Skip to main content
Skip to content
Pricing
Try a live demo, it's freeBook a DemoSign InStart free

Compliance Guide · Updated 18 May 2026

NCCP Best Interests Duty, section 158LA, Reg 28HA, suitability

The Best Interests Duty requires Australian mortgage brokers to act in the best interests of the borrower on every loan recommendation, under section 158LA of the NCCP Act and in force since 1 January 2021. This plain-English guide explains what the duty requires under section 158LA, how the conflicts priority rule under Regulation 28HA operates, suitability under section 128, ASIC RG 273 guidance, and what must be in the file to defend a recommendation in an audit or AFCA dispute.

Disclaimer: Plain-English guidance only, not legal or compliance advice. The authoritative sources are the NCCP Act 2009, the NCCP Regulations 2010, and ASIC RG 273. Always confirm with your licensee's compliance team.

The three core obligations

Section 158LA, Reg 28HA, and section 128

Three legal provisions sit at the heart of Australian mortgage broker compliance. They overlap but each adds a distinct obligation, and the broker must satisfy all three on every file.

Section 158LA: Act in the consumer's best interests

The Best Interests Duty (BID) was introduced into the National Consumer Credit Protection Act 2009 (NCCP) on 1 January 2021. Under section 158LA, a licensee or credit representative providing credit assistance in relation to a credit contract must act in the best interests of the consumer. The obligation is on the broker personally and on the licensee under whose authority the broker operates.

In practice

  • The duty is a positive obligation, not just a 'do no harm' rule
  • Applies to every credit-assistance interaction, not just final recommendations
  • Cannot be discharged by disclosure alone, the broker's actions must align

Regulation 28HA: Conflicts priority rule

Regulation 28HA of the National Consumer Credit Protection Regulations 2010 requires that where there is a conflict of interest between the consumer and the broker (or related party), the broker must give priority to the consumer's interests. This is the operational rule for handling commission asymmetries, lender bonuses, ownership relationships, and referral arrangements.

In practice

  • Choosing a lower-commission product where that better serves the consumer
  • Disclosing and managing aggregator-lender ownership relationships
  • Declining a referral arrangement that would compromise objectivity

Section 128: Suitability obligation

The pre-existing suitability obligation under section 128 continues to apply alongside BID. Brokers must make reasonable inquiries about the consumer's financial situation, requirements and objectives, and take reasonable steps to verify the consumer's financial situation. The broker must then make a written 'not unsuitable' assessment of the proposed credit contract.

In practice

  • Document income, expenses, assets, liabilities (financial situation)
  • Capture purpose, term preferences, risk appetite (requirements & objectives)
  • Verify income (payslips/tax returns), expenses (statements), debts (credit report)

ASIC RG 273, the four pillars

How ASIC expects BID to be discharged

ASIC Regulatory Guide 273 sets out the regulator's expectations for how brokers should comply with the Best Interests Duty. The guide is structured around four practical pillars that map onto the file evidence you should hold.

Pillar 1: Inquiries and verification

Make sufficient inquiries to understand the consumer's individual circumstances. Verify the information using independent sources where reasonable. The depth of inquiry should be proportionate to the loan's complexity and the consumer's apparent sophistication.

Pillar 2: Tailored recommendation

The product or strategy recommended must be tailored to the specific consumer's circumstances and objectives, not a generic 'what we usually do'. Where multiple products could reasonably serve the consumer, the recommendation should reflect a comparison.

Pillar 3: Conflicts identified and managed

Identify any conflicts (commission differences between lenders, ownership relationships, white-label arrangements, referral fees). Manage them by prioritising the consumer's interests. Disclose them, but disclosure alone is insufficient.

Pillar 4: Documented evidence

Maintain a written, contemporaneous record of how the BID was discharged for each consumer. ASIC's clear position: if it isn't documented, it didn't happen. The file must defend the recommendation on its own without relying on the broker's memory.

Reasonable inquiries

What you have to ask, and what you have to verify

The depth of inquiry is proportionate to loan complexity and consumer circumstances. As a guide, these are the categories every fact-find should cover.

Financial situation

  • Income, salary, self-employed income, rental income, other regular income
  • Expenses, fixed (rent, school fees, insurance), variable (groceries, utilities), discretionary
  • Assets, property, vehicles, savings, investments, super
  • Liabilities, mortgages, credit cards (with limits), personal loans, BNPL, HECS-HELP
  • Dependants and household composition

Requirements and objectives

  • Purpose of the credit (purchase, refinance, construction, investment, debt consolidation)
  • Loan amount, term preference, repayment frequency
  • Fixed vs variable rate preference, offset / redraw needs
  • Risk appetite, comfort with rate movement, repayment buffer
  • Future plans, relocation, growing family, retirement timeline, sale of asset

Verification means independent evidence: payslips, tax returns, bank statements, credit reports. ASIC's position is that reliance on consumer self-statement alone is rarely sufficient.

The audit-defence file

What needs to be in every client file

The single best predictor of an audit pass is a clean, contemporaneous client file. These are the eight artefacts your file should always contain.

Fact find

Complete record of consumer's financial situation, requirements, objectives. Dated, signed (or e-signed) by consumer.

Verification documents

Payslips, tax returns, bank statements, savings evidence, liability evidence (credit report). Dated within 90 days of submission.

Living expenses analysis

HEM benchmark and actual-expenses reconciliation. Documented explanation where actual differs from HEM.

Product comparison

Evidence of comparison across the relevant lender panel, rate, features, fees, eligibility. Records why short-listed products were considered.

Recommendation rationale

Written explanation of why the recommended product is in the consumer's best interests, with reference to their specific objectives.

Conflicts disclosure

Credit Guide, Credit Proposal, and any conflict disclosure (ownership, referral, commission asymmetry) signed by consumer.

