ASIC Watch: AI Governance As Board Priority

Array
(
    [0] => Array
        (
            [0] => ((CBA))
            [1] => ((NAB))
            [2] => ((WBC))
            [3] => ((ANZ))
            [4] => ((IAG))
            [5] => ((SUN))
            [6] => ((QBE))
        )

    [1] => Array
        (
            [0] => CBA
            [1] => NAB
            [2] => WBC
            [3] => ANZ
            [4] => IAG
            [5] => SUN
            [6] => QBE
        )

)

This story features COMMONWEALTH BANK OF AUSTRALIA, and other companies.
For more info SHARE ANALYSIS: CBA
The company is included in ASX20, ASX50, ASX100, ASX200, ASX300 and ALL-ORDS

This story analyses ASIC and APRA regulatory priorities affecting major banks, general insurers, wealth platforms, buy-now-pay-later providers, and unlisted fund governance.

By Valery Prihartono

ASIC Watch: Sarah Court’s Corporate Plan Signals AI Governance as Board Priority

ASIC has released its Corporate Plan 2026–27 and, alongside APRA, issued joint regulatory guidance on artificial intelligence governance.

The dual release establishes clear expectations: financial institutions must move from high-level AI awareness to verifiable operational controls and board-level incident escalation protocols.

• ASIC Corporate Plan 2026–27 prioritises banking AI deployment, insurance claims handling, and BNPL compliance
• Joint ASIC–APRA directive mandates boards establish explicit AI risk appetite and pre-incident escalation authority
• $830M in court-ordered civil penalties delivered in FY26, with $644M in consumer remediation
• NSW Supreme Court appoints liquidators to 12 companies linked to Christopher Malcolm Edwards
• Central Accord AFS licence suspended 6 months; Zenoz Enterprises credit licence cancelled

The 2026–27 Regulatory Roadmap

On 26 August 2026, ASIC released its Corporate Plan 2026–27, outlining Chair Sarah Court’s strategic direction.

The plan emphasises reducing compliance burden for fully-compliant businesses whilst escalating enforcement against conduct causing consumer or market harm.

ASIC delivered $830 million in court-ordered civil penalties and $644 million in remediation across FY26, establishing record enforcement outcomes.

Priority Surveillance Areas

• Banking AI Deployment: Close examination of artificial intelligence use in customer-facing operations, credit assessment, and dispute resolution.
• Insurance Claims Handling: Targeted surveillance of intermediaries in disaster-affected communities.
• Buy-Now-Pay-Later: Active supervision ensuring strict adherence to lending standards and hardship frameworks.
• Superannuation Advice Fees: Scrutiny of fee deductions to verify services are delivered.
• Private Market Integrity: Enhanced supervision of unlisted managed investment schemes and private credit structures.

The Frontier AI Mandate

On 27 August 2026, ASIC and APRA issued joint regulatory guidance (Media Release 26-201MR) following nine cross-regulator roundtables involving over 600 financial sector participants.

The guidance urges institutions to translate AI awareness into concrete risk controls.

Core Regulatory Expectations

Board-Level Crisis Planning: Boards must establish explicit risk appetite, clear escalation authority, and pre-incident communication protocols before AI-driven incidents occur.

Third-Party Concentration Risk: Financial institutions must map dependencies on external AI providers and cloud vendors, recognising that isolated technical failures can create sector-wide disruption.

Cyber Fundamentals: Institutions must maintain rigorous controls over critical digital assets; timely patching, access controls, backup integrity, and active vulnerability reduction.

ASIC Commissioner Simone Constant noted threat actors actively exploit frontier AI to identify vulnerabilities previously requiring months of discovery.

APRA Deputy Chair Therese McCarthy Hockey emphasised cross-industry threat intelligence sharing as essential for ecosystem resilience.

Sideline Wrap and Licence Actions

Edwards Group Liquidation

On 21 August 2026, NSW Supreme Court Justice Nixon appointed provisional liquidators Kathryn Evans and Vaughan Strawbridge (FTI Consulting) to 12 companies linked to Christopher Malcolm Edwards.

Justice Nixon noted the companies’ affairs were “carried on casually and without due regard to legal requirements” and found significant financial record-keeping deficiencies.

The court accepted ASIC submissions that investor payments appeared substantially funded from new investor inflows rather than operational revenue. A final winding-up hearing is scheduled for 2 November 2026.

Edwards was banned from providing financial services for 10 years in September 2025 and disqualified from auditing self-managed superannuation funds in May 2026.

Licence Suspensions and Cancellations

Central Accord Pty Ltd (AFSL 226405): ASIC suspended the financial services licence for six months until 4 February 2027 after the entity ceased business and was expelled by AFCA for overdue invoices.

Zenoz Enterprises: ASIC cancelled the credit licence effective 3 July 2026.

Scam Alert: AI-Generated Deepfake Networks

On 17 August 2026, ASIC warned of escalating technical sophistication in online scams.

Fraudsters deploy generative AI to create interconnected networks of deepfake websites, synthetic endorsements, and fabricated customer reviews, bypassing basic search verification.

Investors should independently verify AFS licence credentials via ASIC’s professional registers and confirm investment entities appear on AUSTRAC’s Virtual Asset Service Provider Register before committing funds.

Investment Implications

AI governance is now a material balance sheet factor.

Major banks including Commonwealth Bank ((CBA)), National Australia Bank ((NAB)), Westpac ((WBC)), and ANZ Bank ((ANZ)) must demonstrate board-level oversight of automated decision-making.

General insurers Insurance Australia Group ((IAG)), Suncorp Group ((SUN)), QBE Insurance ((QBE)) face continued pressure on claims handling efficiency.

Listed wealth managers maintaining rigorous third-party product due diligence remain insulated from reputational contagion associated with unlisted product collapses.

Find out why FNArena subscribers like the service so much: “Your Feedback (Thank You)” – Warning this story contains unashamedly positive feedback on the service provided.

FNArena is proud about its track record and past achievements: Ten Years On

Click to view our Glossary of Financial Terms