Reference

    Compliance acronyms & references.

    Every acronym, regulator, statute, code, and standard cited across our Australian compliance quizzes and tools - defined in plain English, with a link straight to the source.

    223 entries · last verified 29 April 2026 · refreshed weekly. Spotted a broken link or stale guidance? Tell us.

    Privacy & data protection

    16 entries

    HRIPA

    Health Records and Information Privacy Act 2002 (NSW)

    NSW health-information privacy regime that applies in addition to the federal Privacy Act for health service providers operating in NSW.

    Last checked 29 April 2026

    CRM

    Customer Relationship Management

    Software (e.g. Salesforce, HubSpot, Rex) used to manage customer data, interactions, and pipeline. In the compliance context: CRM systems are often the largest store of personal information a business holds, making them a key scope item for Privacy Act, NDB, and APP 11 (security and destruction) obligations.

    Last checked 29 April 2026

    GDPR

    General Data Protection Regulation

    European Union privacy regulation that can affect Australian businesses handling EU residents' personal data, especially through overseas platforms, leads, customers, or suppliers.

    Last checked 7 May 2026

    IP

    Internet Protocol address

    Network address that can identify or help identify a device or connection. IP addresses can be personal information where reasonably linkable to an individual.

    Last checked 7 May 2026

    CCTV

    Closed Circuit Television

    Video surveillance system feeding fixed cameras to a recorder or NVR. Premises CCTV captures personal information (faces, vehicle plates, location and time) and falls within the Privacy Act / APPs for businesses subject to them, plus state surveillance device laws (e.g. SDA 1999 VIC, WSA 2007 NSW).

    Last checked 29 April 2026

    AUSTRAC, AML/CTF & financial services

    19 entries

    EDD

    Enhanced Customer Due Diligence

    Additional CDD steps required when ML/TF risk is high - e.g. PEPs, customers from high-risk jurisdictions, or unusually complex transactions.

    Last checked 29 April 2026

    CSLR

    Compensation Scheme of Last Resort

    Statutory scheme that pays compensation (capped at A$150k per claim) where an AFCA determination against a financial firm goes unpaid.

    Last checked 29 April 2026

    ML/TF

    Money Laundering / Terrorism Financing

    The combined financial crime risk that AML/CTF programs are designed to prevent. ML is the process of making criminal proceeds appear legitimate; TF is moving funds to support terrorist activity. Both are reportable to AUSTRAC - TF via SMR within 24 hours, ML within 3 business days.

    Last checked 29 April 2026

    Credit & mortgage broking

    20 entries

    ACL (credit)

    Australian Credit Licence

    Licence required to engage in credit activities under the National Consumer Credit Protection Act 2009, regulated by ASIC. Brokers may operate under their own ACL or as a credit representative of an aggregator's ACL.

    Last checked 29 April 2026

    NCCP

    National Consumer Credit Protection Act 2009

    Federal Act establishing licensing, responsible-lending, BID, and conduct obligations for consumer credit and credit-assistance providers.

    Last checked 29 April 2026

    RG 209

    ASIC Regulatory Guide 209 - Credit licensing: Responsible lending conduct

    ASIC's guidance on the responsible-lending obligations under Chapter 3 of the NCCP Act: inquiries, verification, and the unsuitability assessment.

    Last checked 29 April 2026

    RG 273

    ASIC Regulatory Guide 273 - Mortgage brokers: Best interests duty

    ASIC's primary guidance on how mortgage brokers should comply with BID, the conflict-priority rule, and the conflicted-remuneration provisions.

    Last checked 29 April 2026

    BNPL

    Buy Now Pay Later

    From 10 June 2025, BNPL products are regulated as a Low Cost Credit Contract (LCCC) under the NCCP Act - providers need an ACL and must comply with a modified responsible-lending regime.

    Last checked 29 April 2026

    MFAA

    Mortgage and Finance Association of Australia

    Industry association. MFAA membership requires adherence to its Code of Practice and CPD requirements above ASIC's minimum.

