A training college spent more than eighteen months rebuilding its compliance. It rewrote policy after policy, filed three rounds of sworn affidavit evidence, and on its own account drafted nine revised policies in a single night before the hearing. Its chief executive told the Tribunal the college wanted to do more than satisfy the regulator: it wanted to go beyond compliance. After a four-day hearing, the Tribunal still affirmed the decision to cancel the college's registration, both as a registered training organisation and across every course at every location for overseas students. This analysis sets out what the decision establishes, in law and in plain terms, for the providers who run, advise and audit RTOs, and for the students the system exists to protect.
The Question the Tribunal Was Actually Asking
The case is an RTO and Australian Skills Quality Authority [2026] ARTA 916, a decision of General Member M Darian-Smith in Brisbane on 28 May 2026. For anyone who runs, advises or audits a provider, it repays close reading, because it draws a line the sector too often blurs. The Tribunal was not asking whether the college had produced better paperwork; it was asking whether the college had become a better organisation, one that would stay compliant once intensive regulator oversight ended. Those are different questions, and the gap between them decided the outcome. The reasons warrant attention because the failure they describe is not exotic. It is the most ordinary failure in the sector: compliance treated as something to assemble for an audit rather than something to live between audits.
1. Background: The Provider, the Regulator, and the Review
Three terms run through the case. A registered training organisation, or RTO, is a provider approved to deliver nationally recognised vocational qualifications, such as a Certificate IV in Kitchen Management. A CRICOS provider is one also registered on the Commonwealth Register of Institutions and Courses for Overseas Students, to teach students who hold Australian student visas. The RTO was both. ASQA, the Australian Skills Quality Authority, is the national regulator, and it administers two separate legislative schemes at once: the National Vocational Education and Training Regulator Act 2011, which governs training providers generally, and the Education Services for Overseas Students Act 2000, which governs the teaching of overseas students. It can impose sanctions up to and including cancellation when a provider falls short.
When a provider disputes an ASQA decision, it can seek review in the Administrative Review Tribunal, which conducts merits review. That means the Tribunal does not merely check whether ASQA followed a fair process; it re-decides the question itself, on the evidence before it, to reach what the law calls the correct or preferable decision, the right answer on the merits rather than merely a defensible one. That feature shapes everything that follows.
2. Two Regulatory Schemes, One Regulator
ASQA cancelled the RTO’s registration on 10 December 2024 under both schemes. The training side was cancelled under subsection 36(2)(f) and section 39 of the NVR Act, the principal law governing RTOs. The overseas student side, covering all courses at all locations, was cancelled under subsection 83(3)(c) of the ESOS Act, the law that protects international students through measures such as tuition and refund assurance, which guarantees a student a refund or an alternative place if a course stops partway through, and accurate reporting. A single set of operational failures can breach both at once, and here it did.
One provision of the NVR Act becomes the hinge of the case. Section 22A requires an RTO to demonstrate both a commitment and the capability to deliver quality training. In plain terms, willingness alone is not enough: the provider must also be able to deliver, on its own, without the regulator holding its hand. The matter also sat across a Standards transition. The reviewable decisions were framed against the Standards for Registered Training Organisations 2015, but by the time the Tribunal assessed current compliance, the 2025 Outcome Standards and Compliance Standards had commenced on 1 July 2025, alongside the National Code of Practice 2018. The college therefore had to demonstrate present compliance against the newer instruments, not merely show that old breaches had been patched.
|
Commitment Is Not Capability |
|
Section 22A of the NVR Act requires both a commitment and the capability to deliver quality training. The Tribunal accepted that the RTO was committed; commitment was never the problem. It was not persuaded the college had demonstrated capability, and because the law requires both, willingness counted for nothing on its own. A provider can want to comply with all its heart and still be unable to, and the statute treats that as a failure. |
3. A Merits Review Looks Forward, Not Only Back
Because the Tribunal re-decides the matter as at the date of its own decision, it treated the administrative process as a continuum and considered every successive version of the college's policies, right up to the hearing. Past conduct still mattered. Subsection 36(3)(b) of the NVR Act allows a decision-maker to weigh an RTO's conduct since the notice of intention to cancel, the formal warning that must precede any cancellation, was given, and the authorities are clear that belated, pressured fixes carry little weight. As the Tribunal has put it before, compliance adopted only against the looming finality of cancellation may give no confidence of ongoing commitment. The practical message is simple: repairing an old breach does not win the case, because the question is whether the systems will hold once no one is watching.
