Where the Regulator Must Stop: The Limits on ASQA's Power

A tribunal that agreed the provider had failed, repeatedly and seriously, for the better part of two years still set aside the cancellation, refused to brand its chief executive dishonest, and held that closing the college down was no longer proportionate. International College of Tasmania and Australian Skills Quality Authority [2026] ARTA 890 maps the outer edge of regulatory power: the point where being right about a failure stops licensing the heaviest available consequence. What it decided about cancellation, character and proportionality matters for every RTO, every CRICOS provider, and the regulator itself.

The Case in Brief

A regulator may be right about the problem and still wrong about the punishment. That is the uncomfortable lesson at the centre of a long and bruising proceeding in which ASQA cancelled a college's registration, pursued its chief executive with an allegation amounting in substance to perjury, and pressed for the harshest sanction the law allows. The Tribunal accepted that the college had failed, repeatedly and seriously, over the better part of two years. It still set the cancellation aside, refused to brand the chief executive dishonest, and held that closing the college down was no longer a proportionate response. Both conclusions matter, and together they mark the boundary of regulatory power.

The decision is International College of Tasmania and Australian Skills Quality Authority [2026] ARTA 890, decided by General Member J Ross in Sydney on 15 May 2026. The college, referred to in the reasons as the RTO, had been registered since March 2018. The proceeding ran for years, generated a joint tribunal book exceeding seventeen thousand pages, and turned on three questions: how serious the historical non-compliance was, how much of it remained at the time of decision, and how likely it was to return. The answer the Tribunal reached, that cancellation went too far on the facts as they stood, is where the public interest in a tough regulator meets the equally strong public interest in a regulator that stays within its evidence and its statutory purpose.

1. Background: The Provider, the Regulator, and the Review

A registered training organisation is a provider approved to deliver and issue nationally recognised vocational qualifications. The RTO was also a CRICOS provider, listed on the Commonwealth Register of Institutions and Courses for Overseas Students and registered to teach international students on student visas. It offered qualifications across community services, business, information and communication technology, and tourism, travel and hospitality, the last of which included commercial cookery and kitchen management, the courses that came to dominate the case.

ASQA acts under two statutes at once. The National Vocational Education and Training Regulator Act 2011 (the NVR Act) governs the domestic VET system and the registration of RTOs. The Education Services for Overseas Students Act 2000 (the ESOS Act) governs the delivery of education to overseas students and is the source of CRICOS registration. Because the RTO taught international students, a single set of failures exposed it under both regimes at once, and ASQA acted under both. When a provider disputes an ASQA decision, it can seek review in the Administrative Review Tribunal, which conducts merits review: it stands in the shoes of the original decision-maker and re-decides the question for itself, to reach what the law calls the correct or preferable decision, rather than merely checking the original decision for legal error.

The chronology matters, because the case was decided on facts that kept moving.

2. Two Laws, One Set of Failures: What the Objects Clauses Govern

The objects clauses of both statutes, section 2A of the NVR Act and section 4A of the ESOS Act, are not preamble. They are protective in purpose, and they steer every discretionary judgement in the case. The NVR Act exists to provide national consistency, to regulate through a standards-based quality framework and risk assessment, to protect and enhance the quality and reputation of Australian VET, to protect students by ensuring quality training, and to facilitate accurate information about VET quality. The ESOS Act exists to provide tuition assurance and refunds for overseas students, to protect Australia's reputation for quality education, and to support the integrity of the student visa system. When the Tribunal weighs whether to cancel, it weighs the regulator's chosen sanction against these objects. A sanction that overshoots the protective purpose is not authorised by it.

