The instrument introduces and defines a series of technical concepts that are essential for completing the reporting forms. These definitions are not standalone; they are cross-referenced to APS 180, APS 001, CPS 226 and other prudential standards, so a reader must consult the entire framework to apply them correctly.

Counterparty credit risk (CCR) is the risk that a counterparty to a derivative, securities financing transaction (SFT) or long settlement transaction defaults before the transaction’s final settlement. The reporting forms capture both the current exposure (the positive mark-to-market value, or replacement cost) and potential future exposure (PFE) - the additional credit exposure that could arise over time. PFE is calculated under either the adjusted current exposure method or the standardised approach to counterparty credit risk, as detailed in APS 180. The standard notes that PFE is often a derived field in ARF 180.1, but in some cases the ADI must enter it manually because multiple credit conversion factors (CCFs) may apply to different components of an exposure (definition of “potential future exposure” in paragraph 18).

Credit equivalent amount (CEA) is the on-balance-sheet equivalent of an off-balance-sheet exposure, calculated by applying CCFs to the notional principal amount. CCFs are percentage values defined in Attachment E of APS 180. The standard distinguishes between exposures that must be converted to CEA before risk-weighting (the traditional off-balance-sheet items) and those that are already on-balance-sheet under IFRS. A critical nuance in the definition of “off-balance sheet exposures” is that items which were off-balance-sheet prior to IFRS adoption must continue to be reported as off-balance-sheet for prudential purposes, even if IFRS now requires them to be recognised on-balance-sheet. This preserves the pre-IFRS categorisation and may cause confusion if an ADI’s accounting system treats them as on-balance-sheet.

Netting and eligible bilateral netting agreements are defined by reference to Attachment H of APS 112. Netting allows multiple transactions with the same counterparty to be combined into a single net sum for exposure calculation, reducing the reported exposure. The standard requires reporting of notional principal amounts and numbers of counterparties by credit rating grade (definition of “number of counterparties”), which implies that ADIs must maintain a rating-grade mapping for each counterparty.

Central counterparty (CCP) is a clearing house that interposes itself between counterparties, becoming the buyer to every seller and seller to every buyer. A qualifying CCP (QCCP) must be licensed and prudentially supervised in a jurisdiction applying the CPSS-IOSCO Principles for Financial Market Infrastructures and must make available data for the default fund capital charge. Trade exposure is a measure of an ADI’s exposure to a CCP, including initial margin posted and variation margin due but not yet received.

Securities financing transactions (SFTs) include repos, reverse repos and securities lending/borrowing. Long settlement transactions are those where settlement occurs more than the lesser of market standard or five business days after the transaction date. Exchange traded derivatives and OTC derivatives are distinguished, with OTC derivatives being customised, privately negotiated agreements.

The reporting forms also distinguish between standardised ADIs and IRB ADIs (paragraph 7). A standardised ADI uses the standardised approach to credit risk under APS 112 and APS 180; an IRB ADI has APRA approval to use internal ratings-based models. The two forms capture data differently because the IRB approach uses the ADI’s own estimates of probability of default, loss given default and exposure at default, while the standardised approach uses prescribed risk weights. An ADI can be reclassified by APRA determination (paragraph 16), which could trigger a change in reporting form.

The consolidation levels are important: Level 1 is the ADI itself; Level 2 is the consolidated group as defined in APS 001. The standard requires both levels for each ADI (unless a NOHC supplies Level 2) because CCR and CVA risk can be managed or concentrated at different levels of the corporate structure. Reporting at both levels gives APRA visibility into intra-group exposures and group-level risks.

The primary entities affected are ADIs that are “significant financial institutions” within the meaning of APS 001. This term is not defined in the standard itself, but it typically captures ADIs with a high level of total assets, risk profile or systemic importance as determined by APRA. Therefore the standard does not apply to all ADIs - only to those designated as significant financial institutions. That threshold means smaller ADIs and credit unions may be excluded, though APRA could vary the application by notice.

