Responsible lending obligations under the NCCP Act
Responsible lending obligations require lenders and credit assistance providers to assess whether a credit contract is "not unsuitable" for the consumer before entering into it, suggesting it, or assisting the consumer to apply for it. The obligations sit at the core of the NCCP Act 2009 and were reinforced by ASIC's updated guidance in RG 209. This guide covers 10 core obligations.
Coverage
All holders of an Australian Credit Licence (ACL) who provide credit or credit assistance to consumers, including banks, non-bank lenders, mortgage brokers, finance brokers, and their credit representatives.
Legal basis
National Consumer Credit Protection Act 2009 (Cth), Chapter 3, Parts 3-1 and 3-2 (ss 115–133). ASIC Regulatory Guide 209: Credit licensing: Responsible lending conduct.
The obligations
Make reasonable inquiries about the consumer's requirements and objectives
Before providing credit assistance or entering a credit contract, inquire about the consumer's requirements and objectives, including the purpose of the credit, desired loan features, and repayment preferences.
Make reasonable inquiries about the consumer's financial situation
Inquire about the consumer's income, expenses, assets, liabilities, and any other relevant financial circumstances. The depth of inquiry must be proportionate to the complexity and risk of the credit product.
Take reasonable steps to verify the consumer's financial situation
Verify the information obtained from the consumer using independent sources such as payslips, bank statements, tax returns, or credit reports. Reliance on the consumer's word alone is not sufficient.
Make a preliminary assessment (credit assistance providers)
Credit assistance providers must make a preliminary assessment that the credit contract is not unsuitable before suggesting it or assisting the consumer to apply for it.
Make a final assessment (lenders)
Before entering a credit contract or increasing a credit limit, the lender must make a final assessment that the contract is not unsuitable for the consumer based on the inquiries and verification undertaken.
Determine the contract is "not unsuitable"
A credit contract is unsuitable if, at the time of the assessment, it is likely the consumer could not comply with the financial obligations without substantial hardship, or the contract does not meet the consumer's requirements and objectives.
Provide a copy of the assessment on request
If the consumer requests a copy of the preliminary or final assessment, provide it within 7 business days. For credit assistance providers, the obligation also applies to the credit guide.
Do not enter an unsuitable credit contract
If the assessment concludes the contract is unsuitable, the licensee must not enter the contract, increase the credit limit, or assist the consumer to apply for it.
Apply the obligations to credit limit increases
Responsible lending obligations apply equally to credit limit increases. The lender must reassess suitability before approving any increase, including unsolicited credit limit increase offers (which are prohibited for credit cards).
Retain assessment records for 7 years
Keep records of all inquiries, verification steps, and suitability assessments for at least 7 years from the date the credit contract is entered into or the credit assistance is provided.
What happens if you do not comply
Civil penalties up to $1.11 million per contravention for individuals and $11.1 million (or three times the benefit or 10% of turnover) for bodies corporate. Lenders may also face compensation orders, and ASIC can ban individuals from engaging in credit activities.
Reporting requirements
No standalone reporting obligation for responsible lending assessments, but breaches are captured under the ACL breach-reporting regime (reportable situations within 30 calendar days). ASIC conducts targeted reviews and expects licensees to self-identify compliance gaps.
What firms should do today
- Build a standardised responsible lending checklist into loan origination systems
- Define minimum verification standards for each product type and risk tier
- Document the reasoning behind every "not unsuitable" determination
- Train all brokers and assessors on ASIC RG 209 and recent enforcement outcomes
- Conduct quarterly file reviews to identify assessment quality issues
- Ensure credit limit increase processes include a fresh suitability assessment
Compliance with Quillio
Quillio supports responsible lending compliance by reviewing assessment files for completeness, flagging missing verification steps, and summarising ASIC regulatory guidance. See /resources/security or start a free trial.
This guide is general information about responsible lending obligations — not legal or credit advice. Always consult a specialist credit compliance adviser for your specific lending arrangements.
Build compliance into your stack.
Quillio is built around AU compliance from the ground up — SOC 2 Type II + ISO 27001 + Australian data sovereignty. The free trial requires no credit card.
Start your free trial