    Last checked 29 April 2026

    FBAA

    Finance Brokers Association of Australasia

    Industry association for finance and mortgage brokers. Membership requires adherence to its Code of Conduct.

    Last checked 29 April 2026

    Tax & ATO obligations

    12 entries

    TPB

    Tax Practitioners Board

    Federal regulator of registered tax agents, BAS agents, and tax (financial) advisers. Administers the Code of Professional Conduct.

    Last checked 29 April 2026

    ABN

    Australian Business Number

    11-digit identifier issued by the Australian Business Register (ABR) to any entity carrying on an enterprise in Australia. Required for GST registration, PAYG, invoicing, and as the foundation for ATO compliance. Must be cancelled within 28 days if the business ceases.

    Last checked 29 April 2026

    Healthcare & AHPRA

    15 entries

    AHPRA

    Australian Health Practitioner Regulation Agency

    National agency that supports the 15 National Boards (including the Dental Board) in regulating registered health practitioners under the Health Practitioner Regulation National Law.

    Last checked 29 April 2026

    IPC

    Infection Prevention and Control

    Practices and policies to prevent the transmission of infection in healthcare. The NHMRC Australian Guidelines for the Prevention and Control of Infection in Healthcare are the national reference.

    Last checked 29 April 2026

    AS 5369:2023

    AS 5369:2023 - Reprocessing of reusable medical devices and other devices in health and non-health related facilities

    Revised Australian Standard for sterilisation and reprocessing in healthcare. Replaces AS/NZS 4187 and AS/NZS 4815. Transition deadlines apply.

    Last checked 29 April 2026

    ARPANSA

    Australian Radiation Protection and Nuclear Safety Agency

    Federal radiation-safety regulator. Publishes Radiation Protection Series codes, including RPS C-7 for dental radiology.

    Last checked 29 April 2026

    TGA

    Therapeutic Goods Administration

    Federal regulator for therapeutic goods (medicines, medical devices, biologicals). Maintains the Australian Register of Therapeutic Goods (ARTG).

    Last checked 29 April 2026

    ARTG

    Australian Register of Therapeutic Goods

    TGA register of therapeutic goods that can be lawfully supplied in Australia, including medical devices and some products used in dental settings.

    Last checked 7 May 2026

    CBCT

    Cone beam computed tomography

    Dental and maxillofacial imaging technology that creates 3D images. Use involves radiation-safety, justification, training, and equipment-quality controls.

    Last checked 7 May 2026

    CDNA

    Communicable Diseases Network Australia

    National public-health network that develops communicable-disease guidance and supports coordinated responses across Australian jurisdictions.

    Last checked 7 May 2026

    Electrical - licensing & standards

    15 entries

    CCEW

    Certificate of Compliance for Electrical Work (NSW)

    Mandatory NSW electrical compliance certificate, lodged with NSW Fair Trading. Records the licensed person who did the work and confirms it complies with AS/NZS 3000.

    Last checked 29 April 2026

    COES

    Certificate of Electrical Safety (Vic)

    Victorian compliance certificate lodged via the EnergySafe Victoria ESVConnect portal. Required for prescribed and non-prescribed electrical work.

    Last checked 29 April 2026

    STC

    Small-scale Technology Certificates

    Renewable-energy certificates created when an eligible solar / wind / hydro / heat-pump system is installed; surrendered by liable retailers under the Small-scale Renewable Energy Scheme.

    Last checked 29 April 2026

    EEHA

    Electrical Equipment in Hazardous Areas

    Specialist electrical work and competency area for equipment installed where flammable gases, vapours, dusts, or fibres can create explosion risk.

    Last checked 7 May 2026

    NECA

    National Electrical and Communications Association

    Australian industry association for electrical and communications contractors.

