Financial Sector (Collection of Data) (reporting standard) determination No. 14 of 2022

The Reporting Standard organises reporting around three conceptual axes: scope (who and when), the object of reporting (what items and classifications), and control/accountability processes (how submissions must be produced and authorised).

Scope and commencement

• Application to all general insurers authorised under the Insurance Act 1973, for reporting periods ending on or after 1 July 2022 (para 3). The Determination revokes the prior instrument and this Reporting Standard replaces it on registration (recital and para 1).
• Reporting periods required are quarterly (by insurer financial year) and annually; APRA can vary frequency for a particular insurer by notice (paras 6-7). Timeframes for lodgement are set by GRS 001 unless APRA gives a different time in a notice (para 8).

Object of reporting: off-balance sheet business

• The core reporting vehicle is Form GRF 114.3 Off-balance Sheet Business and its specific instructions (Objective; Information required, para 4).
• The form’s Sections 1-4B cover:
  • Non-market-related off-balance sheet credit substitutes (Section 1): direct credit substitutes (guarantees, sold credit derivatives, standby letters of credit, bill endorsements, other direct credit substitutes), performance-related contingencies, trade-related contingencies, repos, assets sold with recourse, forward asset purchases (non-market-related), partly paid shares/securities, placements of forward deposits, surety bonds, a balancing item and totals (Section 1).
  • Liquidity support facilities obtained (Section 2): standby facilities with drawdown timing bands (same day; 2-5 days; >5 days), bill acceptance/discount facilities, letters of credit, overdrafts, other liquidity support facilities, totals and related-party breakdowns.
  • Charges and encumbrances granted (Section 3): type, principal value, outstanding value, fair value of assets subject to charge, whether inside Australia, grade of asset, value of insurance liabilities supported.
  • Credit support received split into eligible collateral and guarantees/letters of credit (Sections 4A and 4B): named provider, relation to reinsurance recoverable from non-APRA-authorised reinsurers, fair value of collateral, fair value of assets supported, related-party flag and type, and type of collateral.
• Classification and grading: the Explanatory notes require reporting by counterparty grade determined in accordance with GPS 001 and GPS 114 and note that items such as inside-Australia should be determined using GPS 120 (Explanatory notes; Interpretation, para 16; specific item instructions).

Control, audit and authorisation

• Insurers must ensure the information is produced from systems, processes and controls reviewed and tested by the Appointed Auditor, including at least a limited assurance engagement consistent with AUASB standards (para 9). The Appointed Auditor is defined in para 16.
• Internal controls and authorisation policies are the responsibility of the Board and senior management (para 10).
• Digital signature is required for submissions using Direct to APRA, using a certificate acceptable to APRA (para 11). If an agent submits on the insurer’s behalf, the insurer must obtain and retain the completed form (para 12). A submitter must be authorised by the Principal Executive Officer or Chief Financial Officer (para 13).
• Annual information forms part of yearly statutory accounts under section 3 of the Insurance Act and is subject to audit certificate requirements under the Insurance Act (notes to para 6; auditors’ certificate references to subsections 49J(1)(a) and 49J(3) and paragraph 49L(1)(a) in the explanatory notes).

Interaction with prudential supervision objectives

• The stated purpose is APRA use for prudential supervision including assessing compliance with capital standards (para 2). The connection to capital is operationalised through counterparty grade reporting in line with GPS 114 (Explanatory notes), and the requirement to report items that give rise to credit risk that may feed capital adequacy assessment.

Flexibility and APRA discretion

• APRA may vary reporting requirements or reporting periods for a particular insurer by written notice (paras 7 and 14). Submission medium is subject to APRA software availability or alternative methods notified by APRA (para 5). These provisions create an administrative channel for APRA to alter both content and cadence of this data collection for specified firms.

Definitions and cross-references

• The Standard explicitly imports definitions from GPS 001 (para 16(a)), refers to capital standards as defined in GPS 001, and references GPS 114, GPS 120 and GPS 310 for grading, assets in Australia and audit matters respectively (Explanatory notes and para 16). The Insurance Act and Corporations Act definitions are used for insurer and financial year.

