AFS Licensing Compliance Guide: Section 912A General Obligations for Financial Services Licensees
Every holder of an Australian Financial Services (AFS) licence must satisfy the general obligations set out in section 912A of the Corporations Act 2001. These obligations are not aspirational — they are legally binding conditions that ASIC actively enforces. Failure to meet them can result in licence suspension, civil penalties, and reputational damage.
This guide breaks down each general obligation, explains how ASIC assesses compliance through Regulatory Guide 104 (RG 104), and provides a practical checklist for licensees.
What Does Section 912A Require?
Section 912A imposes a set of overarching obligations on every AFS licensee. These obligations apply regardless of the size of your business, the financial products you deal in, or the services you provide. The core obligations are:
- Efficiency, honesty, and fairness (s 912A(1)(a))
- Compliance with licence conditions (s 912A(1)(b))
- Compliance with financial services laws (s 912A(1)(c))
- Adequate resources — financial, technological, human (s 912A(1)(d))
- Competent representatives — training and supervision (s 912A(1)(e)–(f))
- Compliance arrangements — monitoring and ensuring compliance (s 912A(1)(ca))
- Risk management systems (s 912A(1)(h))
- Conflicts management (s 912A(1)(aa))
- Dispute resolution — internal and external (s 912A(1)(g))
1. Efficiency, Honesty, and Fairness
This is the broadest obligation and the one ASIC relies on most frequently in enforcement actions. It requires licensees to provide financial services efficiently, honestly, and fairly. Courts have interpreted this as three separate standards — a licensee can breach the fairness limb without being dishonest.
Key principles:
- Services must be delivered without unreasonable delay
- Representations to clients must be accurate and not misleading
- Fees and charges must be transparent and not hidden
- Clients must not be placed in a worse position through the licensee's conduct
- Systems must be designed to produce fair outcomes, not just technically compliant ones
2. Adequate Resources
Under s 912A(1)(d), licensees must have adequate resources to provide the financial services covered by their licence and to carry out supervisory arrangements. This covers three resource categories:
Financial Resources
- Meet ASIC's base-level financial requirements (cash needs analysis, positive net assets)
- Hold adequate Professional Indemnity (PI) insurance
- Maintain surplus liquid funds to cover operational expenses
Technological Resources
- IT systems that can process transactions accurately and on time
- Cybersecurity controls proportionate to the data you hold
- Reliable record-keeping systems and data backup
Human Resources
- Sufficient staff to handle current and expected volumes
- Appropriately qualified personnel in key compliance and risk roles
- Access to external expertise where internal capability is insufficient
3. Competent Staff and Representatives
Sections 912A(1)(e) and (f) require licensees to ensure that their representatives are adequately trained and competent to provide the relevant financial services. Since the FASEA (now Financial Adviser Standards and Ethics Authority) reforms, this includes:
- Meeting education and training standards for financial advisers
- Ongoing CPD requirements (at least 40 hours per year for relevant providers)
- Adequate supervision of authorised representatives and employees
- Maintaining a training register and competency assessments
- Monitoring the Financial Advisers Register for accuracy
4. Compliance Arrangements
Section 912A(1)(ca) requires licensees to have adequate arrangements for ensuring compliance with financial services laws. ASIC RG 104 provides detailed guidance on what this means in practice:
- Written compliance policies and procedures that are regularly reviewed
- A compliance function with clear reporting lines to senior management and the board
- Breach identification, escalation, and remediation processes
- Regular compliance monitoring and testing (not just relying on audits)
- Compliance culture — tone from the top, staff awareness, consequence management
5. Risk Management
Under s 912A(1)(h), licensees must have adequate risk management systems. This is separate from (and complementary to) the compliance obligation. ASIC expects:
- A documented risk management framework approved by the board or senior management
- Risk appetite statement defining the types and levels of risk the licensee is willing to accept
- A risk register covering operational, financial, conduct, cyber, and strategic risks
- Regular risk assessments and reviews, especially after material incidents or business changes
- Integration of risk management into business decision-making processes
6. Conflicts of Interest Management
Section 912A(1)(aa) requires licensees to have adequate arrangements to manage conflicts of interest. This obligation was significantly strengthened following the Royal Commission. Key requirements include:
- A conflicts of interest policy that identifies, assesses, and addresses conflicts
- Structural and procedural controls (information barriers, remuneration design)
- A conflicts register that is actively maintained and reviewed
- Disclosure to clients where conflicts cannot be eliminated
- Priority given to the client's interests in the case of financial advice (s 961B best interests duty)
7. Dispute Resolution
Under s 912A(1)(g), licensees must have both an internal dispute resolution (IDR) procedure that meets ASIC standards and membership of an ASIC-approved external dispute resolution (EDR) scheme — currently the Australian Financial Complaints Authority (AFCA).