    Source

    Last checked 7 May 2026

    Building & construction

    17 entries

    NCC

    National Construction Code

    The Australian Building Codes Board's primary technical code for buildings (Volumes 1 & 2) and plumbing & drainage (Volume 3 = PCA). Adopted by states under their Building Acts.

    Last checked 29 April 2026

    HBCF

    Home Building Compensation Fund (NSW)

    NSW residential builders' insurance scheme that protects homeowners where the builder dies, disappears, becomes insolvent, or has their licence suspended for failure to comply.

    Last checked 29 April 2026

    QBCC

    Queensland Building and Construction Commission

    The Queensland regulator for the building and construction industry. Issues contractor licences, handles home warranty insurance, investigates building defects, and enforces the Queensland Building and Construction Commission Act 1991.

    Source

    Last checked 29 April 2026

    BAL

    Bushfire Attack Level

    Bushfire exposure rating used under AS 3959 to determine construction requirements for buildings in bushfire-prone areas.

    Last checked 7 May 2026

    Plumbing - licensing & standards

    17 entries

    PICAC

    Plumbing Industry Climate Action Centre

    Industry-led plumbing training centre referenced by plumbing businesses for technical training, continuing education, and standards access pathways.

    Source

    Last checked 7 May 2026

    WaterMark

    WaterMark Certification Scheme

    ABCB-administered certification scheme for plumbing and drainage products. Products in scope must be WaterMark certified before installation.

    Last checked 7 May 2026

    WSAA

    Water Services Association of Australia

    Industry body whose codes and technical guidelines are commonly referenced by water authorities for mains connections, water services, sewerage, and developer works.

    Source

    Last checked 7 May 2026

    AGIG

    Australian Gas Infrastructure Group

    Australian gas infrastructure business operating gas distribution and transmission networks referenced in gas emergency and network-provider procedures.

    Source

    Last checked 7 May 2026

    ATCO

    ATCO Gas Australia

    Gas distribution network operator in Western Australia, referenced in gas safety, network contact, and emergency procedures.

    Last checked 7 May 2026

    Real estate & property

    8 entries

    AI & automated decision-making

    4 entries

    Voluntary AI Safety Standard

    Voluntary AI Safety Standard 2024 (DISR)

    Ten guardrails published by DISR in September 2024 for safe and responsible AI deployment in Australia. Voluntary now; expected to inform a future mandatory regime for high-risk AI.

    Last checked 29 April 2026

    LLM

    Large Language Model

    A generative AI model trained on large text corpora to produce, classify, summarise, or transform language. In compliance use, LLMs create privacy, confidentiality, accuracy, and decision-transparency risks.

    Last checked 7 May 2026

    Cyber security

    17 entries

    Essential Eight

    ASD Essential Eight

    Australian Signals Directorate's eight prioritised mitigation strategies (application control, patch applications, configure Office macros, user application hardening, restrict admin privileges, patch operating systems, MFA, regular backups). Maturity Levels 0-3.

    Last checked 29 April 2026

    ISO

    International Organization for Standardization

    The international body that publishes consensus standards. ISO 27001 (information security management) and ISO 9001 (quality management) are frequently referenced in Australian compliance contexts - insurers, government procurement, and AML providers increasingly require ISO 27001 certification.

    Source

    Last checked 29 April 2026

    EDR

    Endpoint Detection and Response

    Security software that monitors endpoint activity for suspicious behaviour and supports detection, investigation, and response to malware, ransomware, and compromise.

    Last checked 7 May 2026

    VOIP

    Voice over Internet Protocol

    Phone calls carried over an IP network instead of traditional copper PSTN lines. Business phone systems (3CX, Microsoft Teams Phone, RingCentral etc.) all run on VoIP - supports call routing, auto-attendants, queues, softphones and number porting. Compliance-relevant when call recordings or retention touch the Privacy Act / APPs.

    Last checked 29 April 2026

    ISP

    Internet Service Provider

    An organisation that sells internet connectivity to end customers - typically buying wholesale from NBN Co or a carrier. The ISP is who you pay and who carries the service-disruption responsibility; the underlying access network (NBN, mobile carrier, etc.) is a separate layer.