Within the affected class, the standard distinguishes between standardised ADIs and IRB ADIs. Both must report, but on different forms. A standardised ADI that later receives IRB approval from APRA would need to switch to ARF 180.2 for subsequent reporting periods, and the transition may require changes in data systems and calculation methodologies.

Non-operating holding companies (NOHCs) of an ADI that is a significant financial institution are also directly affected if the ADI is a subsidiary of an authorised NOHC. In that case, the immediate parent NOHC must submit the Level 2 information required by the standard (paragraph 6). The NOHC must then comply with the standard as if it were the ADI, except that it need not submit Level 1 data (which the ADI itself submits). This imposes compliance obligations on entities that may not themselves be ADIs, adding an extra layer of reporting for corporate groups.

External auditors are indirectly but significantly affected. Paragraph 12 requires that all information submitted under the standard must be “the product of processes and controls that have been reviewed and tested by the external auditor of the ADI.” This review must occur annually (or more frequently if necessary for the auditor to form an opinion) and is guided by Guidance Statement GS 012. Auditors thus face additional scope of work, liability exposure and potential fee negotiation with ADIs. The review is not a full audit of every data point but must be sufficient for the auditor to opine on accuracy and reliability. This creates a de facto requirement for the ADI to maintain auditable controls over its CCR and CVA data production.

The Reserve Bank of Australia and the Australian Bureau of Statistics are secondary users of the data (paragraph 2). They do not have compliance obligations, but the standard’s design must accommodate their data needs, which may influence the format and granularity of the forms.

APRA itself is the recipient and enforcer of the standard. Its staff must process, validate and analyse the data. The standard gives APRA broad discretionary powers to vary reporting periods, reclassify ADIs, grant extensions and revise requirements by notice (paragraphs 10, 11, 15, 16). This discretion affects all regulated entities because it introduces unpredictability: an ADI cannot assume the current reporting parameters will remain unchanged, and APRA could demand more frequent or more detailed submissions without legislative amendment.

Finally, counterparties of ADIs may be indirectly affected if the reporting data influences APRA’s supervisory actions. However, the standard does not create rights or duties for counterparties themselves. It is exclusively a data-collection instrument, not a substantive risk-management or capital requirement.

The central duty is to submit the required information to APRA on time. For an ADI that is a significant financial institution, the duty arises at both Level 1 and Level 2 (paragraphs 5 and 6), unless the ADI is a subsidiary of an authorised NOHC, in which case the NOHC must provide Level 2 information. The duty is not delegable: even if an ADI outsources data preparation, the ADI remains responsible for compliance.

The information must be submitted within 35 calendar days after the end of each quarter (paragraph 9). This is a strict deadline; the note following paragraph 11 emphasises that if the due date falls on a non-business day, the ADI is nonetheless required to submit by that date. An ADI may apply in writing for an extension under paragraph 11, and APRA has discretion to grant it. The duty is ongoing for each quarter - there is no grace period for first-time filers.

A second duty concerns quality control. Paragraph 12 requires that the information be “the product of processes and controls that have been reviewed and tested by the external auditor of the ADI.” The review must be performed annually at minimum. Paragraph 13 separately requires the ADI to maintain its own systems, processes and controls for internal review and authorisation, with the objective of assuring completeness and reliability. These are distinct duties: the external auditor’s work does not relieve the ADI of its internal obligations, and vice versa. The ADI must also ensure that the auditor’s review is performed in accordance with GS 012, which is not a mandatory auditing standard but a guidance statement; however, APRA would expect adherence.

A third duty is to digitally sign the submission using a digital certificate acceptable to APRA (paragraph 14). This is not a mere formality: the signer is typically an officer or agent of the ADI, and the signature confirms the information is being provided under the reporting standard. The ADI must manage the certificate lifecycle, including renewal and revocation.

