NCCP Act Compliance During Asset Recovery: What Australian Lenders Must Do
Why this matters for credit providers and their advisers
Asset recovery is a critical step when accounts fall into arrears, but it is also one of the highest-risk phases for compliance. The National Consumer Credit Protection Act 2009 (Cth) (NCCP Act) and the National Credit Code (the Code) set mandatory rules for how lenders and their agents must communicate with consumers, manage hardship, issue notices, and repossess or sell secured assets. ASIC’s current enforcement priorities include hardship response failures and debt collection misconduct, and recent cases show that procedural missteps can lead to civil penalties, AFCA determinations, or the unwinding of enforcement. For Australian lenders, lawyers and insolvency practitioners, getting the interaction between recovery and compliance right is not optional—it is fundamental risk management.
This article steps through the key obligations during recoveries, including hardship applications, required notices, conduct standards, ASIC focus areas, consequences of non-compliance, and a practical checklist. We also highlight state variations and how Secured Recovery Group supports compliant, efficient recoveries nationwide.
What the NCCP Act and National Credit Code cover
The NCCP Act establishes the Australian Credit Licence regime and general conduct obligations. The National Credit Code, which is Schedule 1 to the NCCP Act, sets prescriptive consumer credit rules governing default notices, repossession, post-possession notices, and sale processes for mortgaged goods and land used to secure regulated credit.
In broad terms, the Code applies to credit provided wholly or predominantly for personal, domestic or household purposes, or to purchase, renovate or improve residential investment property, and where the debtor is a natural person or strata corporation. Business-purpose lending is generally outside the Code, although other legal and conduct obligations still apply (including the Australian Consumer Law and ASIC Act prohibitions against misleading or unconscionable conduct, the Privacy Act, and AFCA scheme requirements for licensees).
For lenders operating across retail and small business portfolios, it is essential to classify facilities correctly at the start. At enforcement stage, if there is any doubt about the Credit Code’s application (for example, mixed purpose use), treat the matter as Code-regulated until legal advice confirms otherwise. This conservative approach reduces the risk of invalid enforcement steps.
The enforcement timeline under the Code
Pre-enforcement default notice (s 88) and cure period
Before you can accelerate a regulated loan, commence legal proceedings, repossess secured goods, or exercise a power of sale, you must give a compliant default notice under section 88 of the Code, unless a limited statutory exception applies. The notice must:
- Identify the default (for example, arrears amount or other contractual breach).
- State the action you intend to take if the default is not remedied.
- Allow the debtor at least 30 days to remedy the default.
- Explain any minimum amount required and how to contact you to discuss hardship or dispute resolution.
If the debtor remedies the default within the notice period, you must not proceed with enforcement for that default. Issuing a non-compliant notice, miscalculating arrears, or failing to wait the full cure period can invalidate downstream enforcement, exposing you to set-aside applications, damages, or regulatory action.
Hardship notices and variation requests (ss 72–75)
Hardship is a central compliance risk in recoveries. Under sections 72–75 of the Code, a debtor can give a hardship notice orally or in writing if they cannot meet obligations due to illness, unemployment or other reasonable cause. Key obligations for credit providers include:
- Accessibility: You must accept hardship requests made by phone or any reasonable channel. Requiring completion of a specific form as a precondition to assessment is not compliant.
- Prompt response: You must assess the request and respond within the statutory timeframe. If you require further information, ask for it promptly and keep the debtor informed.
- Genuine consideration: Consider a variation that is reasonably necessary to overcome the hardship, such as reducing repayments, capitalising arrears, or extending the term. A blanket refusal policy is high risk.
- Enforcement pause: Do not commence or continue enforcement while a valid hardship application is being considered or is the subject of an active dispute with AFCA within jurisdiction. Your internal teams and any external agents must be put on hold.
- Reasons and rights: If you refuse hardship, state your reasons and inform the debtor of external dispute resolution options.
ASIC’s guidance (including RG 271 on internal dispute resolution) and the ACCC/ASIC Debt Collection Guideline expect licensees to be proactive and fair when engaging with customers in difficulty. Failing to identify and pause enforcement for hardship requests is a recurrent source of breaches and litigation risk.
