Key Takeaway
On 29 September 2026, the Australian Communications and Media Authority (ACMA) released the consultation draft of the Telecommunications (Consumer Protections) Industry Standard 2026 (Draft TCP Standard). The final version of this Standard will ultimately replace the existing industry code, C628:2019 Telecommunications Consumer Protections Code (TCP Code).
While it was generally expected that the ACMA would significantly ‘up the ante’ given its dissatisfaction with various attempts by industry to revise the TCP Code, the Draft TCP Standard has gone further than expected: it significantly changes the scope and prescriptiveness of consumer protection obligations. To comply with these obligations, carriage service providers (CSPs) will be required to make fundamental changes to governance, training, selling processes, employee remuneration, consumer communications, billing, consumer rights (including if mobile coverage is inadequate or a technology change affects the customer) and more. Once the Draft TCP Standard is an industry standard, it will be directly enforceable by the ACMA via infringement notices or civil penalties of $250,000 per breach.
All CSPs should review the Draft TCP Standard now so that they can have their say. The ACMA is inviting public submissions until 10 November 2026. Contact Mallesons if you would like assistance with preparing a response and/or would like to understand how the Draft TCP Standard will affect your business.
Introduction
Following a decision to cease its review of the TCP Code as the industry’s drafts did not provide appropriate community safeguards, the ACMA announced in March 2026 that it would exercise its power under section 125 of the Telecommunications Act 1997 (Cth) to replace the TCP Code with a directly enforceable industry standard: the Draft TCP Standard. The Draft TCP Standard, released on 29 September 2026, represents a significant shift both in the scope, and enforcement, of consumer safeguards in the telecommunications industry.
In terms of scope, the Draft TCP Standard will apply to all CSPs in relation to the supply of telecommunications products to consumers, being (a) individuals who acquire telecommunications products primarily for personal or domestic use; (b) not-for-profit organisations; or (c) businesses with an annual spend with the CSP of no greater than $40,000 that do not have a genuine and reasonable opportunity to negotiate the terms of their contract. In each case, products acquired for resale are excluded.
In terms of timing, there is currently no commencement date for the Draft TCP Standard. However, given the range and prescriptive nature of many of the new obligations, a scaled and/or lengthy transition period will practically be required. Indeed, industry commentators are already raising concerns about the disproportionate burden of the Draft TCP Standard on smaller telecommunications providers and there have been calls for a scaled compliance period for smaller providers to assess the new regulatory requirements and adjust their operations accordingly.
In terms of content, we have outlined the key features of the Draft TCP Standard in the table below.
|
Key Concept
|
Brief Summary
|
|
Compliance with the TCP Standard will be mandatory and directly enforceable by the ACMA Telecommunications Act 1997 (Cth) s 128. |
As an industry code, the TCP Code represented a co-regulatory regime where compliance was overseen via Communications Compliance with the ACMA’s enforcement role primarily limited to issuing CSPs with formal warnings and directions to comply. Once made, the Draft TCP Standard will be an industry standard, and breaches will be directly enforceable by the ACMA, including through infringement notices or civil penalties.[1] Telecommunications Act 1997 (Cth) s 128. |
|
All CSPs will be subject to strengthened governance obligations – more reporting, approvals, monitoring and training Telecommunications Act 1997 (Cth) s 128. |
CSPs will be required to maintain policies, processes, procedures and training materials that address the CSP's obligations under the Draft TCP Standard. These documents must be:
The new governance obligations are complemented by strengthened training and monitoring requirements including:
Given the breadth of these obligations, all CSPs (regardless of size) will practically need to undertake a detailed mapping of their current processes and policies against the final standard and implement new internal reporting/auditing processes. Telecommunications Act 1997 (Cth) s 128. |
|
New positive duties relating to consumers experiencing vulnerable circumstances Telecommunications Act 1997 (Cth) s 128. |
CSPs will have a new positive obligation to take reasonable steps to identify a consumer’s telecommunications needs and whether a consumer may be experiencing vulnerable circumstances. Where a CSP identifies (or reasonably suspects) vulnerable circumstances, the consumer must be advised of available support and assistance. Customers may also request relief within 6 months of making a purchase if their decision-making was impaired by a vulnerability at the time of purchase. If the CSP determines the customer’s decision-making was impaired, the customer must be allowed to exit their contract (without early exit fees). With vulnerable circumstances broadly defined to capture financial hardship, disability, domestic, family or sexual violence, age, illness, language barriers, natural disasters or other circumstances affecting the ability to access or maintain services – this obligation is significantly broader than existing obligations on CSPs under the Financial Hardship Standard (though, to the extent of any inconsistency, the Financial Hardship Standard and the DFSV Standard prevail). Telecommunications Act 1997 (Cth) s 128. |
|
New customer remedies and exit rights introduced for tech changes or inadequate mobile coverage Telecommunications Act 1997 (Cth) s 128. |
In addition to the remedies for customers in vulnerable circumstances (see above), the Draft TCP Standard introduces new remedies for:
These remedies are likely to be controversial and have the potential to disproportionately impact smaller CSPs. Telecommunications Act 1997 (Cth) s 128. |
|
New restrictions on responsible selling and sales incentive arrangements – including having a written performance remuneration policy for monetary or non-monetary sales incentives Telecommunications Act 1997 (Cth) s 128. |
Similar to responsible lending, CSPs will have positive obligations to:
