Australian Prudential Regulation Authority (confidentiality) determination
No. 1 of 2026
Information provided by general insurers and Lloyd’s underwriters for the purposes of the National Claims and Policies Database under Reporting Standard GRS 800.1, GRS 800.2, GRS 800.3, LOLRS 800.1, LOLRS 800.2 and LOLRS 800.3.
EXPLANATORY STATEMENT
Prepared by the Australian Prudential Regulation Authority (APRA)
Australian Prudential Regulation Authority Act 1998, s 57
Under section 57 of the Australian Prudential Regulation Authority Act 1998 (the Act), APRA may determine, by legislative instrument, that all or a specified part of a relevant reporting document contains, or does not contain, confidential information.
On 30 June 2026, APRA made Australian Prudential Regulation Authority (confidentiality) determination No. 1 of 2026 (the instrument) which determines that certain information provided to APRA under specified reporting standards by general insurers and Lloyd’s underwriters for the purposes of the National Claims and Policies Database (NCPD), is not confidential.
The instrument commences at the start of the day after the day the instrument is registered on the Federal Register of Legislation.
- Background
Subsection 56(2) of the Act provides that it is an offence to disclose “protected information”[1] or a “protected document”[2], which includes information or documents provided to APRA under a “prudential regulation framework law”[3].
The Financial Sector (Collection of Data) Act 2001 (FSCOD Act) is a prudential regulation framework law, and the reporting documents listed in the instrument, having been provided to APRA under that Act, are protected documents. Subsection 56(5C) of the Act provides that it is not an offence to disclose information in a reporting document given to APRA under section 13 of the FSCOD Act, where APRA has made a determination under section 57 of the Act in relation to the information.
Under subsections 57(2) and (4) of the Act, APRA may, by legislative instrument, determine that:
- all or a specified part of a relevant reporting document contains, or does not contain, confidential information; or
- all or a specified part of relevant reporting documents of a specified kind contains, or do not contain, confidential information,
if, taking into account any representations made under subsection 57(3) in relation to the document or documents of that kind, APRA considers that the benefit to the public from the disclosure of the document(s), or information contained in the document(s), outweighs any detriment to commercial interests that the disclosure may cause.
- Purpose and operation of the instrument
The determination of certain NCPD data to be non-confidential will enable APRA to achieve the aims of the NCPD, which are:
- to provide insurers, the community and State and Federal governments with a better understanding of public & product liability insurance and professional indemnity insurance; and
- to help make these products more affordable and available by providing insurers with detailed information to help them assess risks and determine appropriate premiums for these insurance products.
The instrument provides that certain information given to APRA under any of the following reporting standards made under section 13 of the FSCOD Act (collectively, the NCPD Reporting Standards) is non-confidential:
NCPD Reporting Standards for General Insurers
- Reporting Standard GRS 800.1 Policy Data: Public and Product Liability and Professional Indemnity Insurance (GRS 800.1)
- Reporting Standard GRS 800.2 Claim Data: Public and Product Liability and Professional Indemnity Insurance (GRS 800.2)
- Reporting Standard GRS 800.3 Facility Business Data: Public and Product Liability and Professional Indemnity Insurance (GRS 800.3)
NCPD Reporting Standards for Lloyd’s of London:
- Reporting Standard LOLRS 800.1 Policy Data: Public and Product Liability and Professional Indemnity Insurance (LOLRS 800.1)
- Reporting Standard LOLRS 800.2 Claim Data: Public and Product Liability and Professional Indemnity Insurance (LOLRS 800.2)
- Reporting Standard LOLRS 800.3 Facility Business Data: Public and Product Liability and Professional Indemnity Insurance (LOLRS 800.3)
The instrument declares certain information given to APRA under the NCPD Reporting Standards to be not confidential to allow for publication of statistical information relating to general insurers and Lloyd’s underwriters. The same type of information provided under the NCPD Reporting Standards was also determined to be not confidential under previous APRA determinations[4].
The instrument applies to the specified information provided by all general insurers, including foreign general insurers operating in Australia through branch operations and, through Lloyd’s, Lloyd’s underwriters authorised to carry on insurance business in Australia under section 93 of the Insurance Act 1973.
Explanation of each provision in the instrument
Schedule 1
Schedule 1 lists APRA determinations that are revoked by the instrument. These APRA determinations have previously been relied upon by APRA to determine specified information provided under the NCPD Reporting Standards to be not confidential. These APRA determinations are superseded by the instrument.
Schedule 2
Schedule 2 specifies the information in parts of the NCPD Reporting Standards that are determined to be not confidential.
Schedule 2 – Part 1
Part 1 of Schedule 2 outlines the information in parts of GRS 800.1 that are not confidential.
Schedule 2 – Part 2
Part 2 of Schedule 2 outlines the information in parts of GRS 800.2 that are not confidential.
Schedule 2 – Part 3
Part 3 of Schedule 2 outlines the information in parts of GRS 800.3 that are not confidential.
Schedule 2 – Part 4
Part 4 of Schedule 2 outlines the information that are not confidential in parts of:
- LOLRS 800.1;
- LOLRS 800.2; and
- LOLRS 800.3.