Primary regulated entities

• All general insurers authorised under the Insurance Act 1973 (insurers) are in the scope of the Reporting Standard (Application and commencement, para 3; Interpretation, para 16: definition of insurer). That includes entities whose business is reinsurance where they meet the definition of an insurer under section 11 of the Insurance Act (Interpretation, para 16 note).

Board and senior management

• The Board and senior management bear responsibility for ensuring appropriate policies and procedures are in place for internal review and authorisation of data submitted to APRA (Quality control, para 10). This places governance obligations on decision-makers to maintain and oversee systems and controls that produce the reported data.

Audit function and Appointed Auditor

• The Appointed Auditor, as defined under paragraph 39(1)(a) of the Insurance Act (Interpretation, para 16), must review and test the insurer’s systems, processes and controls used to prepare the data, on an annual basis or more frequently if required, and perform at least a limited assurance engagement consistent with AUASB standards (para 9). The auditor also provides the auditor’s certificate tied to the insurer’s yearly statutory accounts (notes to para 6 referring to paragraph 49J(3) and 49L(1)(a) of the Insurance Act).

Chief Financial Officer and Principal Executive Officer

• Only an officer or agent authorised by the Principal Executive Officer or the Chief Financial Officer may submit information under this Reporting Standard (Authorisation, para 13). These officers therefore carry authorisation responsibility and are the named gatekeepers for lodgement.

Agents and service providers

• If an insurer uses an agent to submit via Direct to APRA, the insurer must obtain and retain a copy of the completed form submitted on its behalf (para 12). Agents therefore must provide accurate records and the insurer must maintain copy retention controls.

Related parties and counterparties

• The Standard explicitly requires insurers to break down non-market-related off-balance sheet exposures that are with related parties (Section 1 Items 11-12 and sub-items 12.1-12.3) and liquidity facilities provided by related entities (Section 2 Items 7-7.3). Reporting collateral and guarantees requires naming the provider and indicating whether the provider is a related party (Sections 4A and 4B). Entities within corporate groups, joint ventures, associates and parent entities are thus directly implicated via disclosure requirements which require identification and categorisation as parent, subsidiary, associate or other related party.

Reinsurers and non-APRA-authorised reinsurers

• Sections 4A and 4B require disclosure whether collateral, guarantees or letters of credit are related to reinsurance recoverable due from non-APRA-authorised reinsurers. The definition of APRA-authorised reinsurer appears in the Interpretation (para 16), which includes insurers carrying on reinsurance business and explicitly includes Lloyd’s underwriters and the Australian Reinsurance Pool Corporation for the purpose of that definition. Thus reinsurance counterparties inside and outside APRA-authorisation are directly referenced and identified in reporting lines.

Audit and compliance service market

• The requirement for an Appointed Auditor review and a limited assurance engagement (para 9), and the tie-in to annual statutory accounts and auditor certificates under the Insurance Act (notes to para 6), will impose specific audit tasks and likely demand for auditors with the requisite familiarity with APRA reporting and AUASB standards.

APRA

• APRA is the recipient and decision-maker: it receives the data (para 4), can set acceptable electronic submission methods (para 5), can alter reporting frequency and content for particular insurers (paras 7 and 14), and uses submissions for prudential supervision and assessing compliance with capital standards (para 2). APRA therefore determines data granularity, timing and acceptability, and exercises discretion to adjust reporting where it considers necessary.

Other parties indirectly affected

• Entities that provide collateral, guarantees or liquidity support to insurers will be named or classified in submissions (Sections 4A and 4B, Section 2), which could have implications for data sharing and confidentiality protocols within groups and with third-party counterparties. Insurers’ counterparties may be identified to APRA as part of routine reporting.

Excluded or out-of-scope entities

• The Standard applies to general insurers only. It does not, on its face, apply to authorised deposit-taking institutions, life insurers or other financial sector entities unless they also meet the definition of insurer under the Insurance Act. The Determination revokes and replaces the prior instrument only insofar as it relates to GRS 114.3 (recital and para 1).