These obligations extend not just to sales by the CSP but to third parties selling a CSP’s services/products. In addition, CSPs who offer performance payments or other monetary or non-monetary sales incentives to sales staff will be required to implement a written performance remuneration policy which (amongst other requirements) imposes restrictions on the weighting of performance metrics and caps a staff member's maximum performance payment entitlement at no more than 20% of their base salary. Where staff make a sale that breaches a CSP’s responsible selling obligations, the CSP must: withhold unpaid performance payments/rewards; take reasonable steps to recover (to the extent lawfully permitted) paid performance payments; and restrict eligibility for future performance payments for a minimum period of three months. Although some of these proposals were previously suggested by the industry, there are open questions as to how these new obligations would be implemented in practice. Amongst other things, these obligations may cut across employees’ contractual terms and conditions of employment or obligations in industrial instruments and there are real questions about how performance payments can be lawfully recovered. Telecommunications Act 1997 (Cth) s 128. |
|
New restrictions on mis-selling Telecommunications Act 1997 (Cth) s 128. |
If a CSP becomes aware of mis-selling, it must, within 7 business days, take reasonable steps to contact each affected customer and inform them of the mis-selling and available remedies. The remedies that must be available include refunds, returning the affected customer to the position they were in before the sale (or as close as possible to that position where it is not reasonably practicable to do so); terminating the contract without charge; amending the contract without charge or penalty; or another remedy agreed between the provider and the affected customer. The concept of mis-selling is broadly defined and extends beyond breaches of responsible selling obligations in the Draft TCP Standard to capture areas already covered by the Australian Consumer Law (ACL) (e.g. making false or misleading claims; not confirming that consumers understand what they are buying and its cost; selling products that do not meet expressly stated needs; coercive or harassing behaviour; selling a product that the provider has no reasonable confidence would be able to be delivered; knowingly targeting consumers who are experiencing vulnerabilities; and manipulating credit assessment processes). As such, there will be substantial overlap between the mis‑selling provisions in the Draft TCP Standard and existing economy‑wide obligations under the ACL, including the prohibitions on misleading or deceptive conduct (s 18), false or misleading representations (s 29) and unconscionable conduct (s 21). How these two regimes will interact in practice remains an open question. Overlap between sector‑specific regulation and the ACL is not unusual. In most cases, industry standards impose obligations that add to the ACL rather than conflict with it: a provider that complies with the more prescriptive sector rule will often also comply with the ACL, and the ACL continues to operate as a baseline. True inconsistency, where compliance with one regime would require a breach of the other, is less common. However, the more practical risks are: duplicated regulatory oversight by the ACMA and the the Australian Competition and Consumer Commission (ACCC) in relation to the same conduct; and differences in key concepts or thresholds between the two regimes. That said, the ACMA is required to consult with the ACCC before the industry standard is made. It is therefore possible that the mis‑selling restrictions will be refined before the standard is finalised, particularly where they are inconsistent with, or would create uncertainty about, a provider's obligations under the ACL. Telecommunications Act 1997 (Cth) s 128. |
|
Tighter and more expansive credit assessment requirements Telecommunications Act 1997 (Cth) s 128. |
Under the TCP Code, credit assessments were only required for residential customers acquiring post-paid services, and where the contract would result in debt of more than $1,000. However, the Draft TCP Standard significantly expands the credit assessment requirements to capture contracts that may result in a debt owed to the CSP of:
With the new amounts capturing both services and goods (i.e. devices), it practically means that most post-paid contracts will require a credit assessment going forward. Some stakeholders have already told the ACMA that $300 is too low, and the ACMA has acknowledged the threshold may have unintended impacts (such as multiple credit checks being undertaken on customers shopping around for new services). The ACMA is seeking feedback on whether a dollar threshold should apply at all, so it is possible these amounts may change. Telecommunications Act 1997 (Cth) s 128. |
|
Digital-only service models will be significantly restricted – there needs to be a human-operated contact channel Telecommunications Act 1997 (Cth) s 128. |
Amongst the range of prescriptive customer service obligations proposed in the Draft TCP Standard (including in relation to managing deceased customers' accounts), CSPs will be required to make available a human-operated contact channel to respond to, and manage, customer service issues. Notably, this prohibits sole reliance on automated responses (including chatbots and AI systems) which will significantly restrict digital-only service models for low-cost and MVNO brands. All Large Providers will also be required to review their customer service performance each quarter and publish quarterly reports on their websites (covering the most recent 8 quarters). Telecommunications Act 1997 (Cth) s 128. |
|
Other notable changes Telecommunications Act 1997 (Cth) s 128. |
More prescriptive credit management processes: A CSP’s ability to restrict, suspend or disconnect services will be significantly more structured, with restriction not permitted earlier than 10 business days after a first reminder notice, suspension not permitted earlier than 5 business days after a second reminder notice, and disconnection not permitted earlier than 5 business days after a third reminder notice. There are also prohibitions on credit management action during national public holidays or a natural disaster in the billing address area, as well as more prescriptive debt-collection requirements. Critical information summaries: The mandatory content of Critical Information Summaries will be significantly extended (and the two-page limit lifted). This includes information about payment timing (e.g. prepaid, upfront, post-paid), payment methods, consequences of cancellation, clearer links to interpreter services and National Relay Service contacts and links to the SFOA and fair use policies. Usage information: CSPs must give customers free access to usage information that is no more than 12 hours old, compared with 48 hours. Payment methods: CSPs must offer customers at least two fee-free payment methods, one of which must be a manual payment method. Direct debit: CSPs must: give at least three business days' notice before a scheduled debit, (if requested) cancel a direct debit within one business day of a customer's request (this was previously three business days) and refund any incorrectly debited amount within three business days (this was previously 10 business days). Telecommunications Act 1997 (Cth) s 128. |