Documents incorporated by reference
Under section 14(1)(a) of the Legislation Act 2003, the determination incorporates the Insurance Act 1973 and the FSCOD Act by reference as in force from time to time. These Acts may be freely obtained at www.legislation.gov.au.
- Consultation
APRA conducted consultation for the instrument. In May 2026, APRA consulted on APRA’s refreshed NCPD publication approach (publication of NCPD outputs as downloadable datasets) and the addition of cyber insurance and management liability product data as separately published product types.[5] The consultation followed APRA’s earlier consultation in November 2020, which related to APRA’s approach to publishing statistics using data required to be submitted by the NCPD Reporting Standards and in which APRA initially consulted on the proposed publication of cyber insurance and management liability data as separate, standalone, product type categories.[6].
APRA received two non-confidential responses to the consultation from the Insurance Council of Australia and the Actuaries Institute. The responses were broadly supportive of APRA’s proposed approach to publication. However, the responses did contend that the separate reporting of cyber insurance and management liability product lines could result in individual insurers becoming identifiable. APRA intends to mitigate this risk through limiting access to the unmasked publication. Additionally, APRA considers that the benefit to the public from the publication outweighs the potential detriment to commercial interests arising from this risk.
APRA considered the potential detriment to the commercial interest of general insurers, Lloyd’s and Lloyd’s underwriters that disclosure of commercially sensitive information might cause and the public interest in releasing data that will enable the public to gain a greater understanding of the financial strength of individual insurers and offer further insight into the Australian insurance market. APRA considers that the benefit from the disclosure would outweigh any potential detriment to the commercial interests that disclosure might cause.
- Statement of compatibility prepared in accordance with Part 3 of the Human Rights (Parliamentary Scrutiny) Act 2011
A Statement of compatibility prepared in accordance with Part 3 of the Human Rights (Parliamentary Scrutiny) Act 2011 is provided at Attachment A to this Explanatory Statement.
ATTACHMENT A
Statement of Compatibility with Human Rights
Prepared in accordance with Part 3 of the Human Rights (Parliamentary Scrutiny) Act 2011
Australian Prudential Regulation Authority (confidentiality) determination
No. 1 of 2026
This Legislative Instrument is compatible with the human rights and freedoms recognised or declared in the international instruments listed in section 3 of the Human Rights (Parliamentary Scrutiny) Act 2011 (HRPS Act).
Overview of the Legislative Instrument
This Legislative Instrument will enable APRA to disclose certain information provided to APRA under reporting standards, by general insurers and Lloyd’s, for the purposes of the National Claims and Policies Database (NCPD).
Human rights implications
APRA has assessed this Legislative Instrument against the international instruments listed in section 3 of the HRPS Act and determined that only Article 17 of the International Covenant on Civil and Political Rights (ICCPR) is conceivably of relevance to this Legislative Instrument.
Article 17 of the ICCPR prohibits the arbitrary or unlawful interference with a person’s privacy, family, home and correspondence, and attacks on reputation. Article 17 is exclusively concerned with prohibiting interference with the privacy and/or reputation of individual persons. It does not extend to the privacy and/or reputation of corporate entities.
This Legislative Instrument will facilitate the disclosure of specific information given to APRA by general insurers and Lloyd’s in accordance with certain reporting standards. This Legislative Instrument does not involve the disclosure of information directly relating to individual persons. Further, APRA reviews all releases of data received under reporting standards to ensure that no information pertaining to an individual person can be deduced solely from the released data.
Consequently, this Legislative Instrument does not engage any of the applicable rights or freedoms recognised or declared in the international instruments listed in section 3 of the HRPS Act. Accordingly, in APRA’s assessment, this Legislative Instrument is compatible with human rights.
Conclusion
This Legislative Instrument is compatible with human rights as it does not raise any human rights issues.
[1] Defined in s.56(1) of the Act.
[2] Defined in s.56(1) of the Act.
[3] Defined in s.3(1) of the Act.
[4] See Australian Prudential Regulation Authority (confidentiality) determination No. 10 of 2010;
Australian Prudential Regulation Authority (confidentiality) determination No. 18 of 2011;
Australian Prudential Regulation Authority (confidentiality) determination No. 19 of 2012;
Australian Prudential Regulation Authority (confidentiality) determination No. 5 of 2013;
Australian Prudential Regulation Authority (confidentiality) determination No. 8 of 2014;
Australian Prudential Regulation Authority (confidentiality) determination No. 10 of 2015;
Australian Prudential Regulation Authority (confidentiality) determination No. 2 of 2016;
Australian Prudential Regulation Authority (confidentiality) determination No. 2 of 2017;
Australian Prudential Regulation Authority (confidentiality) determination No. 1 of 2018;
Australian Prudential Regulation Authority (confidentiality) determination No. 1 of 2019;
Australian Prudential Regulation Authority (confidentiality) determination No. 1 of 2020; and
Australian Prudential Regulation Authority (confidentiality) determination No. 2 of 2021.
[5] NCPD non-confidentiality determination and refreshed publication format | APRA
[6] See APRA’s 5 November 2020 letter to general insurers and other interested parties (https://www.apra.gov.au/consultation-on-collection-of-cyber-insurance-and-management-liability-data-national-claims-and-0).