4. What Was Rectified, and What Remained in Dispute
By the hearing, the issues had narrowed. ASQA accepted that several concerns had been met: fit and proper persons, which is whether the people who own and govern the college are suitable to run one; cooperation with the regulator; overseas student enrolment duration under National Code Standard 8.2; student support; and trainers and assessors under Outcome Standards 3.2 and 3.3. The Tribunal noted, pointedly, that ASQA read even this remediation as evidence of how poorly the college had managed its own compliance, because most of it arrived only after repeated prompting over many months. Five issues remained live, and the college lost on every one.
The first was meeting legislative requirements, engaging Compliance Standard 20, which requires an RTO to comply with all applicable laws, and the reporting duties in sections 19 and 47H of the ESOS Act. Providers must enter prescribed information into PRISMS, the Provider Registration and International Student Management System, within strict deadlines, for instance, when a student does not commence or when a refund is paid. The recurring failure was a confusion between two different situations that carry different rules: a student default, when a student walks away from a course, and a provider default, when the provider itself cannot deliver the course, which are governed by different sections, section 47H and section 46D, with different refund and notification timeframes. That confusion ran across several of the college's own policies, even after ASQA had explained the distinction repeatedly, and there were also two short late reports, of five days and one day.
The second was training and assessment, including facilities, engaging Outcome Standards 1.1 and 1.8, National Code Standards 11.1 and 11.2, and sections 21 and 22 of the NVR Act, which together require that training is well structured and properly paced and that assessment, facilities and equipment are fit for purpose. The Certificate IV in Kitchen Management contains around thirty-three units and takes roughly eighteen months of full-time study, yet the strategy pointed to a four-hour summative assessment as the final confirmation of competence. The college said assessment was in fact gathered progressively throughout delivery, but nowhere did it identify or explain where those additional hours occurred, despite repeated requests, leaving students, prospective employers and the regulator unable to see how competence across every unit, including units involving food safety, would actually be assessed. A small but telling detail compounded the concern: seven trainer session plans for seven different sessions of a cookery unit all bore the same date, explained from the witness box as a typo.
The third was managing third parties, engaging Compliance Standard 17(2) and section 21A of the ESOS Act, which require a provider to keep and publish an accurate list of its education agents and to notify the regulator of agent arrangements. The college's new agents policy did not even reference the standard or the section it was meant to satisfy, and its records did not reconcile across its own systems: the website listed thirty-one agents, PRISMS listed thirty-one, yet ASQAnet, the regulator's records, showed only two current arrangements. Asked why inactive agents remained published, the chief executive explained that removing them would cause reputational damage and that the agents wanted to keep working with the college. The Tribunal found that commercial and reputational interest, rather than the regulatory duty to maintain an accurate list, appeared to be driving the conduct. That is the wrong order of priorities, and a decision-maker reads it as a signal about how a provider behaves when no one is watching.
The fourth was commitment and capability, engaging section 22A of the NVR Act and section 11 of the ESOS Act, the latter requiring that the provider has the clearly demonstrated capacity to deliver education of a satisfactory standard. The Tribunal accepted the commitment but was not persuaded the capability had been demonstrated, and the law requires both. The fifth was assessment validation, engaging Outcome Standard 1.5. Validation is the quality assurance process in which suitably skilled and credentialled people review whether a provider's assessment practices and judgements are sound. When the Standards were updated in 2025, the college did not conduct a fresh validation; it carried over an earlier report for a hospitality unit and simply updated the references from the 2015 Standard to the 2025 Standard, leaving the substantive comments unchanged, and a duplicated form reference deepened the impression of a validation process that existed more on paper than in practice.
