Not new frameworks. Named obligations that touch how your practice handles client data and client money.
1 July 2026
AML/CTF Tranche 2 is live. Lawyers providing designated services, such as conveyancing, trust and company structures and handling client money, are now AUSTRAC reporting entities: enrolment, an AML/CTF program, customer due diligence and suspicious matter reporting. Onboarding and CDD records have to live in your systems, not in someone’s inbox.
What Tranche 2 means for your workflows →
10 December 2026
Privacy Act transparency. Privacy policies must describe decisions that software makes, or substantially helps make, using personal information. Practices doing employment, family, immigration or consumer work should check theirs.
Always
Confidentiality and supervision. Solicitor conduct rules on confidentiality, competence and supervision apply to how client information is stored, shared and secured, including by junior staff and contractors.
At renewal
Insurers ask harder questions. PI and cyber insurers increasingly ask about MFA, backups and email security. A documented, evidenced answer is easier to give than a promise.