ASIC Corporations (Custody Standards for Providers of Custodial and Depository Services) Instrument 2024/17

The instrument operationalises three main concepts: custodial property and trust holding; organisational and operational controls for custody functions; and contractual/monitoring requirements for sub‑custodians and retail client arrangements.

Custodial property and trust holding. The central legal premise is that custodial property is to be held on trust for the client (912AAC(2)). The Act defines custodial property as a financial product or a beneficial interest in a financial product held in providing a custodial or depository service (912AAC(16), definition “custodial property”). The trust presumption is qualified: the trust rule does not apply where the asset is held under Division 2 or 3 of Part 7.8, where the property is located in a jurisdiction that does not recognise trusts but is reasonably held under that law, or where the licensee documents in writing satisfaction that the holding provides reasonably effective protection in event of insolvency of the holder (912AAC(3)(a)-(b)). There are also regulatory carve‑outs under specified regulations (7.8.01A, 7.8.06A, 7.8.06B) (912AAC(3)(c)), and a specific arrangement for authorised representatives who hold property on trust for the client while the licensee remains liable (912AAC(3)(d)).

Organisational and operational controls. The instrument prescribes how custody functions should be organised and resourced. Licensees must have procedures for receiving instructions from clients and controls to ensure authorisation and execution (912AAC(4)). Custodial property should be identified as held on behalf of the client and, as far as practicable, held separately from the licensee’s or other persons’ property (912AAC(5)). Where separation does not occur, the licensee must maintain a written policy explaining the reasons, review the policy at least every 13 months, keep records for seven years, ensure daily reconciliations (or reconciliations at a frequency that is ordinary commercial practice where appropriate), and ensure any insufficiency is remedied by the second business day (912AAC(6)). Staffing controls require segregation of custodial staff from those making investment or trading decisions, documented policies to prevent inappropriate influence, checks for attempts to influence custodial staff, reporting arrangements, and resourcing/training obligations (912AAC(7)-(8)). Custodial staff are defined narrowly as natural persons tasked with holding custodial property, record keeping and checking authorisations, but excluding persons who make investment or trading decisions except in limited deposit or FX contexts (912AAC(16), definition “custodial staff”).

Contractual and monitoring obligations. The instrument requires written agreements with sub‑custodians that specify rights for ongoing review, annual certification, reconciliation procedures, audit access, termination for breach, limits on encumbrances and confidentiality protections (912AAD(1)-(3)). Licensees must monitor sub‑custodians and ensure sub‑custodians, in turn, monitor persons they engage (912AAC(11), 912AAD(2)(a), (m)). For retail clients, the licence must enter into written agreements containing specified matters: how property is held, how instructions are given, liability to the client for loss arising from failures to hold or manage custodial property (subject to a limited insolvency carve‑out), record and reconciliation requirements, reporting, notice before appointing another custodian, and contingency planning (912AAE).

Definitions of “digital asset”, “sub‑custodian” and engagement are included (912AAC(16)-(17)). The instrument also includes explicit record retention periods (seven years) for compliance documentation and policies (912AAC(6)(a), (b), (10); 912AAD(4)(b)). ASIC is empowered to direct a licensee to obtain a report on process effectiveness and reasonableness (912AAC(14)). Finally, the statutory text contains “taken to comply” clauses linking compliance with these sections to compliance with any AFSL conditions referring to ASIC PS133 or RG133 (912AAC(15), 912AAD(5)), effectively replacing regulatory guidance with prescribed statutory standards for the relevant licensing conditions.

Conceptually, the instrument moves custody obligations from soft guidance into prescriptive statutory form, specifying legal character (trust), operational controls, contractual content, monitoring cycles and recordkeeping. It ties these to AFSL conditions and to ASIC supervisory powers (reports on processes), while carving out practical exceptions for foreign law and certain asset types.

Primary affected parties. The primary subjects are financial services licensees authorised to provide custodial or depository services (the instrument repeatedly uses the phrase “financial services licensee that is authorised to provide a custodial or depository service”: see 912AAC(1)). Those licensees must change organisation, contract templates, risk management and resourcing to comply with the new statutory requirements. The instrument treats the licensee as responsible for acts and omissions of persons it “directly or indirectly engages” to hold custodial property, imposing duties that cascade down the engagement chain (912AAC(2)(b), 912AAC(9), 912AAC(11), 912AAC(17)). This construction makes the licence‑holder the ultimate accountable entity for compliance with the custody standards.

Sub‑custodians and other service providers. Persons engaged directly or indirectly to hold custodial property are subject to the standards to the extent the licensee must “do all things necessary” to ensure the person complies (912AAC(2)(b), (9)). The instrument requires written agreements with sub‑custodians and content that binds the sub‑custodian to certification, reconciliation, audit cooperation and restrictions on encumbrances (912AAD(2)-(4)). Sub‑custodians, and providers that sub‑delegate custody functions, are therefore operationally affected because the licensee’s contract must require certain behaviours and annual certification (912AAD(2)(b)).

