ASIC Credit (Mandatory Credit Reporting) Instrument 2021/541

The instrument turns on three primary legal-concept mechanisms: (1) statutory delegation and determination, (2) negative scope-setting (exclusions from a statutory category), and (3) time-limited application.

1. Statutory delegation and determination. The instrument is made under a delegated power in subsection 133CO(2) of the National Consumer Credit Protection Act 2009, as stated in s3. That subsection authorises ASIC, via delegation, to make a determination for the purposes of a particular paragraph of the Act. The instrument exercises that delegated regulatory function to specify particular account kinds. The legal form is a legislative instrument, which takes effect on registration and is accordingly a discrete subordinate law action.

2. Negative scope-setting. The operative provision is s5, headed "Accounts that are not eligible credit accounts". It says, expressly, "For the purposes of paragraph 133CO(1)(c) of the National Consumer Credit Protection Act 2009, the following kinds of accounts are determined" and then lists five categories (s5(a)-(e)). The instrument does not create new obligations; rather it removes specified accounts from the statutory definition or scope referenced in paragraph 133CO(1)(c). The instrument therefore functions as a carve-out list, a negative definition that narrows the reach of the paragraph in question.

3. Time limitation. Section 6 provides an automatic repeal five years after commencement. The instrument therefore establishes a temporary exclusion regime. Users should treat the determination as transitional or experimental rather than permanent, unless a further instrument is made to replace or extend it.

Definitions anchor the categories to other statutory terms. Section 4 imports specific statutory meanings elsewhere: "charge card contract" by reference to subregulation 62(2) of the National Consumer Credit Protection Regulations 2010; "consumer credit" by reference to subsection 6(1) of the Privacy Act 1988; and "deposit product" and "margin lending facility" by reference to section 761A of the Corporations Act 2001. This cross-referencing means that the behaviour, classification and documentation required to apply the exclusions will depend on how those imported terms are defined outside the instrument.

The five exclusion categories differ in character, which affects compliance and interpretation:

• Margin lending facilities (s5(a)) are excluded by label. The qualification depends on the Corporations Act definition imported in s4.

• Deposit products relating to consumer credit are excluded only where the account holder has not "expressly agreed" to provision or possible provision of consumer credit (s5(b)). This introduces a factual test based on agreement and consent.

• Legacy account classes no longer offered by a credit provider within a banking group are excluded if the class is both numerically small in absolute terms (fewer than 10,000 accounts) and proportionately small (less than 3% of relevant accounts within the banking group) (s5(c)). This is a dual-threshold rule combining absolute and relative measures.

• Novation-related accounts are excluded where a deed of novation was entered into between employee, employer and credit provider at the time, involves transfer of rights and obligations under a lease, and the account is held by the employee (s5(d)). This targets a narrow workplace-novation arrangement.

• Charge card contracts entered into by certain credit providers named in the NCCP Regulations are excluded (s5(e)). The identity of those credit providers depends on the referenced subregulation.

Collectively the main concepts are limits on statutory scope effected by a delegated instrument that relies on cross-references to other statute definitions and applies for a finite period. The instrument creates classification tests (labels, express consent, numerical thresholds, contractual-party tests) that will determine when accounts are excluded.

The instrument directly and immediately affects three categories of actors: credit providers, banking groups, and account holders; there are consequential interests for credit reporting entities and compliance officers. Who pays and who decides are determinative for compliance strategy.

• Credit providers. The primary operational actor is the credit provider required to identify which of their accounts fall within the five exclusion categories in s5. The instrument is expressed as a determination that certain accounts "are not eligible credit accounts" for the purposes of paragraph 133CO(1)(c). That identification task will generally fall to credit providers and their compliance teams because they hold the account records, consent documentation, and contractual files needed to classify accounts. In the case of charge card contracts and margin lending facilities (s5(a) and s5(e)), providers must consult the external statutory definitions cited in s4 to determine whether a product meets the label-based exclusion.

