Payment Systems (Regulation) Act 1998 - Access Regime for the VISA Credit Card System

The Access Regime builds around a small number of interlocking legal concepts: eligibility, assessment criteria, non-discrimination, participant freedoms, transparency, and external oversight via certification. Each concept is defined, constrained, or operationalised in the text.

Eligibility and classes of eligible applicants

• The primary classes explicitly eligible are authorised deposit-taking institutions (ADIs) and former specialist credit card institutions (para 8). The regime imports the statutory meaning of “authorised deposit-taking institution” from s 5(1) of the Banking Act 1959 and cross-references the definition of former specialist credit card institution by reference to Regulation 4 of the Banking Regulations 1966 (para 3).
• For entities other than ADIs or former specialists, the administrator may establish eligibility criteria, and those criteria must be reasonably related to risks to the Scheme, its participants, merchants or cardholders (paras 9-10). Thus eligibility for non-ADIs is conditioned on criteria that themselves must bear a risk nexus.

Assessment criteria and admission process

• The administrator must establish assessment criteria (para 11). The regime requires that the administrator apply those criteria and be transparent about them (para 17). There is a procedural guarantee that applications be assessed “in a timely manner without undue delay” (para 19), the applicant must be given an estimate of assessment timing (para 18), and rejected applicants must receive reasons in writing within one month (para 20).

Non-discrimination and risk-based differentiation

• The Act forbids discrimination between specialist credit card institutions as a class and other ADIs as a class in setting or applying assessment criteria or participant rights and obligations, except to the extent reasonably required to address the risks arising from participation of that class (para 12).
• More broadly, the Act prohibits discrimination against any entity or class of entity, except to the extent reasonably required to assess and address risks to the Scheme or its participants (para 13). The operative qualifier is “reasonably required” and the risk nexus.

Participant structure and fee constraints

• The regulator prevents the Scheme’s rules or participants from denying a participant the option to be issuer-only, acquirer-only, or both (para 14). It also bars any fee, charge, loading or penalty that is “as a consequence of, or which is related in any way to” a participant’s activity as an acquirer relative to issuer activity (para 15). These provisions restrict contractual or rule-based cross-subsidies that would disadvantage acquirers relative to issuers.

Self-acquisition

• The Scheme or other participants may not prohibit a participant from being a self acquirer if the participant can reasonably establish, in accordance with the rules, that it has the capacity to meet acquirer obligations (para 16). The test is both evidentiary (“reasonably establish”) and procedural (in accordance with the rules).

Transparency and RBA oversight

• The administrator must continuously publish eligibility criteria, assessment criteria, the risks those criteria address, and the maximum time to assess applications on the Scheme website (para 17). An annual certificate to the Reserve Bank (para 21) requires the administrator to certify compliance and to list applications, outcomes, dates and reasons for rejection. This creates transparency to both market participants and the Reserve Bank.

Interpretation and compliance obligations

• Participants must “do all things necessary” to ensure compliance (para 4). Instruction to interpret the Access Regime “in accordance with its objective” and by “looking beyond form to substance” (para 6) signals a purposive interpretive standard that emphasises outcomes over formalistic compliance.

The concepts are deliberately framed as constraints on private ordering by the Scheme’s administrator and participants, combined with administrative transparency and an annual reporting obligation to the Reserve Bank. The core standard that recurs across multiple clauses is that distinctions, exclusions and fees are permitted only to the extent they are reasonably related to and required to manage risks to the Scheme or its stakeholders.

This Access Regime creates obligations and protections that affect a defined set of actors connected with the Visa credit card system operating in Australia.

Primary affected parties

• The Scheme’s administrator: the text places multiple positive duties on the administrator , to establish and apply eligibility and assessment criteria, to publish those criteria and the risks they address, to provide time estimates and reasons for rejections, and to make a detailed annual certificate to the Reserve Bank (paras 11, 17-21). The administrator therefore bears the principal administrative and reporting burden created by the regime.

• Participants in the Scheme in Australia: participants are required to ensure compliance with the Access Regime (para 4). Participants are constrained from imposing discriminatory criteria or fees as between categories of participants, must accept structural choices (issuer-only, acquirer-only), and must not prohibit self-acquisition where capacity can be reasonably established (paras 12-16). Incumbent participants therefore face limits on their ability to use the Scheme’s rules or contractual practices to exclude or disadvantage particular types of entrants.