Retail clients and other clients. Retail clients receiving custodial or depository services have specific statutory protections: a licensee must have a written agreement with retail clients containing specified undertakings (912AAE). These include the licensee’s liability to the client for loss due to failure to hold custodial property or to meet reasonable industry standards, subject to a defined insolvency carve‑out (912AAE(c)). Retail clients gain statutory entitlements on matters such as notice where assets will be held by another person, transfer on termination, reporting and access to records (912AAE(h), (i), (e), (g)).

Auditors, clients’ auditors and ASIC. Licensees must keep records that enable auditing by an auditor acting for the client and must ensure that persons engaged to hold assets do likewise (912AAC(13), 912AAD(2)(h)). ASIC gains statutory capacity to require a licensee to commission and provide reports on the effectiveness or reasonableness of processes (912AAC(14)). The instrument therefore engages the client’s auditor and ASIC as practical enforcers and information recipients.

Other affected entities and jurisdictions. The instrument affects foreign companies carrying on business in Australia or registered under Division 2 of Part 5B.2 by reference to approval‑authority for policy sign‑off in some contexts (912AAC(7)(c)(i)). It affects entities providing deposit accounts (certain carve‑outs apply where deposit facility balances are payable on demand), securities/derivatives custodians, and custodians of digital assets that are financial products (912AAC(5)(b)(ii)(A)-(D)). It also interacts with persons and law outside the jurisdiction: where trusts are not known or where it is not reasonable to hold assets on trust under foreign law the licensee must document its reasons and what protections exist (912AAC(3)(a)-(b)).

Who ultimately pays and who decides. The immediate financial and operational burden falls on the financial services licensee: compliance costs for documentation, monitoring, staffing, reconciliations, contractual negotiation with sub‑custodians, record keeping for seven years, and the risk of liability to clients (912AAC(2)-(14), 912AAD, 912AAE). Licensees decide how to implement practical measures, who to engage as sub‑custodians and whether to accept the cost of separation or to rely on exceptions; however, these decisions must be documented and monitored in accordance with the statutory text (912AAC(6)(a), (b), (11), 912AAD(2)(a), (m)). Sub‑custodians decide whether to accept the contractual terms required by the licensee (912AAD(2)-(4)). Clients and auditors exercise rights created by the instrument (audit access, requests for acknowledgement of how assets are held, reporting etc) (912AAC(13), 912AAE(a), (e), (g)).

Concentrated benefits and diffuse costs. Benefits concentrate with clients and possibly with licensees who can credibly market statutory compliance; the costs are borne by licensees and sub‑custodians in the form of operational upgrades, monitoring, increased contractual liabilities and potential restrictions on granting charges or liens (912AAD(4), 912AAE(d)). Cross‑border operations face particular compliance friction: the instrument requires documented justifications where local law prevents trust holding and imposes monitoring burdens for overseas sub‑custodians (912AAC(3)(a)-(b), 912AAD(2)(m)).

Core duties. The instrument imposes affirmative duties on a financial services licensee authorised to provide custodial or depository services. The primary duty is to “do all things necessary” to ensure custodial property it holds is held on trust for the client (912AAC(2)(a)), and to ensure the same where custodial property is held by a person it directly or indirectly engages (912AAC(2)(b)). Where custodial property is held by another person on the licensee’s behalf, the property must be held on trust for the licensee (912AAC(2)(c)). The “do all things necessary” phrasing recurs, placing a broad obligation on the licensee to take practical steps to achieve compliance across organisational boundaries (912AAC(2), (9), (11), (12)).

Procedural duties. Licensees must maintain reasonable procedures for receiving client instructions, including how instructions are given and authorised (912AAC(4)). They must identify custodial property as held on behalf of its beneficial owner and hold it separately where practicable (912AAC(5)). Where assets are not held separately, licensees must adopt, maintain and review written policies explaining why non‑separation is appropriate, record each client’s entitlement, perform reconciliations on each business day (or in line with local commercial practice), carry out daily remediation of insufficiencies within two business days, and ensure the non‑separation does not impede client directions such as voting rights (912AAC(6)(a)-(f)).

Organisational duties. Licensees must structure their business to support these duties, segregate custodial staff from investment/trading functions where conflicts exist or might arise, obtain approvals for custodial policies from directors or authorised senior managers, implement documented policies preventing undue influence on custodial staff, perform reasonable checks for attempts to influence custodial staff and enable custodial staff to report either directly to natural person clients or to the directors or most senior officer of corporate clients (912AAC(7)(a)-(e)). Important resource duties require custodial staff to have necessary knowledge and skills, ongoing training programmes, adequate time, authority and resources to perform duties, and for the licensee to ensure compliance by persons it engages (912AAC(8)-(9)).