• Banking groups. Clause 5(c) addresses "accounts of a kind no longer offered by a credit provider that is a member a banking group" and sets two thresholds: under 10,000 accounts in absolute terms and less than 3% of the total number of all accounts held with the banking group that relate to the provision, or possible provision, of consumer credit (s5(c)(i)-(ii)). This provision therefore engages banking group-level aggregation and analysis. The affected parties are not only the individual credit provider that closed the product but also the broader banking group that must supply the denominator for the 3% calculation. The onus of counting and percentage calculation falls to the group or the regulated entity subject to reporting or audit.

• Account holders. The instrument removes certain account kinds from the category of "eligible credit account" for the purposes of a statutory paragraph. The immediate legal consequence is classification rather than a direct enforcement penalty against account holders. However, exclusion from the statutory category will change how the accounts are treated under the legislation referenced by paragraph 133CO(1)(c); that may affect what information about those accounts is shared, when such sharing might otherwise occur, and how account-holder consents are used. For deposit products excluded under s5(b), the account holder's lack of express agreement to possible provision of consumer credit is itself a condition of exclusion; therefore account-holder behaviour and the records of their agreement determine classification.

• Credit reporting ecosystem participants. The instrument will affect any downstream obligations or expectations related to mandatory credit reporting under paragraph 133CO(1)(c), such as the set of accounts credit reporting bodies or credit providers would otherwise report. Although the instrument does not itself create reporting obligations, it narrows the population of accounts to which the referenced paragraph applies. Entities involved in data transmission, data processing and credit scoring will therefore experience changes in the data universe to the extent paragraph 133CO(1)(c) previously reached those accounts.

• Internal compliance and legal teams. The instrument creates definitional and evidentiary requirements. For example, s5(b) turns on whether an account holder has "expressly agreed" to the provision or possible provision of consumer credit. Compliance officers will therefore decide the documentation standard that demonstrates "express agreement". For the banking group threshold in s5(c) the decision process involves data extraction, categorisation of accounts as "relating to the provision, or possible provision, of consumer credit", and aggregation consistent with the instrument.

In practical terms, the parties who pay for compliance work are the credit providers and banking groups. They must devote staff time, record-keeping, and possible system changes to identify excluded accounts, implement flags in reporting systems, and retain evidence to support classification if audited. Account holders may need to be identified or re-contacted where consent is unclear. ASIC, through the delegate named on the instrument, is the decision point for making the determination; enforcement or interpretation of the instrument in practice will be through ASIC's supervisory processes and by reference to the parent Act, although the instrument itself does not set enforcement procedures.

The instrument itself does not impose new duties in the form of prohibitions or fines. Its operative effect is classificatory: it determines that certain accounts are "not eligible credit accounts" for the purposes of paragraph 133CO(1)(c) of the National Consumer Credit Protection Act 2009 (s5). Nevertheless this classification creates consequential duties and rights because the status of being an "eligible credit account" under the referenced paragraph will carry separate legal consequences elsewhere in the primary Act.

From the instrument text, the immediate duties and rights to be observed are:

• Duty to identify and classify accounts. Credit providers must determine whether an account falls within any of the categories listed at s5(a)-(e). That duty is practical and evidentiary. For categories that depend on definitions from other statutes, such as "margin lending facility" and "deposit product" (s4), the identifying duty requires consultation of the Corporations Act definition (s761A) and Regulation 62 definitions. For s5(b) the identifying duty includes checking whether the account holder "has not expressly agreed" to the provision or possible provision of consumer credit; that is an evidentiary standard.

• Right to treat specified accounts as excluded from paragraph 133CO(1)(c). Once an account meets one of the listed criteria, the credit provider has the legal basis to treat that account as "not an eligible credit account" for the specific statutory purpose identified in s5. That is a right arising from the determination made by ASIC under s3. The precise legal consequences of that right depend on the content of paragraph 133CO(1)(c) in the National Consumer Credit Protection Act 2009; the instrument makes the classification but does not restate the downstream legal effects.

