General obligations
(1) A financial services licensee must:
(a) do all things necessary to ensure that the financial services covered by the licence are provided efficiently, honestly and fairly; and
(aa) have in place adequate arrangements for the management of conflicts of interest that may arise wholly, or partially, in relation to activities undertaken by the licensee or a representative of the licensee in the provision of financial services as part of the financial services business of the licensee or the representative; and
(b) comply with the conditions on the licence; and
(c) comply with the financial services laws; and
(ca) take reasonable steps to ensure that its representatives comply with the financial services laws, except to the extent that:
(i) those representatives are persons who carry on a business of providing goods or services to persons insured under insurance products in satisfaction of the liability of the insurers under those products; and
(ii) the financial services laws relate to the provision of claims handling and settling services by those representatives; and
(cb) comply with the law of each host economy for an Australian passport fund, if the licensee is:
(i) the operator of the fund; or
(ii) a person (other than a regulator) who has functions or duties in relation to the fund under the Passport Rules for this jurisdiction; and
(cc) comply with the Reference Checking and Information Sharing Protocol; and
(d) subject to subsection (4)--have available adequate resources (including financial, technological and human resources) to provide the financial services covered by the licence and to carry out supervisory arrangements; and
(e) maintain the competence to provide those financial services; and
(f) ensure that its representatives are adequately trained (including by complying with the CPD provisions), and are competent, to provide those financial services; and
(g) if those financial services are provided to persons as retail clients:
(i) have a dispute resolution system complying with subsection (2); and
(ii) give ASIC the information specified in any instrument under subsection (2A); and
(h) subject to subsection (5)--have adequate risk management systems; and
(j) comply with any other obligations that are prescribed by regulations made for the purposes of this paragraph.
Dispute resolution system
(2) To comply with this subsection, a dispute resolution system must consist of:
(a) an internal dispute resolution procedure that:
(i) complies with standards, and requirements, made or approved by ASIC in accordance with regulations made for the purposes of this subparagraph; and
(ii) covers complaints against the licensee made by retail clients in connection with the provision of all financial services covered by the licence; and
(c) membership of the AFCA scheme.
(2A) ASIC may, by legislative instrument, specify information that financial services licensees must give ASIC relating to their internal dispute resolution procedures and the operation of their internal dispute resolution procedures.
(2B) An instrument under subsection (2A) must not specify any information that is personal information within the meaning of the Privacy Act 1988 .
(3) Regulations made for the purposes of subparagraph (2)(a)(i) may also deal with the variation or revocation of:
(a) standards or requirements made by ASIC; or
(b) approvals given by ASIC.
Reference Checking and Information Sharing Protocol
(3A) ASIC may, by legislative instrument, determine a protocol for sharing and requesting information about an individual in respect of whom there are reasonable grounds to suspect that:
(a) if the individual becomes a representative of a financial services licensee ( recruiting financial services licensee ), the individual will provide personal advice to retail clients about relevant financial products; or
(b) if the individual becomes a representative of a credit licensee ( recruiting credit licensee ), the individual will:
(i) provide credit assistance in relation to credit contracts secured by mortgages over residential property; and
(ii) be a mortgage broker or a director, employee or agent of a mortgage broker; or
(c) a mortgage intermediary ( prospective mortgage intermediary ) is acting, or will act, as an intermediary in relation to a credit licensee where the individual is, or is a former, current or prospective representative of, that credit licensee, and in that capacity the individual:
(i) provides, provided or will provide credit assistance in relation to credit contracts secured by mortgages over residential property; and
(ii) is, was or will be a mortgage broker or a director, employee or agent of a mortgage broker.
(3AA) The Reference Checking and Information Sharing Protocol may provide for any or all of the following to share information about the individual with the recruiting financial services licensee, the recruiting credit licensee or the prospective mortgage intermediary:
(a) if the individual is a financial services licensee--the individual;
(b) if the individual is a former or current representative of a financial services licensee--that licensee.
(3AB) The Reference Checking and Information Sharing Protocol may provide, in a case covered by paragraph (3A)(a), for the recruiting financial services licensee to request information about the individual from any or all of the following:
(a) if the individual is a financial services licensee or credit licensee--the individual;
(b) if the individual is a former or current representative of a financial services licensee--that financial services licensee;
(c) if the individual is a former or current representative of a credit licensee--that credit licensee;
(d) if a mortgage intermediary has previously acted or is acting as an intermediary in relation to a credit licensee where the individual is, or is a former or current representative of, that credit licensee--that mortgage intermediary.
(3AC) The Reference Checking and Information Sharing Protocol may also provide for keeping and retaining records of information shared, and the circumstances under which that information is shared.
(3B) The Reference Checking and Information Sharing Protocol must not:
(a) require or permit personal information (within the meaning of the Privacy Act 1988 ) to be shared, other than with the consent of the individual to whom the information relates; or
(b) require information to be shared in relation to conduct that occurred more than 5 years before the information is shared.
(3E) Expressions used in paragraphs (3A)(b) and (c) and (3AB)(c) and (d) that are also used in the National Consumer Credit Protection Act 2009 (other than Reference Checking and Information Sharing Protocol) have the same meaning in that subsection as they have in that Act.
(3F) A person has qualified privilege in relation to information shared in accordance with the Reference Checking and Information Sharing Protocol.
(3G) A person who has qualified privilege under subsection (3F) in respect of conduct is also not liable for any action based on breach of confidence in relation to that conduct.
Adequate resources to provide financial services--APRA regulated bodies
(4) Paragraph (1)(d):
(a) does not apply to a body regulated by APRA, unless the body is an RSE licensee; and
(b) does not apply to an RSE licensee, unless the RSE licensee is also the responsible entity of a registered scheme.
Adequate risk management systems--APRA regulated bodies
(5) Paragraph (1)(h):
(a) does not apply to a body regulated by APRA, unless the body is an RSE licensee that is also the responsible entity of a registered scheme; and
(b) does not apply to an RSE licensee that is also the responsible entity of a registered scheme, to the extent that the risk relates solely to the operation of a regulated superannuation fund by the RSE licensee.
(5A) A person contravenes this subsection if the person contravenes paragraph (1)(a), (aa), (ca), (cc), (d), (e), (f), (g), (h) or (j).
Note: This subsection is a civil penalty provision (see section 1317E).