Not-unsuitable assessment

Section 128 assessment in writing. Records why the proposed contract is not unsuitable for the consumer's circumstances.

Communications log

Material communications with the consumer (file notes, emails, meeting notes). Critical for defending the recommendation in an audit or AFCA dispute.

Breach reporting + recordkeeping

When things go wrong, and how long to keep records

The Reportable Situations regime under section 50A imposes a 30-day window from awareness to ASIC notification. Records under section 88 must be retained for seven years.

Reportable Situations regime: section 50A NCCP

Since October 2021, the Reportable Situations regime (the renamed breach-reporting framework) requires credit licensees to report 'reportable situations' to ASIC within 30 days of becoming aware. A reportable situation includes significant breaches, likely-to-be-significant breaches, and gross negligence or serious fraud involving credit activities.

What counts as significant

A core obligation breach is automatically significant if it triggers certain criteria: civil/criminal penalty exposure, civil-action grounds available to consumers, financial loss, or material impact on the licensee's ability to provide credit services. Best Interests Duty breaches reach the threshold quickly.

Internal escalation timeline

From identification, the licensee has 30 days to lodge the report. As a credit representative, your aggregator's compliance team needs to know within their internal SLA (often 5 to 10 business days) so they can investigate and lodge with ASIC on time.

Recordkeeping under section 88 of NCCP

Records of credit activities must be retained for seven years after the relevant credit activity. This includes BID evidence, fact-finds, verification documents, recommendations, and communications. Cloud storage with encryption and access control is the practical solution.

Practical tips for staying compliant

Write the rationale as if a stranger will read it

The auditor or AFCA officer reading your file won't remember the client's body language or your phone call. Write the recommendation rationale so it stands alone, what the consumer wanted, what you considered, why the recommendation serves their best interests.

Document the comparison, not just the choice

A note saying “Lender X chosen” doesn't discharge BID. The file should show what you compared (3 to 5 products on rate, fees, features, eligibility) and why the shortlist matched the consumer's objectives. Most CRMs support a comparison-evidence template.

Treat conflicts honestly, not defensively

Commission asymmetries between lenders, white-label products owned by aggregators, and referral fee arrangements are all real conflicts. Under Reg 28HA, disclosure is the start, not the end. The file must show how you prioritised the consumer where conflicts existed.

Refresh inquiries on long-running deals

Fact-find at month 1, settlement at month 4, circumstances change. New baby, new job, new car loan. Update the file with refreshed inquiries close to submission to ensure the not-unsuitable assessment reflects current circumstances.

Frequently Asked Questions

When did the Best Interests Duty come into effect for mortgage brokers?

The Best Interests Duty was introduced into the National Consumer Credit Protection Act 2009 by Schedule 3 of the Financial Sector Reform (Hayne Royal Commission Response) Act 2020. The duty commenced on 1 January 2021 and applies to credit assistance provided on or after that date.

How does Best Interests Duty differ from the suitability obligation under section 128?

Suitability (s128) is a 'not unsuitable' test, the credit contract must not be unsuitable for the consumer. BID (s158LA) is a positive obligation, the broker must actively act in the consumer's best interests. Suitability is a floor; BID requires going beyond that floor. Both obligations apply simultaneously to mortgage brokers, and both must be evidenced in the file.

Does BID require me to recommend the cheapest product?

No. BID requires the broker to act in the consumer's best interests, considered holistically. A higher-rate product may be in the consumer's best interests if it offers features the consumer values (offset, redraw, fast settlement) that lower-rate alternatives lack. The documented rationale matters more than headline rate.

What's the conflicts priority rule under Reg 28HA?

Where there is a conflict between the consumer's interests and the broker's interests (or a related party's), Regulation 28HA requires the broker to give priority to the consumer's interests. This applies to commission asymmetries between lenders, lender-aggregator ownership relationships, white-label products, and any referral or remuneration arrangement that could compromise objectivity.

How long does a broker keep best interests duty evidence?

Section 88 of the NCCP Act requires credit licensees to retain records of credit activities for at least seven years after the relevant credit activity. For mortgage brokers, this includes the fact-find, verification documents, comparison evidence, recommendation rationale, and signed disclosures. Most aggregators specify the same seven-year minimum in their compliance manuals.

What happens if I breach the Best Interests Duty?

BID is a civil-penalty provision under the NCCP Act. ASIC can pursue civil action with significant penalties for individuals and corporates. Civil action by affected consumers is also available. Practically, the most common consequences are AFCA determinations, aggregator-led remediation, loss of credit-rep authorisation, and, at the most serious end, ASIC enforcement action and banning orders.

Capture BID evidence on every file, automatically

OneBookPlus structures fact-find, verification, product comparison, and recommendation rationale into a single audit- defensible file, built around section 158LA, Reg 28HA, and section 128 obligations.

Rather look before you sign up? Open a live demo account with real data in it, or compare the AUD plans on the pricing page.

Reviewed by Bishal Shrestha

About the author

Bishal Shrestha, Founder of OneBookPlus

Bishal Shrestha

Founder & CEO, OneBookPlus

Bishal spent a decade running digital projects for Australian small businesses before founding OneBookPlus. He writes and maintains these pages, and publishes what OneBookPlus does not do alongside what it does.

A decade running digital projectsPersonal site: bishal.com.auMelbourne, Australia
Read the founder bio

How this page was researched

The compliance and licensing statements above are taken from the bodies this page links to, including the Federal Register of Legislation and ASIC, so you can read the rule rather than take our word for it. Plan prices come from the OneBookPlus price registry, so the page and the checkout cannot disagree. Everything said about OneBookPlus describes what the product does today, and the page says so where it does not do something.