Contractual duties with sub‑custodians. When a licensee engages a sub‑custodian, it must have a written agreement containing specified provisions: rights for ongoing review and monitoring, annual written certification by the sub‑custodian that it and each person it engages meet the agreement terms and the standards the licensee must enforce (unless disclosed or trivial), identification and acknowledgement that the custodial property is held for the beneficial owner, protocols for instruction transmission, limits on security interests encumbering custodial property (noting unpaid fees must not be covered), maintenance of records and reconciliation procedures, audit access, prior notice of other persons to be engaged, termination rights without payment for material breaches, notification obligations for material or systemic breaches, terms governing sub‑delegation and business continuity arrangements and confidentiality protections (912AAD(1)-(3), (m), (n), (o)). The licensee must ensure the agreement has reasonable liability provisions and does not exclude liability for direct loss except in particular, documented circumstances (912AAD(3)).

Retail client contract duties. A licensee entering into or varying arrangements with retail clients must provide written agreements that acknowledge how assets are held, set out instruction methods, accept liability to the client for loss due to failure to hold or comply with duties (subject to the insolvency/“reasonable care” carve‑out), prohibit encumbrances except as permitted, specify record and reconciliation processes, require reporting to the client, provide prior written notice before arranging for assets to be held by another person (except in exceptional circumstances), require timely transfer on termination, maintain contingency arrangements, and keep client confidential information confidential (912AAE(a)-(k)).

Recordkeeping and audit rights. Licensees must keep records demonstrating compliance with subsections (2) to (9) for seven years (912AAC(10)) and must keep records of custodial property so a client’s auditor can conveniently and properly audit (912AAC(13)). Sub‑custodian agreements must permit reasonable access and assistance to auditors (912AAD(2)(h)).

Monitoring and reporting duties. Licensees must monitor and assess sub‑custodians’ performance and ensure sub‑custodians monitor downstream parties (912AAC(11)). Licensees must put written processes in place and review the appropriateness of written processes for monitoring at least every 13 months, retaining records of reviews for seven years (912AAC(14)(a)). ASIC can direct a licensee to arrange for a report to be prepared and supplied to ASIC on the effectiveness or reasonableness of processes (912AAC(14)(b)).

Rights and carve‑outs. The instrument creates rights that assist compliance and protect interests: the licensee may terminate a sub‑custodian agreement without payment in certain material breach scenarios (912AAD(2)(j)), and sub‑custodians must acknowledge to the licensee and, as appropriate, to third parties that assets are held on trust for the beneficial owner (912AAD(2)(c)). Licensees are taken to have complied with certain AFSL conditions if they comply with the statutory provisions (912AAC(15), 912AAD(5)). Exceptions exist for assets located where trusts are not known or where it's not reasonable to hold on trust if the licensee documents protection and reasons (912AAC(3)(a)-(b)). There are asset‑type carve‑outs for separation obligations (912AAC(5)(b)(ii)), and the definition of custodial staff excludes investment decision‑makers to preserve operational divides (912AAC(16)).

Limitation of liability mechanisms. The retail client clause allows a licensee to limit liability for the insolvency of a person it engaged where the licensee has not failed to take reasonable care in engaging and monitoring that person (912AAE(c) second paragraph). The sub‑custodian agreement provisions require reasonable liability and indemnity provisions and generally prohibit exclusions for direct loss except in particular circumstances the licensee deems reasonable (912AAD(3)).

In short, the instrument converts many existing good‑practice expectations into statutory duties, creates rights for termination, audit and notice, and inserts monitoring and recordkeeping obligations that cascade down the engagement chain.

Statutory enforcement pathway and ASIC’s role. The instrument itself does not create new standalone criminal offences or specify monetary penalties within its text. Enforcement is, however, embedded in the Corporations Act licensing and supervisory framework. The new provisions are inserted into Part 7.6 in Division 3, which deals with obligations of financial services licensees. Compliance with these sections is expressly taken to satisfy conditions of an Australian financial services licence that refer to ASIC Policy Statement 133 or ASIC Regulatory Guide 133 (912AAC(15) and 912AAD(5)). The practical effect is to make these sections the measurable standard by which any linked AFSL conditions will be judged.

Section 912AAC(14)(b) grants ASIC a specific supervisory tool: ASIC may direct a licensee in writing to arrange for a report on the effectiveness or reasonableness of any of the processes (as defined) to be prepared and given to ASIC. The direction may specify who prepares the report and timing. This power allows ASIC to commission independent or internal reviews and to require remedial action based on report findings. Given the AFSL compliance link, ASIC’s powers under the Corporations Act for civil penalties, licence variation, suspension or cancellation, enforceable undertakings, banning orders and administrative sanctions remain applicable to breaches of AFSL conditions that the instrument prescribes; the instrument does not displace those enforcement mechanisms but supplies statutory content for breach assessment.

Audit and contractual enforcement. The instrument enshrines clients’ auditors’ rights in that licensees must keep records enabling a client’s auditor to conveniently and properly audit the holding (912AAC(13)), and sub‑custodian agreements must provide audit access (912AAD(2)(h)). Those audit access rights facilitate discovery of non‑compliance and support contractual remedies against sub‑custodians: agreements must allow the licensee to terminate without payment in certain breach circumstances (912AAD(2)(j)), and require notice of material or systemic breaches by the sub‑custodian (912AAD(2)(l)). Those contractual mechanisms permit private enforcement via contractual claims for breach, indemnity recovery and recovery of transfer costs, as expressly allowed in termination provisions (912AAD(2)(k)).

