New APRA rules take effect in July 2026. Here is what the changes mean for your lender and your home loan.
Australia’s financial regulator has updated a key prudential standard that governs how banks manage operational risk. The Australian Prudential Regulation Authority (APRA) confirmed on 30 April 2026 that it has finalised amendments to CPS 230 Operational Risk Management. The changes also update the accompanying prudential practice guide CPG 230 and the Material Service Provider Register template. Together, these updates introduce targeted exemptions for certain third-party relationships, and they take effect on 1 July 2026.
If you have a home loan or are planning to apply for one, here is what you need to understand about what these changes involve and what they mean for the stability of your lender.
What is CPS 230
CPS 230 is a prudential standard set by APRA that applies to banks, insurers, and superannuation funds. It sets out how these regulated entities must manage operational risk, meaning the risk of disruptions to systems, processes, and people that could affect their ability to deliver services to customers.
A core part of CPS 230 is the requirement for written contractual arrangements with material service providers. These cover performance expectations, data security, and business continuity planning. The idea is that your bank should have clear, enforceable agreements with the outside parties it relies on, so that if something goes wrong with one of those providers, your bank can act quickly to protect customers.
This connects to broader responsible lending requirements that protect borrowers across the Australian financial system. Both sets of rules work together to ensure lenders operate responsibly, not just in how they assess loan applications, but also in how they run their core systems and manage risk day-to-day.
When your lender has tight operational risk controls in place, it means they are better positioned to keep your loan account running smoothly, even when things go wrong externally.
The 2026 amendments
APRA’s amendments introduce limited exemptions to the contractual requirements in CPS 230. The exemptions apply to a specific category called non-traditional service providers (NTSPs). These include entities such as central banks and clearing and settlement facilities, the infrastructure behind how financial transactions are processed across Australia.
The issue was that standard contractual terms could not always be applied to these entities. Central banks operate under their own legal frameworks and do not agree to the same kind of service provider terms a commercial technology vendor might accept. Clearing and settlement facilities have their own governance structures too. Requiring banks to impose standard CPS 230 contractual requirements on these entities was creating compliance burden without adding real protection.
APRA developed these targeted exemptions in direct response to industry feedback, aiming to be administratively efficient while preserving the core goals of operational risk management. The exemptions are deliberately narrow: they apply only where contractual compliance is genuinely not practicable.
Alongside the standard itself, APRA also updated the prudential practice guide CPG 230 and the Material Service Provider Register template. These updates sit alongside APRA’s other recent regulatory changes as part of the regulator’s broader refinement of how Australian financial institutions are supervised.
What changes in July
The amendments come into effect on 1 July 2026. From that date, banks and non-bank lenders will operate under the updated version of CPS 230.
In practical terms, most core requirements remain unchanged. The exemptions only apply to NTSPs where contractual compliance is genuinely not practicable. For the vast majority of service provider relationships, including technology providers, data companies, and other commercial vendors, the same rigorous requirements continue to apply.
APRA has published the full letter to industry and the detailed changes on its website. Lenders have had time to review and prepare well in advance, so the transition from 1 July is expected to be smooth. Customers should see no change to how their home loan accounts are managed.
If you have a question about how your lender manages operational risk or what these changes mean for your situation, speaking with a mortgage broker is a good starting point.
Why it matters for you
As a home loan borrower, you benefit from a well-regulated banking system. When APRA requires your lender to maintain strong operational risk practices, it means they are less likely to experience system failures or service disruptions that could affect your account.
The 2026 amendments do not weaken those protections. They refine the rules to work better in practice, removing a requirement that created unnecessary compliance burden without adding meaningful protection for customers.
This kind of targeted regulatory improvement helps keep the Australian financial system competitive and resilient. When lenders are not burdened by requirements that do not serve their purpose, they can focus resources on things that matter, including delivering good loan products at competitive rates.
Whether you are comparing home loans or planning your next property purchase, understanding how the regulatory environment shapes lending is useful context. Check your borrowing power with our free calculator to see what Australian lenders could offer you today.
Common questions
Q: What is APRA CPS 230 and why does it matter for home loans?
CPS 230 is a prudential standard that requires banks and other financial institutions to manage operational risk. This includes how they handle service provider relationships. The standard helps ensure your lender can keep running smoothly even during disruptions, which ultimately protects your home loan account.
Q: Will the July 2026 CPS 230 changes affect how my bank handles my loan?
No. The changes are narrow and target back-end regulatory requirements for a small category of non-traditional service providers. They do not change how your home loan is managed, processed, or structured. Your day-to-day banking experience should be unaffected.
Q: How does APRA regulation affect the interest rates banks offer?
Regulatory requirements do affect bank operating costs, which can flow through to the rates and products lenders offer. When APRA streamlines compliance without reducing risk protection, it can ease unnecessary cost pressures on lenders. This is generally positive for competition and lending conditions over time.