Core duties

1. Provide information required by Form GRF 114.3 for each reporting period

• Insurers must supply the information specified in the form for each reporting period (quarterly and annually), with specific items outlined in Section 1 (off-balance sheet credit substitutes and contingency categories), Section 2 (liquidity support facilities), Section 3 (charges granted), and Sections 4A and 4B (credit support received) (Information required, para 4; Forms and instructions).

2. Use the prescribed submission channel and format

• Submissions must be lodged electronically via the Direct to APRA application or by a method notified by APRA when Direct to APRA is not available (para 5). This imposes a technological duty to use APRA’s approved channel and an obligation to maintain systems capable of producing the required electronic outputs.

3. Meet reporting frequency and deadlines

• The default reporting frequency is quarterly (by insurer financial year) and annually, and lodgement timing follows GRS 001 reporting requirements (paras 6 and 8). Where APRA exercises its power under para 7, an insurer must conform to the altered reporting period and the time specified in any written notice.

4. Ensure systems, processes and controls are subject to audit review

• The insurer’s Appointed Auditor must review and test the systems, processes and controls producing the reporting information on at least an annual basis and undertake at least a limited assurance engagement consistent with AUASB standards, to the extent not inconsistent with Prudential Standard GPS 310 Audit and Related Matters (para 9). The insurer must maintain internal review and authorisation policies and procedures and the Board and senior management are responsible for ensuring their existence and adequacy (para 10).

5. Authorise, sign and retain submissions appropriately

• Where reporting is made via Direct to APRA, an officer or agent must digitally sign the submission using a digital certificate acceptable to APRA (para 11). If an agent submits, the insurer must obtain and retain the completed form (para 12). Only a submitter authorised by the Principal Executive Officer or Chief Financial Officer may sign off (para 13).

6. Transition reporting

• For transitional reporting periods under the old reporting standards (as defined in para 15), the insurer must continue to report under the old standards where applicable and must provide overdue reporting documents under the old standards where due before revocation (para 15).

Rights and APRA discretions

1. APRA’s right to vary

• APRA may, by written notice, change reporting periods or specify reporting periods for a particular insurer where it considers it necessary or desirable (para 7). APRA may also vary the reporting requirements of the Form in relation to a particular insurer by written notice (para 14). These are APRA’s explicit administrative discretions.

2. Use of electronic channel

• Insurers have the right to submit via APRA’s Direct to APRA application and, where that is not available, to use an alternative method notified by APRA (para 5). The standard also notes where to obtain the software.

3. Audit and assurance processes

• While the insurer bears the duty to ensure its Appointed Auditor carries out the required review and limited assurance engagement (para 9), the provisions create a formalised role for auditors and tie certain reporting to auditor certification obligations under the Insurance Act (note to para 6). The auditor therefore has the right to access insurer systems for the required audit procedures as envisaged by the Appointed Auditor role.

4. Confidentiality and data handling

• The Reporting Standard requires disclosure of named collateral providers and guarantors (Sections 4A and 4B). The Standard does not in itself specify confidentiality protections in this text; however, insurers may rely on APRA’s usual handling and statutory protections concerning material provided to APRA under the Financial Sector (Collection of Data) Act 2001, though such protections are not restated in this instrument.

Operational duties tied to definitions and valuation standards

• Counterparty grade must be determined in accordance with GPS 001 Definitions and GPS 114 Capital Adequacy: Asset Risk Charge (Explanatory notes).
• “Inside Australia” determinations must follow GPS 120 Assets in Australia (Section 1.1.1 and Interpretation para 16).
• Fair value references point to Australian Accounting Standards for valuation methodologies (Section 3(4); Sections 4A(3) and 4B(5) refer to fair value “determined in accordance with the Australian Accounting Standards”).

Consequences of duties

• The Standard binds insurers to produce granular, validated and auditor-reviewed data that APRA will use for prudential supervision including capital assessment (para 2). APRA’s ability to vary reporting intensity and content for particular insurers means reporting burdens may increase or change for some insurers on APRA’s notice.

