Australian compliance updates for 25 October 2026 covering new sanctions listings, ASIC reporting enforcement, privacy oversight and AUSTRAC enrolment figures.
New Australian sanctions listings are this week’s clearest immediate screening update. ASIC also reported substantial infringement payments for late financial reporting and accepted auditor registration cancellations following surveillance. The OAIC’s annual report provides a fresh picture of privacy complaints and regulatory activity, while AUSTRAC updated its enrolment figures. These developments have different implications: sanctions listings affect current checks, enforcement outcomes reinforce existing responsibilities, and regulatory statistics provide context rather than new duties. For practice leaders, the priority is to connect external updates to named owners, current systems and evidence of completion. No separate new sector-specific rule was verified for conveyancers or jewellers.
Legal practices
Privacy report reinforces the need for effective complaint handling
National | Regulatory report published 22 October 2026, not a new legal requirement.
The OAIC reported receiving 5,268 privacy complaints during 2025–26, a 60% increase on the previous year. Its annual-report announcement emphasises proactive guidance, investigations and enforcement. These are annual figures, not complaints arising during this reporting week.
Why it matters: Practices holding identity documents and sensitive client information need a workable response when someone questions collection, access or disclosure.
Practical consideration, LawMatter analysis: Test one privacy enquiry from receipt to resolution. Confirm who owns it, where correspondence is stored and how a potential data breach is escalated. Review access to identity records held in email, shared folders and outsourced systems. This is an operational review suggestion, not a newly announced OAIC deadline.
Source: OAIC annual report announcement, 22 October 2026
Accountants bookkeepers and tax practitionersFinancial reporting deadlines attract substantial enforcement
National | Infringement notices paid, announced 21 October 2026.
ASIC reported that 21 Visy/Pratt group companies paid infringement notices totalling $4.158 million for allegedly failing to lodge financial reports for the year ended 30 June 2025 on time. Each notice was $198,000. Payment is not an admission of guilt or liability, and the companies are not regarded as convicted of the alleged offences.
Why it matters: The action concerns corporate financial reporting, not a new tax-agent or BAS-agent rule. It is relevant to advisers coordinating company accounts, audits and lodgements.
Practical action, LawMatter analysis: Check each client entity’s reporting obligation and applicable deadline. Separate preparation, director approval, audit completion and successful lodgement in the work tracker. Retain submission receipts and escalate unresolved dependencies before the deadline.
Source: ASIC 26-252MR, 21 October 2026
Auditor registrations cancelled following surveillance
National | Accepted cancellation applications, announced 23 October 2026.
ASIC accepted applications to cancel Benjamin Alfred Peters’ company-auditor registration and L Audit Pty Ltd’s authorised audit-company registration after identifying significant audit-quality concerns. The announcement describes accepted applications, not a court finding of misconduct.
Practical consideration, LawMatter analysis: Audit firms should check engagement review and handover arrangements. Clients changing auditors should confirm registration status and preserve continuity of records and reporting responsibilities.
Source: ASIC 26-254MR, 23 October 2026
Jewellers and precious metal or stone dealers
No significant compliance development identified this week.
No separate dealer-specific change was verified. The national sanctions update below is nevertheless relevant to counterparties, suppliers and payments.
Practical consideration, LawMatter analysis: Confirm that screening records show which list version was used and how possible matches were resolved. A name similarity should trigger investigation, not an unsupported conclusion that a customer is sanctioned.
ConveyancersNo significant compliance development identified this week.
No separate conveyancer-specific regulatory change was verified within the reporting window. Previously covered Victorian property-pricing changes are not repeated as new news.
Practical consideration, LawMatter analysis: Use the sanctions update to check escalation arrangements before releasing funds where a possible match arises. Keep the decision, reviewer and supporting identifiers with the matter record, and obtain appropriate advice where restrictions may apply.
Real estate professionalsPrivacy oversight has implications for applicant data
National | Cross-sector regulatory reporting, published 22 October 2026.
The OAIC’s annual-report announcement highlights its work concerning unfair or unlawful collection by rental technology platforms. This is a retrospective account of regulatory activity, not a new rental application rule or a fresh finding against a particular agency.
Why it matters: Agencies should understand the information collected through application platforms they use. Buyers’ agents and developers can apply the same scrutiny to their own enquiry and customer forms.
Practical consideration, LawMatter analysis: Select one live form and identify the purpose of each field, who receives the data and what retention settings apply. Check that staff can explain the process to applicants and route complaints to the appropriate owner. Do not assume a platform’s default settings match your business requirements.
Source: OAIC annual report announcement, 22 October 2026
Key dates and developmentsDate in 2026
Verified development
21 October
AUSTRAC enrolment page updated; ASIC late-reporting action announced.
22 October
OAIC annual report announcement published.
23 October
DFAT sanctions additions and Consolidated List update; ASIC auditor cancellations announced.
These are development dates, not new universal filing deadlines. No additional near-term sector-wide deadline was verified for this edition.
AUSTRAC and Australia’s AML and CTF regime
New sanctions listings require current screening information
National | Confirmed designations announced 23 October 2026.
DFAT announced targeted financial sanctions against two people and two entities under the Democratic People’s Republic of Korea criteria: YU Pu Ung, SIM Hyon Sop, Korea Mangyondae Computer Technology Company and Chinyong Information Technology Cooperation Company. The Consolidated List was updated on 23 October.
DFAT explains that restrictions cover unauthorised dealings with controlled assets and making assets available directly or indirectly to or for the benefit of designated persons or entities. This is a sanctions development administered by DFAT, not a new AUSTRAC reporting rule.
Practical action, LawMatter analysis: Check that your screening provider has incorporated the update. Review relevant existing relationships as well as new engagements, investigate potential matches using reliable identifiers, and escalate before dealing with potentially controlled assets.
Source: DFAT sanctions notice, 23 October 2026
Source: DFAT Consolidated List, updated 23 October 2026
AUSTRAC publishes updated enrolment figures
National | Administrative update, page updated 21 October 2026.
AUSTRAC reports 62,710 enrolled businesses as at 20 October. The total covers all sectors; it is not a count of newly regulated professional firms or evidence that every enrolled business is compliant. The update does not create a new enrolment deadline.
Practical consideration, LawMatter analysis: Confirm that your recorded business details and designated services reflect current operations. Keep the evidence supporting any assessment of whether your services are regulated. Enrolment and operating an effective compliance program are separate tasks.
Source: AUSTRAC Enrol with us overview, updated 21 October 2026
Cross industry insightLawMatter analysis: A compliance update is useful only when it reaches the person and system responsible for acting on it. This week, a practical management test is to trace one sanctions-list change, one reporting deadline and one privacy enquiry. Can the team show who assessed the issue, what changed, who approved the response and where completion was recorded? Avoid treating a successful system import, a prepared report or an opened complaint ticket as evidence that the whole process is complete.
What to watch next weekMonitor further DFAT list changes, new AUSTRAC guidance and ASIC financial-reporting announcements. Watch for OAIC publications that turn annual-report themes into specific guidance or regulatory action. These are monitoring priorities, not predictions of forthcoming rules.
For practices reviewing how customer checks and compliance records fit together, explore Comply.LM and assess its suitability for your workflows.
Source: Comply.LM
This article provides general information only and does not constitute legal, regulatory or professional advice.