Civil liability to clients. The statutory provisions confer obligations which may be enforceable in a civil action. For retail clients, the licensee’s written agreement must state the licensee is liable to the client if there is a loss due to a failure by the licensee or a person it engages to hold the custodial property, or to meet duties under the agreement, subject to a narrow insolvency carve‑out if the licensee has taken reasonable care in engaging and monitoring (912AAE(c)). That creates a contractual and potentially statutory basis for client claims against the licensee for loss. The clause reframes contractual allocation of risk and could be relied upon in client actions or in insolvency disputes where ownership of assets is contested.

Record‑keeping as enforcement evidence. The instrument’s seven‑year retention requirements for policies, records of entitlements and records showing compliance (912AAC(6)(a), (b), (10), 912AAD(4)(b)) make proof of compliance or non‑compliance evidentially tractable for regulators, auditors and litigants. Failure to keep those records will hinder defence and is likely to be treated unfavourably by ASIC in enforcement contexts.

Limits on encumbrances and related accountability. The instrument restricts granting of security interests, mortgages, liens or other encumbrances over custodial property unless permitted in narrow circumstances and requires licensees to keep a written record of reasons for seven years where they permit such encumbrances (912AAD(4)(a)-(b)). Those obligations increase the potential for regulatory or contractual claims where encumbrances cause client loss.

No explicit penalty schedule in the instrument. The instrument does not set a specified fine schedule, criminal sanctions or civil penalty amounts. Instead, enforcement will proceed under the broader Corporations Act enforcement architecture , ASIC supervision, AFSL condition enforcement, civil claims and contractual remedies , using the statutory provisions inserted by the instrument as the normative standard. The instrument therefore operates as a compliance lever and an evidential baseline for enforcement actions, rather than as a self‑contained penal code.

Practical enforcement levers. Practically, enforcement will rely on: ASIC’s directions (reports) and broader regulatory powers under the Act; auditors and client actions supported by the statutory duties; contractual termination and indemnity rights against sub‑custodians; and licence condition enforcement that can lead to variation, suspension or cancellation of an AFSL or to civil penalties under the Corporations Act where civil penalty provisions are engaged against a licensee for failing to comply with statutory obligations. The instrument amplifies transparency and traceability by mandating documentation, reconciliation, audit access and reporting obligations (912AAC(6), (10), (13), 912AAD(2)(g), (h), (l), (m)).

Interaction with Part 7.8 (custody and depository law). The instrument specifically preserves existing pathways in Part 7.8: the trust requirement in 912AAC(2) is subject to exceptions where property is held under Division 2 or 3 of Part 7.8 (912AAC(2) and (3)). That means where the Corporations Act already provides a statutory scheme for certain custody arrangements in Part 7.8, those statutory arrangements will govern. Additionally, the instrument references regulatory exemptions under the Corporations Regulations 2001 (regulations 7.8.01A, 7.8.06A, 7.8.06B) as grounds for the trust presumption not to apply (912AAC(3)(c)). Practitioners must therefore map the new sections against Part 7.8 to determine whether the trust presumption or an alternative statutory safety net applies.

AFSL conditions and ASIC guidance. The instrument explicitly ties compliance with the inserted sections to existing AFSL conditions that refer to ASIC Policy Statement 133 or Regulatory Guide 133 (912AAC(15) and 912AAD(5)). Those “taken to comply” provisions mean that, for the specific AFSL conditions referencing ASIC guidance, satisfying the statutory duties in the instrument will also satisfy those conditions. In practice this replaces a regime of regulator guidance with statutory minimums for those conditions and gives ASIC an objective benchmark for licence compliance assessments.

Cross‑border and foreign law issues. The instrument contemplates situations where assets are located in jurisdictions that do not recognise trusts or where trusts cannot reasonably be used. Licensees may hold assets in accordance with the local law if trusts are not known and it is reasonable to do so (912AAC(3)(a)). Where it is not reasonable to hold on trust, a licensee may rely on a written record that it is satisfied the property is held in a manner that provides reasonably effective protection in case of insolvency of the holder, together with the basis for that satisfaction (912AAC(3)(b)(i)-(ii)). This creates an explicit cross‑border compliance mechanism: a licensee must document the legal mismatch and the protective features relied upon, and retain that written analysis as compliance evidence. It also subjects foreign sub‑custodian arrangements to monitoring and contractual obligations, with carve‑outs where it is not reasonably practicable to get counterparties to accept the full suite of contractual terms for assets outside the jurisdiction (912AAD(1)(a), 912AAD(2)(m)).