• Applicants: potential applicants are directly affected. ADIs and former specialist credit card institutions have an express statutory entitlement to be eligible to apply (para 8). Non-ADIs may apply only if they meet eligibility criteria established by the administrator, and must meet assessment criteria to be admitted (paras 9-11).

Secondary affected parties

• Merchants and cardholders: they are not addressees of the duties but are stakeholders referenced in the risk balancing that governs eligibility and assessment criteria (Objective; paras 9, 11-13). The regime’s prohibition on fees that penalise acquirers relative to issuers (para 15) may influence pricing and service choices that ultimately affect merchants’ costs and the availability of acquiring services.

• The Reserve Bank of Australia: the RBA is the receiver of the annual certificate (para 21) and hence the entity to which the administrator must demonstrate compliance. The instrument therefore creates a reporting relationship and an accountability channel to the RBA.

• Scheme rules and private contracts: the Access Regime expressly restricts the content and application of the Scheme’s constitution, rules, by-laws and procedures insofar as they operate in Australia and affect admission, fees and participant rights and obligations (para 3, paras 11-16). This affects how private contract terms operate and what terms can be enforced.

• Entities seeking to operate as acquirers or issuers in Australia that are not ADIs: these entities face the gatekeeping power of the administrator via eligibility criteria and assessment tests, and therefore must engage with the Scheme’s published criteria and risk standards (paras 9-11, 17).

Who pays and who decides (mechanically)

• Who pays: The Act itself does not prescribe application fees or penalties, but it places compliance and reporting costs on the administrator (publication, time estimates, assessment processes, annual certification) and on participants (obligations to ensure compliance and to implement non-discriminatory practices). Applicants will incur preparation and compliance costs to meet eligibility and assessment criteria, including the evidentiary burden required to demonstrate capacity for self-acquiring (paras 16, 17, 18, 21).

• Who decides: The administrator of the Scheme retains primary decision-making power over eligibility criteria, assessment criteria and admission decisions, subject to the statutory constraints (paras 9-11, 12-13). The Reserve Bank is an oversight recipient of the annual certificate but is not given decision-making functions in this text beyond receiving the report (para 21). Courts or arbital fora could be asked to interpret the regime in disputes, but the Access Regime does not itself specify enforcement pathways (paras 4, 6).

Geographical and temporal scope

• The regime applies to participation “in the Scheme in Australia” and to the rules of the Scheme “as applied in Australia” (paras 2-3). The compiled instrument notes commencement in 2004, with amendments coming into force on 1 January 2015 (para 7; endnotes 3-4), so its operational scope is limited geographically to Australia and temporally to the periods in which it is in force.

In short, the regime primarily affects administrators, participants and applicants for admission to the Visa Scheme in Australia, by creating procedural protections for applicants, non-discrimination constraints on incumbents and reporting obligations to the Reserve Bank. The Act’s design shifts administrative and compliance costs onto the Scheme administrator and existing participants, while retaining primary admission discretion with the administrator subject to statutory risk-based constraints and transparency requirements.

The Access Regime articulates a set of positive duties for the Scheme administrator and participants, and rights for applicants and participants. Below is a distilled catalogue of those duties and rights with references to the relevant paragraphs.

Duties imposed on the Scheme administrator

• Establish and apply assessment criteria for admission of eligible applicants (para 11). This is a mandatory duty: “must establish… and apply criteria.”
• If eligibility criteria are used for entities other than ADIs or former specialists, those criteria must be reasonably related to risks to the Scheme and applied in accordance with their terms (para 9).
• Continuously publish on the Scheme’s website: eligibility criteria and the risks they address; assessment criteria and the risks they address; and the maximum time to assess any application (para 17).
• Provide applicants with an estimate of the time to assess their application before terms of participation are proposed or a decision is made (para 18).
• Assess applications “in a timely manner without undue delay” (para 19).
• Provide written reasons for rejection within one month after rejection (para 20).
• Annually, by 31 July, provide a certificate to the Reserve Bank covering the previous 12-month reporting period, certifying compliance with the Access Regime, listing entities that applied or ceased participation, and providing dates and reasons for application outcomes (para 21).