• Duty to compute and document banking group thresholds. Clause 5(c) imposes a dual threshold test for accounts of a kind no longer offered by a credit provider that is a member of a banking group. The tests are numerical: fewer than 10,000 accounts and fewer than 3% of the total number of all the accounts held with the banking group that relate to the provision, or possible provision, of consumer credit (s5(c)(i)-(ii)). The obligation is to compute these numbers and retain the basis for those computations.

• Duty to verify novation conditions. For accounts created to give effect to deeds of novation (s5(d)), the account must meet each of three conditions: the deed of novation is between employee, employer and a credit provider at the time it was entered into; the deed involves the transfer of some or all of the rights and obligations under a lease; and the account is held by the employee. The duty here is to verify that the deed met those conditions at the time of entry.

• Duty to identify whether a charge card contract falls within the subregulation class. Section 5(e) excludes accounts that provide consumer credit under a charge card contract entered into by a credit provider specified in subregulation 62(1) of the National Consumer Credit Protection Regulations 2010. The duty is to determine whether the credit provider is one of the specified providers in that subregulation.

• Time-limited compliance duty. Section 6 repeals the instrument after five years. A practical duty follows: entities must monitor the sunset and prepare to adjust classification, reporting and systems thereafter.

The instrument does not establish additional rights for account holders, such as notification or opt-out rights, nor does it itself set record-keeping timeframes or audit privileges. The rights that flow from the determination are functional: if an account is properly excluded under s5, the credit provider has the right to treat it as out of scope for paragraph 133CO(1)(c). The instrument leaves open how competing interpretations or disputes about whether an account meets an exclusion will be resolved, so there is implicit reliance on ASIC supervisory practice or other statutory enforcement channels under the principal Act.

This instrument does not itself create offences, penalties, or an enforcement framework. It is a determination that certain account kinds are "not eligible credit accounts" for purposes of paragraph 133CO(1)(c) of the National Consumer Credit Protection Act 2009 (s5). No penalty provisions, civil remedies, or criminal sanctions are included in the instrument text. The document therefore functions as a definitional instrument rather than a sanctioning instrument.

Enforcement consequences and penalties, if any, will depend on how the parent Act and related provisions apply to "eligible credit accounts". Because the instrument operates by narrowing the set of accounts that fall within the scope of paragraph 133CO(1)(c), any enforcement action tied to obligations triggered by that paragraph will, in consequence, exclude the accounts listed in s5. The instrument itself, however, does not specify what enforcement mechanisms attach to either compliance or non-compliance with the classification criteria. This leaves enforcement to the machinery of the National Consumer Credit Protection Act 2009 and other relevant legislative instruments or regulations.

Practical enforcement risks for regulated entities arise in three ways:

• Administrative challenge or audit. ASIC or another regulator with supervisory authority under the principal Act may audit or review a credit provider's classification practices. If a regulator concludes an account was wrongly treated as excluded, the provider may face actions under the applicable provisions of the National Consumer Credit Protection Act 2009. The instrument does not specify review procedures or appeal mechanisms.

• Reputational and contractual risk. Incorrect classification could trigger contractual disputes with account holders or counterparties, or lead to reputational harm when a provider's systems fail to report data that market participants expect to be reported. Those consequences are external to the instrument but real as an enforcement and compliance consideration.

• Record-keeping and evidentiary exposure. Because some exclusions hinge on documentary facts, for example whether an account holder "has not expressly agreed" to provision or possible provision of consumer credit (s5(b)), or whether a novation deed met specified conditions at the time it was entered into (s5(d)), credit providers must have and retain evidence supporting their classification. Inadequate records increase exposure to regulatory challenge.

Finally, the instrument's sunset clause (s6) creates temporal enforcement complexity. Entities that rely on the exclusion must plan for the moment when the instrument is repealed and accounts may re-enter the statutory scope of paragraph 133CO(1)(c). The instrument does not set transition or phase-out rules; operational failure to reclassify accounts after repeal could have enforcement consequences under other statutory provisions.

In sum, enforcement and penalties are not set out in the instrument. Instead, the instrument changes the scope of a statutory paragraph. Any sanction for incorrect application of the instrument will arise under the principal Act or other applicable laws, not from this instrument itself.