Textual limits on penalties in the instrument

• The Determination and Reporting Standard itself do not specify criminal or civil penalties, administrative fines, or explicit enforcement mechanisms within their text. The instrument is made under section 13 of the Financial Sector (Collection of Data) Act 2001 and refers to reporting requirements and APRA’s written-notice powers (authority, para 1; paras 7 and 14). Any external penalties, sanctions or enforcement mechanisms would therefore arise from the Financial Sector (Collection of Data) Act 2001, the Insurance Act 1973, prudential standards and APRA’s broader statutory enforcement framework rather than from provisions within this Determination. The Determination does not reproduce or restate the enforcement provisions of those Acts.

APRA supervisory powers and administrative enforcement signals within the Standard

• APRA is granted express administrative discretion to alter reporting periods and reporting requirements for a particular insurer by written notice (paras 7 and 14). While these are not framed as punitive, they are supervisory tools that may be used to require more frequent or more detailed reporting from an insurer where APRA deems it necessary or desirable.
• The Standard requires audit engagement and audit certificate lodgement with APRA via linkage to Insurance Act audit provisions (notes to para 6 and para 9). Failure to lodge annual statutory accounts and auditor certificates in accordance with the Insurance Act’s prudential standard linkage would engage the Insurance Act’s compliance provisions; those provisions are not restated here but are referenced (note to para 6).

Implied enforcement routes (derived from referenced Acts)

• The Reporting Standard situates reporting and related authorisation requirements within the broader statutory architecture (Financial Sector (Collection of Data) Act 2001, Insurance Act 1973). Enforcement mechanisms available to APRA under those Acts are not reproduced in the Standard text provided. Consequently, any penalties for late, incomplete or false reporting would, in practice, rely on the statutory enforcement powers in the underlying Acts and APRA’s enforcement practice, none of which are set out in this Determination itself.

Operational compliance controls and audit as enforcement levers

• The Standard’s insistence on Appointed Auditor review and a limited assurance engagement (para 9), internal review and authorisation by Board and senior management (para 10), and requirement for authorised sign-off (paras 11-13) create procedural controls that operate as compliance mechanisms. Auditors’ certificates pursuant to the Insurance Act (note to para 6) form part of the administrative compliance record APRA can use in supervision.

Record-keeping and agent submission obligations

• An insurer must obtain and retain the completed copy of forms submitted by an agent (para 12). Retention obligations enable APRA to verify submissions and are a non‑monetary enforcement device insofar as failure to retain records could aggravate supervisory scrutiny.

Absence of explicit fines in this instrument

• The Reporting Standard does not itself establish monetary penalties nor does it specify ranges of sanctions for non-compliance; any such sanctions would therefore be applied under the relevant primary legislation and APRA’s enforcement regime, not within this Determination.

Direct statutory and prudential cross-references

• The Reporting Standard is made under the Financial Sector (Collection of Data) Act 2001 (Authority, para 1). It applies to general insurers authorised under the Insurance Act 1973 (Application and commencement, para 3). It expressly imports and relies upon definitions in Prudential Standard GPS 001 Definitions (para 16(a)) and references other prudential standards including GPS 114 Capital Adequacy: Asset Risk Charge (for counterparty grading), GPS 120 Assets in Australia (for inside Australia determinations), and GPS 310 Audit and Related Matters (for audit‑related requirements) (Explanatory notes; para 16). Reporting timing and lodgement rules are linked to Reporting Standard GRS 001 (para 8).

Accounting and auditing standards

• Fair value measures required in Sections 3 and 4A/4B are to be determined in accordance with Australian Accounting Standards (Section 3(4); Sections 4A(3) and 4B(5)). The audit assurance required must be “consistent with professional standards and guidance notes issued by the Auditing and Assurance Standards Board (AUASB)” as may be amended, subject to consistency with GPS 310 (para 9). The annual information forms part of yearly statutory accounts within the meaning of section 3 of the Insurance Act and must be audited per paragraph 49J(1)(a) of the Insurance Act, with the auditor’s certificate obligations specified under subsection 49J(3) and paragraph 49L(1)(a) (note to para 6).

Prudential regime and capital adequacy

• APRA states the purpose of the information collection is prudential supervision including assessing compliance with capital standards (para 2). The form’s requirement that counterparty grade be determined in accordance with GPS 001 and GPS 114 creates a direct data feed that maps off-balance sheet exposures into the prudential capital framework. Items such as “inside Australia” are to be identified under GPS 120, which links asset location rules to capital and aggregate exposures.