Duties imposed on participants

• Each participant must “do all things necessary on its part to ensure compliance with this Access Regime” (para 4). That is a broad, catch-all duty obliging participants to align conduct and rules with the Access Regime’s requirements.
• Participants, through scheme rules or otherwise, must not discriminate between specialist credit card institutions and other ADIs as a class when setting or applying assessment criteria or rights and obligations, except to the extent reasonably required to address risks (para 12).
• Participants must not discriminate against any entity or class of entity, subject to the same risk-based exception (para 13).
• The rules of the Scheme and any participant shall not prevent a participant from electing to be issuer-only, acquirer-only, or both (para 14).
• The rules of the Scheme and any participant shall not impose any fee, charge, loading or penalty related in any way to a participant’s activity as an acquirer relative to its activity as an issuer (para 15).
• The rules of the Scheme or any participant shall not prohibit a participant from being a self acquirer if the participant can reasonably establish capacity to meet acquirer obligations in accordance with the rules (para 16).

Rights and protections for applicants and participants

• Express statutory eligibility: ADIs and former specialist credit card institutions are eligible to apply (para 8).
• Procedural rights: applicants are entitled to an initial time estimate for assessment (para 18), are entitled to timely assessment without undue delay (para 19), and are entitled to written reasons for rejection within one month of rejection (para 20).
• Non-discrimination protection: applicants and participants are protected against discriminatory application of assessment criteria and discriminatory rights/obligations, subject only to the risk-based exception (paras 12-13).
• Structural freedom: participants have the right to be issuer-only, acquirer-only, or both (para 14), and the right to be a self acquirer provided they can reasonably establish capacity (para 16).
• Protection against fee-based disadvantage: participants cannot be charged higher fees or penalised for being more active as acquirers relative to issuers (para 15).

Interpretive and compliance obligations

• The regime is to be interpreted in accordance with its stated objective to promote efficiency and competition, with regard to interests of participants, potential entrants, the public and financial stability (Objective; para 6(a)).
• The regime instructs interpretation “by looking beyond form to substance” (para 6(b)); this suggests that apparent compliance with form will not be accepted where outcomes are inconsistent with the regime objective.

Limits and conditions

• Where differentiation is permitted, it must be “reasonably required” to assess and address risks arising or likely to arise from participation (paras 12-13). The reasonable requirement and the risk nexus are the statutory limiting principles that authorise departures from non-discrimination.
• The statutory duties are procedural and structural; the regime does not itself specify monetary penalties or criminal sanctions within the text provided. Compliance and enforcement consequences beyond the reporting and certificate mechanism are not detailed in the instrument as compiled here (paras 4, 21).

In practice, the key duties establish administrative transparency and a risk-based non-discrimination floor, while the rights protect applicants’ procedural expectations and participants’ structural choices. The interpretive instructions push for purposive enforcement, and the annual certification creates an enforcement-oriented reporting interface to the Reserve Bank, which receives detailed operational data about applications and outcomes (para 21).

The Access Regime text as compiled focuses on duties, disclosure and reporting obligations rather than on prescribing a catalogue of sanctions within the text itself. The instrument does not enumerate civil or criminal penalties or enforcement mechanisms in this compilation; it instead creates obligations and a reporting relationship to the Reserve Bank that enable oversight. Key enforcement-relevant provisions and their practical implications are as follows.

Direct enforcement language in the text

• Para 4 imposes a broad duty on each participant to “do all things necessary on its part to ensure compliance with this Access Regime.” The duty is phrased as mandatory but the instrument does not include express penalties for breach within its own text.
• Para 21 requires the administrator to deliver an annual certificate to the Reserve Bank certifying compliance and providing detailed lists and reasons for admissions, rejections and cessations. The certificate functions as an ex post accountability mechanism.

Absence of specific sanction clauses in the regime

• The text does not specify fines, civil remedies, or criminal offences for contravention of the Access Regime. It also does not set out an administrative penalty regime or give express enforcement powers to particular bodies within this instrument.
• Because the instrument is made under s 12 of the Payment Systems (Regulation) Act 1998, it is likely that enforcement architecture , including potential powers of the Reserve Bank or other remedies , is located in the parent Act or in other legislation. That enforcement architecture is not reproduced in the compiled Access Regime provided here, and therefore cannot be claimed or described beyond the fact of the instrument’s provenance under s 12.

