Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is an RTO (And Who Regulates You)?
Step‑By‑Step: How To Start an RTO in Australia
- Step 1: Research Your Market And Build A Practical Business Plan
- Step 2: Choose Your Business Structure And Register Your Entity
- Step 3: Prepare Your RTO Application
- Step 4: Readiness Assessment Or Audit
- Step 5: Consider CRICOS (If You Will Teach International Students)
- Step 6: Ongoing Compliance Never Stops
- What Legal Documents Will My RTO Need?
- Alternatives To Starting An RTO From Scratch
- Key Takeaways
Starting a Registered Training Organisation (RTO) is an exciting way to support Australia’s workforce, deliver nationally recognised training, and build a meaningful business.
Note: Sprintlaw doesn’t handle RTO setup or applications, but we can help with the legal side of starting your business - like contracts, compliance, and policies - so you’re fully prepared as you launch.
It also involves careful planning and strict compliance. From choosing the right business structure and preparing your regulator application, to maintaining quality systems and reporting accurately – there’s a lot to cover.
This guide breaks the process into clear steps, explains the key laws, and highlights the essential contracts and policies you’ll need so you can set up your RTO the right way.
What Is an RTO (And Who Regulates You)?
An RTO is a training provider approved to deliver nationally recognised vocational education and training (VET) and issue qualifications within the Australian Qualifications Framework (AQF). RTOs are registered and monitored by one of three VET regulators, depending on where and how you operate:- Australian Skills Quality Authority (ASQA) – the national VET regulator for most RTOs (including those that train interstate or online across borders).
- Victorian Registration and Qualifications Authority (VRQA) – for certain providers that operate solely in Victoria and do not offer training to interstate students.
- Training Accreditation Council Western Australia (TAC) – for certain providers that operate solely in Western Australia and do not offer training to interstate students.
Step‑By‑Step: How To Start an RTO in Australia
Step 1: Research Your Market And Build A Practical Business Plan
Before you invest in systems and staff, pressure‑test your idea. Identify who you’ll train, why they’ll choose you, and how you’ll deliver quality outcomes. A concise business plan helps you secure funding and informs your regulator application. Key questions to cover:- Which qualifications or skill sets will you offer, and is there real demand in your region or industry?
- Will you deliver face‑to‑face, online, or blended? What facilities, equipment and learning resources are required?
- Do your proposed trainers and assessors meet the competency and vocational currency requirements?
- How will you recruit and support students, manage complaints, refunds and welfare, and ensure reasonable adjustment where needed?
- Is the financial model viable after factoring in regulatory fees, insurance, staff, compliance systems and ongoing quality assurance?
Step 2: Choose Your Business Structure And Register Your Entity
Your structure affects liability, governance and funding options:- Sole trader: Simple and low‑cost, but you’re personally liable for business debts. Less common for RTOs given the risk profile.
- Partnership: Similar simplicity, shared control and shared personal liability. If you take this path, formalise roles and dispute processes in a Partnership Agreement.
- Company (Pty Ltd): A separate legal entity that generally limits personal liability and supports growth. Directors manage governance duties and ASIC reporting. Many RTOs use a company structure for credibility and risk management.
- Incorporated association or NFP: Suitable for community or not‑for‑profit providers, regulated at state level (not ASIC). Still subject to the RTO Standards.
Step 3: Prepare Your RTO Application
Once your entity is in place, you’ll prepare a comprehensive application to the relevant regulator (ASQA, VRQA or TAC). The process typically includes:- A detailed application form about your courses, scope, delivery modes and governance arrangements.
- Documentary evidence that you meet the Standards for RTOs (2015), including policies and procedures, training and assessment strategies (TAS) for each course, trainer/assessor credentials, learning resources, facilities/equipment lists, student information, complaints and refunds processes, and financial viability evidence.
- Payment of application fees and any assessment charges (these vary with scope and regulator).
Step 4: Readiness Assessment Or Audit
As part of initial registration, your regulator will assess your readiness to deliver quality training. This may include interviews with your key people, site inspections (or virtual walkthroughs), and requests for additional evidence. Be prepared to demonstrate that:- Each qualification on your scope can be delivered and assessed to the standard, consistently and fairly.
- Your trainers are suitably qualified, vocationally current and familiar with your assessment tools.
- Your student information, marketing and agreements are accurate and not misleading, aligning with Australian Consumer Law (see below).
- Your systems for records, data security, USI management, complaints and continuous improvement are fit for purpose.
Step 5: Consider CRICOS (If You Will Teach International Students)
Planning to teach students on a student visa? You’ll need CRICOS registration and to comply with the ESOS framework. This adds obligations around student welfare, marketing, attendance/progress monitoring and tuition protection. Many providers sequence CRICOS after initial RTO approval to avoid overloading your first application.Step 6: Ongoing Compliance Never Stops
Registration is only the beginning. You’ll have ongoing obligations such as:- Paying regulatory charges (for example, an annual registration charge under your regulator’s fee schedule) and renewing your registration at the end of your registration period.
- Maintaining compliant training and assessment and updating TAS, tools and resources as units, versions or industry requirements change.
- Submitting AVETMISS‑compliant activity data and meeting any national reporting requirements that apply to your RTO.
- Notifying your regulator of material changes (such as ownership, key personnel, delivery locations or legal structure) within the required timeframes set by your regulator.
- Keeping your legal documents current and aligned with the Standards, your marketing, and your actual operations.
What Laws And Regulations Will My RTO Need To Follow?
Alongside the Standards for RTOs (2015), several Australian laws will apply to your day‑to‑day operations.Permits, Licences And Industry Rules
- RTO registration: Approval by ASQA, VRQA or TAC is the core “licence” to deliver nationally recognised training within your scope.
