The regulation not yet in force sets out purpose, scope and definitions, identifies persons and activities within scope and prescribes core obligations including compliance duties, record‑keeping and reporting. It defines prohibited conduct, specifies regulatory interventions and enforcement measures, and establishes administrative and criminal sanctions for non‑compliance.

The instrument confers supervisory powers including information‑gathering, inspection and sanctioning by the designated authority, provides procedures for notices and appeals, and contains transitional provisions and commencement arrangements. It also provides for guidance, co‑operation with other regulators and the treatment of existing licences and contracts on implementation.