The rights of an ADI under the standard are limited but include: the right to apply for a variation of reporting periods under paragraph 10 (APRA may vary more or less frequently, having regard to the ADI’s circumstances, supervisory needs and RBA/ABS requirements); the right to request an extension of the due date under paragraph 11; the right to receive written notice from APRA of any variation or extension; and the right to request that APRA vary the reporting requirements for that ADI under paragraph 15. There is no right of appeal or review explicitly stated in the instrument; challenges would be under general administrative law principles (e.g. judicial review of APRA’s decisions). The instrument also gives APRA the right to treat an ADI as belonging to a different class (e.g. treat a standardised ADI as IRB for reporting purposes) under paragraph 16, which the ADI cannot veto but should negotiate.

A notable right is the transitional relief under paragraph 17: ADIs do not have to report under the new standard for periods ending before 30 September 2023. However, they must still file any overdue reports under the old standard if the due date falls on or after the revocation date. This is not a right per se but a protection against double reporting.

The instrument itself does not prescribe pecuniary penalties or criminal sanctions. It is made under section 13 of the Financial Sector (Collection of Data) Act 2001 (FSCODA), which contains the enabling provisions for enforcement. Under FSCODA, failure to provide information required by a reporting standard is an offence. Specifically, section 15 of FSCODA provides that a person who fails to give information when required by a reporting standard is guilty of an offence punishable by a fine (currently up to 50 penalty units for an individual and up to 250 penalty units for a body corporate). Each day the failure continues may be a separate offence. Additionally, providing false or misleading information is an offence under section 137.1 of the Criminal Code (penalty up to 12 months imprisonment for individuals) or under FSCODA itself if material non-compliance is involved.

Beyond criminal penalties, APRA has administrative enforcement powers under the Banking Act 1959. APRA can issue directions to an ADI to take specified action (e.g. to correct a reporting failure or improve governance), impose additional capital requirements, restrict business activities, or ultimately revoke or suspend an ADI’s licence. Non-compliance with a reporting standard can be a factor in APRA’s overall supervisory assessment, potentially affecting an ADI’s supervisory ratings and insurance premiums under the Financial Claims Scheme.

The instrument underscores the seriousness of compliance by mandating external auditor review and internal controls. If an ADI fails to have its processes reviewed by the auditor, that omission itself would be a breach of paragraph 12, and APRA could treat it as non-compliance even if the submitted data is accurate. Similarly, absence of adequate internal systems and controls (paragraph 13) could be a breach independent of data quality.

APRA also has the power to vary requirements or reclassify an ADI under paragraphs 15 and 16. While these are not penalties, they can be used coercively: an ADI that is uncooperative may face more onerous reporting obligations or be reclassified to a category requiring more granular data.

Litigation history under this specific standard is likely non-existent given its recent commencement (September 2023). However, challenges to APRA’s decisions under FSCODA (e.g. refusals to extend due dates, adverse reclassifications) could arise on administrative law grounds. The instrument itself would be a disallowable legislative instrument under the Legislation Act 2003, providing a parliamentary check, but that is a political rather than judicial avenue.

The instrument sits within a layered regulatory framework. Its primary interaction is with Prudential Standard APS 180 Capital Adequacy: Counterparty Credit Risk, which sets the substantive capital requirements for CCR and CVA risk. The reporting standard collects the data needed to verify compliance with APS 180; without the reporting standard, APRA would lack the granularity to supervise APS 180 effectively. The definitions in paragraph 18 explicitly reference APS 180 for concepts such as CCFs, CEA calculation, current exposure and potential future exposure. An ADI must therefore understand APS 180 thoroughly to complete the forms correctly.

The instrument also cross-references APS 001 Definitions, which supplies the meanings for terms such as “credit rating grade”, “Level 1”, “Level 2”, and “significant financial institution”. Changes to APS 001 automatically flow through to this standard because paragraph 19 provides that references to Prudential Standards are to the instruments as in force from time to time.

Prudential Standard CPS 226 Margining and risk mitigation for non-centrally cleared derivatives is referenced in the definition of “derivative” in the standard. That means the scope of derivatives reportable under this standard aligns with CPS 226’s definition, which may be broader or narrower than accounting definitions.

