potentially having to defend in Australian courts while being based in Luxembourg. The provider cannot revoke the deed, so it remains exposed even after it stops relying on the instrument.

This instrument operates within the broader framework of the Corporations Act 2001. It is made under subsection 926A(2) which allows ASIC to exempt a person or class of persons from all or specified provisions of Part 7.6, subject to conditions. The instrument therefore modifies the operation of Part 7.6 for the defined class. Providers relying on the instrument are not subject to AFSL obligations such as holding a licence, meeting training and competence standards, having adequate resources, dispute resolution systems, or compensation arrangements under Part 7.6 (except Divisions 4 and 8). The content of Divisions 4 and 8 is not stated in the instrument; those divisions remain applicable. Division 4 likely deals with the financial services register or related provisions, and Division 8 likely deals with offences, but the user must verify separately.

The instrument does not override other parts of the Act. For example, Chapter 7 (financial services and markets) includes provisions regarding disclosure, managed investment schemes, market integrity, and other obligations that may still apply to the provider’s activities outside the specific exemption. The exemption only applies to Part 7.6, not to Chapter 5C (managed investment schemes), Chapter 6 (takeovers), or other parts. A provider offering interests in an unregistered managed investment scheme may still need to comply with Chapter 5C requirements unless separately exempted. Similarly, product disclosure requirements under Part 7.9 may still apply.

The instrument interacts with foreign law through the requirement to comply with CSSF regulatory requirements so far as possible. This may create conflicts if Luxembourg law and Australian law impose contradictory obligations. The provider then faces a compliance dilemma. The instrument does not provide a conflict resolution mechanism.

The instrument also interacts with the ASIC Act. The deed references section 50 of the ASIC Act, which relates to ASIC’s power to require information. The provider’s consent to information sharing between ASIC and CSSF under condition 7(a)(iii) is separate from any privacy or confidentiality obligations under Australian law or Luxembourg law. The instrument does not override privacy laws; the provider must ensure it has lawful basis for the disclosures.

The instrument is not the only pathway for foreign financial services providers to operate in Australia. Other ASIC instruments provide relief for entities regulated by other foreign regulators (e.g., US SEC, UK FCA). The existence of multiple exemptions creates a patchwork; each carries different conditions and compliance burdens. A Luxembourg provider could also choose to apply for an AFSL directly, though that would be more onerous.

The instrument was originally made in 2016 and has been amended eight times. The endnote records amendments by instruments: 2018/807, 2019/902, 2020/200, 2021/510, 2022/623, 2023/588, 2024/497, and 2025/799. The repeal date has been extended multiple times; originally it may have been earlier. For example, the 2023 amendment (2023/588) repealed and substituted section 3, which is the repeal provision. The current repeal date is 31 March 2027, as set by the latest amendment. Section 2 was repealed by s48D of the Legislation Act 2003, which is a standard administrative repeal of an obsolete provision.

The amendment history shows that the instrument has been periodically reviewed and updated, likely to extend the sunset date and to make minor adjustments. The consistent pattern of near annual amendments suggests that ASIC treats the instrument as temporary and reviews it each year. This creates uncertainty for providers who rely on the exemption, as the instrument could be allowed to lapse at any future sunset date. The amendments do not suggest any fundamental restructuring of the exemption; the basic framework has remained the same since 2016.

One notable change is the grandfathering provision in section 8(3), which was inserted by the 2020 amendment. This provision restricts reliance on the instrument after 31 March 2020 to those who were already able to rely on it as at 31 March 2020. This effectively closed the class to new entrants from that date. Providers that were not already eligible by that date cannot rely on the instrument at all, even if they meet the definition. This may have been a deliberate policy to limit the exemption to existing participants and prevent a surge of new Luxembourg providers.

The 2025 amendment (2025/799) is the most recent, and it extended the repeal date to 2027. The compilation notes indicate it commenced on 5 December 2025. This suggests the instrument continues to be viewed as useful by ASIC, at least for the existing cohort of providers.

The instrument’s endnotes and the compiled text do not refer to any court proceedings. There is no mention of litigation having been decided under or about this instrument. Given that the instrument is narrow in scope and applies to a small class of providers (those that meet the definition and were grandfathered in 2020), it is plausible that no disputes have reached court. The conditions are largely administrative and notification based, not easily litigated. However, the deed of submission to jurisdiction could theoretically be enforced, but no case is noted.

The lack of litigation does not mean the instrument is immune to challenge. A provider excluded by ASIC notice or disputing whether a failure was “immaterial” could seek judicial review under the Administrative Decisions (Judicial Review) Act 1977 or the Act. But as of the compilation date, no such proceedings are recorded in the instrument’s history.

Practitioners should therefore treat the instrument as untested in court. The interpretation of key phrases such as “so far as is possible”, “significant”, “primary business”, and “like circumstances” remains unresolved. This uncertainty is a cost for providers and their legal advisers.

Several provisions can trip up a provider or practitioner advising one.

First, the definition of CSSF-regulated financial services provider is quite specific. It only covers self managed investment companies under Part I of the UCITS Law or management companies under Chapter 15 of Part IV. Other Luxembourg regulated entities, such as banks, insurance companies, or alternative investment fund managers, are not eligible even if they also provide financial services. Also, the body must have a “current authorisation” which could lapse if the CSSF suspends or revokes it.