Corporate governance and other corporate law provisions. The new duties intersect with directors’ responsibilities to ensure adequate corporate systems and compliance with law. The instrument requires certain policies to be approved by directors or a senior manager authorised by directors, or for foreign companies, the most senior officer in the jurisdiction with responsibility for custodial staff (912AAC(7)(c)(i)). Those approval and oversight duties will feature in director‑level compliance attestations and could influence ASIC’s view of adequacy of governance.

Insolvency law. The trust presumption primarily secures client property against the licensee’s and sub‑custodian’s creditors on insolvency. Where the trust presumption is excluded by Part 7.8 or by documented foreign law reasons, the instrument asks licensees to show that assets are held in a way providing “reasonably effective protection in case of insolvency of the person holding the property” (912AAC(3)(b)(ii)(A)-(B)). The instrument therefore creates evidential expectations relevant to insolvency practitioners and liquidation proceedings, but does not change insolvency legal principles per se; it simply requires licensees to demonstrate steps they took to protect client assets under the custody framework.

Contract and property law. The instrument mandates specific contract terms in agreements with sub‑custodians (912AAD) and retail clients (912AAE). It restricts the ability of the licensee or sub‑custodian to take security over custodial property except in limited circumstances, and requires recorded reasons if security is permitted (912AAD(4)). That interacts with property and personal property securities law (PPSA) practice: licensees must ensure encumbrance arrangements do not conflict with trust characterisation in insolvency and with the statutory restrictions in the instrument.

Privacy, confidentiality and disclosure obligations. The instrument prohibits sub‑custodians disclosing confidential information relating to custodial property, apart from disclosures to ASIC or as required by law or by the financial services licensee in writing (912AAD(2)(o)). Retail agreements must also contain confidentiality obligations (912AAE(k)). These interact with other legal duties to disclose in some circumstances (e.g. legal compulsion, reporting to ASIC), and with privacy law where personal information is concerned.

Regulatory reporting and audits. The instrument enhances audit and reporting requirements tied to ASIC oversight: licensees must retain auditable records and allow audit assistance, and ASIC can direct independent reports (912AAC(13), (14); 912AAD(2)(h)). This meshes with existing statutory powers of ASIC to request documents and information under the Corporations Act.

In short, the instrument operates within the existing statutory architecture: it modifies Part 7.6, references and defers to Part 7.8 where applicable, links to AFSL conditions and ASIC guidance, imposes contractual and evidential duties that interact with insolvency and property law, embeds cross‑border documentation expectations and supplies concrete content for supervisory, contractual and litigation interactions.

Original instrument and commencement. The instrument is the ASIC Corporations (Custody Standards for Providers of Custodial and Depository Services) Instrument 2024/17, registered 25 March 2024 and commenced 26 March 2024 (Endnote 3). The core text inserted the sections 912AAC, 912AAD and 912AAE into Part 7.6 of the Corporations Act, as set out in the compilation.

Subsequent amendment. The compilation notes an amendment instrument: ASIC Corporations (Amendment) Instrument 2025/871, registered 08 December 2025 and commenced 09 December 2025 (Endnote 3). The endnote to the compilation indicates that Section 4 of the instrument was affected by the amendment (Endnote 4: “Section 2Section 4 rep s48D LAam 2025/871, Sch 1, item [1] and [2]”), which is an editorial notation in the amending history. The compilation date is 09/12/2025 and the compilation text includes amendments up to that amending instrument. The compilation also displays underlining for uncommenced amendments where applicable, but no uncommenced amendments are shown in the operative text for the compilation date.

Self‑repeal and sunset. The instrument contains an explicit repeal clause: it is repealed at the start of 1 April 2029 (cl 5). That creates a sunset for the provisions unless further legislative or regulatory action is taken to extend, replace or make permanent the custody standards. Practically, licensees and sub‑custodians should plan for the expiry date in compliance roadmaps and consider transitional arrangements if the instrument is allowed to lapse or if Parliament replaces the instrument with other regulatory measures.

Endnotes and compilation metadata. The compilation includes endnotes describing the compilation itself, an abbreviation key, the legislation history and an amendment history (Endnotes 1-4). These endnotes document the registration and commencement dates and identify the amending instrument 2025/871. The instrument is made under paragraph 926A(2)(c) of the Corporations Act 2001 (cl 3).

No stated transitional arrangements within the instrument text. The instrument’s main body does not contain detailed transitional, saving or application provisions for existing custody arrangements. The endnotes note that if transitions are affected by an application, saving or transitional provisions not included in the compilation, those details would be recorded in the endnotes; no such transitional text appears in the operative sections as compiled. Practitioners should therefore check external legislative instruments or regulatory guidance for any transitional relief issued contemporaneously with the instrument.

Practical consequence of the history. The presence of the amendment in late 2025 indicates the instrument has been subject to at least one post‑commencement change within the sunset period. The sunset date remains 1 April 2029 unless amended. For operational planning, firms should track further amending instruments and legislative changes that could affect the instrument’s content or its repeal timetable.

