Consumer-Law Compliance Programs in South Australia: When Businesses Need Legal Advice

A tailored compliance program helps South Australian businesses manage consumer-law risks. Learn what to include and when legal advice is worthwhile.

A consumer-law compliance program is an internal system for identifying, preventing and responding to legal risks. For a South Australian business, it can provide a practical way to manage obligations under the Competition and Consumer Act 2010 (Cth), including the Australian Consumer Law, rather than relying on informal instructions or staff experience. The ACCC recommends that businesses implement compliance programs as part of good governance.[S1]

A program does not need to be elaborate. Its value comes from being relevant to the business, understood by staff and used in daily decisions. The ACCC says what a program should contain depends on the business’s size, operations and risk profile.[S1]

What a compliance program should do

A useful program should help the business:

• identify where consumer-law breaches could occur;
• assign responsibility for preventing and escalating problems;
• give staff clear procedures for advertising, sales, refunds and complaints;
• approve higher-risk claims before publication;
• keep records showing what was checked and decided; and
• investigate, correct and learn from mistakes.

Typical risk areas include misleading or deceptive conduct, false or misleading representations, unfair contract terms, consumer guarantees, pricing, subscriptions, product safety and conduct by sales staff or contractors. The relevant risks depend on what the business sells and how it sells it.

For example, an online retailer may need controls for advertised discounts, automatic renewals, product descriptions and refund requests. A building business may need controls for representations about completion dates, inclusions, warranties and subcontractor communications. A professional service provider may need to check claims about results, qualifications, experience and pricing.

Why South Australian businesses should take a tailored approach

The central consumer-law rules are generally national, but the business’s location, industry and operating structure still matter. A South Australian business may deal with local customers, interstate consumers, national suppliers, franchises, agents or online platforms. Those arrangements can create different responsibilities and approval points.

A template copied from another business may miss the risks created by a particular product, sales channel or customer group. The ACCC provides templates and resources, but says they can be adapted to suit the business.[S1] A small business may need a short written policy, a complaints pathway and targeted training. A larger business may need formal risk registers, delegated approval authority, audits and board reporting.

When legal advice is sensible

Legal advice is especially useful before launching a new product, campaign, contract or sales model. Advice can help test whether advertising claims are supported, whether pricing is presented clearly, whether contract terms create unfairness risks and whether consumer guarantees are being described accurately.

Advice is also worthwhile when:

• the business makes health, environmental, performance or savings claims;
• customers pay by subscription or face cancellation barriers;
• terms limit refunds, remedies, warranties or liability;
• the business uses influencers, agents, franchisees or independent contractors;
• the business has significant market power or deals with competitors;
• complaints suggest a repeated or systemic problem;
• a regulator, customer or competitor alleges misleading conduct; or
• the business receives an information request, notice or proposed undertaking.

A lawyer can help distinguish a one-off mistake from a broader process failure. That distinction matters because the appropriate response may include stopping conduct, correcting information, contacting affected customers, changing systems, preserving records and obtaining specialist advice.

What legal review should cover

A focused review does not necessarily require an expensive audit of every business document. It can begin with the highest-risk customer journey—from marketing to payment, delivery, cancellation, complaint and remedy.

The review should ask:

• What promises are made to customers?
• Who approves those promises?
• What evidence supports each material claim?
• What happens when a customer seeks a repair, replacement, refund or cancellation?
• Are staff given scripts or incentives that could encourage unlawful conduct?
• Which records prove compliance?
• How are complaints escalated and trends reported?

The outcome should be practical: revised wording, approval checklists, staff instructions, contract changes, escalation rules and a timetable for review.

Building the program

1. Map the business

List products, services, customer types, sales channels, suppliers and third parties. Include websites, social media, telephone sales, physical premises and after-sales support.

2. Identify and rank risks

Consider the likelihood and potential impact of each risk. Prioritise conduct that could affect many customers, continue unnoticed or cause substantial financial or safety harm.

3. Set controls

Controls may include evidence files for advertising claims, contract approval, refund procedures, complaint registers, product-safety checks and restrictions on who may publish marketing content.

4. Train the right people

Training should reach employees and relevant contractors, not only managers. It should use examples from the business’s actual products and customer interactions. Staff should know who to ask when a situation does not fit the script.

5. Monitor and improve

A program should be checked after complaints, product changes, regulatory developments, significant incidents and changes in staff or suppliers. The ACCC describes compliance programs as systems that should be tailored to circumstances, rather than generic documents.[S1]

What a compliance program cannot do

A policy sitting in a folder is not a defence by itself. The business must implement it, supervise it and respond when it identifies a problem. The ACCC may consider compliance activity as part of its broader compliance and enforcement work, but it does not generally review individual programs unless the program forms part of a court-enforceable undertaking.[S1]

A court may require a business to implement a compliance program after a breach, and undertakings can include ongoing compliance and reporting requirements.[S1] That possibility makes voluntary prevention preferable to creating a program only after enforcement has begun.

If customers may have been harmed, the business should obtain advice promptly. The response may involve stopping the conduct, assessing affected transactions, offering appropriate remedies and preserving relevant records. Delaying action can increase the scale and cost of the problem.

A practical decision rule

A business probably needs legal advice when the consequences of getting the issue wrong are material, the legal position is uncertain or the conduct affects many customers. For routine, low-risk operations, a proportionate program based on reliable regulator guidance may be enough. For complex products, aggressive marketing, unusual contract terms or suspected breaches, tailored advice is a sensible risk-control expense.

The best program is not the longest one. It is the one that reflects how the business actually operates, gives people workable instructions and is revised when the business or its risks change.