The Tribunal accepted that some complaints were minor and easily rectified. The clearest example was the automotive workshop for the Certificate III in Light Vehicle Mechanical Technology, where ASQA wanted a simple inventory of tools and equipment under Outcome Standard 1.8, and the college had supplied photographs instead. That was a quick fix. The serious problems were not. As the Tribunal has long held, failures in assessment go to the very reason the VET system exists, because unless assessments are valid and qualifications go only to those who have earned them, the value of every certificate is put at risk.
5. Self-Regulation and the Role of the Regulator
The most instructive moment in the decision was not a document. In cross-examination, the chief executive, who had taken over only about three weeks before the cancellation decision, described the college as a customer of ASQA. ASQA charged an annual fee, he reasoned, and was therefore responsible to the college, with a duty to tell it how to fix its problems rather than simply find fault and close it down. Counsel for ASQA corrected him plainly: ASQA is the regulator, with an oversight function, not a customer relationship.
The Tribunal found this revealed a fundamental and seriously mistaken view of the respective roles of an RTO and its regulator. The point is not a debating nicety. An RTO bears the onus of self-regulation; it must have systems and processes that keep it compliant at all times, without the regulator standing at its shoulder. The same attitude surfaced when the chief executive dismissed ASQA's detailed findings as cosmetic, the kind of thing that could be corrected in a couple of hours. The Tribunal disagreed. Some faults were minor, but the remainder went to the integrity of the qualifications themselves, and the misunderstanding coloured how the Tribunal read everything else.
|
"A Customer of ASQA" |
|
The chief executive's belief that the college was a paying customer ASQA was obliged to help, rather than a provider ASQA exists to regulate, was treated by the Tribunal as a serious misunderstanding of the core duty of self-regulation. A provider that expects the regulator to fix its problems has misread the relationship at its foundation, and that misreading shades a decision-maker's view of everything else the provider says. |
6. Sanction: Protection, Not Punishment
The hierarchy of sanctions under subsection 36(2) of the NVR Act runs from a written direction, through shortening the term or amending the scope of registration, to suspension under section 38, and finally to cancellation under section 39. The governing principle, drawn from a line of authority, is that a sanction is not a punishment. Its purpose is protective, and the task is to identify the least sanction needed to protect the public interest, because anything heavier would tip into punishment, which is impermissible.
Two questions framed the choice. First, the risk that the provider would not become and remain substantially compliant, the risk of recurrence. Second, the effect of the decision on students and on Australia's reputation as a provider of high-quality VET. On the first, the Tribunal was not persuaded. For much of the dispute, the college had operated under an agreed enrolment freeze, having undertaken not to enrol new students while the review ran, so it had been running quietly. Much of the improved documentation had been produced through eighteen months of close, step-by-step input from the regulator, and ASQA oversees thousands of providers and cannot maintain that level of scrutiny indefinitely. If the college returned to full trading it would be far busier, and the Tribunal had no confidence its policies would be implemented compliantly once self-regulating. Cancellation followed, not to punish a provider that had plainly worked hard, but to maintain the protective objects of the legislation in section 2A of the NVR Act. Under subsection 39(3), a provider whose registration is cancelled cannot reapply for two years, or such shorter period as the regulator considers appropriate.
7. A Recurring Pattern: Compliance That Peaks at Audit and Fades Afterwards
The behaviour at the centre of this case is not unique to one college. It reflects a pattern the sector has watched repeat for years. A provider mobilises intensively in the lead-up to an audit, during the audit itself, and again when the regulator raises concerns, producing a sudden surge of rewritten policies, fresh registers and neatly assembled evidence. Then registration is secured or restored, the pressure lifts, attention returns to marketing, enrolments and revenue, and the daily disciplines that actually keep a provider compliant are quietly allowed to lapse. Compliance is treated as an event to be survived once a cycle rather than a condition to be maintained continuously. The RTO is simply a vivid illustration: much of its strongest evidence was produced under deadline pressure, including nine policies drafted in a single night, and the Tribunal was unconvinced precisely because the work looked like a response to the threat of closure rather than the normal output of a well-run organisation.
