Executive Summary
In Australian Securities and Investments Commission v Lanterne Fund Services Pty Limited [2024] FCA 353, McEvoy J imposed a $1.25 million pecuniary penalty on Australian financial services licensee Lanterne Fund Services Pty Limited for systemic failures to comply with its general obligations under s 912A(1) of the Corporations Act 2001 (Cth). Lanterne admitted contraventions of ss 912A(1)(a), (ca), (d), (e), (f) and (h), each engaging the civil penalty provision in s 912A(5A).
Lanterne operated what ASIC described as a “licensee for hire” business: it authorised companies as corporate authorised representatives (CARs) and individuals as authorised representatives (ARs) under its AFSL in return for fees, without directly providing financial services to clients. During the relevant period, 13 March 2019 to 5 October 2021, between 62 and 69 CARs and approximately 134 to 205 ARs operated under its licence.
The Court’s central concern was not a single defective procedure. It was the absence or serious inadequacy of the institutional infrastructure needed to operate an AFSL responsibly: risk management, compliance monitoring, representative due diligence, training, responsible-manager competence, human resources, IT and independent oversight.
The commercial lesson is direct: a Licensee cannot monetise its licence while leaving compliance substantially to representatives’ self-certification. The licence holder retains responsibility for effective supervision, competent management, appropriate resources and demonstrable control over the activities conducted under its licence.
McEvoy J characterised the failures as “comprehensive and at the more serious end” and observed:
“Lanterne was content to take the benefit of the fees, but it was not prepared to invest some of them in appropriate compliance systems.” — at [184].
No actual consumer loss was proved. That did not materially neutralise the seriousness of the contraventions because the deficient controls exposed consumers to significant potential harm.
2. Citation & Context
Case: Australian Securities and Investments Commission v Lanterne Fund Services Pty Limited [2024] FCA 353
Court: Federal Court of Australia, General Division, Victoria Registry
Judge: McEvoy J
Judgment: 10 April 2024
Hearing: 15 May 2023
Proceeding: VID 379 of 2022
Relevant period: 13 March 2019–5 October 2021.
ASIC commenced the civil penalty proceeding. Liability was substantially resolved through a Statement of Agreed Facts and Admissions (SAFA) filed on 16 December 2022 under s 191 of the Evidence Act 1995 (Cth). The parties agreed on declarations and compliance orders; the principal contested issue was penalty. ASIC sought $1.5 million and Lanterne proposed $150,000. The Court imposed $1.25 million.
Verified external copy: ASIC-hosted Federal Court judgment PDF.
3. Procedural Posture
ASIC relied on the SAFA, an expert compliance and risk management report by Sarah Birkensleigh, and written submissions. Lanterne relied on affidavits from its sole director and active responsible manager, Peter Cozens, and written submissions.
Because liability was admitted, the Court’s task included satisfying itself that the agreed declarations were legally and factually appropriate rather than merely “rubber stamping” the parties’ position. McEvoy J concluded that the agreed facts established the contraventions and justified the declarations: [105]–[108].
4. Facts, Issues & Outcome
Lanterne’s representatives operated across diverse areas including funds management, managed investment schemes, property, energy, technology and agricultural services. Despite that breadth, Mr Cozens was Lanterne’s only full-time employee, sole director, CEO and only active responsible manager during the relevant period. The remaining staff were limited part-time administrative personnel.
Material deficiencies included:
- no formal or documented risk management system;
- outdated or inappropriate compliance documentation;
- substantial reliance on CAR monthly self-assessments;
- no systematic CAR/AR audit program;
- inadequate initial and ongoing due diligence;
- no effective training and competency program;
- insufficient compliance and risk personnel;
- concentration of responsible-manager functions in one individual;
- inadequate IT, cyber, backup and disaster-recovery arrangements; and
- little independent governance or challenge.
The judgment records approximately $1.658 billion funds under management by the end of the relevant period at [2], while the penalty analysis refers to aggregate funds under management of “up to $1.685 billion” at [190]. Those figures are reproduced as stated; the judgment does not reconcile the difference.