External dispute resolution (AFCA) and litigation freezes
Most NCCP Act licensees must be AFCA members and comply with AFCA’s rules. Where a complaint within AFCA’s jurisdiction is lodged about a credit facility, licensees are generally required to suspend enforcement and legal proceedings while the complaint is on foot (subject to specific exceptions, such as preserving limitation periods with consent). Internal teams, panel lawyers and recovery agents must be notified immediately to avoid inadvertent action (for example, field calls or repossessions) that could violate AFCA rules and undermine your position in the dispute.
Credit reporting and pre-listing notices
If you intend to list a payment default, the Privacy Act 1988 and the Credit Reporting Privacy Code impose requirements that sit alongside recovery steps. These include sending a written notice of default, giving the consumer time to remedy before listing, and ensuring the default meets the statutory thresholds (such as amount overdue and days in arrears). Incorrect or premature listings frequently result in AFCA compensation awards and claims for non-economic loss.
Repossession of mortgaged goods: notices and conduct
Where the security is goods (for example, a motor vehicle), the Code imposes further requirements:
- Entry and conduct: Repossession must be conducted lawfully, without trespass or breach of the peace. Entering residential premises without consent or a court order is prohibited. Agents must leave when asked and must not use or threaten force.
- Post-possession notice: After taking possession, you must promptly give a notice stating the estimated value of the goods, enforcement expenses, the debtor’s rights to reinstate or redeem, how to obtain the goods back, and the proposed sale method and timing.
- Waiting period: You must wait the statutory minimum period after the post-possession notice before selling (generally at least 21 days). Selling too early can invalidate the sale and expose you to damages.
- Commercial reasonableness: Sales must be commercially reasonable. Consider multiple quotes and, where appropriate, independent valuation or transparent auction processes. Keep full records of condition and sale attempts.
These requirements overlay the Personal Property Securities Act 2009 (PPSA), which also regulates enforcement of security interests in personal property and expects secured parties to act in a commercially reasonable manner. Ensure your PPSR registrations are accurate and current; defects in registration can impair priority and enforceability.
Mortgages over land: state-based enforcement overlays
If your security is real property, state land title legislation adds notice prerequisites before a mortgagee can exercise the power of sale:
- New South Wales: A notice under the Real Property Act 1900 (NSW) must be served specifying the default and allowing time to remedy before sale.
- Victoria: The Transfer of Land Act 1958 (Vic) requires notice before exercise of power of sale, with prescribed content and timing.
- Queensland: The Property Law Act 1974 (Qld) requires a default notice before sale (noting that a new Property Law Act has been passed but commencement and transitional arrangements should be monitored).
These notices are in addition to the Code’s default notice where the loan is regulated. If both regimes apply, meet both sets of requirements. Case law shows that defects in mortgagee notices can delay sales and lead to costs orders.
Conduct obligations and field practices
Efficiently, honestly and fairly
Credit licensees must meet general conduct obligations under the NCCP Act, including ensuring that credit activities are engaged in efficiently, honestly and fairly, ensuring representatives are competent, and having robust dispute resolution systems. These obligations apply equally to in-house teams and third-party agents. It is not a defence to say that a misconduct incident occurred at an external agent’s hands if your supervision, training, and instructions were deficient.
Debt collection conduct expectations
The ACCC/ASIC Debt Collection Guideline sets out regulators’ expectations for collectors and creditors. Key takeaways include:
- Contact frequency: Avoid excessive, undue or unreasonable contact. The guideline provides benchmarks (for example, no more than a small number of contacts per week and per month, and normally no more than one contact per day) as a guide, not a safe harbour.
- Contact hours: Make contact only at reasonable hours and honour any reasonable consumer request about preferred contact times or methods.
- Vulnerable consumers: Be sensitive to circumstances such as illness, disability, language barriers or family violence. Consider tailored communication and additional safeguards.
- Third-party contact: Do not disclose debt information to third parties without authority. Skip tracing must comply with privacy laws, and messages should not reveal the existence of a debt.
- Transparency: Provide clear information about arrears, fees, and options to reinstate or resolve. Avoid misleading representations about consequences of non-payment.