- IDR procedures must comply with ASIC RG 271 (updated requirements from October 2021)
- Complaints must be acknowledged within 1 business day
- Standard complaints must be resolved within 30 calendar days
- Hardship and default notice complaints have specific timeframes
- Systemic issue identification from complaint data is expected
ASIC Enforcement Actions for General Obligation Breaches
ASIC has a broad enforcement toolkit for s 912A breaches. Recent trends show escalating consequences:
- Licence conditions: ASIC can impose additional conditions restricting the licensee's activities
- Licence suspension or cancellation: For serious or persistent breaches
- Civil penalty proceedings: Courts can impose pecuniary penalties reaching tens of millions of dollars
- Enforceable undertakings: ASIC-accepted commitments to remediate and improve
- Infringement notices: For specific breaches of defined provisions
- Banning orders: Against individuals involved in the breach (s 920A)
ASIC RG 104: The Compliance Framework
Regulatory Guide 104 is ASIC's primary guidance document on how licensees should meet their general obligations. It is not legally binding, but ASIC uses it as the benchmark when assessing compliance. Key elements include:
- RG 104.14–104.30: Organisational competence — board and management capability
- RG 104.31–104.55: Compliance measures — policies, monitoring, breach handling
- RG 104.56–104.75: Financial resources — cash needs, PI insurance, net asset requirements
- RG 104.76–104.95: Risk management — framework, appetite, systems, review
- RG 104.96–104.110: Technological resources — IT adequacy, cybersecurity, records
ASIC expects licensees to treat RG 104 as a self-assessment tool. If your arrangements differ from what RG 104 recommends, you should document why your approach still meets the general obligations.
Practical Compliance Checklist for AFS Licensees
Use this checklist to assess your current compliance with s 912A general obligations:
Efficiency, Honesty, and Fairness
- [ ] Client outcomes are monitored and reviewed quarterly
- [ ] Fee disclosure is clear, complete, and not misleading
- [ ] Service delivery SLAs are defined and tracked
Resources
- [ ] Cash needs analysis completed within the last 12 months
- [ ] PI insurance policy is current and adequate for licence scope
- [ ] IT systems reviewed for adequacy and cybersecurity
- [ ] Staffing levels assessed against current business volumes
Competence and Training
- [ ] Training register is up to date for all representatives
- [ ] CPD hours tracked and meeting minimum requirements
- [ ] Supervision framework documented and operating
Compliance Arrangements
- [ ] Compliance plan reviewed within the last 12 months
- [ ] Breach register maintained with escalation protocols
- [ ] Compliance monitoring schedule in place and being executed
- [ ] Compliance officer has adequate authority and resources
Risk Management
- [ ] Risk management framework documented and board-approved
- [ ] Risk register is current with identified owners and controls
- [ ] Risk appetite statement in place and communicated
Conflicts and Disputes
- [ ] Conflicts of interest policy reviewed within the last 12 months
- [ ] Conflicts register maintained and regularly reviewed
- [ ] IDR procedures comply with ASIC RG 271
- [ ] AFCA membership is current and complaint data is reported
Scan Your Compliance Documents Against AFS Licensing Requirements
GoComply's AI scanner checks your policies and procedures against s 912A obligations, RG 104 guidance, and 100+ other regulatory sources — in minutes.
Try GoComply Free