The standard interacts with the Corporations Act 2001 in two respects: “financial year” in paragraph 9 uses the Corporations Act meaning, which may differ for foreign ADIs operating in Australia; and “subsidiary” in the definitions uses the Corporations Act meaning, affecting the determination of who must report Level 2.

The Banking Act 1959 is the foundational legislation for ADIs, and the standard is made under FSCODA, which is a companion Act to the Banking Act. The standard itself does not override the Banking Act; it adds a data-collection layer. Enforcement for non-compliance may be pursued under either FSCODA or the Banking Act, depending on the severity.

Interaction with Australian Accounting Standards occurs through the definition of “off-balance sheet exposures”. The standard preserves pre-IFRS categorisation: items that were off-balance-sheet before IFRS adoption remain off-balance-sheet for this standard, even if IFRS brings them on-balance-sheet. This means an ADI’s accounting treatment may diverge from its prudential reporting treatment, requiring separate data systems and reconciliation processes. Fair value is defined in paragraph 18 as an amount at which an asset could be exchanged between knowledgeable, willing parties in an arm’s-length transaction, which mirrors the fair value definition under AASB 13 Fair Value Measurement. The standard expects fair values to be observable through quoted prices, independent valuations or net present value calculations.

The standard also interacts with the Basel III capital framework through its reference to the standardised approach and IRB approach for CCR. APRA’s implementation of Basel III in Australia, particularly the revised CCR framework (SA-CCR and other methods), is reflected in APS 180, and the reporting forms collect data necessary for that framework.

Guidance Statement GS 012 from the Auditing and Assurance Standards Board provides the benchmark for the external auditor’s review. While GS 012 is not a legally binding standard, APRA expects compliance. The auditor’s work must be sufficient to form an opinion on accuracy and reliability. Failure to follow GS 012 could be raised by APRA as evidence of non-compliance.

Finally, the RBA and ABS use the data for financial stability and statistical purposes. The standard must be consistent with the RBA’s EFS collection definitions, as reflected in the definition of “ADI reporting category” which references Reporting Standard ARS 701.0 ABS/RBA Definitions for the EFS Collection. This ensures data collected by APRA aligns with what the RBA and ABS need, avoiding duplication or inconsistency.

The instrument includes a transition provision (paragraph 17) indicating it replaces a previous reporting standard that was revoked by the determination that made this standard. The old standard is not named in the text, but it is the one that this standard supersedes. The standard applies for reporting periods ending on or after 30 September 2023, so the operative amendment date is effectively that date.

The instrument itself may be amended by APRA under its power to vary reporting requirements under paragraph 15, which allows APRA to issue a written notice varying the standard for a particular ADI. This is not a legislative amendment but an administrative variation. The standard can also be amended by the making of a new determination under section 13 of FSCODA, which would replace it. Such a replacement would be a legislative instrument subject to disallowance by Parliament.

Paragraph 19 provides that references to Acts, Prudential Standards, Reporting Standards, Australian Accounting Standards or Auditing Standards are references to those instruments as in force from time to time. This means that if APS 180 or APS 001 is amended, the definitions in this standard automatically incorporate those changes without the need for an amendment to this standard. This is an efficient feature but introduces uncertainty: an ADI must track changes in multiple other instruments to ensure its reporting remains accurate.

No amendment history is provided in the text. The standard appears to be a fresh instrument rather than an amendment of an existing one. The transition paragraph suggests the old standard was revoked contemporaneously. To find the complete amendment history, one would need to consult the Federal Register of Legislation for the legislative instrument itself and any subsequent amending determinations.

Given the timeframe (commenced 30 September 2023), it is unlikely that any amendments have yet been made. However, APRA has a practice of issuing reporting standards with frequent updates to align with Basel reforms, so amendments are likely within a few years. Practitioners should monitor APRA’s website and the Register.

There is no litigation history cited in the instrument, and given its recent commencement (September 2023), no reported cases exist. More broadly, litigation under FSCODA reporting standards is rare. The few cases that exist concern failures to provide information or providing false information, typically resulting in administrative penalties or criminal convictions. No cases specifically involving counterparty credit risk reporting standards have been publicly reported.

