Australia Finance Regulation 2026-27

Australia's finance regulatory landscape is being transformed in 2026-27 by four concurrent reforms: full BNPL licensing under the National Consumer Credit Protection Act, the expansion of the Consumer Data Right to non-bank lenders and BNPL providers, the commencement of the Scams Prevention Framework, and the ongoing rollout of Open Banking and next-generation action initiation.

Data in this article is sourced from ASIC, APRA, Treasury, and the Australian Banking Association as at 5 July 2026.

---

BNPL regulation: full licensing now in effect

Buy Now, Pay Later (BNPL) products have been regulated under the National Consumer Credit Protection Act 2009 since 10 June 2025. The full compliance regime took effect from June 2026, meaning BNPL providers must now hold an Australian Credit Licence (ACL) and meet the same responsible lending obligations as traditional credit providers.

What BNPL regulation means

1. Responsible lending assessments: Providers must verify income, check expenses, and conduct affordability assessments before approving credit
2. Hardship obligations: BNPL providers must have hardship policies and participate in external dispute resolution through AFCA
3. Comprehensive credit reporting: All licensed BNPL activity is now visible on credit files through Equifax, Experian, and illion
4. Mortgage broker scrutiny: Brokers report that lenders are increasingly examining BNPL usage during home loan assessments

For consumers, this means BNPL usage will directly affect your credit score and borrowing capacity. A pattern of multiple BNPL accounts or late payments will be visible to mortgage lenders.

---

Consumer Data Right: non-bank inclusion

The Consumer Data Right (CDR), Australia's open banking framework, expands significantly on 13 July 2026:

1. Non-bank lenders are brought into the CDR regime
2. BNPL providers must share data under the same security and privacy standards as banks
3. Banks can provide a more complete financial view by integrating non-bank loan and BNPL data

This is a genuine "level playing field" moment — consumers will be able to see all their lending products in one place, whether they are from a major bank, a non-bank lender, or a BNPL provider.

Next-Gen Action Initiation

CDR is moving beyond read-only data sharing. Action Initiation will enable consumers to instruct their data to do things — such as initiating payments or updating account details — through accredited third parties. This transforms CDR from a transparency tool into an active financial management platform.

Future sectors

The government has identified income tax information as the likely next sector for CDR inclusion, which would enable lenders to verify income directly from ATO data rather than relying on payslips and bank statements.

---

Scams Prevention Framework

The Scams Prevention Framework commences on 1 July 2026, creating new obligations across the financial services sector for scam prevention and redress. Key elements include:

1. Mandatory scam detection and prevention systems for banks, payment platforms, and telecommunications providers
2. Clear liability frameworks for determining who bears the cost of scams
3. Faster fund recovery mechanisms through coordinated industry action
4. Cross-sector information sharing to identify and block scam patterns

This represents Australia's most comprehensive regulatory response to the growing scam problem, which has cost Australians an estimated $3 billion annually.

---

Financial Accountability Regime: reduced admin burden

APRA and ASIC announced on 16 June 2026 that the Financial Accountability Regime (FAR) will have streamlined responsible manager requirements, reducing the administrative burden on financial services businesses. The FAR remains in effect, but the compliance process has been simplified, particularly for smaller entities.

---

APRA macroprudential settings

APRA reviewed its macroprudential policy settings in July 2026 and maintained all current parameters:

1. Serviceability buffer: Remains at 3% above the actual loan rate
2. Countercyclical capital buffer: Remains at 1% of risk-weighted assets
3. High DTI lending limit: Banks may lend up to 20% of new owner-occupied and investment loans at a debt-to-income ratio of 6 times or higher

APRA noted that households remain highly indebted but non-performing loans are low, and strong capital buffers mean most households are well-placed. High DTI lending remains well below APRA's limits, which serve as guardrails rather than active constraints.

Risk outlook

APRA warns that the risk landscape is volatile:

• Middle East conflict contributing to elevated oil prices
• Higher energy costs adding to cost-of-living pressures
• Early signs of moderation in housing price and credit growth

APRA has signalled it will adjust settings if early signs of risks materialise.

---

RBA governance reform

The Reserve Bank's dual-board structure, in effect since 1 March 2025, continues to set a new standard for transparency:

• Monetary Policy Board: Solely responsible for setting the cash rate, chaired by the Governor
• Governance Board: Responsible for running the institution — staffing, budgets, and strategy
• Published individual votes: No longer a single consensus decision — each board member's vote is published
• Press conferences after every decision: Modelled on the US Federal Reserve practice
• First publicly recorded split vote: May 2026, when the Board voted 8-1 to raise the cash rate to 4.35%

---

FAQ

Do I need an Australian Credit Licence for BNPL?

If you offer BNPL products in Australia, yes. From June 2026, all BNPL providers must hold an ACL and comply with responsible lending obligations under the National Consumer Credit Protection Act.

How does BNPL affect my credit score?

From June 2026, licensed BNPL activity is reported to credit bureaus. Multiple BNPL accounts, high utilisation, or late payments will appear on your credit file and can affect your ability to borrow for a home loan.

What data do non-bank lenders have to share under CDR?

Non-bank lenders and BNPL providers must share product data, account data, and transaction history under the same security and privacy standards as banks from 13 July 2026.

What is the Scams Prevention Framework?

A new regulatory framework effective 1 July 2026 that creates mandatory obligations for banks, payment platforms, and telcos to prevent, detect, and respond to scams, with clear liability frameworks and faster fund recovery mechanisms.

Is the 3% serviceability buffer still in place?

Yes. APRA reaffirmed the 3% serviceability buffer at its July 2026 review. This means lenders must assess your ability to repay a loan at 3% above the actual loan rate.