What happened: SIRA penalised NRMA Insurance $479,500 for eight separate CTP premium pricing failures across NSW
Who's involved: Insurance Australia Limited trading as NRMA Insurance, regulated by SIRA
What's at stake: $479,500 in civil penalties, plus ongoing remediation across hundreds of thousands of policies
Why it matters: Repeated pricing-system failures at a major CTP insurer signal regulators will escalate beyond token penalties when controls keep breaking down
Where it stands: Penalties imposed October 22, 2026; special licence conditions and remediation obligations remain in force
A single address-data error in NRMA Insurance's pricing system overcharged more than 41,000 CTP policyholders by an estimated $12.2 million.
That was just one of eight separate pricing failures that have now landed the insurer $479,500 in civil penalties from the NSW State Insurance Regulatory Authority. SIRA handed down the penalties on October 22, 2026, after investigating how Insurance Australia Limited - which trades as NRMA Insurance - handled the premiums, rating and customer information for its compulsory third party book.
The decision covers eight distinct matters. Each one involves a different pricing error, system misconfiguration or control breakdown. NRMA Insurance is the flagship retail brand of Insurance Australia Group, the country's largest general insurer.
The costliest single error involved NRMA Insurance's HUON system, where an address-data misconfiguration caused incorrect rating districts to be applied to policies. SIRA found approximately 41,564 policies were affected, with estimated gross customer overcharges of approximately $12,175,687. The regulator called it the most serious of the eight matters, pointing to failures in core pricing and data controls.
That was far from the only problem. For 19 months from April 2024 to November 2025, NRMA Insurance failed to apply a discount it had filed with the regulator to eligible new customers. Roughly 16,033 policies were affected, adding up to an estimated $662,000 in overcharges.
Separately, incorrect vehicle-risk weightings uploaded to the pricing system touched approximately 303,475 policies - though most of the financial gap in that matter was undercharges of approximately $1.7 million rather than overcharges. NRMA Insurance did not seek to recover the undercharges.
One matter stands apart for sheer scale. From April 2024, inaccurate loyalty-tenure information appeared in CTP renewal documents and was used to calculate the discount offered to renewing customers. Approximately 727,000 policies require data review and approximately 611,000 customers require assessment.
Those are review populations, not confirmed affected populations. SIRA was explicit: the penalty for that matter was not based on any assumed customer loss. But the volume of review and remediation still required, combined with the extended period over which inaccurate information was used, made it one of the more serious matters.
Four more errors rounded out the picture. Cancellation refunds calculated from the wrong date short-changed approximately 15,176 policyholders by an estimated $118,421. Incorrect risk-state mapping affected 2,831 policies. A wrong pricing-cap input - a "malus factor" used to calculate the maximum premium an insurer can charge - pushed premiums above the regulatory ceiling for roughly 24,579 policies over 19 days in early 2026. And a 12-day stretch in January 2025 when the insurer used an outdated premium filing resulted in the under-collection of $81,568 in statutory levies.
The escalation is stark. In December 2024, SIRA imposed a $10,000 penalty on NRMA Insurance for demerit-point-loading failures affecting tens of thousands of CTP policies. Less than two years later, the penalty bill has multiplied nearly 48-fold.
The $479,500 total already includes a 15% discount on the combined figure - applied because several of the errors shared a common root in the HUON operating environment and reflected broader control weaknesses. Without that reduction, the total would have been higher.
NRMA Insurance had argued a formal warning would be more appropriate, citing its cooperation, corrective action and the special licence conditions already placed on its CTP licence on March 31, 2026. SIRA gave weight to the insurer's remediation efforts but found penalties were warranted given the seriousness of the failures, the customer and scheme impacts, the control breakdowns, and the need for deterrence.
The penalties do not replace NRMA Insurance's obligation to finish outstanding customer remediation, comply with the special licence conditions, and meet its regulatory requirements. Further non-compliance may result in further regulatory action, the decision states.
The trajectory from a $10,000 penalty to a $479,500 package in under two years puts every CTP insurer's pricing governance and system-change controls under a sharper spotlight.