    Last checked 29 April 2026

    RSP

    Retail Service Provider

    An ISP that resells NBN services to end customers. Telstra, Optus, TPG, Aussie Broadband etc. are all RSPs running on top of NBN Co's wholesale access network. Service tickets cross both layers - the RSP handles you directly, but NBN Co owns the underlying line.

    Last checked 29 April 2026

    NBN

    National Broadband Network

    Australia's wholesale broadband network operated by NBN Co. Sold to end customers via RSPs (Telstra, TPG, Aussie Broadband etc.). Mixed access technologies - FTTP, FTTC, FTTN, HFC, Fixed Wireless and Sky Muster - relevant when planning Wi-Fi, voice, failover and remote-work setups.

    Last checked 29 April 2026

    Professional ethics & standards

    17 entries

    APES 110

    APES 110 Code of Ethics for Professional Accountants

    Ethical standard issued by APESB. Mandatory for members of CPA Australia, CA ANZ, and IPA. Covers integrity, objectivity, professional competence, confidentiality, and professional behaviour.

    Last checked 29 April 2026

    SME

    Small and Medium-sized Enterprise

    A business with fewer than 200 employees (or <$50M revenue). Many Australian regulatory carve-outs and thresholds are calibrated to SME size bands - knowing which band you're in determines your obligations under the Privacy Act, Fair Work Act, and Modern Slavery Act.

    Last checked 29 April 2026

    CPA

    Certified Practising Accountant

    Professional designation and membership body for accountants. CPA Australia members are subject to professional standards, CPD, and ethical obligations.

    Last checked 7 May 2026

    CA ANZ

    Chartered Accountants Australia and New Zealand

    Professional body for chartered accountants in Australia and New Zealand. Members are subject to professional standards, CPD, and ethical obligations.

    Last checked 7 May 2026

    NATA

    National Association of Testing Authorities

    Australian accreditation body for laboratories and technical testing services. Calibration and testing records may reference NATA-accredited providers.

    Source

    Last checked 7 May 2026

    APESB

    Accounting Professional & Ethical Standards Board

    Independent board that issues professional and ethical standards for accountants, including APES 110.

    Source

    Last checked 7 May 2026

    NOCLAR

    Non-compliance with laws and regulations

    Professional-ethics concept requiring accountants and auditors to respond appropriately when they identify or suspect non-compliance with laws or regulations.

    Last checked 7 May 2026

    MSP

    Managed Service Provider

    External IT firm that takes ongoing ownership of a business's technology - devices, M365, internet, cyber, vendors - under a recurring contract. The 'managed' part is the difference from break-fix support: the MSP proactively monitors and maintains rather than just reacting when something breaks.

    Last checked 29 April 2026

    MVP

    Managed Value Provider

    Nifty Computing's positioning beyond a traditional MSP - ownership of not just the IT but the surrounding business value: vendor coordination, carrier follow-up, strategic planning, one point of call across the entire stack. The 'value' in MVP is the time and decision load lifted off the business owner.

    Last checked 29 April 2026

    Work Health & Safety / trades-general

    36 entries

    FWC

    Fair Work Commission

    Australia's national workplace-relations tribunal. Handles awards, enterprise agreements, unfair dismissal, right-to-disconnect and flexible-work disputes, and other Fair Work matters.

    Last checked 7 May 2026

    EPA

    Environment Protection Authority

    State or territory environmental regulator. In trade contexts, EPA obligations can arise for pollution incidents, trade waste, asbestos, contaminated runoff, and hazardous waste.

    Last checked 7 May 2026

    Consumer law & contracts

    10 entries

    Missing something?

    We add entries as new quizzes ship and as the regulatory landscape shifts. If a term you saw in one of our quizzes isn't on this page, or you'd like a new sector covered, get in touch and we'll roll it into the next refresh.