x
Close

Five to follow: July 2026

Five stories that reveal how regulation is changing: from a regulator doubling its size overnight to the legal limits of mass redress, a first prosecution against a council, and the question of what happens when too much changes at once.
Regulator or official placing two large bundles of paper files on a desk, symbolising a heavy compliance and enforcement workload.

This is the first edition of Five to Follow, our monthly curation of stories worth tracking beyond the headlines. It runs alongside a new companion monthly article, Regulatory Digest, which covers the full sweep of developments, including smaller and sector-specific regulators. Together, these two pieces replace and expand upon the monthly updates our readers were used to.

When 80,000 businesses join your register overnight

On 1 July 2026, Australia’s anti-money laundering and counter-terrorism financing (AML/CTF) regime expanded to cover lawyers, accountants, real estate agents, conveyancers, and dealers in precious stones and metals. The Australian Transaction Reports and Analysis Centre (AUSTRAC) went from roughly 19,000 regulated entities to close to 100,000, virtually overnight.

The expansion, the second tranche of reforms passed in November 2024, brings Australia in line with Financial Action Task Force (FATF) recommendations it spent years failing to meet. Designated non-financial businesses and professions (DNFBPs) must now enrol with AUSTRAC by 29 July 2026, appoint an AML/CTF compliance officer, conduct customer due diligence, and file suspicious matter reports. These are well-established obligations in financial services. For a property lawyer or an accountant, they’re largely foreign territory.

These are well-established obligations in financial services. For a property lawyer or an accountant, they’re largely foreign territory.

AUSTRAC has signalled a pragmatic early posture, acknowledging it doesn’t expect perfection on day one. That’s the right call. But it can’t last indefinitely.

What AUSTRAC does next is the harder question, and one that will define whether this reform actually achieves anything. Supervising a register five times its previous size, spread across industries with no prior regulatory relationship with the agency, requires triage systems, risk-based prioritisation, intelligence-sharing with professional bodies, and the capacity to distinguish genuine early-stage non-compliance from deliberate evasion. Some of that work is underway. Whether AUSTRAC has built enough of the infrastructure is unknown.

Every regulator facing an expanding perimeter faces this problem. Enrolment is the easy part. It’s worth watching what follows and for how long the pragmatic posture remains.

For more on what the Tranche 2 expansion means in practice, see Australia’s AML/CTF reform rollout.

The scheme that couldn’t stick

The Financial Conduct Authority’s (FCA) £7.5 billion motor finance redress scheme lasted roughly two days before the Upper Tribunal suspended it.

The scheme, confirmed in March 2026, covered 12.1 million agreements made between 2007 and 2024 involving undisclosed discretionary commission arrangements and other non-transparent commission structures. Average compensation was set at around £830 per agreement. FCA chief executive Nikhil Rathi said it would “put £7.5 billion back into people’s pockets.”

Two days after its implementation deadline, the Upper Tribunal suspended the scheme.

The legal challenge turns on a foundational question about what a conduct regulator’s powers actually are: can the FCA impose mass redress without individual proofs of loss? The lenders say it can’t. The FCA argues its statutory framework gives it the authority to act. That argument will now be tested in a tribunal, probably stretching into 2027.

The suspension doesn’t settle whether the law was broken and simply means the argument will continue while 12.1 million eligible consumers wait.

It also exposes a structural vulnerability in mass redress design. The FCA’s approach involves setting compensation parameters across an entire population of agreements without individual assessment. It is built for efficiency. It’s also precisely what lenders are challenging. Whether that design was legally robust enough is now the question the tribunal will answer.

Rathi’s broader point, made months before the suspension, hasn’t aged into irrelevance: that if the law has been broken, it is not acceptable to simply conclude that putting things right is too difficult. It’s just been complicated. The remedy’s legitimacy is now as contested as the original harm, and that is a problem for any regulator designing redress at scale.

TMR covered the FCA’s motor finance investigation and redress scheme in the July 2026 Regulatory Digest. For the background, see our motor finance coverage.

The regulator that charged a council

In June 2026, New Zealand’s Water Services Authority – Taumata Arowai filed charges in the Greymouth District Court against Grey District Council and Westroads Ltd for failing to comply with the duty to supply safe drinking water. It’s the first prosecution the authority has brought since it was established in 2021.

Taumata Arowai was created directly in response to the Havelock North campylobacteriosis outbreak of 2016, which may have contributed to three deaths and led to 45 hospitalisations according to figures drawn from the Government Inquiry’s own report. It exists, specifically, to prevent that from happening again. A boil water notice for the Greater Greymouth area had been in place since April 2025, more than a year ago. The council, according to the charges, failed to comply with a direction to fix it.