No cases or litigation records are referenced in the instrument. The instrument’s text and the compilation endnotes do not identify any judicial or tribunal decisions interpreting these specific sections (912AAC, 912AAD, 912AAE), nor does the compilation include any litigation history entries. The instrument is therefore new statutory text without recorded judicial interpretation in the compilation provided.

Potential litigation vectors implied by the instrument. Although the instrument itself contains no litigation history, the statutory duties and rights it creates indicate where disputes are likely to arise and what issues courts or tribunals may be asked to determine in future litigation:

• characterization of custodial property as trust property. Section 912AAC(2) imposes a statutory expectation that custodial property is held on trust for the client except where exceptions in 912AAC(3) apply. Disputes may arise as to whether particular assets meet the exception criteria (for example, where foreign law is said not to recognise trusts, or where Part 7.8 governs the asset). Courts will have to examine factual matrices and the licensee’s contemporaneous documentation that explains why trust holding was impracticable and the protections relied upon (912AAC(3)(b)).
• adequacy of monitoring and selection of sub‑custodians. The instrument requires licensees to “do all things necessary” to ensure sub‑custodians meet custody standards (912AAC(11), 912AAD(2)(a), (m)). Litigation could test whether a licensee took reasonable care in engaging and monitoring sub‑custodians, particularly where the instrument’s insolvency carve‑out for retail clients (912AAE(c)) is invoked. The question of what constitutes “reasonable care” will turn on the factual record, contractual terms, monitoring procedures and documented reviews.
• compliance with reconciliation and segregation requirements. The instrument mandates daily reconciliations (subject to local commercial practice) and quick remediation of insufficiencies by the second business day (912AAC(6)(d), (f)). Litigation could focus on whether the licensee performed reconciliations as required and whether records demonstrate timely remediation.
• contractual disputes with sub‑custodians. Disagreements may arise over the contractual obligations the sub‑custodian agreed to under 912AAD, including certification obligations (912AAD(2)(b)), rights of audit access (912AAD(2)(h)), notice obligations (912AAD(2)(i), (l)) and termination without payment for material breach (912AAD(2)(j)). Courts may be asked to construe the required “reasonable” standards for certifications and liabilities.
• insolvency and property allocation. In an insolvency of a licensee or sub‑custodian, liquidators and clients may litigate the ownership or beneficial interest in custodial property, relying on the statutory presumption of trust holding and the licensee’s records or lack thereof (912AAC(2), (10), (13)). If trust holding was not implemented and foreign law reasons or other exceptions are claimed, litigation will test the sufficiency of the licensee’s written rationale under 912AAC(3)(b).
• enforcement actions by ASIC. ASIC’s direction power to require reports (912AAC(14)(b)) and its broader enforcement repertoire could generate judicial review or enforcement proceedings where the adequacy of governance, monitoring and reporting is in question. This could include appeals or court challenges to ASIC decisions or follow‑on civil enforcement actions.

Because these are hypothetical litigation vectors, they are not recorded as historical litigation in the instrument. The absence of precedent means the statutory terms (for example, “do all things necessary”, “reasonable”, “sufficient to provide reasonably effective protection”) are likely to be tested in future disputes, with courts and tribunals developing interpretive approaches based on the statute’s text, the Corporations Act’s broader regime, and the factual record kept by licensees in compliance with the instrument (912AAC(10), 912AAD(4)(b), 912AAC(14)(a)).

Trust presumption is strong but not absolute. Section 912AAC(2) imposes a clear presumption that custodial property is held on trust for the client. However the instrument provides multiple exceptions (912AAC(3)): assets explicitly governed by Part 7.8 Divisions 2 or 3, assets in jurisdictions where trusts are not known (912AAC(3)(a)), and assets held in a manner that a licensee has documented provides “reasonably effective protection” against insolvency of the holder (912AAC(3)(b)). A common pitfall is assuming that a foreign holding automatically satisfies the trust presumption; the licensee must document the reasons and basis for any deviation (912AAC(3)(b)(ii)(A)-(B)). Practitioners must ensure contemporaneous records capture legal advice, comparators and practical protections relied upon.

“Do all things necessary” is broad and operationally demanding. The repeated phrase “must do all things necessary to ensure” (912AAC(2), (9), (11), (12)) is not limited to specific checklist items and extends the licensee’s obligations to ensure compliance by engaged persons. In practice this compels active monitoring, contractual control, audit rights and the ability to effect remediation. Passive or merely supervisory relationships with sub‑custodians are unlikely to meet the standard.

Separation carve‑outs require careful documentation. The instrument allows custodial property not to be held separately in certain circumstances (912AAC(5) and (6)), including for deposit facilities, securities, derivatives and digital assets that are financial products (912AAC(5)(b)(ii)). If a licensee chooses not to hold property separately, it must keep a written policy for seven years, review it every 13 months with a record of the outcome, maintain adequate records showing each client’s entitlement, and reconcile daily or in accordance with ordinary commercial practice (912AAC(6)(a)-(d)). Firms that use pooled accounts, omnibus structures or certain market standard custody arrangements must still comply with these process obligations; failure to do so is an enforcement risk.