Insurance Act audit and certificate regime

• The Standard explicitly ties annual reporting under this form to the Insurance Act’s requirements for yearly statutory accounts and auditors’ certificates (note to para 6). The Insurance Act’s provisions govern the required audit opinion statements that must accompany annual statutory accounts and be lodged with APRA (referenced in notes).

Data collection and privacy frameworks (implicit)

• The Standard requires named counterparties for collateral and guarantees (Sections 4A and 4B). The instrument itself does not restate privacy or confidentiality obligations, but in practice these submissions will occur within the data collection regime established under the Financial Sector (Collection of Data) Act and APRA’s data handling policies. The Determination does not modify or override obligations under privacy law or other statutes, but recipients and preparers will need to consider how APRA data collection interacts with privacy and confidentiality obligations outside this instrument.

Interaction with agents and outsourcing frameworks

• The power to submit via agents and the requirement to retain copies (para 12) interacts with insurers’ outsourcing and record-keeping obligations under prudential standards (e.g. related GPS requirements although specific outsourcing standards are not quoted here). Agents providing submission services must allow the insurer to meet retention and audit requirements imposed by this Standard and the Insurance Act.

Regulatory hierarchy and revocation

• The Determination revokes the prior Determination No. 8 of 2013, including the old GRS 114.3 (recital and para 1). The Standard thereby updates APRA’s data collection instrument for off-balance sheet business; replacement interacts with insurers’ ongoing compliance by changing the form, definitions or required items from the prior instrument.

No change to primary statutory powers

• The Determination itself is an exercise of delegated regulatory power under the Financial Sector (Collection of Data) Act 2001 and does not amend the Insurance Act, Corporations Act or prudential standards. Its effect is to set data collection requirements and administrative obligations that operate within the existing statutory architecture.

Replacement and revocation

• This Determination expressly revokes Financial Sector (Collection of Data) (reporting standard) determination No. 8 of 2013, including the previous Reporting Standard GRS 114.3 Off-balance Sheet Business (recital and para 1). The new Reporting Standard GRS 114.3 as set out in the Schedule replaces the prior reporting standard.

Key dates

• The Determination is dated 12 October 2022 (docket heading and signature block). APRA declares the Reporting Standard shall begin to apply to those financial sector entities and the revoked reporting standard shall cease to apply on the day the instrument is registered on the Federal Register of Legislation (opening recital and declaration under section 15). The Reporting Standard itself states it applies for reporting periods ending on or after 1 July 2022 (Application and commencement, para 3). Therefore the instrument was published after the effective reporting period start date, but its legal commencement is tied to registration.

No other amendments contained

• The text provided contains only this Determination revoking the earlier instrument and specifying the replacement Reporting Standard (GRS 114.3). There are no later amendments or successive variations included in the provided text.

Transition rules

• Paragraph 15 contains a transition mechanism: insurers must report under the old reporting standards in respect of a transitional reporting period, where a transitional reporting period is a reporting period under the old reporting standards that ended before the date of revocation but in relation to which the insurer was required to report by a date on or after the date of revocation. The note clarifies insurers must still provide any overdue reporting documents that were due before revocation under the old reporting standards (para 15).

Interpretive updates and cross-references

• Interpretation paragraph 16 imports definitions from GPS 001 and defines terms such as Appointed Auditor, APRA-authorised reinsurer, capital standards, and others. The Explanatory notes and instructions reference contemporary prudential standards (GPS 114, GPS 120, GPS 310), which means that any later amendments to those prudential standards (not included in this instrument) will affect the interpretation and application of terms and classification obligations in GRF 114.3 if those changes are within the cross-referenced standards.

Authority and delegated-making power

• The Reporting Standard is made under section 13 of the Financial Sector (Collection of Data) Act 2001 (Authority, para 1). The Determination is signed by an APRA delegate (Alison Bliss, General Manager, Data Analytics & Insights Division) under paragraph 13(1)(a) of the Act and subsection 33(3) of the Acts Interpretation Act 1901, which demonstrates the delegated power exercise in issuing and revoking reporting standards (opening recital).