This pattern matters because of a gap that documentation can hide. A complete, well-worded policy proves only that someone could write the policy. It does not prove that trainers follow it, that assessors apply it, that reporting happens on time, or that records are accurate when no auditor has asked for them. The Tribunal made the same point by drawing on earlier authority that a system being in place does not mean the system was adhered to, or that the people engaged by the provider were actually performing their obligations. The danger of front-loaded compliance is that it produces the artefacts of quality without the practice of quality, and the two can drift a long way apart between audits.
It matters, too, because the entire regulatory model assumes self-regulation in the spaces between audits. ASQA oversees thousands of providers and cannot, and is not required to, maintain close supervision of any one of them indefinitely. Auditing is periodic by design, and the system only works if a provider polices itself on the ordinary days when no one external is checking, which is the overwhelming majority of days. A provider that performs only when observed has, in effect, outsourced its conscience to the audit calendar, and that is exactly the arrangement the Tribunal declined to reward. The risk-of-recurrence inquiry that decided the sanction exists for this reason, because regulators and tribunals have learned that effort displayed under scrutiny is a poor predictor of conduct once scrutiny is withdrawn.
Most importantly, it matters because quality in vocational training is not generated at the moment of audit. It is generated every day a student is taught and assessed. A learner does not benefit from a validation report tidied up for a hearing; the learner benefits from being taught the right content, by a competent trainer, and assessed honestly against the real requirements of the qualification, on the day they sit in the classroom or the workshop. When daily operations slip, the harm is immediate and personal: students pay fees and invest time for a credential that may not reflect genuine competence, employers hire on the strength of certificates that may not mean what they claim, and other honest providers carry the reputational cost of a system that looks unreliable. This is why the objects of the NVR Act in section 2A speak of protecting students and protecting Australia's reputation for VET, and why the Tribunal returns to those objects rather than to the neatness of any individual document.
There is also a simple organisational truth underneath all of this. Compliance bolted on in bursts is fragile, because it depends on a few people working heroically under pressure, and it collapses the moment those people are busy, absent or gone. Compliance built into daily routine is durable, because it survives staff turnover, growth, and the return to full trading that undid the RTO. The providers that come through audits calmly are usually the ones for whom the audit changes very little, because the evidence the auditor wants is simply a by-product of how they already operate. That is the difference between a compliant document and a compliant provider, and it is the difference this decision rewards.
|
The Artefacts of Quality Are Not the Practice of Quality |
|
A polished policy proves only that someone could write it. It does not prove that trainers follow it, that assessors apply it, that reporting happens on time, or that records are accurate when no auditor has asked. Front-loaded compliance produces the documents of quality without the practice, and the two drift apart in the long gaps between audits, which is where the regulatory model assumes a provider is governing itself. |
8. Implications for RTOs and CRICOS Providers
Reviews look forward. Repairing an old breach does not win a case, because the regulator and the Tribunal weigh the risk that the same problems return; the real test is whether the systems hold when nobody is watching. The most common and most dangerous habit in the sector is to surge effort before, during and after an audit, then relax once registration is secure, but compliance built in bursts is fragile and fades, while compliance built into daily routine endures. The lesson is to plan operations so the evidence an auditor wants is simply a by-product of how the provider already works every day.