The instrument explicitly cross-references several other statutory instruments and provisions, and its legal effect depends on those external definitions and on paragraph 133CO(1)(c) of the National Consumer Credit Protection Act 2009. The instrument is not a stand-alone regulatory regime; it functions via interaction with the parent Act and with definitions drawn from other statutes and regulations.

Key statutory interactions signalled by the instrument itself:

• National Consumer Credit Protection Act 2009. The instrument is made under subsection 133CO(2) of that Act and is expressly stated to operate "for the purposes of paragraph 133CO(1)(c)" (s3; s5). The content and legal consequences of the instrument therefore depend on how paragraph 133CO(1)(c) operates within the principal Act. The instrument does not reproduce or restate paragraph 133CO(1)(c); it narrows its reach by identifying excluded account kinds. Any obligations, rights or penalties that paragraph 133CO(1)(c) imposes on regulated entities will apply to the accounts remaining within its scope and not to those excluded by this instrument.

• National Consumer Credit Protection Regulations 2010. The instrument imports the meaning of "charge card contract" by reference to subregulation 62(2) of those Regulations (s4). It also references subregulation 62(1) in s5(e) as the source for identifying specified credit providers. The precise scope of the charge card exclusion at s5(e) thus depends on the content of subregs 62(1) and 62(2) in the Regulations. Entities must consult the Regulations to determine which charge card contracts and which providers are covered.

• Privacy Act 1988. The instrument adopts the meaning of "consumer credit" from subsection 6(1) of the Privacy Act 1988 (s4). That means the scope of any exclusions framed by the phrase "relate to the provision, or possible provision, of consumer credit" (appearing in s5(b) and s5(c)) will be shaped by the Privacy Act's definition of consumer credit. The instrument therefore interfaces with privacy law definitions, which can be material in determining which deposit products fall within the exclusion and which accounts in a banking group count toward the denominator for s5(c).

• Corporations Act 2001. The instrument imports meanings for "deposit product" and "margin lending facility" from section 761A of the Corporations Act (s4). Those imported definitions determine which products qualify under s5(a) and s5(b). Because the Corporations Act sets out these product categories in a corporate and financial services context, the instrument therefore sits at the intersection of consumer credit regulation, privacy law, and corporate financial product regulation.

Operationally, these cross-references generate several consequences:

• Entities must apply multiple statutory definitions in combination. For example, to determine whether a deposit product is excluded under s5(b) an entity needs to identify the product under the Corporations Act definition, check whether it "relates to the provision, or possible provision, of consumer credit" as that phrase is read with reference to the Privacy Act definition, and then determine whether the account holder has "expressly agreed" to provision or possible provision of consumer credit.

• Banking group calculations require an agreed methodology for aggregating accounts across entities. Clause 5(c) relies on a banking group denominator defined as "the total number of all the accounts held with the banking group that relate to the provision, or possible provision, of consumer credit". The instrument does not define "member a banking group" or provide a measurement methodology. Entities will therefore need to coordinate internally and potentially look to Corporations Act group definitions or other accounting or regulatory group definitions external to the instrument to ensure consistency.

• Any conflict or ambiguity between the definitions in the referenced statutes and the operational terms in this instrument will require reconciliation by legal advisers, possibly with reference to regulatory guidance. The instrument itself does not provide interpretive guidance or transitional rules.

• Sunset timing matters for cross-Act compliance. Because the instrument expires after five years (s6), the interaction with other laws will change at repeal. Entities must be aware that after repeal, the accounts previously excluded may re-enter the scope of paragraph 133CO(1)(c), thereby changing their obligations under the National Consumer Credit Protection Act 2009 and related legislation.

In short, the instrument depends on and interacts with multiple existing statutes and regulations. Its legal and operational effects require concurrent interpretation of the National Consumer Credit Protection Act 2009, the National Consumer Credit Protection Regulations 2010, the Privacy Act 1988, and the Corporations Act 2001. The instrument provides no standalone interpretive guidance on these cross-Act questions.