Enforcement pathways that the instrument creates or facilitates

• Public disclosure and RBA reporting: the continuous publication obligations (para 17) and the annual certificate to the Reserve Bank (para 21) create transparency channels that enable market pressure and regulatory scrutiny. The RBA will receive a detailed record of applications, outcomes, dates and reasons for rejections for the reporting period (para 21(b)(i)-(iv)). That information can be used by the Reserve Bank to monitor compliance and, in the parent legislative context, to decide whether further regulatory action is necessary.
• Procedural rights for rejected applicants: requirement to provide written reasons within one month (para 20) creates a documented basis for legal challenge if an applicant believes the rejection contravenes the Access Regime. The requirement is procedural and creates evidence for any potential review, judicial or otherwise.
• Interpretation clause: para 6(b) instructs decision-makers and courts to “look beyond form to substance,” which may influence judicial review or other interpretive processes, potentially making it difficult for a respondent to defend a breach by pointing to formal compliance where outcomes violate the objective.

Practical enforcement risks and uncertainty

• Because the instrument relies heavily on transparency, reasoned decision-making and reporting rather than explicit sanctions, enforcement may operate through reputational and regulatory pressure rather than immediate statutory fines. The effectiveness of that route depends on the Reserve Bank’s willingness and capacity to act on the information provided and on private parties’ use of procedural remedies.
• The “reasonably required” standard for exceptions to non-discrimination (paras 12-13) is inherently fact-specific, which tends to create litigation or review risk where applicants or participants disagree about whether a measure is risk-based and proportionate. The Access Regime does not itself set adjudicative mechanisms or time-bound enforcement procedures beyond the reporting obligations detailed above.

Conclusion on penalties and enforcement

• The compiled Access Regime imposes substantive and procedural obligations on the Scheme administrator and participants and creates transparency and reporting channels to the Reserve Bank as the central oversight mechanism. It does not specify monetary penalties or an internal administrative penalty schedule within this text. Enforcement therefore will rely principally on the reporting, public transparency and any enforcement powers or remedies contained in the parent legislation (Payment Systems (Regulation) Act 1998) or in general administrative or judicial review processes outside the text of the Access Regime as compiled here (paras 4, 17, 20-21).

The Access Regime is a statutory instrument made under the Payment Systems (Regulation) Act 1998 and explicitly cross-references statutory concepts and external regulatory instruments. It therefore operates in a web of regulatory and private-law relations. The text itself indicates a number of cross-linkages.

Primary statutory relationships

• Payment Systems (Regulation) Act 1998: the Access Regime is made under section 12 of that Act (para 1). The parent Act provides the legal authority for designation of payment systems and the imposition of access regimes. The compiled text does not reproduce the enforcement powers available under the parent Act; those provisions remain in the Payment Systems (Regulation) Act and are not part of this schedule.

• Banking Act 1959: the term “authorised deposit-taking institution” is given the meaning in section 5(1) of the Banking Act 1959 (para 3). Consequently, entities that are ADIs under the Banking Act are statutorily eligible to apply.

• Banking Regulations 1966: the definition of “specialist credit card institution” and “former specialist credit card institution” draws on Regulation 4 of the Banking Regulations 1966 (para 3). That regulation therefore determines which entities fall within the “specialist” and “former specialist” categories.

• Corporations Act 2001: the term “related body corporate” in the definition of self-acquirer references the definition of that term in the Corporations Act (para 3). That connection affects how the self-acquirer concept applies where merchants are related entities.

Interaction with private law and scheme rules

• The Access Regime expressly defines “rules of the Scheme” as the constitution, rules, by-laws, procedures and instruments of the Scheme as applied in Australia and any other arrangement by which participants consider themselves bound (para 3). The regime therefore operates as a statutory constraint on those private-law rules where they apply in Australia.

• Paras 11-16 functionally alter the content and permissible application of the Scheme’s own rules and any participant-created rules insofar as those rules bear on eligibility, discrimination, fees related to acquirer versus issuer activity, structural options for participants and self-acquisition. In short, scheme rules that conflict with these statutory constraints must be amended to comply with the Access Regime.

Regulatory oversight and reporting

• The annual certificate required by para 21 creates a formal reporting pathway to the Reserve Bank. The certificate requires the administrator to attest to compliance with the Access Regime during the reporting period and to provide detailed transactional data on applications and admissions. This reporting obligation situates the Access Regime within the Reserve Bank’s supervisory purview.