The standards the college was measured against changed mid-stream, which is why the reasons cite two sets. At audit, the applicable instrument was the Standards for Registered Training Organisations 2015. On 1 July 2025, partway through the proceeding, the 2025 Standards took effect. They come in three parts. The Outcome Standards, made under section 185 of the NVR Act, define four outcomes an RTO must achieve: quality training and assessment that produces real, industry-relevant competence; fair treatment, information, support and protection of students; trainers and assessors who are qualified, skilled and committed to professional development; and effective governance with genuine continuous improvement. The Compliance Standards, made under sections 185 and 186, carry the fit and proper person requirements in a schedule and, importantly, the notification duty in clause 16. The third part is an enforceable credential policy governing who may train, assess and validate. Because the original findings were framed against the 2015 Standards but the decision was made after the new regime began, the Tribunal had to map each old clause to its Outcome Standards equivalent, which is why its reasons run the two frameworks in parallel.

3. Where ASQA's Case Held: A Vindication on the Substance

This was not a regulator inventing problems. The Tribunal accepted the evidence of ASQA's auditor, an external panel auditor of long standing whose specialist knowledge it found genuinely helpful, and it preferred her account where the college's contradicted it. It accepted that at audit the college was non-compliant across a string of the 2015 Standards: training and assessment strategies that did not enable each learner to meet the unit requirements, insufficient facilities and equipment, an assessment system that did not satisfy the principles of assessment and the rules of evidence, trainers and assessors whose qualifications and currency were not evidenced, professional development that was administrative rather than vocational, and continuous improvement that existed on paper but not in practice. It accepted breaches of the National Code governing overseas students, including course progress monitoring and the requirement to have sufficient staff, resources and premises for the maximum enrolment. And it accepted that the original cancellation was appropriate when it was made and properly upheld on internal review, because the unresolved problems then reached across multiple courses, training products and delivery sites.

It also accepted a concrete and serious failure that defined the back half of the case. For a period, the college had no training kitchen at all. The Docklands premises it had been using were taken up only in February 2025, to fix the very non-compliance ASQA had identified, and the college was told on 31 March 2025 to vacate by 30 June 2025. From 1 July 2025, it had no kitchen in which to deliver or assess practical cookery, and it did not tell the regulator. The gap surfaced only when an ASQA officer attended the Docklands site in August 2025 and found signage for another provider and no trace of the college. A replacement at Footscray was secured afterwards, though the dates the college gave for resuming practical training did not align cleanly with the lease and the scheduled term break.

That silence was not a technicality. Clause 16 of the Compliance Standards, in force from 1 July 2025, requires an RTO to notify ASQA within ten business days of any event that would significantly affect its ability to comply with its obligations. Losing the only kitchen used to deliver and assess practical cookery is precisely such an event. The Explanatory Statement frames the duty as a mechanism to strengthen regulatory oversight and the integrity of the sector, which is why the Tribunal found the non-disclosure breached a real obligation and treated it as more damaging to the college's credibility than the absence of the kitchen itself. On the substance of compliance, ASQA was substantially vindicated.

4. Where the Tribunal Drew the Line on Character: Incompetence Is Not Dishonesty

The sharpest check concerned the chief executive. During the proceeding, ASQA escalated, contending that he had given false or misleading information to the regulator and the Tribunal, had sworn false evidence, and was not a fit and proper person. The fit and proper person requirements sit in Schedule 1 of the Compliance Standards. Clause 5 directs attention to whether the person knowingly gave ASQA false or misleading information. Clause 7 directs attention to whether the public is unlikely to have confidence in the person's suitability to be involved in an organisation that issues nationally recognised qualifications. As the High Court explained in the Bond case, the phrase fit and proper takes its meaning from its context and from the activities the person will undertake, drawing on character and reputation as indicators of likely future conduct.

The Tribunal refused to make the dishonesty finding. It applied the Briginshaw principle, the settled rule that although the civil standard of proof is the balance of probabilities, the more serious an allegation and the graver its consequences, the more cogent the evidence must be before a decision-maker can be satisfied of it. An allegation that a person lied under oath is about as serious as it gets in this setting, close in substance to perjury, and it carries career-ending consequences. The Tribunal found the evidence lacked the probative value such a finding demands. The chief executive had consistently explained that his evidence reflected the position as he understood it at the time, that the college held kitchen access until the end of June 2025, and that he never intended to mislead. The Tribunal found it at least equally plausible that he was responding to fast-moving events in a way that favoured his case rather than deliberately deceiving anyone, and it noted that even his least favourable concession was carefully qualified.