The instrument itself contains only its making date, commencement rule and a scheduled repeal; it includes no amendments, variations or prior versions in the text provided. Key points from the instrument about its own history are:

• Made and dated. The instrument is dated 11 June 2021 and signed by Anthony Graham, a delegate of ASIC. That is the date printed on the instrument and is the only origin information recorded in the text.

• Commencement. It commences on the day after it is registered on the Federal Register of Legislation (s2). The instrument thus takes effect automatically upon registration following the date it was made.

• Sunset. Section 6 provides that the instrument is repealed five years after the date it commences. There are no provisions in the instrument for extension, and no transitional or saving clauses are included in the instrument text.

• No internal amendments recorded. The instrument contains no schedules, no amending operative clauses, and no reference to prior instruments being varied or replaced. It is self-contained and time-limited in operation.

Because the instrument is standalone and short, any change to its effect during its life would require a later legislative instrument by the same or a different delegate under the same enabling power in subsection 133CO(2) of the National Consumer Credit Protection Act 2009. The text does not refer to any such subsequent instruments, nor does it indicate that it replaces or is replaced by earlier determinations.

For practitioners, the most relevant amendment-history implications are procedural rather than textual: the instrument will expire by operation of s6, and ASIC or the responsible delegate could in principle make a new determination before expiry to continue, extend or modify the exclusions. There is no express savings or transition provision in the instrument; any change at repeal will therefore depend on whether a subsequent instrument reclassifies the same account kinds or adopts a different approach.

In summary, the instrument has a simple amendment history: it was made on 11 June 2021, takes effect on registration, and will be repealed five years after commencement unless superseded by a new instrument. No further amendment data is recorded in the text provided.

The instrument contains no litigation history, and it cites no cases, judicial decisions or tribunal determinations. There are no references to prior judicial interpretation of the exclusions or to disputes arising under the instrument. Consequently, as of the text provided, there is no recorded case law construing the instrument or its interaction with paragraph 133CO(1)(c) of the National Consumer Credit Protection Act 2009.

The absence of litigation recorded in the instrument has practical implications:

• No instructive judicial guidance. Practitioners cannot rely on precedent specific to this instrument to resolve interpretive ambiguities such as what constitutes "express agreement" for s5(b), how to measure "relate to the provision, or possible provision, of consumer credit" for s5(c), or what counts as membership of a "banking group". There are no court-resolved definitions supplied within the instrument.

• Reliance on statutory text and regulatory guidance. Without litigation to clarify grey areas, regulated entities must rely on the instrument's plain language, the external definitions it imports, and any ASIC guidance or administrative practice to interpret and apply the exclusions. The instrument itself supplies no guidance on enforcement or dispute resolution.

• Potential for future litigation. The definitional and evidentiary elements in s5 create points where disagreement with ASIC or other regulators could arise, for example on whether an account was correctly treated as excluded. Any regulatory challenge might therefore generate litigation in the future, but no such cases are referenced in the instrument.

For these reasons legal advisers should assume that interpretation and compliance will rest on text, contemporaneous regulator guidance, and administrative practice in the absence of judicial interpretation. The instrument's five-year sunset increases the prospects that contested issues will be resolved administratively or through subsequent instrument-making rather than through protracted litigation during the instrument's limited life.

The instrument appears straightforward in drafting, but there are several practical traps and interpretive ambiguities that create compliance risk and potential downstream costs. The instrument itself supplies limited interpretive detail; therefore the following "gotchas" arise directly from how the instrument is worded.

1. Imported definitions create dependence on external texts. Section 4 imports meanings from the National Consumer Credit Protection Regulations 2010 (subreg 62(2)), the Privacy Act 1988 (s6(1)), and the Corporations Act 2001 (s761A). The instrument does not reproduce these definitions. Compliance therefore requires correct consultation of those external provisions. Mistakes in mapping product features to the imported statutory definitions can lead to misclassification.

