New Zealand’s biggest bank is in a formal “material breach” of the conditions that allow it to operate here, after the Reserve Bank decided that a string of smaller compliance failures added up to a serious problem with the way ANZ manages the businesses it hands to outside providers.
The breach was posted quietly on the Reserve Bank’s register of banks and picked up by interest.co.nz, which reported that it is the only material bank breach currently listed as still open. For a bank that holds roughly a third of the country’s mortgages and business lending, that is not a small footnote.
The rule ANZ tripped over is condition 11 of its registration, which puts the Reserve Bank’s outsourcing policy, known as BS11, at the heart of how the big banks are run. The policy sounds dry but the idea behind it is straightforward. When a bank the size of ANZ hands its IT processing, its accounting or its call centres to another company, often its Australian parent, the Reserve Bank wants to be sure the New Zealand business can still stand on its own two feet if that arrangement suddenly falls over. The whole point is that a large bank has to keep the legal and practical ability to control and run the functions it outsources, so that a failure somewhere in the chain does not take the payments system down with it.
According to the reporting, ANZ told the Reserve Bank about a number of separate non-compliance issues between April 2024 and September 2025. Taken one at a time, the regulator judged each of them to be a non-material breach, the kind of thing that gets logged and fixed. Looked at together, the picture changed. The Reserve Bank found that the sheer number and the nature of the instances pointed to deeper weaknesses in ANZ’s oversight, its processes and its controls, and that collectively they amounted to a material breach of condition 11.
Two of the problems were about back-up arrangements. In plain terms, the systems that were supposed to let ANZ New Zealand keep operating if it had to separate from its Australian parent would not have worked as intended. The Reserve Bank noted the failures had no financial impact on customers, but they matter because they go to the question regulators care about most after the last global financial crisis, which is whether a big bank can be safely wound down or separated without chaos if the worst happens.
ANZ says it has already fixed the specific back-up issue and is now doing broader work to strengthen the way it manages the outsourcing policy day to day. That work is part of a remediation programme that will have to be completed to the Reserve Bank’s satisfaction, with the bank keeping the regulator informed as it goes. There is no fine attached and no suggestion that anyone’s money was ever at risk, but a material breach sitting open on the public register is the kind of thing a bank of ANZ’s size would much rather not have.
The irony is that this comes after one of the most expensive compliance efforts the New Zealand banking industry has ever undertaken. Meeting the current version of BS11 took the big four banks years of work and hundreds of millions of dollars. ANZ alone spent more than $580 million over a five-year programme getting itself into shape, and by the end of 2023 the Reserve Bank had confirmed that all the major banks had met the revised outsourcing requirements. Less than two years later, the country’s largest lender is back on the register for the same rulebook, which raises an obvious question about how well the fixes have held.
It is also not the first time ANZ has found itself on the wrong side of the Reserve Bank. In 2019 the regulator revoked ANZ New Zealand’s accreditation to model its own operational risk capital after discovering the bank had not been using an approved model since 2014, even though its directors had been attesting to compliance the whole time. That decision lifted the amount of capital ANZ had to hold against operational risk by about 60 percent, to $760 million, and it prompted the Reserve Bank to demand improvements to the way ANZ’s directors signed off on compliance. An independent report by Deloitte at the time found the bank’s attestation and assurance framework needed work to become fully effective.
Put the two episodes side by side and a pattern starts to look familiar. The individual failures are technical and often invisible to customers, but they keep landing in the same place, which is the machinery that is supposed to give directors and regulators confidence that what the bank says about itself is actually true. The Reserve Bank has spent years pushing the message that self-attestation only works if the checks behind it are real, and a fresh material breach at the biggest bank in the country is an awkward reminder of how hard that has been to lock in.
For ordinary customers the practical effect is close to nil. Accounts still work, cards still tap and mortgages are unaffected. The significance sits at the level of financial stability and trust, where the regulator is trying to make sure the banks New Zealand depends on can be pulled apart safely if they ever need to be. ANZ now has to show the Reserve Bank it has genuinely closed the gaps, not just patched the latest ones, before the breach can be marked as resolved and taken off the public list.
What do you make of the country’s biggest bank landing back on the Reserve Bank’s register so soon after spending half a billion dollars to get compliant? Have your say in the comments below.
This article was written by AI, briefed to report the facts, hopefully without some of the bias people bring to the job π
Leave a Reply