Potential interface with competition and contract law

• While the instrument’s objective is to promote efficiency and competition, it does not invoke the Competition and Consumer Act or competition enforcement mechanisms explicitly in this text. However, the non-discrimination and access obligations may be relevant to competition law assessments in practice, because they affect market access and the distribution of rights and fees among participants and entrants. Any competition-law consequences would arise from the interaction of this regime with the broader statutory framework and case law outside this text.

Limits of interaction within the compiled text

• The Access Regime reiterates definitions from other statutes but does not reproduce those statutory regimes, nor does it provide an exhaustive account of how enforcement under the Payment Systems (Regulation) Act or other statutes will be exercised. Therefore, to understand full enforcement, sanctioning powers, or remediation paths, readers must consult the parent Payment Systems (Regulation) Act, Banking Act and Banking Regulations referenced in the definitions and the instrument’s enabling provision (para 1 and para 3).

Compliance hierarchy

• The Access Regime sits above private scheme rules insofar as it imposes statutory constraints on what those rules may require or prohibit in Australia. The scheme administrator and participants must align their rules and practices with the regime or risk non-compliance and the reporting/oversight consequences set out in para 21.

In sum, the Access Regime is designed to work in conjunction with, and constrained by, existing banking and payment-system statutes and the scheme’s own private-law instruments. It creates statutory limits on scheme rules and participant practices and establishes reporting obligations to the Reserve Bank, but does not, within its own text, encapsulate the full panoply of enforcement powers that may be present in the parent legislation.

The compiled instrument includes an explicit amendment history and endnotes that document its legislative changes up to the compilation date. The key facts from the endnotes are as follows.

Origination and amendment milestones

• The Access Regime originally came into force on 23 February 2004 (para 7; Endnote 3 “Access Regime for the Visa Credit Card System” showing 23 February 2004; see also Endnote 3 table).

• A Variation to the Access Regimes for MasterCard and Visa Credit Card Systems (F2014L01760) was registered/gazetted on 19 December 2014 and commenced on 1 January 2015. The compiled text reflects amendments up to and including that variation (para 7; Endnote 3 shows registration/gazettal and commencement dates).

Amendments at provision level

• Endnote 4 provides a granular amendment history showing which provisions were amended by F2014L01760. The following items are recorded in Endnote 4:

  • The heading “Access Regime” was amended.
  • Paragraph 2 was amended.
  • Paragraph 3 was amended.
  • Paragraph 6 was amended.
  • Paragraph 7 was amended.
  • The heading “Eligibility for participation” was amended.
  • Paragraph 8 was amended.
  • Paragraphs 9, 10 and 11 were added (ad).
  • Paragraph 9 was renumbered and amended.
  • The heading “Terms of participation” was amended, and related paragraph renumbering occurred.
  • Paragraphs 11 and 12 were renumbered.
  • The heading “Transparency” was amended.
  • Paragraph 13 was renumbered and amended.
  • Paragraph 14 and 15 were renumbered and amended.
  • Paragraph 21 was added.

• The endnote indicates renumbering and additions consistent with a substantive recast of the regime’s procedural and transparency elements in the 2014 variation.

Compilation notes

• The compilation start date is 1 January 2015 and the compilation was prepared on 1 January 2015, incorporating amendments up to the Variation F2014L01760 (opening notes and Endnote 3).
• Endnotes 5-8 record that there are no uncommenced amendments, no modifications, no misdescribed amendments, and no miscellaneous items included in the compilation (Endnotes 5-8 show “[none]”).

Implications for legal practitioners

• The amendment history recorded in Endnote 4 demonstrates that the 2014 variation substantially redrafted and extended the regime’s eligibility, assessment, transparency and reporting provisions. Practitioners should pay attention to the text of the currently compiled version (effective 1 January 2015) rather than to pre-2015 versions of the regime, since the procedural obligations and reporting duties were materially expanded.

• The endnotes are part of the official compilation and should be consulted where questions arise about commencement dates and amending instruments. Any historical disputes or actions that predate the 2015 amendments will involve a different version of the regime.

In short, the instrument has its origin in 2004 and was materially varied by the 2014 instrument bringing a new version into force on 1 January 2015; the endnotes in the compilation record those changes and the provisions affected.