The prosecution of a local council – a public entity, not a private operator – is significant. Regulators created from public disasters face a particular credibility test: will they hold public bodies to the same standard they hold anyone else? Regulators seen to go soft on councils, government agencies, or other publicly funded entities lose legitimacy with the communities they were set up to protect.

Regulators created from public disasters face a particular credibility test: will they hold public bodies to the same standard they hold anyone else?

Taumata Arowai has answered that question. It took five years, and the Greymouth case involved prolonged non-compliance on a basic public health obligation. But the answer is clear.

For regulators everywhere, particularly newer ones still establishing their identity, this case is worth watching for what it reveals about the conditions under which a public-sector regulator will use its enforcement powers against a peer public entity. The willingness to do so publicly is a signal the Greymouth community needed, and one the regulatory community should note.

New Zealand’s water services reform, and the broader question of how councils will manage the investment burden, is covered in Local water reform reshapes services in New Zealand.

The regulator that opened its books

On 25 June 2026, the Office of the Superintendent of Financial Institutions (OSFI) launched its Streamlined Approvals Framework for fintechs and provincial credit unions seeking to become federally regulated financial institutions.

The framework is substantively what OSFI announced in February 2026: three phases, defined timelines – four weeks for an initial readiness assessment, 12 months for a formal application review, three months for operational readiness – conditional approvals, and a more risk-based review process.

It’s not a wholly novel approach. Other regulators have moved in similar directions. What is unusual is the dashboard.

OSFI has introduced a public-facing dashboard that shows, in real time, the status of every application moving through the streamlined framework. The name of the applicant, the nature of the application, and where it sits in the process are all visible, with applicant consent. In theory, anyone can check whether OSFI is meeting its own published targets.

OSFI’s approval processes have historically operated with limited external visibility – a legacy of a supervisory culture that has tended to value discretion over transparency. The dashboard represents a genuine shift. OSFI is now measurable against timelines it has published, by applicants and observers who didn’t previously have that information.

The questions worth watching: whether the transparency creates productive pressure on OSFI to maintain its targets, and whether it encourages applicants to submit better-prepared applications. Licensing opacity is common across regulators in many parts of the world. If OSFI’s model demonstrates that transparency is compatible with good supervisory practice, other regulators will have less justification for the old approach.

OSFI’s dashboard is the easy part to applaud. Whether it holds up as real accountability is a harder question, as TMR explores in this piece.

1 July and the limits of simultaneous change

In Australia alone, 1 July 2026 brought the following: AML/CTF Tranche 2 live, the final Australian Prudential Regulation Authority (APRA) CPS 230 transition deadline, Group 2 mandatory climate disclosure commencing, Australia’s new National Environmental Protection Agency (NEPA) opening its doors, mandatory registration for supported independent living (SIL) providers with the National Disability Insurance Scheme (NDIS) Quality and Safeguards Commission, mandatory Unique Device Identification (UDI) requirements for high-risk medical devices under the Therapeutic Goods Administration (TGA), and a set of national work health and safety code changes across multiple jurisdictions.

In New Zealand the same week, the Financial Markets Authority (FMA) absorbed consumer credit regulation from the Commerce Commission, and the Health and Safety at Work Amendment Bill passed its third reading.

This isn’t a coincidence, but rather a structural feature of how governments legislate. Fiscal year boundaries pull commencement dates like gravity. But the compression is worth examining as a regulatory governance problem in its own right.

For regulated entities, simultaneous change means compliance teams absorbing multiple new obligations at once, often without the institutional knowledge that builds up around a regime over time. For regulators, it means standing up supervision for new populations and new functions simultaneously while delivering on existing responsibilities. For both, the normal learning process – where early enforcement is lenient while understanding develops – is compressed or bypassed entirely.

Legislatures don’t stagger commencement dates. The question is whether regulators are building the planning and communication capacity to absorb simultaneous implementation.

Australia and New Zealand aren’t the only jurisdictions where this pattern appears. Canada’s fiscal year runs April to April; the UK’s runs the same. The April 2026 cluster of changes in both countries was quieter than Australia’s July, but the dynamic is identical. Legislatures don’t stagger commencement dates. The question is whether regulators are building the planning and communication capacity to absorb simultaneous implementation, and whether the pragmatic early postures they adopt are sustainable as enforcement phases begin.

We’ve written about this directly. Don’t forget to check out out companion digest on July 2026 developments.

Picture of Paul Leavoy

Paul Leavoy

The Modern Regulator Managing Editor Paul Leavoy is a seasoned journalist and regulatory analyst with over two decades of experience writing about technology, public policy, and regulation.

POPULAR POSTS

Stay ahead of regulation

News, insight, and analysis weekly

STAY INFORMED