Daily reconciliation and two business day remedial rule. The instrument requires reconciliation each business day, or in line with ordinary commercial practice in the place where the property is located (912AAC(6)(d), 912AAD(2)(g)). If an insufficiency exists in a commingled holding, the insufficiency must cease by the second business day after it arises (912AAC(6)(f)). Operational systems must therefore be capable of near‑real‑time reconciliation and rapid remediation. Firms relying on lower frequency reconciliations in foreign jurisdictions must document why that practice is ordinary and reasonable and be prepared to justify the frequency to ASIC.

Security interests restrictions and documentation. Licensees must not permit sub‑custodians to take or grant encumbrances over custodial property unless the arrangement is in accordance with the agreement and does not cover unpaid fees of the sub‑custodian (912AAD(2)(e)). Additionally, where the licensee permits such encumbrances under its agreement with a sub‑custodian, the licensee must reasonably record the reasons and retain that record for seven years (912AAD(4)(a)-(b)). Failing to maintain these records or permitting encumbrances that impair client rights can expose clients to loss and give rise to enforcement or civil claims.

Liability allocation for insolvency of sub‑custodian is limited but conditional. Under retail client provisions, a licensee may limit liability where a person it engaged becomes insolvent provided the licensee has not failed to take reasonable care in engaging and monitoring that person (912AAE(c)). This places a burden on the licensee to maintain and evidence robust selection and monitoring processes. The “reasonable care” threshold is a potential litigation battleground: weak monitoring documentation risks losing the benefit of the carve‑out.

Conflicts and organisational separation. The instrument demands segregation of custodial staff from investment/trading staff and that custodial staff are not influenced by potential conflicts (912AAC(7)(b)-(c), (7)(e)(iii)). Firms that assign multiple roles or have compact teams must reconfigure reporting lines and physical/virtual separation of personnel during custody duties. Failure to restructure could be treated as inadequate systems and controls.

Reporting and ASIC direction exposure. ASIC may direct a licensee to arrange for a report on the effectiveness or reasonableness of processes and can specify the preparer (912AAC(14)(b)). This is a supervisory risk: a poorly documented or ineffective compliance regime could trigger an ASIC direction and a potentially adverse independent report. Licensees need to be audit‑ready and maintain clear records of process reviews and their outcomes.

Confidentiality vs. disclosure obligations. Sub‑custodians must not disclose confidential information except to ASIC or as required by law or by the financial services licensee in writing (912AAD(2)(o)). Licensees must therefore reconcile confidentiality commitments with legal compulsion, regulator reporting or obligations to clients and auditors. Standardised confidentiality clauses must include carve‑outs for lawful disclosure to avoid breach.

Retail agreement content is prescriptive. Licensees providing services to retail clients must include a lengthy list of contractual obligations (912AAE). Failing to reflect all required elements , for example, failing to provide prior written notice of a proposed sub‑custodian, or not specifying return/transfer mechanics on termination , would leave a licence exposed to client claims or regulatory action.

Sunset timing. The instrument expires on 1 April 2029 (cl 5). Firms must therefore plan knowing the regulatory requirement is not permanent as drafted; compliance programmes should account for the possible expiry or amendment and for any transitional arrangements that might be framed by the regulator or Parliament.

No explicit penalty schedule in the instrument. Because enforcement relies on the broader Corporations Act framework, readers must not assume the instrument itself prescribes fines. That requires careful alignment of compliance activity with AFSL condition expectations and with customary ASIC enforcement practice.

Immediate governance and policy steps. Board and senior management should approve a custody compliance framework addressing trust holding, segregation, reconciliations, sub‑custodian management, staff roles, training and record retention. Clauses require policy approval by directors or an authorised senior manager (912AAC(7)(c)(i)), and the licensee must keep a written policy for any non‑separation decisions and review it at least every 13 months (912AAC(6)(a)-(b)). Prepare a custody policy template that documents reasons for non‑separation where applicable and sets out reconciliations, entitlement records and remediation timescales.

Trust and legal analysis for holdings. For each asset class and jurisdiction where custodial functions are performed, document whether custody will be effected as a trust (default) or whether an exception applies under 912AAC(3) (for example, assets under Part 7.8 or in jurisdictions where trusts are not known). Where trust cannot be used, prepare a written memorandum required by 912AAC(3)(b) demonstrating that the property is held in a manner providing “reasonably effective protection” in insolvency and record the basis for that view. Retain these memoranda for 7 years (912AAC(10)).

Organisational structure and staffing. Ensure custodial staff are separated from personnel making investment or trading decisions, in line with 912AAC(7)(b)-(c). Define custodial staff roles in job descriptions consistent with the statutory definition (912AAC(16)). Implement reporting lines that permit custodial staff to report to clients (if natural persons) or to the client board/senior officer (912AAC(7)(e)(i)). Provide custodial staff with adequate time, authority and resources and establish ongoing training programmes (912AAC(8)(a)-(d)).