This is the heart of the overreach concern. A regulator is entitled to test honesty and to put hard propositions in cross-examination. It is not entitled to convert a provider's poor judgement and patchy disclosure into a finding of dishonesty without the cogent evidence that finding requires. The Tribunal was willing to say a great deal against the chief executive: that he showed questionable judgement, took an unduly narrow view of his disclosure obligations under clause 16, should have been far more transparent, and prioritised securing a kitchen over disclosing that he had none. What it would not do was inflate those failings into a character verdict the evidence could not carry.

5. Where the Tribunal Drew the Line on Punishment: A Ladder, Not a Switch

The second check concerned the sanction. ASQA pressed for cancellation, the most severe step available, arguing systemic non-compliance, an inadequate compliance culture, and a provider that had treated the regulator as a de facto, taxpayer-funded compliance officer rather than building its own systems. The Tribunal accepted much of that diagnosis but rejected the remedy, and to see why requires understanding how the sanction power is built. Both Acts structure sanctions as a ladder, not a switch.

The governing principle, drawn from a long line of authority, is that a sanction under these Acts is protective, not punitive. The decision-maker's task is to identify the least sanction that will adequately protect the public interest, because anything heavier than necessary crosses into punishment, which the legislation does not authorise. The existence of the ladder is what makes cancellation vulnerable on review: if a lower rung can protect the public, the highest rung cannot be justified.

By the time of the decision the picture had changed decisively. The college had narrowed its scope, closed a campus, withdrawn its cookery courses from registration in December 2025, and had few or no students in the affected areas. The remaining non-compliance had shrunk to a small number of units of competency. The Tribunal also gave weight to how the courses left: they were withdrawn only after the college sought and failed to obtain expedited ASQA approval of its new kitchen, so the decision to drop them was, in substance, taken out of its hands, and from a risk perspective a smaller scope means fewer obligations and less that can go wrong. On those facts the Tribunal found that cancellation was no longer proportionate, that the residual risk of recurrence could be managed by less severe means, and that the college had shown it was capable of being a compliant provider for the courses it still offered.

So the Tribunal set the cancellation aside and substituted a decision that the registration is not cancelled. It pointedly refused to hand the college a clean bill of health. It recorded that a material risk of recidivism remained, that the college's systems were nowhere near the maturity the framework expects, and that strong ongoing oversight was needed. It noted the college's own offer to engage, at its own expense, an external consultant approved by ASQA to audit and report on its compliance, and observed that if the renewal application had been before it, a registration limited to a two-year term with conditions would have been apt, mirroring how the regulator manages risk for new entrants. On the mechanics of the remedy, it was careful: section 105(c) of the ART Act presents alternative courses, and the Tribunal was not confident it could both substitute a decision and remit the matter for conditions in the one step, so it substituted the decision that registration is not cancelled and left the imposition of conditions and the live renewal application to ASQA, where they belong under the statutory scheme.

6. A Pointed Word on Self-Regulation

One further passage deserves emphasis, because it speaks to how ASQA frames its own role and how that framing affects its obligations. ASQA submitted that the college had treated it as a de facto, taxpayer-funded compliance officer, leaning on the regulator instead of investing in its own systems. The Tribunal accepted that ASQA's resources are finite and that the framework depends on providers maintaining genuine internal compliance and self-assurance. But it declined to accept the regulator's characterisation that the scheme is truly self-regulatory. In a genuinely self-regulatory model, it observed, the industry would regulate itself with minimal or no government intervention. That is not this scheme. ASQA's statutory functions include conducting compliance audits and promoting and encouraging the continuous improvement of an RTO's capacity, and it now operates as a full cost recovery agency, funded by the very providers it regulates, although the costs of merits review are not recoverable. The framework, the Tribunal said, depends on cultivating a culture of compliance and trust, not on the fiction that providers police themselves unaided.