No amendment history beyond this instrument in the provided text

• The document does not contain subsequent amendments, re-issues, or later revocation notes. For later changes beyond the scope of the supplied text, readers would need to consult the Federal Register of Legislation and APRA’s current suite of reporting standards.

No cases or litigation referenced

• The Reporting Standard document and Determination text provided do not mention any judicial or administrative litigation, nor do they cite decisions or disputes about the instrument. The text is purely regulatory in nature and contains no litigation history or references to court findings (entire instrument).

Implications for dispute risk (from provisions)

• The instrument gives APRA written-notice discretion to change reporting periods and to vary reporting requirements for particular insurers (paras 7 and 14). While the instrument does not discuss dispute resolution or appeal mechanisms, parties subject to such notices who consider APRA has acted outside its statutory powers would potentially raise those issues under the relevant primary legislation. The Reporting Standard itself does not set out remedies or appeal routes; any challenge would be to decisions taken under the Financial Sector (Collection of Data) Act 2001 or the Insurance Act, which are not restated here.

Absence of precedent to cite

• Because no litigation or contested administrative decisions are cited in the instrument, there are no precedents within the document for how courts have interpreted the Standard. Practitioners seeking to litigate or challenge aspects of the Standard would need to rely on broader statutory interpretation of APRA’s enabling legislation and general administrative law principles, subject to the statutory framework not set out in the Reporting Standard text.

Record-keeping and audit-related obligations as risk points

• The document’s audit and record-keeping requirements (paras 9, 10, 12 and related notes) create factual bases for supervisory action if not complied with; while the instrument does not describe enforcement or litigation routes, failure to meet these obligations could be the factual predicate for administrative enforcement actions under the underlying Acts.

Timing and retroactivity interplay

• The Standard applies to reporting periods ending on or after 1 July 2022 (para 3) but the Determination is dated 12 October 2022 and commences on registration. Insurers should note the potential for reporting periods that fall between 1 July 2022 and the registration date: transitional rules (para 15) require insurers to report under the old reporting standards for transitional reporting periods as defined. Careful calendar mapping is required to determine whether specific reporting obligations fall under the old or new form, and to ensure any overdue reports under the old standards are lodged as required (para 15).

APRA’s written-notice powers can change burden or frequency

• APRA may require more or less frequent reporting for a particular insurer by written notice (para 7) and may vary the form’s reporting requirements for an insurer by written notice (para 14). Insurers need processes to respond rapidly to APRA notices; unexpected notices could impose accelerated data‑collection and validation tasks.

Audit scope and assurance level minimums

• Para 9 requires the Appointed Auditor to review and test systems and to perform at least a limited assurance engagement consistent with AUASB standards, to the extent not inconsistent with GPS 310. The phrase “to the extent that they are not inconsistent with the requirements of Prudential Standard GPS 310” means auditors must navigate any differences between AUASB guidance and GPS 310; coordination between auditors and in-house compliance on the exact assurance scope is necessary to avoid gaps or duplicate work.

Annual data forms part of statutory accounts and requires auditor certificate

• The note to para 6 states that certain annual information required by this Standard will form part of the insurer’s yearly statutory accounts under section 3 of the Insurance Act and must be audited per paragraph 49J(1)(a) of the Insurance Act; the principal auditor must give a certificate per subsection 49J(3). This elevates the annual submission from mere regulatory return to an audited statutory component, meaning audit timetables, signing deadlines and regulatory lodgement timelines will cross over into statutory audit cycles.

Authorisation, digital certificates and agent submissions

• Digital signatures using a certificate acceptable to APRA are mandatory for Direct to APRA submissions (para 11). If an agent submits on behalf of the insurer, the insurer must obtain and retain a copy of the completed form (para 12). Governance gaps can arise if the insurer does not control the agent’s submission process or does not verify the agent’s digital certificate meets APRA standards; insurers must ensure contractual arrangements with agents include certificate standards and timely provision/retention of submitted records.

