For a cash dealer or reporting entity subject to the Act, compliance requires systematic integration with existing Commonwealth AML/CTF programs.
1. Identify reportable positions. Determine whether the entity is both a cash dealer under the FTR Act and a reporting entity under the AMLCTF Act. If it is only a cash dealer, the suspect transaction reporting duty under section 7 applies. If it is a reporting entity but not a cash dealer, section 7 does not apply, but sections 6A and 7A do.
2. Train staff on suspect transaction identification. Staff who handle transactions should be trained to identify red flags that may be relevant to state offences (e.g. tax evasion, drug trafficking, fraud) and to escalate matters promptly. The suspicion must be reasonable and grounded in objective facts. A subjective hunch is not enough. The entity should document the grounds of suspicion when they arise, as section 7(3)(c) requires the report to contain a statement of those grounds.
3. Establish a reporting procedure. When a suspicion is formed, the cash dealer must prepare a report and communicate its contents to the AUSTRAC CEO as soon as practicable. The report must use the form approved by the AUSTRAC CEO (the same as for an AMLCTF Act suspicious matter report) and comply with the AML/CTF Rules. The communication should be made by providing a copy of the report to AUSTRAC or in another approved way. The entity should also retain a copy of the report and the grounds for suspicion for its own records and for any subsequent requests.
4. Respond to designated authority requests. If a request for further information is received from the Commissioner of Police or an investigating police officer, the entity must respond within the period stated (if the request is made under section 6A, it must be in writing). For requests under sections 6 or 7A, the Act does not specify a time limit, but the duty to comply is immediate. The entity should verify that the request is from a designated authority (police officer investigating a matter arising from AUSTRAC information) and that the information requested is relevant to a state offence or confiscation. If there is doubt, seek legal advice. Do not ignore the request; failure to comply is an offence.
5. Manage false statement risk. Ensure that all information provided under the Act (whether in reports or in response to requests) is accurate and not misleading. Implement a verification process. If information is incomplete or uncertain, state that clearly rather than omitting qualifiers. Section 9 requires knowledge of falsity or misleading omission, but a pattern of reckless inaccuracies could support an inference of knowledge.
6. Secrecy and confidentiality. Although the Act does not impose a secrecy duty on cash dealers or reporting entities, entities should be aware that the information they provide to AUSTRAC is subject to Commonwealth secrecy provisions. Internally, restrict access to report information to staff who need it to comply. Do not disclose to the customer that a report has been made, as that may constitute tipping-off under the AMLCTF Act.
7. Record keeping. Retain records of all requests received, responses given, and the grounds for any suspicion reports. The Act does not specify a retention period, but the Commonwealth AML/CTF Rules generally require retention for seven years. Comply with the longer period.
8. Review and update policies. Since the Act incorporates definitions from the FTR Act and AMLCTF Act by reference, any amendment to those Commonwealth Acts automatically affects the Tasmanian Act. A change to the definition of "cash dealer" could expand or contract the reporting duty under section 7. Regularly review Commonwealth and state changes.
9. Seek independent legal advice on privilege. If a request under section 6A or 7A calls for documents or information that may be subject to legal professional privilege, do not automatically produce them. Claim privilege and, if the designated authority insists, seek declaratory relief from the court. Section 10A preserves privilege, but the Act does not provide a mechanism to delay compliance pending a determination. The entity may need to balance the risk of prosecution for non-compliance against the risk of waiving privilege.
10. Do not rely on section 8 protection for acts not required. The protection from liability is only for acts that were required under the Act or done in the mistaken belief they were required. If an entity goes beyond what the Act requires (e.g. publishing a customer's details), the protection does not apply. Stay within the bounds of the request or the reporting obligation.