- Local approvals: If you deliver face‑to‑face, check your premises meet zoning and occupancy requirements and any building or fire safety certifications required by your local council.
- CRICOS/ESOS: Required if you deliver to international students on a student visa.
Australian Consumer Law (ACL)
Your marketing and student information must be accurate and not misleading. That includes statements about course outcomes, fees, refunds, and job prospects. Misleading or deceptive conduct is prohibited under section 18 of the ACL. If you’re reviewing your marketing, it’s wise to benchmark it against section 18 of the ACL and your regulator’s guidance.Employment And Workplace Laws
If you hire trainers, assessors or admin staff, you’ll need compliant contracts and to meet your obligations under the Fair Work Act and relevant awards. This includes minimum pay, leave, superannuation and workplace health and safety. Start each engagement with a clear Employment Contract and ensure trainer credentials and currency are maintained.Privacy And Data Security
RTOs handle sensitive personal information (identification, USIs, results). Whether you are legally required to comply with the Privacy Act 1988 (Cth) depends on your circumstances (for example, many private sector organisations with annual turnover over $3 million must comply, and additional obligations can apply if you contract with government). Regardless, having a tailored Privacy Policy and robust data security practices is expected in the sector and often required by funding contracts and partners. It’s also important to plan for cyber incidents. A documented incident response or data breach plan helps you act quickly and meet any notification obligations to students, partners or regulators.Intellectual Property (IP)
Your brand and course materials are valuable assets. Protect your name and logo with a trade mark so others can’t ride on your reputation. If you’re ready to formalise brand protection, consider applying to register your trade mark early, and manage copyright licences for any third‑party content you use in training.Records, Reporting And Student Identifiers
RTOs maintain comprehensive student records, including enrolment, assessment evidence and issuance of AQF certification. Ensure USI processes are correct and secure, and that you can produce records during audits. AVETMISS reporting accuracy is critical and ties directly to funding and data quality expectations.Fees And Financial Management
Manage student fees and refunds in line with your policies and the Standards. Be transparent about any third‑party payment plans. Regulators also expect you to maintain financial viability – keep up‑to‑date management accounts, cash flow forecasts and evidence to support your initial and ongoing assessments.What Legal Documents Will My RTO Need?
Your documents should reflect how your RTO actually operates. While the exact suite varies by provider, most RTOs will need the following as a starting point:- Student Enrolment Terms: Clear terms that cover course content, delivery mode, fees, payment schedules, refunds, complaints, deferrals, assessment requirements, academic integrity and issuance of certification. These can sit within your SIS/portal and be accepted during enrolment; many RTOs base them on a tailored Services Agreement framework.
- Privacy Policy: Explains how you collect, use, store and disclose personal information (and USI management). A tailored Privacy Policy helps align your website, enrolment process and student communications.
- Website Terms And Conditions: Sets out acceptable use of your site, IP ownership, disclaimers and limits of liability. This is especially important if students access learning content online. See Website Terms and Conditions.
- Trainer/Assessor Employment Or Contractor Agreements: Define duties, qualifications, vocational currency requirements, IP ownership in developed resources, confidentiality and termination. Start with a strong Employment Contract (or contractor terms) tailored for the VET context.
- Policies And Procedures Suite: Complaints and appeals, refunds, recognition of prior learning (RPL), assessment, reasonable adjustment, marketing, credit transfer, records management, continuous improvement and academic integrity. These must match actual practice.
- Third‑Party Delivery Agreements (If Applicable): If you partner with another organisation to deliver training or assessment, you’ll need robust contracts that allocate responsibilities, quality assurance and data sharing rules.
- Founder/Investor Documents: If you have multiple owners, use a Shareholders Agreement to set decision‑making, equity, vesting, exits and dispute processes.
- Intellectual Property Licences: For any third‑party resources, software or content in your delivery (and clear IP clauses in staff/contractor agreements so training materials created for you belong to the RTO).
Alternatives To Starting An RTO From Scratch
Launching an RTO is a big project. Depending on your goals, you might explore:- Buying an existing RTO: This can accelerate your entry, but legal due diligence is critical. Assess the provider’s compliance history, audit outcomes, scope of registration, trainer qualifications, TAS quality, data integrity and any sanctions or conditions. Scrutinise the sale terms, liabilities and change‑of‑ownership requirements with the regulator.
- Partnering with an existing RTO: You may deliver training under a third‑party arrangement with a compliant RTO while you build capability. The contract should address quality control, branding, marketing approvals, student communications, data sharing and who is responsible for issuance of certification.
- Non‑accredited training: If formal AQF qualifications aren’t essential for your audience, short courses or micro‑credentials outside the VET system have lighter regulation – though consumer, IP, privacy and employment laws still apply.
Key Takeaways
- RTOs are regulated by ASQA, VRQA or TAC depending on where and how you operate; all must meet the Standards for RTOs (2015) and report using AVETMISS standards.
- Start with a practical plan, choose a structure that suits your risk and growth profile, and set up your entity properly (many providers incorporate via Company Set Up for limited liability).
- Your initial application lives or dies on evidence: well‑developed TAS, qualified trainers, realistic resources, accurate student information and systems that match your policies.
- Ongoing compliance is continuous: pay charges, report data, update documents, and notify your regulator of material changes within required timeframes.
- Key legal areas include the ACL for truthful marketing, privacy/data security (supported by a tailored Privacy Policy), employment and workplace safety, and IP protection (consider registering your trade mark).
- Protect your operations with clear student terms, Employment Contracts, website terms and third‑party delivery agreements that reflect how you actually train and assess.