2. "Expressly agreed" is an evidentiary test. Clause 5(b) excludes deposit products that "relate to the provision, or possible provision, of consumer credit" only where "the holder of the account has not expressly agreed to the provision, or possible provision, of the consumer credit" (s5(b)). The phrase "expressly agreed" is not defined in the instrument. The practical consequence is that providers must set a documentation standard to show express agreement or the absence of it. Oral consents, ambiguous contract terms or lack of explicit opt-ins may raise disputes.

3. Dual-threshold counting in banking groups. Clause 5(c) requires two numeric conditions for legacy account kinds to be excluded: fewer than 10,000 accounts and less than 3% of the banking group's total relevant accounts (s5(c)(i)-(ii)). Potential pitfalls include defining which accounts count in the numerator and denominator, determining the relevant period for counting accounts, and identifying the entities that comprise the banking group. The instrument does not define "member a banking group" or supply a methodology for counting; lack of a common methodology across a group can produce inconsistent internal classifications.

4. "Relate to the provision, or possible provision, of consumer credit" is open-textured. This phrase appears in s5(b) and s5(c) and is tied to the Privacy Act definition of "consumer credit" via s4. The instrument does not define "relate to" or "possible provision". Entities must exercise judgement about borderline products that may incidentally facilitate consumer credit or are marketed with dual purposes. Such judgements can affect whether accounts are excluded and therefore whether they are subject to the parent Act's requirements.

5. Narrow novation exclusion risks mis-application. Clause 5(d) applies only to deeds of novation between an employee, employer and credit provider entered into at the time the deed was made, where the deed involves transfer of lease rights and the account is held by the employee. This is a narrowly tailored exclusion. Misreading it to cover other novations, post-entry adjustments, or employer-employee arrangements will result in incorrect exclusions.

6. Charge card exclusion tied to Regulations. Clause 5(e) excludes accounts providing consumer credit under a charge card contract entered into by a credit provider specified in subregulation 62(1) of the National Consumer Credit Protection Regulations 2010. The identity of the specified providers and scope of subregulation 62(1) determine the reach of this exclusion. If internal systems do not reconcile the list of specified providers or if providers materially change how they offer charge cards, misclassification can follow.

7. Sunset and transition planning. The instrument is repealed five years after commencement (s6). Entities relying on the exclusions must have a plan for the post-repeal position. There is no transition rule supplied. Failure to prepare systems to reclassify accounts or resume reporting and compliance at repeal date is a practical hazard.

8. No self-contained enforcement or appeal procedure. The instrument contains no mechanism for resolving disputes about classification or for appealing an ASIC determination. Entities will need to rely on general remedies under the parent Act or administrative law avenues if a regulator disagrees with their classification.

9. Record-keeping expectation without explicit retention periods. The instrument creates evidentiary obligations by reference to facts (for example express agreement or novation conditions) but does not specify retention periods. Best practice would be to retain records at least as long as any relevant statutory limitation or as long as the instrument is in force, but the instrument is silent. This gap creates uncertainty about how long to keep supporting documentation.

10. Ambiguity about scope of "accounts of a kind no longer offered". Clause 5(c) refers to "accounts of a kind no longer offered by a credit provider". Determining what constitutes a "kind" of account and the appropriate granularity for counting will be operationally important. For example, is a closed vintage product line treated as a single "kind" regardless of variants; what if a product was rebranded; how are migrated accounts treated? The instrument does not answer these questions.

Each of these "gotchas" flows from lack of detailed definitions or procedural guidance in the instrument. Entities should treat the instrument as a high-level classification determination and take active steps to resolve the ambiguities in policy, documentation, and systems.

The instrument imposes classification obligations that require operational and legal work to implement correctly. Compliance is a process of mapping product inventories to the exclusion categories in s5, documenting the basis for classification, flagging excluded accounts in reporting systems, and monitoring the instrument's sunset at s6. Below is a practical compliance checklist oriented to the instrument's specific text.

