Australia's consumer protection law is a single national code: the Australian Consumer Law (ACL), which sits in Schedule 2 of the Competition and Consumer Act 2010 (Cth). But the ACL is not a fixed document. It is reshaped on a cycle that runs from regulators and review bodies up to consumer affairs ministers, then through federal and state parliaments, and back down as obligations on your business: refund rules, contract terms, product safety duties and, most dramatically, the penalties for getting any of them wrong.
Understanding that machinery matters because each turn of the loop changes what you must do. This article explains how the review-and-reform process actually works, using the first major review of the ACL, delivered in April 2017, as the worked example. It then sets out which of the review's recommendations became law, what the current penalty and compliance landscape looks like, and where a consumer lawyer earns their keep along the way.
The actors: who decides Australia's consumer law
A reform to the ACL passes through several hands before it touches your business. The cast is small, and each player has a distinct role:
- Parliaments: The ACL is Schedule 2 of the Competition and Consumer Act 2010 (Cth). Amend the schedule and you amend the national law. Each state and territory also applies the ACL through its own application legislation, so a change agreed at the federal level takes effect uniformly across the country.
- Consumer affairs ministers: They meet through the Legislative and Governance Forum on Consumer Affairs, the body that commissions reviews and ultimately agrees which reform package to pursue.
- Consumer Affairs Australia and New Zealand (CAANZ): The intergovernmental body made up of the federal, state and territory consumer agencies, including the ACCC and ASIC. CAANZ does the policy work: research, consultation, and the drafting of recommendations.
- The ACCC: The national enforcer. It investigates breaches, litigates against businesses, and its enforcement record feeds the evidence of gaps straight back into the reform debate.
- The courts: The Federal Court and state courts impose the penalties and interpret the provisions. A landmark case can become the catalyst for the next review.
The tensions between these players are easy to see. Ministers answer to electorates that want stronger consumer protection, while business groups warn about compliance cost. The ACCC wants penalties large enough that boards notice them, which is precisely the change businesses fear most. The reform process is where those interests get negotiated.
What triggers a review, and how one runs
Reform is rarely prompted by abstract policy. It is usually triggered by an enforcement failure that makes the existing law look toothless, and the review that produced the 2017 reforms was no exception.
The emblematic case involved Nurofen. From December 2015, the Federal Court found that Reckitt Benckiser had breached the ACL by selling a range of "Specific Pain" products, including Nurofen Migraine Pain and Nurofen Tension Headache, which were in fact identical tablets marketed as formulated for particular types of pain. The initial penalty was $1.7 million, ordered in April 2016, and the Full Federal Court increased it to $6 million on the ACCC's appeal in December 2016. A few million dollars against the misleading claims of a major multinational looked less like deterrence and more like a cost of doing business, and the case became a running argument for tougher penalties.
By then the machinery was already moving. In June 2015, consumer affairs ministers had asked CAANZ, through the Legislative and Governance Forum on Consumer Affairs, to conduct the first major review of the ACL since it commenced in 2011. CAANZ ran the review from 31 March 2016 to March 2017, drawing on public consultation, the Australian Consumer Survey 2016, and a comparative analysis of overseas consumer policy frameworks. The final report, released on 19 April 2017, found that the ACL was, on the whole, "generally fit for purpose", but recommended a package of 19 legislative proposals, non-legislative actions for regulators, and a program of further research.
What the 2017 review proposed
The 19 proposals covered a lot of ground. The headline recommendations, in the form they were ultimately debated, were:
- Penalties: raise the maximum corporate penalty from $1.1 million to the greater of $10 million, three times the benefit obtained, or 10 per cent of turnover, and the individual maximum from $220,000 to $500,000.
- Refunds: give consumers a right to a refund or replacement where goods fail the consumer guarantees within a short period of purchase, without having to prove a "major failure", and recognise that multiple non-major failures can together amount to a major failure.
- Who counts as a consumer: raise the monetary threshold in the definition of consumer from $40,000 to $100,000.
- Digital products: examine whether the consumer guarantees are fit for digital products, new market practices and emerging technologies.
- Product safety: introduce a general safety law requiring products to be safe before they enter the market, define "voluntary recall" in statute, increase penalties for failing to notify recalls, strengthen the ACCC's powers to obtain information, and make mandatory reporting obligations clearer.
- Contract terms: extend the unfair contract terms regime to insurance contracts, extend the unconscionable conduct protections to publicly listed companies, and require clearer disclosure about extended warranties with a cooling-off period.
- Online shopping: require headline prices to include all additional fees and charges, and apply the consumer guarantees to online auctions.
What actually became law
The ministers did not adopt the package wholesale, and what they did adopt arrived in tranches over the following eight years. The shape of the current law is the result of four separate steps:
- Late 2018, penalties lift off: Parliament passed the first tranche of reforms in August 2018, lifting maximum penalties for companies to the greater of $10 million, three times the benefit obtained, or 10 per cent of annual turnover, and for individuals from $220,000 to $500,000.
- 1 July 2021, the consumer net widens: The monetary threshold in the definition of consumer rose from $40,000 to $100,000. The consumer guarantees were also extended to digital products: goods with digital content, services that include digital content, and ongoing access to digital content such as streaming or software subscriptions, along with new update-related duties for suppliers.