Lenders should embed these expectations into scripts, letter templates, dialler rules, and field protocols. Supervisory controls—call recording review, field attendance audits, and escalation pathways—are essential to prove that your system operates effectively.
On-site attendance and licensing
Repossession and field activities are also regulated by state and territory licensing regimes. Requirements differ across jurisdictions. For example:
- Queensland requires licences for field agents conducting repossessions under the Debt Collectors (Field Agents and Collection Agents) Act 2014 (Qld), including trust accounting for certain activities.
- Western Australia requires licensing for debt collectors under the Debt Collectors Licensing Act 1964 (WA).
Elsewhere, local security, commercial agent or private inquiry agent licensing may apply. In all jurisdictions, agents must comply with trespass laws and must not commit or incite a breach of the peace. Your instructions should direct agents to avoid confrontation, withdraw if refused access, and seek legal orders where necessary rather than escalating on site.
ASIC enforcement priorities and recent trends
Hardship and collection conduct in the spotlight
ASIC’s recent public enforcement priorities have expressly included:
- Consumer hardship and vulnerability: Ensuring lenders respond appropriately and within time to hardship requests, and that collections pause while hardship and AFCA complaints are assessed.
- Debt collection conduct: Addressing harassment, misleading statements and non-compliant contact practices by lenders and third-party collectors.
- Product governance and distribution: Although more relevant to origination, Design and Distribution Obligations intersect with forbearance and hardship solutions offered to retail customers.
ASIC has taken action against lenders for failing to acknowledge or respond to hardship requests, for pursuing enforcement in breach of AFCA rules, and for misleading representations in collection communications. Civil penalties and court-enforceable undertakings have followed, alongside remediation programs and systems uplift commitments. The message is clear: recovery processes must be as well controlled as origination.
What regulators expect to see
In supervisory engagements, ASIC and AFCA typically expect evidence that you:
- Can identify hardship requests across all channels (phone, email, web, field) and trigger a collections pause automatically.
- Have clear escalation points and timeframes to meet Code obligations.
- Monitor third-party agent conduct with artefacts—call recordings, GPS-stamped field notes, photographs, and time-stamped logs.
- Issue compliant notices with robust quality assurance to prevent defects.
- Record decisions and reasons, including where hardship is refused and why a variation is not suitable.
- Have proper governance over credit reporting—including pre-listing notices, data accuracy and timely correction of errors.
Early engagement with AFCA and willingness to offer pragmatic forbearance are also viewed favourably when complaints arise.
Consequences of non-compliance
Transactional consequences
Non-compliance can directly undermine your recovery outcome. Examples include:
- Invalid enforcement: Proceeding without a compliant default notice or before the cure period expires can result in repossession or sale being set aside.
- Damages and restitution: Debtors may seek compensation for wrongful repossession, loss on sale due to delay or premature sale, or credit reporting harm.
- Costly rework: Defective notices require re-issue and new waiting periods, prolonging arrears and increasing loss given default.
Regulatory and licence risks
ASIC can pursue civil penalties, issue infringement notices, accept enforceable undertakings, or impose licence conditions. Systemic weaknesses across hardship handling or collections can trigger remediation programs and independent experts. Persistent issues risk licence suspension or cancellation. AFCA can issue binding determinations requiring refunds, compensation and reversal of enforcement action.
Reputational and third-party impacts
Non-compliance damages brand and increases scrutiny from funders and securitisation trustees. It can also strain relationships with panel law firms and recovery agents, who must manage increased dispute volumes and rework when instructions are withdrawn due to compliance defects. Conversely, robust controls and clear instructions reduce downstream costs for all parties.
Practical compliance checklist for recoveries
Before commencing enforcement
- Confirm regulatory status: Determine whether the facility is regulated by the Code. If uncertain, assume Code applies pending advice.
- Verify arrears and calculations: Ensure balances are accurate and fees are authorised by contract and law.
- Check hardship and AFCA status: Screen for any open hardship request or complaint. If present, pause collections and enforcement.
- Issue a compliant default notice: Include statutory content, give at least 30 days to remedy, and calculate the minimum cure amount accurately.
- Observe other notice requirements: For real property, serve any state mortgagee notice. For intended credit reporting, send pre-listing notices under the Privacy Act and Credit Reporting Privacy Code.