1. Legal mapping of product definitions. Consult and record the external statutory definitions referenced in s4: subregulation 62(2) of the National Consumer Credit Protection Regulations 2010 for "charge card contract"; subsection 6(1) of the Privacy Act 1988 for "consumer credit"; and section 761A of the Corporations Act 2001 for "deposit product" and "margin lending facility". Create a cross-walk document that maps internal product names and legal product categories to those statutory definitions. This is the foundational step for applying s5(a)-(e).

2. Account inventory and classification. Produce an account-level inventory that lists product type, launch and closure dates, account-holder identities, whether the account is still offered, and whether any documented express agreement to the provision or possible provision of consumer credit exists. For each account, record which exclusion (if any) under s5 applies and why, citing the specific provision (for example, "s5(b): deposit product; no express agreement on file").

3. Documentation standard for "expressly agreed". For accounts potentially excluded under s5(b) determine and document what will count as "express agreement" in your systems. Prefer written, signed agreements or explicit electronic opt-ins with date stamps. Where express agreement is absent or ambiguous, document the absence and treat the account as excluded only if the absence is clear. Maintain copies of the governing account terms and any consent records.

4. Banking group calculation methodology. For s5(c) prepare a consistent, auditable methodology to calculate: (a) the number of accounts of the specified kind still held; and (b) the total number of accounts held with the banking group that "relate to the provision, or possible provision, of consumer credit". Agree internal definitions of "banking group" and account counting rules across group entities. Keep snapshots and working papers showing the counts and the date of the calculation, because the test is numerical and date-sensitive.

5. Novation-deed verification. For s5(d) identify accounts created to give effect to deeds of novation. For each such account, retain the deed, verify that at the time of entry it involved the employee, employer and credit provider, confirm that the deed involved transfer of rights and obligations under a lease, and confirm the account was held by the employee. Store the deed and a compliance memo tying the deed to the s5(d) criteria.

6. Charge card provider reconciliation. For s5(e) reconcile your list of charge card providers against the list specified in subregulation 62(1) of the National Consumer Credit Protection Regulations 2010. If you are a provider, confirm whether your charge card contracts fall under subreg 62(2) as "charge card contract" in the Regulations. Document the reconciliation and, if applicable, the legal basis for exclusion.

7. System flags and reporting controls. Implement account-level flags in core systems that mark which accounts are excluded under which s5 provisions. Ensure that reporting extracts used for obligations under paragraph 133CO(1)(c) exclude accounts with those flags. Maintain change logs so that if an account's status changes (for example through a customer agreement being obtained), records show when the flag changed and why.

8. Record retention and audit trail. Although the instrument does not specify retention periods, hold supporting documents and calculations for at least the life of the instrument and for any additional period required by the parent Act or other applicable laws. Ensure audit trails exist for classification decisions, including the identity of the decision-maker, the basis for the decision citing instrument provision, and supporting documents.

9. Governance and training. Assign a compliance owner for the instrument's operational implementation. Train frontline teams, product owners and credit reporting leads on the classification criteria. Establish escalation channels for borderline cases where a product may or may not "relate to the provision, or possible provision, of consumer credit" or where consent records are ambiguous.

10. Monitor regulatory guidance and sunset planning. Monitor ASIC publications for any guidance about the instrument or its operation. Track the instrument's commencement date and the five-year repeal date in s6. Prepare a transition plan that addresses what will happen to accounts currently excluded when the instrument is repealed, including system changes needed to bring those accounts within scope of paragraph 133CO(1)(c) at repeal.

11. Legal review and risk assessment. Have legal counsel review high-volume or borderline account types before taking classification decisions. Where large numbers of accounts could be affected by a classification error, conduct a risk assessment and consider conservative positions or phased implementations to reduce exposure.

12. Coordination across group entities. For banking groups, establish a central team responsible for the s5(c) calculations and for ensuring consistent application of definitions across subsidiaries. Prepare consolidated documentation of the numerator and denominator calculations showing how the 3% threshold was derived.

Following this checklist will give a credit provider an auditable trail demonstrating disciplined application of the instrument. The core compliance tasks are mapping definitions, gathering documentary evidence, implementing system flags, and planning for the instrument's repeal.