The compiled Access Regime document and accompanying endnotes do not record any litigation or case law interpreting this specific Access Regime. The endnotes (Endnote 8) indicate “[none]” under miscellaneous, and there are no case citations within the instrument itself. The instrument names no cases and provides no account of judicial review or enforcement proceedings.

What the absence of recorded litigation means in practice

• The compilation does not claim that the Access Regime has never been litigated; rather, the document as compiled contains no annotated case history. Users seeking authoritative judicial interpretation of the regime should search case law databases for decisions that mention the Access Regime, the Payment Systems (Regulation) Act 1998 or relevant conflicts involving the Visa scheme’s rules since the regime’s inception and after the 2015 amendments.

• The interpretive instructions in the regime , notably the direction to interpret “in accordance with its objective” and to look “beyond form to substance” (para 6) , are the kinds of textual cues that could give rise to judicial review litigation about whether administrative decisions comply with the regime. The requirement for written reasons for rejection within one month (para 20) and the annual certificate to the Reserve Bank (para 21) create documentary records that would be available if litigation occurred.

Potential forums for litigation or review

• Any dispute over compliance with the Access Regime could potentially be the subject of administrative review or judicial review in the Federal Court or the Federal Circuit Court, or could be litigated under contractual or statutory remedies if a party alleges contravention of the regime via incompatible scheme rules. The compiled instrument does not itself designate a preferred dispute-resolution forum or prescribe statutory appeal rights.

Recommendations for legal research

• Before relying on a particular interpretation of the regime, practitioners should conduct a jurisdictional search for case law that may have arisen after the compilation date, and review the Payment Systems (Regulation) Act 1998 and Banking Act 1959 for related enforcement powers or judicial pronouncements. The compilation provides no litigation record and therefore does not substitute for targeted case-law research.

In sum, the compilation contains no recorded litigation history, and the absence of cases in the text means that interpretive and enforcement questions remain to be investigated through primary case-law searches and examination of the parent Act’s enforcement provisions.

This regime contains textual features, gaps and standards that create legal and practical risks which require careful attention. Below are specific “gotchas” drawn directly from the text and the endnotes.

“Reasonably related to the risks” and “reasonably required”

• Paras 9, 12 and 13 allow the administrator and participants to set eligibility and assessment criteria and to differentiate treatment only to the extent that such measures are “reasonably related to the risks” or “reasonably required” to assess and address risks to the Scheme, participants, merchants or cardholders. These standards are fact-specific and not numerically defined. Practitioners must expect disputes about what is “reasonable” and whether the risk nexus is satisfied. The regime provides no explicit elaboration of the standard or a pre-specified analytical test; parties will need to rely on documentation, evidence and possibly external expert assessments to justify risk-based exclusions.

Interpretation instruction: “look beyond form to substance”

• Para 6(b) directs interpretation beyond formal compliance. That raises the evidentiary bar for administrators and participants who rely on formalistic or cosmetic measures that leave the practical effect of exclusion or discrimination untouched. Decision-makers must be able to demonstrate substantive compliance with the regime’s objective, not merely textual conformity.

No enumerated penalties or specific enforcement procedures in this text

• The regime does not set out fines, penalty amounts or an administrative penalty regime in this compilation. Enforcement therefore depends on the broader statutory framework (the parent Act), reputational and regulatory pressure via the Reserve Bank’s receipt of the annual certificate, and any judicial remedies that applicants might pursue. Parties should not assume immediate statutory fines; they should, however, not assume immunity from enforcement since the parent Act may supply additional powers.

Transparency obligations but flexible timing requirements

• Para 17(c) requires publication of the “maximum time it will take to assess any application,” and para 18 requires the administrator to provide an estimate to the applicant. However, para 19 only requires assessment “in a timely manner without undue delay” and contains no hard deadlines. The combination of a published maximum time and a loose timeliness standard can create compliance risk if administrators publish optimistic maxima without resourcing to meet them, or if applicants rely on estimates that are not binding. The one-month deadline for reasons following rejection (para 20) is precise; other timeframes are not.

Self-acquirer test depends on Scheme rules

• Para 16 allows participants to be self acquirers if they can “reasonably establish in accordance with the rules of the Scheme” that they have capacity to meet acquirer obligations. The operative test is both evidential (“reasonably establish”) and procedural (must be “in accordance with the rules of the Scheme”). If the Scheme’s rules impose additional documentary or capital requirements, a prospective self acquirer must meet those rule-based requirements; the Access Regime does not itself set an independent statutory test.