Challenges to APRA’s decisions under this standard would likely be brought under the Administrative Decisions (Judicial Review) Act 1977 (ADJR Act) or under section 5 of the Administrative Appeals Tribunal Act 1975 (if decisions are reviewable - but most APRA decisions under FSCODA are not AAT reviewable unless a specific provision in the enabling Act allows it). Grounds could include failure to take into account relevant considerations (e.g. an ADI’s particular circumstances when varying reporting periods), unreasonableness, or breach of procedural fairness. However, the standard gives APRA broad, subjective discretion (e.g. “having regard to” the ADI’s circumstances), which makes judicial review difficult.

There is also potential for disputes over the interpretation of definitions, such as whether an exposure qualifies as “off-balance sheet” under the pre-IFRS rule, or whether a CCP qualifies as a QCCP. Such disputes would likely be resolved in the first instance through administrative correspondence with APRA, then possibly through declaratory proceedings in the Federal Court. No such litigation is known.

The absence of litigation does not mean the standard is uncontroversial; it means that disputes are resolved through APRA’s internal processes or through negotiation. Given the compliance burden and APRA’s broad powers, affected ADIs may prefer to comply rather than litigate, unless a particular decision imposes disproportionate costs.

Several features of the standard can trap the unwary compliance professional.

First, the definition of “off-balance sheet exposures” (paragraph 18) preserves pre-IFRS categorisation. An exposure that is on-balance-sheet under AASB 9 may still be treated as off-balance-sheet for reporting if it was off-balance-sheet before IFRS adoption. Conversely, an item that was on-balance-sheet pre-IFRS and is now off-balance-sheet under IFRS would still be on-balance-sheet for this standard. This creates a permanent divergence between accounting and prudential reporting, requiring separate mapping and reconciliation processes. A new ADI or one that has recently adopted IFRS for the first time must determine the historical classification, which may be difficult.

Second, the note under paragraph 11 states that if the due date falls on a day other than a usual business day, the ADI is nonetheless required to submit by that due date. This is a strict rule. Many financial reporting standards extend the deadline to the next business day; this standard does not. ADIs must plan submissions around public holidays, weekends and other non-business days, and ensure their submission systems can operate on those days if necessary.

Third, the “potential future exposure” field in ARF 180.1 is described as a derived field in most cases, but “in some cases, however, the amount must be entered by the ADI.” The standard does not specify which cases require manual entry. The ADI must consult APS 180 and the form instructions to determine when manual entry is needed. This lack of clarity increases the risk of error.

Fourth, the definition of “trade exposure” includes initial margin posted by the ADI to the CCP plus variation margin due to the ADI from the CCP that has not yet been received. This is a net exposure calculation that may differ from the ADI’s accounting treatment of margin. Variation margin receivable may be treated as a receivable in the accounts, but here it is part of the trade exposure to the CCP. Overlooking this inclusion could understate the exposure.

Fifth, the requirement for external auditor review under paragraph 12 applies to all information submitted under the standard. This is an annual obligation, but paragraph 12 says the review must be done annually “or more frequently if necessary to enable the external auditor to form an opinion on the accuracy and reliability of the information.” An ADI cannot simply schedule one review per year; if data systems change or errors are found, the auditor may need to re-review. The cost and scope of the audit engagement must be commensurate.

Sixth, paragraph 16 allows APRA to treat an ADI of one class (e.g. standardised) as being of another class (e.g. IRB) for the purposes of this reporting standard. This is a powerful tool: APRA could require a standardised ADI to complete the IRB form even if it does not use IRB approaches for credit risk. The ADI would then need to calculate IRB-style exposures, which may involve assumptions and estimates it does not ordinarily make. The rationale for such a reclassification is not limited by the standard; APRA’s discretion is broad.