Granularity of counterparty identification

• Sections 4A and 4B require the name of the entity providing collateral or guarantees and whether such support relates to recoverables due from non-APRA-authorised reinsurers. Insurers must have data flows that capture counterparty identity at a granular level and be capable of linking collateral/guarantee arrangements to specific reinsurance recoverables. That can be operationally complex where collateral is held under global arrangements or where documentation identifies sweep accounts, custodians or special-purpose vehicles rather than the ultimate economic counterparty.

Classification frictions: market vs non-market and inside-Australia determination

• The Standard distinguishes market-related and non-market-related forward asset purchases (Section 1, item 6) and requires “inside Australia” allocation per GPS 120 (Section 1.1.1 and Interpretation para 16). Determining whether a forward purchase is market-related or non-market-related, or whether an instrument is inside Australia, will require legal and accounting judgement aligned to GPS 114 and GPS 120 definitions and could produce different outcomes depending on accounting treatment, contract terms and settlement mechanics.

Balancing items and auto-calculations

• Several items are described as “automatically calculated” balancing items (e.g. Section 1 “Other direct credit substitutes”, Section 1 item 10 and the Section 2 item 5). Insurers must ensure internal reconciliations and control totals match the form’s auto-calculations; mismatches can be triggers for validation failures or queries from APRA.

Related-party breakdowns

• The Standard requires detailed related‑party breakdowns for items such as total non-market-related off-balance sheet business provided to related parties and liquidity facilities with related entities (Section 1.12 and Section 2.7). Insurers must have robust related-party identification processes consistent with accounting and prudential definitions of parent, subsidiaries, associates and joint ventures to populate these fields accurately.

Valuation and accounting standard alignment

• Fair value reporting is expressly tied to Australian Accounting Standards for assets and collateral (Sections 3(4), 4A(3), 4B(5)). Changes in accounting standards, measurement policies or reclassifications of instruments can change reported values and feed into APRA’s capital assessments.

Authorised submitter requirement

• Only the Principal Executive Officer or the Chief Financial Officer may authorise the person who submits (para 13). Firms that have decentralised submission teams must ensure explicit authorisation flows and delegation records are maintained to support signatory authority.

No explicit enforcement text in the Standard

• The Determination does not set out penalties. Consequently, insurers must map potential non-compliance consequences to the underlying statutory framework (Financial Sector (Collection of Data) Act and the Insurance Act) and to APRA’s enforcement practice rather than relying on explicit penalty thresholds in the Standard itself.

Governance and roles

• Board and senior management must adopt, document and maintain policies and procedures for internal review and authorisation of data submitted to APRA (para 10). Allocate clear responsibilities for data owners, submission approvers (PEO/CFO authorised signatory), IT/system owners and Appointed Auditor liaison. Maintain evidence of Board oversight and minutes that reflect approval of the reporting controls framework.

Data mapping and systems

• Map all off-balance sheet items to the form’s categories in Sections 1-4B. This includes guarantees, sold credit derivatives, standby letters of credit, bill endorsements, performance-related contingencies, trade-related contingencies, repos, assets sold with recourse, forward asset purchases (assess market-related vs non-market-related), partly paid shares, placements of forward deposits, surety bonds and other non-market-related off-balance items (Section 1). For liquidity facilities, capture facility type, maximum approved amount, undrawn balance and drawdown timing buckets (same day; 2-5 days; >5 days) (Section 2). For charges, capture type, principal, outstanding value, asset fair value, inside Australia flag and grade of asset (Section 3). For collateral and guarantees received, ensure you capture provider name, relation to reinsurance recoverables from non-APRA-authorised reinsurers, fair values and related-party type (Sections 4A and 4B).

Classification alignment

• Use Prudential Standard GPS 001 and GPS 114 definitions for counterparty grade determinations and GPS 120 for inside-Australia allocations (Explanatory notes; Interpretation para 16). Document the legal and accounting rules used for classification so that auditors and APRA can review and recreate mappings. Where judgement is required, prepare contemporaneous rationale and approvals.

