Blog

Unfair contract terms and key takeaways from the recent Federal Court decision

The Australian Prudential Regulation Authority (APRA) has released its 2026–27 Corporate Plan (the Plan), outlining its strategic priorities for the next four years and its policy and supervisory agenda for the next 12 to 24 months. Although the Plan covers banking, insurance and superannuation, it provides valuable insight into the issues mutual banks can expect APRA to examine closely during 2026–27.

Knowing where your data is stored remains important. But data sovereignty extends beyond location. As cloud, SaaS and AI services become more complex, organisations also need to understand who can access their data, how services are delivered and the dependencies that sit behind those arrangements.

Artificial intelligence (AI) is rapidly moving from experimentation to operational reality. From contract review tools and customer service automation to fraud detection and decision-support systems, organisations across the financial services sector and other highly regulated sectors are increasingly incorporating AI into business operations. The opportunities are significant. However, so are the legal, governance and operational risks.

Retail leasing in Queensland is not governed by the lease document alone. Where premises fall within the scope of the Retail Shop Leases Act 1994 (Qld) (the Act), the Act imposes a statutory framework that affects how the lease is negotiated, disclosed, administered and enforced. At a high level...

Policies set expectations, allocate responsibility and help demonstrate good governance. If they are unclear, inconsistent or out of date, they can make audits, disputes, privacy incidents, cyber events, customer complaints and regulator enquiries harder to manage.

When workloads peak, MM Legal+ can act as your external in-house lawyer, providing practical legal support when and where it is needed.

CPS510 practical considerations for regulated entities.

APRA releases Governance Review Consultation Paper on CPS 510 - here's what you need to know.

A brief summary of APRA's letter to the industry and why it matters to our clients.

A Federal Court decision involving an industry super fund highlights that having internal policies is not enough— they must be properly implemented.

As organisations move into ‘Day 2’ compliance, the focus shifts from frameworks to evidence. This article explores why ongoing contract and supplier management, SLA and KPI tracking, and meaningful reporting are critical to demonstrating operational resilience under CPS 230 – and how legal and risk teams can keep compliance working in practice.

Third‑party risk is no longer just a procurement problem. With growing regulatory scrutiny and standards like CPS 230, organisations are now accountable for how their suppliers support critical operations, manage risk and respond to disruption. This article explores why legal, risk and governance teams must take a more active role – and what a practical, integrated approach to third‑party risk really looks like.

In today's fast-paced business environment, policies are more than just documents sitting in a shared drive—they're the backbone of compliance, governance, and operational clarity. Yet, too often, organisations treat policy reviews as a “tick the box” exercise. That approach can lead to outdated,...