- 9 November 2023, unfair contract terms grow teeth: From November 2022 the penalty ceiling rose again, to the greater of $50 million, three times the benefit, or 30 per cent of adjusted turnover, with individual penalties at $2.5 million. A year later, from 9 November 2023, it became unlawful to propose, use or rely on an unfair term in a standard form consumer or small business contract, with penalties attached.
- 28 March 2026, the ceiling doubles again: The Treasury Laws Amendment (Doubling Penalties for ACCC Enforcement) Act 2026 lifted the fixed corporate limb from $50 million to $100 million.
The current position, reflected in s 224 of the ACL, is that a company faces a maximum penalty of the greater of $100 million, three times the benefit obtained, or 30 per cent of adjusted turnover, and an individual faces up to $2.5 million. Other review proposals were also quietly adopted: the aggregation of multiple non-major failures into a major failure is now expressly recognised in s 260(2) of the ACL.
Some recommendations never made it. The fixed 30-day "right to reject" was not enacted. Instead, the law retains a reasonable-time ladder: for a minor failure, the consumer can require the supplier to remedy it within a reasonable time, and only if the supplier refuses or fails to do so can the consumer reject the goods or have them fixed elsewhere; a major failure, as defined in s 260 of the ACL, allows rejection or compensation immediately. A general safety law for consumer goods has not been enacted, and product safety still operates through safety standards, bans, recalls and reporting obligations rather than a requirement that products be safe before sale. Proposals on unconscionable conduct for listed companies and a statutory headline-price rule for online shopping also remain unimplemented.
Where the machinery bites your business
The reform loop has produced a compliance landscape that is materially harder for Australian businesses than it was when the ACL commenced in 2011:
- Penalty exposure is now existential for mid-size players: The maximum corporate penalty has gone from $1.1 million to a $100 million ceiling, and the turnover limb means a 30 per cent penalty on a $50 million revenue business is $15 million. Individuals involved in a contravention, including directors and managers, face personal exposure up to $2.5 million.
- Business-to-business sellers are inside the net: Because the monetary limb is now $100,000, and because s 3(10) of the ACL presumes that a person is a consumer unless the contrary is established, a business selling commercial goods or services under $100,000 to another business carries guarantee exposure. The exceptions in s 3(2) of the ACL cover only goods acquired for re-supply or for being used up or transformed in production or manufacture, so equipment bought for ordinary business use is caught. Whether a particular purchase crosses the line into "transforming in production" is often a fine factual question.
- Refund handling has to follow the ladder: Businesses still routinely demand proof of a major failure before accepting a return. The law does not work that way: minor failures trigger a duty to remedy within a reasonable time, and major failures, or failures that cannot be remedied, trigger rejection and refund rights immediately. The guarantees cannot be contracted out of, and a sign or policy saying "no refunds" misrepresents the law.
- Unfair contract terms carry penalties: Since 9 November 2023, standard form consumer and small business contracts that contain unfair terms expose the business to penalties, not just a court refusing to enforce the term. Rollover clauses, unilateral variation rights and excessive termination fees are the classic trouble spots.
- Digital products are no longer a grey zone: If you sell software, subscriptions or hardware with embedded content, the guarantees apply and update-related obligations attach.
Where a consumer lawyer earns their keep
Most businesses meet the reform loop the wrong way round: after an ACCC investigation, a substantiation notice, or a refund dispute has escalated. A consumer lawyer is most valuable before that point, in three places:
- A compliance audit: The Nurofen lesson is that marketing claims need substantiation, refund policies need to track the s 259 and s 260 ladder, and warranty documents must not purport to limit the guarantees. An audit of your terms of trade, website claims and returns policy typically surfaces the exposure in a few days, and it is far cheaper than the process of responding to a regulator.
- Unfair contract terms: Because penalties now attach to unfair terms, reviewing standard form contracts, subscription agreements and renewal terms is a legal drafting exercise, not an admin task. A lawyer identifies the terms a court would characterise as unfair and redrafts them so the contract still protects the business.
- If the ACCC comes knocking: Compulsory information notices, substantiation notices and investigation interviews have short deadlines and serious consequences. A practitioner manages the response, builds the compliance record that s 224(2) of the ACL directs courts to weigh (the nature of the conduct, any loss, and prior similar conduct), and negotiates penalty outcomes before proceedings are issued.
The $100 million ceiling should change how you run compliance
The single sharpest fact in this story is the arithmetic: the maximum corporate penalty for a consumer law breach has risen from $1.1 million in 2011 to $100 million today, with a turnover-based limb that scales with your revenue. The 2017 review did not just produce a set of recommendations; it set in motion a reform loop that has since multiplied the maximum penalty nearly a hundredfold and is still widening the coverage of the law, through the $100,000 consumer threshold, digital products and unfair contract terms.
For a business, the practical consequence is that consumer law compliance is now a standing cost of running the business, not a legal afterthought. Getting in early with a structured audit of your consumer-facing terms and practices is the cheapest insurance available against a process that can otherwise consume years and end in turnover-based penalties. A conversation with a consumer lawyer about where your exposure sits is likely to cost far less than the first substantiation notice.