- Plan the recovery path: Select appropriate action—field visit, repossession, legal proceedings—consistent with the customer’s circumstances, security type and jurisdiction.
- Instruct competent agents: Use licensed, insured agents with proven compliance track records. Provide written instructions that prioritise safety and compliance.
During repossession or field activity
- Peaceful recovery only: No forced entry, no breach of the peace, and immediate withdrawal if consent is withdrawn.
- Respect vulnerable circumstances: Adjust approach for illness, disability or family violence risk. Consider deferring or escalating for specialist review.
- Verification: Confirm identity, asset details (VIN, serial numbers), and capture condition photographs and notes.
- Documentation: Leave required notices on site where applicable and log time-stamped attendance records.
- Communication limits: Adhere to contact frequency and hours consistent with the ACCC/ASIC guideline. Avoid misleading statements.
- Escalation triggers: If confronted or refused access, withdraw and escalate for legal advice rather than persisting.
After taking possession or completing sale
- Issue post-possession notice: Provide statutory information promptly, including estimated value, enforcement costs, and redemption/reinstatement options.
- Observe waiting periods: Do not sell until the statutory waiting period has elapsed.
- Maximise sale proceeds: Use commercially reasonable sale methods, obtain valuations where appropriate, and keep marketing records.
- Accurate accounting: Apply proceeds correctly to reasonable expenses, interest and principal. Refund any surplus promptly.
- Deficiency processes: If a shortfall remains, ensure any subsequent recovery steps (including default listing and legal action) comply with the Code and privacy requirements.
- Continuous improvement: Review each recovery for lessons learned and update templates, scripts and training accordingly.
Working with Secured Recovery Group
Compliant recovery, end to end
Secured Recovery Group provides specialist asset recovery and enforcement support services across Australia for banks, non-bank lenders, law firms, insolvency practitioners and commercial landlords. We act strictly under verified legal authority and align our procedures with the NCCP Act, the National Credit Code, ASIC guidance, and state-based laws. Our services include:
- Pre-enforcement field calls to verify occupancy and asset status, with sensitive engagement and clear escalation.
- Co-ordinated, peaceful repossession of vehicles and other goods, using licensed field agents and tow operators.
- Notice management and process serving to support lawyers with compliant timelines.
- Skip tracing and contact re-establishment, consistent with privacy and debt collection guidelines.
- Post-possession asset management and sale through transparent, commercially reasonable channels, with full audit trails.
We work with clients to embed compliance into every step—pausing when hardship or AFCA issues arise, documenting decisions rigorously, and providing artefacts that demonstrate adherence to the law. Our goal is to help clients achieve lawful, efficient recoveries while reducing regulatory and litigation risk.
What lenders should provide when instructing us
- Copy of the credit contract, security documents, and any relevant variation deeds.
- Evidence of compliant notices served, including section 88 default notices and any state property notices.
- Confirmation of hardship status and whether any AFCA complaint is open.
- Specific instructions on permitted contact windows, any known vulnerability indicators, and preferred escalation points.
- Verification of PPSR registration details and any special handling requirements for sensitive assets.
Clear and complete instructions enable us to act efficiently and fairly, in line with your licence obligations.
State and territory variations to note
Mortgagee notices over land
In addition to the Code’s requirements, mortgagee notices under state land titles legislation are a common trap:
- NSW: A mortgagee exercising power of sale must serve a compliant statutory notice under the Real Property Act before sale.
- VIC: The Transfer of Land Act requires a notice with prescribed content and timeline prior to sale.
- QLD: The Property Law Act requires notice before power of sale is exercised. Monitor legislative reform and transitional provisions.
Ensure templates are tailored for each state and that service methods comply with the relevant Act and the mortgage terms.
Licensing and field activity examples
Licensing frameworks differ widely. Queensland’s Debt Collectors (Field Agents and Collection Agents) Act 2014 requires field agent licensing for repossessions, while Western Australia administers licensing under the Debt Collectors Licensing Act 1964. Other jurisdictions have their own regimes for commercial or security agents. Engage only licensed personnel and verify currency of licences before instructing field work.