5. Contraventions
| Act | Section | Duty | Principal contravening conduct | Count | Finding | Pinpoint |
|---|---|---|---|---|---|---|
| Corporations Act | 912A(1)(h), 912A(5A) | Adequate risk management systems | No adequate framework, risk assessment, controls, independent oversight or incident management | Not quantified | Admitted / declared | [32]–[37] |
| Corporations Act | 912A(1)(e), 912A(5A) | Maintain competence | Insufficient responsible-manager capacity, breadth of expertise and qualification processes | Not quantified | Admitted / declared | [38]–[40] |
| Corporations Act | 912A(1)(f), 912A(5A) | Representatives adequately trained and competent | No proper competency assessment, training program or verification of training | Not quantified | Admitted / declared | [41]–[44] |
| Corporations Act | 912A(1)(ca), 912A(5A) | Reasonable steps to ensure representative compliance | Weak due diligence, guidance, audit, monitoring, exception follow-up and performance review | Not quantified | Admitted / declared | [45]–[51] |
| Corporations Act | 912A(1)(d), 912A(5A) | Adequate resources | Insufficient compliance, human and technological resources and inadequate continuity arrangements | Not quantified | Admitted / declared | [52]–[56] |
| Corporations Act | 912A(1)(a), 912A(5A) | Efficiently, honestly and fairly | Aggregate failures above caused services under the AFSL not to meet the statutory standard | Not quantified | Admitted / declared; no separate penalty sought | [85]–[94] |
ASIC ultimately didn’t pursue the s 912A(1)(d) allegation concerning inadequate financial resources; that contravention concerned human and technological resources.
6. Definitions & Legal Clarifications
“Adequate” is contextual
The content of the general obligations is not fixed by a universal checklist. It depends on the nature, scale and complexity of the licensee’s business, the financial services provided and the circumstances: [62].
For a business dependent heavily on CARs and ARs, adequacy therefore requires controls calibrated to both the number of representatives and the diversity and risk of their activities.
A representative need not actually breach another law
A particularly important holding concerns s 912A(1)(ca). McEvoy J accepted that an actual contravention of financial services law by a representative is not a precondition to a finding that the licensee failed to take reasonable steps to secure compliance: [70].
This makes s 912A(1)(ca) a genuine systems and supervision obligation, rather than merely a derivative liability provision triggered after representative misconduct occurs.
7. Key Legal Principles
First, delegation does not transfer the AFSL holder’s regulatory responsibility. The judgment applied authority including ASIC v AGM Markets Pty Ltd (in liquidation) (No 3) [2020] FCA 208: functions can be outsourced, but responsibility under the AFSL remains with the licensee: [74]–[75].
Second, self-attestation is not an adequate substitute for risk-based supervision. A licensee should have systematic, documented auditing, with frequency driven by CAR/AR risk, effective follow-up of deficiencies and rectification plans: [48]–[50].
Third, competence extends beyond technical product expertise. A licensee needs sufficient responsible managers with relevant skills, breadth and capacity, plus documented mechanisms for ensuring competence remains appropriate as the business changes: [38]–[40].
Fourth, actual loss is not necessary to justify a substantial penalty. The Court said:
“Although there is no evidence of actual harm … this does not somehow serve to negate the risk of harm” — at [190].
Fifth, interconnected compliance failures do not automatically collapse into a single course of conduct for penalty purposes. McEvoy J regarded each of the five penalised s 912A obligations as reflecting a separate failure, while applying the totality principle to ensure the aggregate outcome was not unjust or disproportionate: [187]–[189].
8. Orders, Penalties & Remedies
| Order / Remedy | Legal Basis | Amount / Scope | Paragraphs |
|---|---|---|---|
| Declarations | FCA Act s 21; Corporations Act s 1317E | Contraventions of six s 912A(1) obligations | Orders 1–6 |
| Pecuniary penalty | s 1317G(1) | $1.25 million, payable within 30 days | Order 7; [200] |
| Independent expert | s 1101B(1)(a)(i) | Appoint within 30 days; review systems and controls; report within four months | Order 8(a) |
| Remediation program | s 1101B | Establish program and implement necessary recommendations within two months after compliance report | Order 8(b) |
| Implementation assurance | s 1101B | Independent expert to assess implementation | Order 8(c) |
| Expert costs | s 1101B | Paid by Lanterne | Order 8(d) |
| Costs | — | Reserved; subsequent written submissions | Orders 9–11 |
The Court rejected $150,000 as wholly inadequate but considered ASIC’s $1.5 million proposal somewhat above what deterrence required. Cooperation, admissions, absence of previous contraventions, some remediation, acceptance of the compliance regime and stated contrition justified the reduction to $1.25 million: [199]–[200].