Valuation and accounting practice

• Value assets and collateral in accordance with Australian Accounting Standards and document valuation methodologies and inputs (Section 3(4); Sections 4A(3) and 4B(5)). Keep audit trails for fair-value calculations, including model assumptions and market inputs, to support the Appointed Auditor’s assurance procedures.

Audit and assurance planning

• Engage the Appointed Auditor early to plan the annual review and limited assurance engagement required by para 9. Ensure audit scope covers systems, processes and controls for the data flows, and that testing frequency (annual or more often as necessary) is agreed. Coordinate the auditor’s work with statutory audit timelines tied to the insurer’s yearly statutory accounts (note to para 6). Document remediation of any audit findings and provide evidence of testing for subsequent submissions.

Submission process and digital signing

• Set up Direct to APRA submission processes and ensure digital certificates used to sign submissions meet APRA’s acceptability requirements (para 11). Where agents prepare or submit forms, contractually require timely delivery of the completed form and ensure the insurer retains a copy (para 12). Maintain a delegation register showing who is authorised by the PEO or the CFO to submit on behalf of the insurer and evidence of that authorisation (para 13).

Reconciliation and control totals

• Reconcile auto-calculated balancing items by ensuring component totals aggregate correctly (e.g. “Other direct credit substitutes” as Item 1 minus sum of Items 1.1-1.4; total non-market-related off-balance sheet business as Item 11 etc.). Establish automated reconciliations and exception reporting to detect data mismatches before submission.

Related-party identification and documentation

• Build a related-party register consistent with accounting and prudential definitions to support the detailed related-party reporting required in Items 12, 12.1-12.3, 7.1-7.3 and Sections 4A/4B related-party flags. Ensure legal and corporate records align with reported related-party categories (parent, subsidiary, controlled entities, joint ventures, associates, other related parties).

Contingency and documentation for APRA notices

• Develop a playbook to respond to APRA written notices under paras 7 and 14 that may change reporting frequency or content. The playbook should include data-collection ramp-up procedures, an internal prioritisation matrix for which systems and staff are needed, and audit coordination to cover any new or more frequent reporting.

Transition handling

• For any reporting period that is transitional under para 15, identify whether the old reporting standards or the new form apply and ensure overdue reports under the old standards are lodged where due. Maintain a timeline mapping revocation date, registration date, insurer financial year ends and statutory lodgement deadlines to identify transitional obligations.

Privacy, confidentiality and counterparty engagement

• Because Sections 4A and 4B require the naming of entities providing collateral or guarantees, confirm counterparty documentation supports disclosure and that data-sharing or confidentiality arrangements are understood. Where necessary, coordinate legal review of contractual provisions that govern disclosure or confidentiality to ensure the insurer can comply with APRA reporting without breaching other obligations.

Testing and dress rehearsals

• Before the first live submission, run dress rehearsals that produce the full electronic output in the format required by Direct to APRA, signed with the digital certificate, and checked by the Appointed Auditor. Confirm that the Direct to APRA software can ingest the required file formats and that internal systems can produce the required fields and supporting reconciliations.

Record retention and audit trails

• Retain completed copies of forms, agent-submitted versions, evidence of Board approvals of reporting policies, delegation authorisations, auditor engagement letters and assurance reports, valuations and related-party registers. Maintain version control and a searchable repository to support potential APRA queries and the Appointed Auditor’s testing.

Continuous monitoring and change management

• Monitor changes to GPS 001, GPS 114, GPS 120, GPS 310, AUASB standards and Australian Accounting Standards since definitions and classification rules are cross-referenced. Update systems and procedures when those standards change. Ensure change management processes are in place so classification or calculation updates are tested, approved and documented.

Prepare for APRA follow-ups

• Given APRA’s supervisory use of the data for prudential assessment including capital standards (para 2), expect queries about material data points such as large off-balance exposures, related-party concentrations and collateral arrangements. Maintain narrative explanations and supporting documentation for any material items that materially affect capital assessment or insurance liabilities.

By implementing these structured governance, data, audit and submission processes aligned to the precise requirements of the Reporting Standard (paras 4-14 and the form instructions), insurers will position themselves to meet the Standard’s reporting, audit and authorisation obligations and to respond to APRA supervisory requests tied to the collected data.