Australian law firms have just cleared a milestone that few would have contemplated even two years ago: naming, and formally notifying the regulator of, an anti-money laundering and counter-terrorism financing (AML/CTF) compliance officer. Under the Tranche 2 reforms, newly regulated firms had until the later of 29 July 2026 — the enrolment deadline that fell yesterday — or 14 days after enrolling, to tell AUSTRAC, the Australian Transaction Reports and Analysis Centre, who holds that role. The appointment box is now ticked. The far harder question is what that person is actually expected to do.

Why the role exists

The compliance officer requirement flows from the Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (Cth), which extended the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) to "Tranche 2" professions — lawyers, accountants, real estate agents, conveyancers, dealers in precious metals and stones, and trust and company service providers. The substantive obligations commenced on 1 July 2026, and were operationalised by the Anti-Money Laundering and Counter-Terrorism Financing Rules 2025, finalised on 29 August 2025.

AUSTRAC's position, set out in its core guidance of 16 October 2025, is that the compliance officer must be a senior, Australian-based manager with genuine authority to implement and oversee the firm's AML/CTF programme. This is deliberate. The regulator does not want the role parked with a junior administrator or an offshore shared-services team; it wants a person with the seniority to change how the firm operates and the standing to be held accountable if it does not.

What the role actually involves

Naming the officer is the easy part. The role carries live, ongoing responsibility for the firm's eight core obligations: AUSTRAC enrolment, a documented money-laundering and terrorism-financing (ML/TF) risk assessment, a compliant AML/CTF programme, customer due diligence (CDD), sanctions screening, suspicious matter reporting, seven-year record-keeping, and staff training.

In practice, three of these consume most of a compliance officer's attention. The risk assessment must genuinely underpin the programme — AUSTRAC has been explicit that a proportionate programme still needs a documented risk basis, and "proportionate" is not a synonym for "minimal". Customer due diligence and sanctions screening are the day-to-day grind: verifying clients at onboarding, screening against watchlists, and refreshing that work as risk changes. And suspicious matter reporting places the officer in an uncomfortable position, requiring them to form and act on a suspicion about a client the firm may have acted for over many years.

Sitting over all of this is the requirement for the programme to be subject to independent evaluation — an obligation many firms have yet to plan for, and one that turns the compliance officer from author of the programme into its steward.

The small-firm reality

AUSTRAC has confirmed that smaller practices may adopt simpler, proportionate controls, provided the underlying risks are properly assessed and documented, and has promised a starter programme kit for small, low-complexity businesses. But proportionality does not dilute the personal nature of the role. In a two-partner conveyancing practice, the compliance officer is likely to be one of the partners — someone already carrying a full fee-earning load. The operational burden of CDD, screening and record-keeping is precisely where compliance technology, including platforms such as Legl, is increasingly relied on to keep the role manageable rather than all-consuming.

Key takeaways for compliance officers

• Confirm the notification landed. If your AUSTRAC compliance-officer notification slipped past the 29 July deadline, treat it as urgent and document the remediation.
• Give the role real authority. A compliance officer without the seniority to change firm processes is a compliance risk in itself.
• Anchor the programme to the risk assessment, not the other way around — this is the first thing an independent evaluation will test.
• Operationalise CDD and screening now. These are the obligations most likely to be examined and the easiest to let slide under fee-earning pressure.
• Plan for independent evaluation early, rather than treating it as a future problem.

Looking ahead

With enrolment closed and officers named, attention turns to AUSTRAC's promised sector-specific guidance for lawyers and to the regulator's early enforcement posture. Expect education to be prioritised over penalties in the opening months — but expect scrutiny to fall hardest on firms that treated the compliance officer appointment as a form-filling exercise rather than the start of a genuine compliance function. The firms that fare best will be those whose named officer is empowered, resourced, and already at work.

Sources

• MinterEllison — AUSTRAC key guidance released on 2026 AML/CTF reforms (22 October 2025)
• Norton Rose Fulbright — Australia's AML/CTF Reforms: A New Era in Financial Crime Prevention
• CPA Australia — AML/CTF legislation: The legal lowdown and looming rules

‍