Seventh, the transition paragraph (17) requires ADIs to report under the old standard for transitional reporting periods - those ending before 30 September 2023 but with a due date on or after the revocation date. An ADI with a 30 June 2023 year-end would normally have a due date of 4 August 2023 (35 calendar days). If the old standard was revoked after that due date, the ADI would still need to report under the new standard? Actually, paragraph 17 states that if the due date under the old standard falls on or after the date of revocation, the ADI must report under the old standard. This means an ADI might have to file under the old standard after the new one is in force, which could confuse internal procedures.

Eighth, the definition of “qualifying CCP” requires the CCP to calculate or make available data for the ADI’s default fund capital charge. If a CCP fails to provide that data, it is not a QCCP, and the ADI’s trade exposure treatment changes. ADIs must monitor their CCPs’ data provision status and adjust reporting accordingly.

Compliance with this reporting standard requires a systematic, documented approach.

1. Determine applicability: Confirm whether the ADI is a significant financial institution under APS 001. If not, the standard does not apply. If yes, determine whether it is a standardised ADI or an IRB ADI. This classification determines which form to use (ARF 180.1 or 180.2) and affects calculation methodologies.

2. Identify reporting levels: The ADI must report at both Level 1 and Level 2. If the ADI is a subsidiary of an authorised NOHC, coordinate with the NOHC to ensure Level 2 data is submitted by the NOHC. The ADI still reports Level 1 data itself. The NOHC must comply as if it were the ADI for Level 2.

3. Set up data systems: Establish a process to capture the required data each quarter. This includes:

   • Notional principal amounts by credit rating grade and number of counterparties.
   • Current exposure (positive mark-to-market values) for all market-related off-balance-sheet transactions.
   • Potential future exposure, calculated according to APS 180, either via the adjusted current exposure method or the standardised approach to CCR.
   • Credit equivalent amounts derived from CCFs per Attachment E of APS 180.
   • Trade exposure to CCPs, including initial margin posted and variation margin receivable.
   • Netting sets under eligible bilateral netting agreements.
   • For IRB ADIs, data based on internal models - probability of default, loss given default, exposure at default, and maturity.
   • Ensure the pre-IFRS off-balance-sheet treatment is applied consistently.

4. Implement internal controls: Under paragraph 13, the ADI must have systems, processes and controls for internal review and authorisation. Document the flow of data from source systems (trading, risk, finance) to the reporting form. Assign responsibility for sign-off to a senior officer (e.g., CFO or CRO). Maintain version control of supporting calculations.

5. Engage the external auditor: Paragraph 12 requires the auditor to review and test the processes and controls. Coordinate with the auditor early to agree on the scope under GS 012. The review must be completed annually; schedule it to align with reporting cycles. The auditor may need access to data systems and assumptions. Provide the auditor with detailed documentation of methodologies and data source mappings.

6. Submit quarterly: For each quarter, complete the relevant form (ARF 180.1 or 180.2) using the electronic method specified on APRA’s website. The due date is 35 calendar days after the quarter end. Ensure an officer or agent obtains and uses a digital certificate acceptable to APRA to digitally sign the submission. Avoid the trap of assuming a non-business day due date extends the deadline.

7. Monitor APRA notices: APRA may issue variations under paragraphs 10, 11, 15 or 16. Designate a staff member to monitor APRA’s correspondence and website for changes. Respond promptly to any notice requiring a different reporting frequency, a reclassification, or revised reporting requirements.

8. Manage transitions: If the ADI switches from standardised to IRB or vice versa, update reporting forms accordingly. For transitional reporting periods (ending before 30 September 2023 with due dates on or after revocation), use the old reporting standard and form.

9. Maintain records: Keep all data, calculations, audit findings and internal approvals for at least the period required by APRA (typically at least seven years). These records may be requested in an onsite review.

10. Review definitions regularly: Because definitions incorporate APS 180, APS 001, CPS 226 and other standards that change over time, update the ADI’s reporting manual whenever those instruments are amended.

11. Consider cost and efficiency: The compliance burden is ongoing and significant, especially for the external auditor review. Evaluate whether to invest in automation software that can map data directly from trading and risk systems to APRA’s schema. The cost of non-compliance (penalties, supervisory sanctions) far exceeds the cost of robust systems.