Last-minute, regulator-driven fixes carry little weight, because there is a real difference between compliance a provider builds and sustains itself and compliance assembled at the eleventh hour under threat of closure. Documents are necessary but never sufficient: strong templates count for little if the people who own them cannot explain and operate them in daily practice, because capability lives in the team, not in the filing system. A provider that treats the regulator as a paid adviser obliged to fix its problems has misread the core obligation of self-regulation under the NVR Act, and that misunderstanding will colour how a Tribunal reads everything else. Assessment and validation must be treated as core, not housekeeping: unexplained assessment hours, carried-over validations and duplicated forms go to the worth of every qualification a provider issues, which is exactly what the assessment Standards exist to protect. Commercial interest must not override regulatory duty, because the reasons a provider gives for its choices tell a decision-maker a great deal about what it values. And cancellation protects the public: the Tribunal looks for the least sanction needed to protect students and the sector, which means cancellation can be the correct outcome even where it causes genuine hardship.
This commentary is general in nature and is not legal advice; providers facing regulatory action should obtain advice tailored to their circumstances.
Conclusion: Real Compliance Cannot Be Manufactured Overnight
The hard truth running through the decision is simple. Once a provider is defending a cancellation, demonstrating capability is far harder than demonstrating effort, and the two are not the same thing. The RTO worked hard, rewrote everything, and told the Tribunal it wanted to go beyond compliance, but the Tribunal was not measuring effort or intention. It was measuring whether the organisation would hold together once the regulator stepped back, and on that question the overnight policies, the unexplained assessment hours, the carried-over validation and the agents kept on the website for commercial reasons all pointed the same way. Real compliance cannot be manufactured overnight. It has to be lived in daily operations, long before the auditor arrives, long before the notice lands, and long before there is anything left to defend. The college that operates that way rarely has to prove it under pressure, because the proof is already in how it runs. The college that does not will discover, as this one did, that a folder full of compliant documents is not the same thing as a compliant provider.
|
Summary: Education Provider v ASQA |
|
1. The case, the RTO and Australian Skills Quality Authority [2026] ARTA 916, affirmed ASQA's cancellation of an RTO and CRICOS provider under both the NVR Act and the ESOS Act. 2. Merits review at the Administrative Review Tribunal looks forward: it re-decides compliance as at the hearing, so patching old breaches is not enough. 3. Section 22A of the NVR Act requires both commitment and capability; the Tribunal accepted commitment but found capability was not demonstrated. 4. Five issues remained unresolved: meeting legislative requirements, training and assessment, managing third parties, commitment and capability, and assessment validation. 5. Confusion between student default and provider default ran through the college's reporting policies despite repeated regulator explanation. 6. A four-hour summative assessment for a thirty-three-unit qualification, with no explanation of where further assessment occurred, undermined the training and assessment case. 7. Education agent records did not reconcile across the website, PRISMS and ASQAnet, and commercial interest appeared to drive the decision to keep inactive agents published. 8. The chief executive's belief that the college was a customer ASQA must help revealed a serious misunderstanding of the duty of self-regulation. 9. Nine policies drafted in a single night illustrated compliance produced under threat rather than lived in daily operations. 10. Cancellation was protective, not punitive: the least sanction needed to protect students and the sector, with a two-year bar on reapplication under section 39(3). |
References and Further Reading
Administrative Review Tribunal. Mid City Education Pty Ltd and Australian Skills Quality Authority [2026] ARTA 916. https://www.austlii.edu.au/cgi-bin/viewdoc/au/cases/cth/ARTA/2026/916.html
Federal Register of Legislation. National Vocational Education and Training Regulator Act 2011, sections 2A, 21, 22, 22A, 36 and 39. https://www.legislation.gov.au
Federal Register of Legislation. Education Services for Overseas Students Act 2000, sections 4A, 11, 19, 21A, 47H and 83. https://www.legislation.gov.au
Federal Register of Legislation. National Vocational Education and Training Regulator (Outcome Standards for NVR Registered Training Organisations) Instrument 2025. https://www.legislation.gov.au
Federal Register of Legislation. National Vocational Education and Training Regulator (Compliance Standards for NVR Registered Training Organisations and Fit and Proper Person Requirements) Instrument 2025. https://www.legislation.gov.au
Australian Government. National Code of Practice for Providers of Education and Training to Overseas Students 2018. https://www.legislation.gov.au