7. What This Means for the Sector

For ASQA and other regulators, the discipline is twofold and precise: match the gravity of the allegation to the strength of the evidence, and match the severity of the sanction to the risk that actually remains at the time of decision. Reaching for a dishonesty finding without cogent proof, or for cancellation when scope has shrunk and risk has fallen, invites a tribunal to step in and substitute a lesser outcome. Close scrutiny of regulatory action is not hostility to regulation; it improves the quality of investigations, sharpens the choice of sanction, and sustains public confidence in the regulator, which is itself part of what the legislation exists to protect.

For RTOs, the case is no invitation to relax. The college survived only because it narrowed its own scope, shed its riskiest courses, and reduced its student numbers to the point where cancellation became disproportionate, at the cost of the courses that mattered most to its business, and against the background of the strain the proceedings placed on its viability. That is survival by retreat, not vindication. Two operational lessons stand out. First, build compliance into daily operations rather than assembling it for audit, because the Outcome Standards reward demonstrated, lived self-assurance and expose the appearance of it. Second, disclose material problems promptly: the failure to tell ASQA the college had no kitchen, a clear clause 16 event, did more harm to its credibility than the missing kitchen, and very nearly produced a fit and proper person finding against its chief executive.

For consultants and compliance advisers, the case is a study in how isolated fixes fail. The Tribunal accepted the auditor's observation that a change to one part of a training and assessment system ripples through timetabling, resources, trainers and assessment tools, and that addressing findings one at a time lets the broader system fall out of alignment, the forest lost for the trees. Advising a provider to patch each finding as it arises, without rebuilding the system that generated them, produces exactly the cycle of rectify and relapse this college endured for almost two years. The value a competent adviser adds is systemic coherence, not a sequence of point fixes timed to the next deadline.

For students and the public, the reassurance is that the power to close a provider is real but bounded. A regulator must prove its case on the evidence, must scale its response to the risk that genuinely remains, and must respect that a serious allegation against an individual demands serious proof. Those limits do not shield weak providers. They keep regulatory power honest and proportionate, which is itself part of protecting the students and overseas learners the two Acts exist to serve.

8. Conclusion: Proportion and Proof

The enduring point is one of proportion and proof. Being right about the failure does not license being heaviest about the consequence, and a person's character is not collateral the regulator may spend to win a case. The Tribunal agreed that the RTO had failed seriously and for a long time, and it said so plainly. It still held that, on the facts as they stood at decision, with the scope narrowed, the riskiest courses gone, and few students left to protect, cancellation had become a punishment the protective purpose of the legislation could not support, and that the honesty allegation against the chief executive was a grave finding the evidence could not carry.

Integrity in the VET system is proved in the detail, by the regulated and the regulator alike. The provider must build real systems and disclose its problems; the regulator must prove its case and choose the least sanction that protects the public. The Tribunal's task is to hold both to that standard, and in this case it did, agreeing with the regulator about the failure while refusing to let that agreement license the heaviest available response. Being right about the problem is not the same as right about the punishment, and the difference is where the regulator must stop.

References and Further Reading

International College of Tasmania and Australian Skills Quality Authority [2026] ARTA 890 (15 May 2026), General Member J Ross, Sydney (Tribunal Nos 2025/1247 and 2025/1307).

National Vocational Education and Training Regulator Act 2011 (Cth), sections 2A, 36, 38, 39 and 157. Federal Register of Legislation.

Education Services for Overseas Students Act 2000 (Cth), sections 4A and 83. Federal Register of Legislation.

National Vocational Education and Training Regulator (Outcome Standards for NVR Registered Training Organisations) Instrument 2025 (Cth); and the National Vocational Education and Training Regulator (Compliance Standards for NVR Registered Training Organisations and Fit and Proper Person Requirements) Instrument 2025 (Cth), including the clause 16 notification duty and the Schedule 1 fit and proper person requirements.

National Code of Practice for Providers of Education and Training to Overseas Students 2018 (Cth).

Australian Broadcasting Tribunal v Bond (1990) 170 CLR 321; Briginshaw v Briginshaw (1938) 60 CLR 336.

This article is general commentary on a published decision and is not legal advice. Providers facing regulatory action should obtain advice on their own circumstances.