The regulation imposes obligations across multiple participant groups in the security ecosystem. The main affected parties are individual applicants and licensees for security provider roles; security firms; liquor licensees using paid crowd controllers; approved or prospective security industry associations; accountants and auditors; and the chief executive as the regulator.
Individual applicants and licensees (s 4-7, s 11, s 12, s 25). Individuals applying for, or holding, licences as bodyguards, crowd controllers, private investigators, security advisers, security equipment installers or security officers must supply identity evidence satisfactory to the chief executive (s 4, s 5), provide certified photographs in defined circumstances (s 6), carry licence documentation that includes a photograph (s 11), and notify the chief executive of changes in particulars within seven days (s 12). Licensed crowd controllers must wear prescribed identification when on duty (s 25).
Security firms (s 5, s 20-23). Security firms must supply evidence of identity for relevant officers (s 5(2)), keep registers of engaged security providers, record licence numbers, expiry dates and engagement dates, retain registers for at least seven years and permit chief executive inspection (s 20). If providing crowd controller services at a public place, firms must keep venue registers (s 21) unless a liquor licensee is required to keep one (defined by s 16-17). If a firm supplies restricted licensees, it must ensure the restricted licensee performs only authorised functions and is under appropriate direct supervision (s 23). Firms are also subject to the business name limitation on licences where carrying on business under multiple names must be stated on the licence (s 9), and it is an offence to carry on business under a name not recorded on the security firm licence (s 10).
Liquor licensees and venues (s 16-19). A liquor licensee who engages paid crowd controllers at a venue must keep a secure, legible register at the public place noting full name, licence number, firm name (if supplied by a firm), identification number to be worn (s 25), duty start/finish times, supervisory arrangements for restricted licensees, and incident details including injuries and removals (s 18). They must ensure certain entries are made and signed before and after duty and retain registers for seven years (s 18(6), s 19(3)). The liquor licensee must allow the chief executive to inspect the register (s 19(1)).
Security industry associations (sch 1A). Associations seeking approval or already approved under the Act are affected by a substantial set of incorporation, governance, financial viability and reporting requirements. They must be incorporated (sch 1A‑sec 3), hold elections at least every two years and include a relevant member or nominee on their management committee or board (sch 1A‑sec 4), provide audited financial statements and an accountant’s report on viability (sch 1A‑sec 5), offer member services and promote standards of conduct (sch 1A‑sec 6-7), maintain a chief-executive-approved code of conduct with procedural safeguards and a complaint management policy which must also be published (sch 1A‑sec 8-9), conduct compliance audits of relevant members by accountants in accordance with Auditing and Assurance Standards Board standards (sch 1A‑sec 10-11), report annually to the chief executive and retain member documents for seven years, producing them within 14 days if requested (sch 1A‑sec 12-13).
Accountants and auditors (sch 1A‑sec 5, sec 11, sec 12). The schedule makes accountants the designated audit professionals for association compliance audits and for providing written reports on financial statements and declarations of financial viability. Auditors must be accountants, must define audit scope, and must conduct audits in compliance with Auditing and Assurance Standards Board standards, producing written reports including a signed opinion on compliance with the association’s code of conduct (sch 1A‑sec 11). Associations must supply accountant-signed documents confirming agreement with declarations of financial viability (sch 1A‑sec 5, sch 1A‑sec 12).
The chief executive (s 4, s 6, s 7, s 12A-12B, s 13, sch 1A‑sec 2, sec 8-12). The regulator decides what identity evidence is "satisfactory", may adopt a points system, may require photographs for renewals, approves and may withdraw approval from industry associations, decides the form and method of the central register and how it may be inspected, and approves association codes and complaint policies. The chief executive also receives periodic reports from approved associations (sch 1A‑sec 12).
Interstate monitoring firms and officers (s 25A, s 25B). The regulation directly affects interstate providers that supply monitoring services from other States, by exempting appropriately authorised firms and officers from the requirement to hold a Queensland licence for those narrow activities, provided no other services are supplied in Queensland (s 25A-25B). The exemption is conditional on holding a corresponding authority under the other State’s law.
Collective burden and administrative recipients. Practitioners representing any of these stakeholders should note the recurring administrative burdens: document production, certified photographs, accounting audits, record retention and timely reporting. Penalties are set for non-compliance in multiple places, typically up to 20 penalty units (s 10, s 18, s 19, s 20, s 21, s 22).