Broad duty to “do all things necessary” to ensure compliance

• Para 4 imposes a sweeping duty on participants to do “all things necessary” to ensure compliance. That language can be read to include internal processes, revisions to contractual templates, staff training, information systems changes and costs to align with transparency and non-discrimination obligations. The scope of “all things necessary” will be fact-sensitive but is expansive.

Limited scope: applies to the Scheme “in Australia”

• The regime applies only to participation “in the Scheme in Australia” and to the Scheme’s rules “as applied in Australia” (paras 2-3). That means measures taken outside Australia or in respect of cross-border operations may be outside the regime’s immediate reach. Parties relying on cross-border exclusions should not assume this regime covers all foreign-conduct aspects of the Scheme.

Annual certificate creates granular reporting obligations

• Para 21 requires the administrator to list the date an application was made, dates of any proposal of terms or conditional approval, final decision dates, admission dates, and reasons for rejection. Inadequate record-keeping will expose administrators to non-compliance findings, and possibly to follow-up from the Reserve Bank or participants. The requirement to list entities who ceased to be participants and reasons for cessation also creates a data-retention and investigative obligation.

Potential for regulatory arbitrage and rule complexity

• Because the administrator may set eligibility criteria for non-ADIs, there is scope for complex eligibility regimes tied to risk assessments. If those criteria are not publicly well-explained and well-documented (contra para 17), disputes and accusations of arbitrary exclusion can arise. The statute’s transparency requirements mitigate this risk, but only if the administrator publishes clear criteria and the risk rationales.

No record of litigation in the compiled text

• The absence of litigation history in the compilation does not mean the regime is untested. Practitioners must not assume settled legal interpretations; the regime contains open-textured standards likely to generate disputes.

Practical consequence: documentation and evidence

• The common thread across many “gotchas” is evidentiary burdens and documentation. The regime’s standards and reporting obligations will require administrators and participants to keep rigorous contemporaneous records of criteria-setting, risk assessments, application handling times and the reasons given for adverse decisions.

In summary, the key risks are interpretive uncertainty around “reasonableness,” the breadth of the duty to do “all things necessary,” the absence of express penalties within the text, the mixture of precise and imprecise timing obligations, and the dependence on scheme rules for important substantive determinations (notably self-acquirers). These features heighten the importance of detailed policies, record-keeping and transparent public disclosure by the administrator.

Compliance under this Access Regime requires coordinated action by the Scheme administrator, participants, and applicants. Below are practical steps, mapped to the relevant provisions, intended for legal teams, compliance officers and in-house counsel.

For the Scheme administrator

1. Publish eligibility and assessment criteria and risk rationales (para 17(a)-(b))

   • Maintain an up-to-date page on the Scheme’s Australian website listing eligibility criteria for ADIs, former specialist credit card institutions and any additional criteria for non-ADIs.
   • For each criterion, publish the specific risks the criterion is intended to address and the factual or quantitative basis for that risk assessment.
   • Ensure changes to criteria are timestamped and archived to support the annual certificate (para 21(b)) and any inquiries.

2. Publish timing commitments and provide estimates (paras 17(c), 18)

   • Publish a defensible “maximum time” to assess any application. Assess organisational resourcing to ensure the published maximum is achievable.
   • Establish a standardised process to issue applicants a written estimate of assessment time upon receipt of an application and to update that estimate if circumstances change.

3. Operate timely, documented assessment procedures (para 19)

   • Implement case-management workflows and SLAs that align with the “timely manner without undue delay” standard. Track start and end dates for each application, dates of proposals of terms, conditional approvals, final decisions and admission dates for reporting (para 21(b)(i)-(iii)).

4. Provide reasons for rejection and maintain records (para 20; para 21)

   • Draft template forms that provide written reasons for rejection within one month of rejection and retain those letters.
   • Maintain a secure database of all applications and outcomes with timestamps to support the annual certificate, which requires extensive detail (para 21(b)).