PPSA and personal property nuances
Where security is taken over goods, ensure your PPSR registration is perfected and accurate as to collateral class and serial-numbered property. When enforcing, meet both the Code’s consumer protections and the PPSA’s commercially reasonable sale standard. For high-value assets, consider independent valuations, multiple sale channels, and transparent auction processes to defend sale price reasonableness if challenged.
Bringing it all together
NCCP Act compliance and the Code’s consumer protections are not administrative hurdles to bolt on after the event—they shape the entire recovery strategy. From the moment arrears emerge, your teams and agents must be attuned to hardship, notice timing, AFCA pauses, and fair conduct. The right controls protect customers and preserve enforceability, accelerating recovery rather than slowing it down. Partnering with specialists like Secured Recovery Group helps embed those controls in the field.
For lenders considering NCCP Act compliance asset recovery Australia, the path is clear: build a disciplined pre-enforcement checklist, insist on licensed, well-supervised agents, pause promptly for hardship and AFCA, and document every step. That is how you recover more while risking less.
Key terms and the focus keyword in context
In practice, teams often search for plain-language guidance on NCCP Act compliance asset recovery Australia. This article has addressed that need by mapping the required notices, conduct obligations and state overlays. Whether you are managing a vehicle repossession or a mortgagee sale, the same discipline applies: confirm Code applicability, serve compliant notices, respect hardship and AFCA freezes, and execute repossessions peacefully and lawfully.
As regulators sharpen their focus on hardship handling and collection conduct, lenders who prioritise NCCP Act compliance asset recovery Australia will reduce disputes, shorten timelines and improve net recoveries. Clear instructions, consistent training and strong third-party oversight remain the hallmarks of a mature recovery function.
Finally, where portfolios straddle consumer and small business credit, it is prudent to standardise high standards across both. While the Code may not apply to every file, the expectations of fairness, transparency and respect for customer vulnerability increasingly define market practice nationwide. Building your recovery processes around NCCP Act compliance asset recovery Australia protects customers and your business alike.
Disclaimer: This article contains general information only and does not constitute legal advice. Always obtain independent legal advice before taking any enforcement action.
Frequently Asked Questions
When do I need to issue a section 88 default notice before enforcement?
A compliant section 88 default notice is required before you accelerate a regulated loan, commence legal proceedings, or repossess secured goods, unless a limited statutory exception applies. The notice must allow at least 30 days to remedy the default. If the debtor cures the default in time, you cannot proceed for that default.
Do I need to pause enforcement when a borrower asks for hardship?
Yes. When a valid hardship notice is received, you must assess it promptly and generally pause enforcement while the request is under consideration. If the borrower lodges an eligible AFCA complaint, you must also suspend enforcement while the complaint is on foot, subject to limited rule-based exceptions.
What are the key post-possession notice requirements for repossessed goods?
After taking possession of mortgaged goods, you must provide a notice that includes the estimated value, enforcement expenses, the debtor’s rights to reinstate or redeem, and details of the proposed sale. You must wait the statutory minimum period (generally at least 21 days) after that notice before selling.
How do state laws affect mortgagee sales over land?
State land titles legislation requires mortgagee default notices before exercising the power of sale (for example, under the Real Property Act in NSW and the Transfer of Land Act in Victoria). These apply in addition to the National Credit Code for regulated loans. Templates and service methods should be tailored for each state.
What conduct standards apply to my collections and field agents?
Licensees must act efficiently, honestly and fairly, and follow the ACCC/ASIC Debt Collection Guideline. This includes reasonable contact frequency and hours, respect for privacy, sensitivity to vulnerable customers, and peaceful repossessions with no trespass or breach of the peace. You are responsible for supervising third-party agents.
What are the consequences if I get the notices wrong or ignore hardship?
Defective notices or failure to pause for hardship/AFCA can invalidate enforcement, lead to damages and AFCA compensation, and attract ASIC action (including civil penalties or licence conditions). It also prolongs arrears and increases losses due to rework and delays.
About Secured Recovery Group
Secured Recovery Group (Corrective Legal Services & Associates Pty. Limited — ACN 616 240 843) is a specialist provider of asset recovery and enforcement support services across Australia. We act strictly under verified legal authority. This article is general information only — contact our team to discuss your specific instruction.

