The Duty to Report: What Consumer Lenders Need to Know About Section 412

Following the transition of regulatory oversight to the Financial Markets Authority from the Commerce Commission on 1 July 2026, licensed consumer credit providers now operate under an expanded conduct framework. Among the most consequential requirements is the positive obligation to proactively identify and report compliance issues to the regulator.

The Core Dual Obligations

The self-reporting regime imposes two interrelated requirements on licensed consumer credit providers:

• Proactive compliance monitoring: Licensees must establish and maintain effective methods, systems, and controls to monitor ongoing compliance with their licensing and consumer credit obligations.
• Notification of material contraventions: If a licensee forms a belief that it has contravened, may have contravened, or is likely to contravene a relevant obligation in a material respect, it must submit a formal report to the regulator as soon as practicable.

Crucially, the obligation is not confined to established or confirmed breaches. The threshold is triggered once an entity forms a belief that a material non-compliance issue may have occurred or is likely to occur, requiring reporting even while investigations into the facts remain ongoing.

The Challenge of Assessing Materiality

Because the regulatory framework does not provide an exhaustive statutory definition or prescriptive formula for materiality, lenders must evaluate potential issues in real time on incomplete information.

Navigating this threshold carries strategic risk:

• Under-reporting exposes the lender to separate liability for failing to notify, while forfeiting potential mitigation credit in any subsequent regulatory enforcement.
• Over-reporting routine operational anomalies can trigger unnecessary regulatory scrutiny, including formal statutory notices to produce information that impose significant administrative and legal costs on the licensee.

In consumer credit, where single systemic errors often affect large customer bases with modest individual impacts, assessing materiality demands a nuanced, documented process.

Enforcement and Director Exposure

Failing to meet notification standards carries significant consequences:

• Pecuniary penalties: A failure to report constitutes an independent civil liability contravention, exposing the provider to penalties of up to $600,000.
• Director liability: Directors who have actual knowledge of material compliance issues that are withheld from the regulator risk personal civil liability for being involved in the breach.
• Penalty mitigation versus aggravation: Courts consistently recognise early self-reporting, full co-operation, and swift remediation as mitigating factors that can secure discounts of up to 30–35% from penalty starting points. Conversely, maintaining prior knowledge of a breach while delaying notification is routinely treated as an aggravating factor.

Strategic Questions for Boards and Management

Lenders should stress-test their compliance infrastructure against the following considerations:

• Monitoring: Do your audit, quality assurance, and compliance systems identify potential systemic issues early enough to meet the “as soon as practicable” reporting standard?
• Governance: Is there a clear escalation pathway specifying which executive body or committee holds authority to determine materiality and authorise regulatory notifications?
• Materiality Framework: Does the organisation maintain a documented materiality methodology suitable to high-volume, low-value consumer lending scenarios?
• Operational Readiness: Are operational and customer-facing teams adequately trained to identify root causes and escalate emerging trends before they crystallise into widespread breaches?

Get expert guidance on your credit provider reporting obligations.

Talk to us to ensure your self-reporting framework meets FMA expectations. Because the new framework requires reporting before a full investigation is even complete, waiting for total certainty is no longer an option. If you want to refine your internal reporting thresholds or audit your current detection metrics to align with the new regulatory baseline, we are here to help.