5. Prepare the annual certificate to the Reserve Bank (para 21)

   • Build internal audit and sign-off protocols to produce the certificate by 31 July covering the reporting period to 30 June. The certificate must attest that eligibility and assessment criteria complied with the Access Regime, that applicants admitted during the period met criteria, and that the administrator otherwise complied with the regime (para 21(a)).
   • Create a schedule to collect information required for the certificate, including lists of applications, admissions, rejections and reasons for cessations (para 21(b)-(c)).

6. Train staff and align Scheme rules

   • Ensure staff who assess applications understand the “reasonably related to the risks” standard and can document the risk assessment supporting each decision.
   • Review the Scheme’s rules as applied in Australia to ensure they permit issuer-only, acquirer-only, both, and self-acquiring where capacity can be reasonably established (paras 14-16). Amend rules that are inconsistent with the Access Regime.

For participants (incumbent issuers, acquirers and other participants)

1. Review and amend internal rules and commercial terms

   • Remove or revise any rule or contract term that discriminates between specialist credit card institutions and other ADIs as classes, unless a documented risk-based rationale exists (para 12).
   • Prohibit imposition of any fee, charge, loading or penalty based on the relative activity of a participant as acquirer versus issuer (para 15).

2. Establish compliance programmes and documentation systems

   • Implement compliance checks to ensure all participant actions and rules align with the Access Regime. The broad duty to “do all things necessary” (para 4) means practical measures are required: training, policy manuals, audit trails and manager sign-offs.

3. Facilitate self-acquirers where appropriate

   • If a participant wishes to be a self acquirer, design application guidance that explains the evidentiary standard and the rule-based process by which capacity to meet acquirer obligations will be assessed (para 16). Be ready to handle reasonable demonstrations of capacity.

For applicants and prospective entrants

1. Confirm eligibility and prepare evidence

   • If you are an ADI or former specialist credit card institution, document your statutory status under the Banking Act or Banking Regulations and be ready to supply standard corporate and prudential documentation.
   • If you are a non-ADI, obtain and review the administrator’s published eligibility criteria and the risk rationales (para 17). Prepare documentary evidence and expert reports to demonstrate how you satisfy those criteria and how the proposed participation does not create unacceptable risk.

2. Seek time estimates and record them

   • Request in writing the estimate of assessment timing that the administrator must provide (para 18). Use the estimate as a milestone to follow up if delays occur.

3. Preserve evidence and be ready to seek reasons

   • If an application is rejected, the administrator must provide written reasons within one month (para 20). Preserve these reasons for any potential review or complaint. If reasons are deficient, consider requests for further particulars or legal remedies, keeping in mind the interpretive instruction to look beyond form to substance (para 6).

For legal and compliance advisers

1. Maintain risk-based justifications

   • When advising the administrator or participants, ensure that any differentiation or exclusion is justified by contemporaneous, documented risk assessments that explain why the distinction is “reasonably required” (paras 12-13). Loose or ex post rationales will be vulnerable under the “substance over form” interpretive instruction (para 6(b)).

2. Coordinate with prudential and competition advice

   • Because the regime references ADI status and banking regulations, coordinate with prudential counsel to verify that eligibility and capacity assessments align with prudential frameworks. Consider potential intersections with competition law and seek cross-disciplinary input where access restrictions materially affect market structure.

3. Build litigation-ready records

   • Given the regime’s procedural protections, maintain litigation-grade records for application handling: decision memos, minutes of meetings considering risk, communications with applicants, timestamps, and evidence supporting published criteria and maximum assessment times (paras 17-21).

Operational practices and templates to adopt

• Publication template for eligibility and assessment criteria, including specific risk statements and evidence thresholds (para 17).
• Application intake and acknowledgment form that triggers para 18’s timing estimate and records the date of receipt (para 18).
• Assessment checklist mapping each criterion to evidence items and risk mitigations, including capital, operational, fraud controls and settlement capacity where relevant (paras 11, 16).
• Rejection letter template covering the legal requirement for written reasons within one month (para 20).
• Annual reporting workbook that collates application dates, conditional offers, final decisions, admission dates and reasons for rejections and cessations in the precise level of detail required by para 21.

Final practical note

• The regime’s operative standards rely heavily on reasoned documentation, public disclosure and procedural timeliness. Compliance therefore depends less on a single legal device and more on continuous operational discipline: published policies, robust documentation, effective case management, and timely reporting to the Reserve Bank. Failure to maintain these operational practices will produce the most immediate compliance risk, given the regime’s emphasis on transparency and reporting.