“Anything less, in my assessment, would be insufficient to achieve the relevant objectives.” — at [200].
9. Relevance for Licensees, Advisers & Responsible Managers
The decision is especially important for AFSL holders with distributed representative networks, white-label arrangements or CAR-heavy operating models.
Responsible managers cannot be nominal appointments. Their combined expertise, availability and capacity must align with the licence’s actual service mix and representative population.
Licensees should also assume that ASIC and a court may test not merely whether policies exist, but whether there is evidence they are implemented, used, escalated and independently challenged. The judgment’s criticism of unverified self-reporting, undocumented conversations and incomplete remediation makes evidentiary discipline a core regulatory control.
The Court considered general deterrence to be of “the highest importance” and said the declarations and penalty together were critically important in setting standards for AFSL holders: [195].
10. Risk Management & Compliance Recommendations
| Audience | Control Type | Legal Rationale | Risk Indicator | Practical Control |
|---|---|---|---|---|
| Board | Governance | ss 912A(1)(a), (h) | No independent challenge | Quarterly licence-obligations dashboard and documented challenge |
| Responsible managers | Governance | s 912A(1)(e) | Single RM, capacity gaps | Annual RM competency/capacity assessment mapped to authorisations |
| Compliance | Detective | s 912A(1)(ca) | Reliance on attestations | Risk-based CAR/AR audit plan with evidence sampling |
| Compliance | Corrective | ss 912A(1)(ca), (h) | Exceptions unresolved | Central incidents/issues register with owners, due dates and closure evidence |
| HR / Compliance | Preventative | s 912A(1)(f) | Generic or unverified training | Role-specific competency matrix, needs analysis and training records |
| Onboarding | Preventative | s 912A(1)(ca) | Informal due diligence | Documented background, qualification, reference and scope verification |
| Technology | Preventative | ss 912A(1)(d), (h) | Legacy systems, weak recovery | Technology plan, cyber assessment, tested backup and disaster-recovery regime |
| Executive | Governance | ss 912A(1)(d), (e) | Growth outpaces resources | Representative-growth triggers requiring additional compliance/RM resources |
11. Regulatory Significance
The Court noted that the matter was one of the first litigated cases concerning a “licensee for hire” business and that the failures went to the core of that model: [195].
The safest conclusion is therefore narrower than saying all such models are impermissible. The judgment instead demonstrates that a fee-for-authorisation model materially increases the importance of effective oversight, sufficient resources and demonstrable control.
No broader current ASIC enforcement trend has been independently researched for this analysis.
12. Recommended Next Steps
For internal legal/compliance review, prioritise a s 912A control-mapping exercise that identifies each obligation, the responsible executive/RM, the preventive and detective controls, evidence generated, escalation thresholds, and board reporting.
A second-line review should then test whether controls operate in practice, not merely exist on paper. Apply particular scrutiny to representative onboarding, ongoing surveillance, exceptions, training evidence, responsible-manager capacity, and technology resilience.
Finally, any licensee with a large CAR/AR population should establish objective growth and complexity triggers that require additional responsible managers, compliance personnel, audit coverage, and technology expenditure before appointing further representatives.
13. Material Referenced Cases
Australian Securities and Investments Commission v RI Advice Group Pty Ltd [2022] FCA 496 — adequacy of risk-management systems — discussed at [65].
Australian Securities and Investments Commission v AGM Markets Pty Ltd (in liquidation) (No 3) [2020] FCA 208 — outsourcing does not remove the licensee’s responsibility — discussed at [74]–[75].
Australian Securities and Investments Commission v Financial Circle Pty Ltd [2018] FCA 1644 — actual representative contravention not necessary for s 912A(1)(ca) — discussed at [70], [78].
Australian Building and Construction Commissioner v Pattinson [2022] HCA 13 — deterrence and civil penalty principles — discussed at [113]–[126], [181].