Second, the requirement that the provider’s primary business is the provision of financial services. If the provider also undertakes substantial non financial activities, it may not qualify. There is no safe harbour or proportion test.

Third, the agent requirement. If the provider is not registered under Part 5B.2, it must appoint an agent before first relying on the instrument and must not have a gap in agent coverage of 10 consecutive business days. A gap could be triggered by the agent resigning or dying and no replacement being appointed promptly. The provider must monitor this constantly.

Fourth, the deed requirement. The deed must be irrevocable except with ASIC’s consent. That means the provider cannot unilaterally withdraw from the obligations, even if it stops providing services in Australia. The deed survives cessation of reliance. This is a permanent liability.

Fifth, the condition to provide financial services in compliance with CSSF regulatory requirements “so far as is possible”. This is ambiguous. If a service cannot be structured to comply with Luxembourg rules due to Australian law or market infrastructure, the provider must still try. ASIC could later argue that more could have been done. The provider should document its analysis.

Sixth, the disclosure to clients must contain “prominent statements”. The instrument does not define “prominent”. A provider using fine print or burying the statements in a lengthy document risks non compliance.

Seventh, the notification obligations use “significant” without definition. A provider may fail to notify a change it considers minor, but ASIC may disagree. The 15 business day clock runs from when the provider “should reasonably have become aware”, not just actual knowledge. This imposes a duty of inquiry.

Eighth, the cure periods in section 8(2) are limited. If a provider fails to notify a change and does not provide particulars within 15 business days, the exemption is lost automatically. Even if it notifies, ASIC has 30 business days to respond; if ASIC does not affirmatively say “you may continue”, the exemption is lost. There is no deemed approval. This means a provider can lose the exemption through administrative delay.

Ninth, the grandfathering rule in section 8(3) means that any provider that was not eligible on 31 March 2020 cannot rely on the instrument at all, even if it later meets all conditions. This closes the class permanently. A new Luxembourg fund cannot use this path.

Tenth, the repeal date of 31 March 2027. The instrument will automatically expire unless further amended. Providers should not assume it will be extended; they need a contingency plan for loss of the exemption.

Compliance with this instrument requires a multi step process, not a single filing. Below is a practical sequence.

1. Confirm eligibility: Determine that the body is incorporated in Luxembourg, holds the specific CSSF authorisation (self managed investment company under Part I of the 2010 UCITS Law or management company under Chapter 15 of Part IV), is either registered under Part 5B.2 of the Act or will appoint an agent, and that its primary business is the provision of financial services. Also confirm that it was able to rely on the instrument on 31 March 2020 (if seeking to rely after that date). If the entity is a new entrant after that date, it cannot use this instrument.

2. Agent appointment: If not registered as a foreign company, appoint a natural person ordinarily resident in Australia or a company as agent. Obtain written acceptance. Provide the agent’s name and address to ASIC in writing. Ensure that the agent accepts service of process.

3. Pre reliance submission to ASIC: Before providing any financial services in reliance on the instrument, give to ASIC: (i) evidence that the body meets the definition (e.g., a copy of the CSSF authorisation and evidence of incorporation); (ii) a written notice that it will provide financial services in Australia in reliance on the instrument; (iii) a written consent to ASIC and CSSF disclosing information relating to the provider; and (iv) a deed executed by the body containing the covenants in condition 7(a)(iv). The deed must be in favour of ASIC and persons referred to in subsection 659B(1) of the Act. It should be irrevocable except with ASIC’s written consent. Obtain legal advice on the deed wording to ensure it matches the requirements.

4. Client disclosure: Before providing financial services to each wholesale client, give the client written disclosure with prominent statements that the provider is exempt from the AFSL requirement and is regulated by the CSSF under foreign laws differing from Australian laws. The disclosure must be given before the service is provided; it may be in a separate document or a covering letter.

5. Ongoing compliance with CSSF requirements: Continuously assess whether each financial service provided in Australia would comply with CSSF regulatory requirements if provided in Luxembourg in like circumstances. Where compliance is not feasible due to Australian conditions, document the reasons and consider whether any adjustments can be made. Maintain records of the analysis.

6. Monitoring and notification: Monitor licences, registrations, exemptions, and foreign regulatory actions. Notify ASIC in writing within 15 business days of becoming aware, or when the provider should reasonably have become aware, of: any significant change to licences/registrations relevant to Australian services (including termination); any significant exemption or relief from CSSF requirements; and any significant enforcement action, disciplinary action, or investigation by another foreign regulatory authority relating to financial services. If prohibited by law from notifying an investigation, document the prohibition.

7. Respond to ASIC directions: If ASIC issues a written notice requesting information, provide a written statement within the time specified. Failure to comply may lead to loss of the exemption.

8. Maintain agent: If not registered under Part 5B.2, ensure there is never a gap of 10 consecutive business days without an agent. Have a replacement agent arrangement in place in case of resignation or incapacity.

9. Keep records: Retain copies of all submissions to ASIC, deeds, client disclosures, CSSF compliance assessments, and notifications. The instrument does not specify a retention period, but general record keeping obligations under the Act may apply.

10. Monitor repeal date: The instrument expires on 31 March 2027. If the provider intends to continue services beyond that date, it should either apply for an AFSL, seek a new exemption, or hope for another amendment extending the sunset. Plan ahead.