Reconciliations and operational controls. Implement daily reconciliation processes for all custody holdings where practicable, or document the ordinary commercial practice in the place where assets are located and reconcile in accordance with that practice (912AAC(6)(d), 912AAD(2)(g)). Set up exception management procedures that ensure any insufficiency is remedied by the second business day (912AAC(6)(f)). Maintain reconciliations and exception reports as part of the audit trail.

Record keeping and audit readiness. Put in place record retention systems to keep compliance evidence for seven years (912AAC(10), 912AAD(4)(b)). Records must show each client’s entitlement and enable an auditor appointed by a client to conveniently and properly audit the holdings (912AAC(13)). Ensure systems capture transaction authorisations, reconciliations, certification by sub‑custodians and board/senior manager approvals for policies.

Sub‑custodian contracting and monitoring. Update sub‑custodian agreement templates to include the provisions mandated by 912AAD(2): rights for review and monitoring, annual written certification obligations, acknowledgement of trust holding, instruction transmission mechanics, limits on encumbrances (no covering unpaid fees), record and reconciliation requirements, audit access, notice of downstream custodians and termination for material breach without payment other than accrued entitlements and reasonable transfer costs (912AAD(2)(a)-(k)). Ensure agreements include reasonable liability provisions that do not exclude liability for direct loss except in appropriate, documented circumstances (912AAD(3)). Include business continuity and confidentiality clauses (912AAD(2)(n), (o)).

Monitoring processes and reviews. Implement monitoring processes described in 912AAC(11) and 912AAD to assess sub‑custodian performance, and require sub‑custodians to implement monitoring of persons they engage (912AAC(11)). Review written processes for monitoring at least every 13 months and keep written records of the outcome for seven years (912AAC(14)(a)). Prepare to respond to ASIC directions to provide an independent report on process effectiveness; maintain an evidence pack that an external reviewer could use (912AAC(14)(b)).

Retail client documentation. For retail client arrangements, produce or update agreements to include the elements specified in 912AAE(a)-(k). Specifically ensure agreements contain: how property is held; instruction mechanics; the licensee’s liability statement for loss due to failure to hold or observe standards (with the insolvency/“reasonable care” caveat); restrictions on taking charges, liens or encumbrances (except permitted expenses or client written instruction); record and reconciliation statements; reporting commitments; prior notice obligations before appointing another custodian; transfer mechanics on termination; contingency arrangements; and confidentiality clauses.

Security interest policy and documentation. Adopt a policy governing when custodial property may be encumbered and ensure any permitted encumbrances meet 912AAD(4) requirements. Keep written reasons for any permitted security interests for seven years after cessation (912AAD(4)(b)). Ensure sub‑custodian contracts prohibit encumbrances that would cover unpaid fees (912AAD(2)(e)).

Training and culture. Deliver role‑specific training for custodial staff and relevant managers to meet 912AAC(8) and to ensure staff understand segregation requirements, reconciliation expectations, audit access procedures and escalation protocols for breaches or attempted influence. Document training attendance and curriculum to satisfy ASIC reviews.

Risk assessment and insurance. Conduct a custody‑specific risk assessment that maps operational, legal, cyber and insolvency risks. Use the assessment to determine appropriate contractual indemnities, insurance coverage for custody failures, and contingency arrangements described in 912AAE(j) and 912AAD(2)(n). Ensure business continuity plans for sub‑custodians are tested and documented.

Auditor and client communication plan. Put in place procedures for audit cooperation (912AAD(2)(h)) and for supplying clients and their auditors with required information and acknowledgements on request (912AAE(a), 912AAC(13)). Prepare templates for client notices when custody arrangements will change, ensuring compliance with the requirement to provide written notice before engaging another person except in exceptional circumstances identified in the agreement (912AAE(h), 912AAD(2)(i)).

Documentation for foreign jurisdictions. For assets held outside Australia, assemble legal opinions, operational descriptions and comparative custody practice evidence to justify either trust holding or reliance on the exception under 912AAC(3). Document why trust holding is not reasonable, how the assets are being protected, and the legal basis for that protection.

Prepare for ASIC directions. Given ASIC’s power to require reports on process effectiveness (912AAC(14)(b)), establish a standing relationship with external independent reviewers who can deliver timely reports if required. Keep a compliance‑ready dossier that demonstrates process design, monitoring records, review outcomes and remediation steps to support any ASIC direction.

Operational checklist and timeline. Produce a compliance project plan with milestones: governance sign‑off (policy approval), contract amendments with sub‑custodians, staff training, reconciliations automation, record retention systems, retail agreement updates, monitoring implementation, and schedule for 13‑month reviews and seven‑year record retention. Include a review of cross‑border custody arrangements and a legal memorandum for each non‑Australian jurisdiction used.

In sum, compliance requires a combination of governance, detailed written policies, robust contracts with sub‑custodians, operational capability for daily reconciliations and rapid remediation, training and resourcing of custodial staff, strong record keeping and audit cooperation, and a structured monitoring and review regime to demonstrate “reasonable” care in selection and oversight of third parties.