Risk & Compliance 101 · Intermediate · All stages · 8 min read · Updated
Australian business compliance
A map of the obligations every Australian small business carries across tax, employment, consumer law, privacy, safety and corporate reporting, and a simple system for staying on top of them.
- Tax: ABN, GST and BAS, income tax, PAYG withholding, super guarantee, record keeping.
- Employment: Fair Work Act, awards, National Employment Standards, pay slips, leave, termination.
- Consumer law: Australian Consumer Law guarantees, refunds, pricing, advertising claims.
- Privacy: Privacy Act and APPs, Spam Act, breach notification.
- Work health and safety: State WHS laws, duty of care, hazard management, incident reporting.
- Corporate and licensing: ASIC registrations and annual statements, directors’ duties, industry licences.
Compliance is the part of running a business that nobody started a business to do. It is also the part most likely to produce a nasty, expensive surprise: an underpayment claim from a former employee, a GST audit, a safety incident with no documented procedures, or a company deregistered for an unpaid annual fee.
The volume of rules can feel overwhelming, but for a typical small business it breaks into six domains, each with a handful of recurring obligations. This article maps those domains, explains what each regulator actually expects, and shows how to build a compliance calendar so that nothing falls through the gaps. It describes how the system works rather than quoting rates and thresholds, which change every year; always confirm current figures with the ATO, Fair Work Ombudsman, ASIC or your adviser.
Why it matters
Non-compliance is rarely cheaper than compliance. Underpaying staff, even accidentally, can lead to back-pay for years plus penalties. Missed super guarantee payments attract charges that are not tax deductible. Late ASIC fees compound, and a deregistered company cannot legally trade or hold assets. Beyond money, compliance records are what larger customers, lenders and buyers look at when they decide whether to deal with you, and a clean set is a genuine commercial asset.
Tax: the ATO and the rhythm of BAS
Tax compliance follows a predictable calendar. If you are registered for GST you lodge a Business Activity Statement, usually quarterly, reporting GST collected and paid, PAYG withholding from wages and any PAYG instalments on your own income tax. Annual income tax returns follow for the entity, and companies pay tax at the company rate while sole traders and partners report through personal returns.
If you employ people, the obligations multiply: you withhold tax from wages, report each pay run to the ATO through Single Touch Payroll, pay superannuation guarantee contributions by the due dates, and may be liable for state payroll tax above a threshold that varies by state. The ATO expects you to keep records that explain every transaction for at least five years. Good bookkeeping software with a bank feed does most of this for you, but someone has to review it and lodge on time.
Employment: Fair Work, awards and safety
The Fair Work Act sets the National Employment Standards, which are minimum entitlements for all employees covering hours, leave, public holidays, notice and redundancy. Most roles are also covered by a modern award that sets minimum pay rates, penalty rates, allowances and classifications for that industry or occupation. Working out which award applies and classifying each employee correctly is the single most common compliance failure among small employers.
Alongside pay, employers must provide pay slips, keep employment records, give new starters the Fair Work Information Statement, and follow fair process for performance management and termination. Separately, state and territory Work Health and Safety laws place a duty on every business to provide a safe workplace so far as is reasonably practicable: identify hazards, control them, consult workers, train them, and report serious incidents to the state regulator. Workers compensation insurance is compulsory in every state once you employ anyone.
- Identify the award for every role and classify each employee in writing.
- Pay slips within one working day of pay, and seven years of employment records.
- A written employment contract and the Fair Work Information Statement for every new starter.
- A documented WHS process: hazard register, procedures, induction, incident reporting.
- Workers compensation cover from your state scheme or insurer before the first employee starts.
Customers: the Australian Consumer Law
The Australian Consumer Law (ACL) applies nationally and is enforced by the ACCC and state fair trading agencies. It gives consumers automatic guarantees: goods must be of acceptable quality, fit for purpose and match their description, and services must be delivered with due care and skill within a reasonable time. You cannot contract out of these guarantees, and a "no refunds" sign is unlawful because it misstates them.
The ACL also governs how you advertise and sell. Claims must not be misleading, prices must include all unavoidable charges, and unfair terms in standard-form contracts with consumers and small businesses are prohibited, with significant penalties for including them. Review your terms and conditions, website claims and quoting practices against these rules, and keep evidence for any performance or comparison claim you make.
Structure, licences and the compliance calendar
Companies have an extra layer. ASIC issues an annual statement and fee, requires you to keep registered office and officeholder details current, and expects directors to understand their duties: act in good faith, avoid conflicts, prevent insolvent trading and keep proper records. Every director needs a director identification number. Business names must be renewed, and many industries need licences or registrations from state or local bodies that have their own renewal cycles.
The way to hold all of this together is a compliance calendar: one list of every recurring obligation, its due date, the person responsible and the evidence that it was done. Most of the entries repeat monthly, quarterly or annually, so once built it mostly maintains itself. Pair it with an annual review with your accountant and, where staff are involved, a periodic payroll audit against the current award.
- Every pay run: Single Touch Payroll report, pay slips, super accrued.
- Monthly: Reconcile accounts; payroll tax if registered; licence renewals as they fall due.
- Quarterly: BAS lodged and paid; super guarantee paid by the due date.
- Annually: Income tax return; ASIC annual statement; business name renewal; insurance renewals.
- Each July: Award rate increases and super rate changes applied; payroll audit; policies reviewed.
- As events occur: New starters, terminations, incidents, data breaches, changes to officeholders.
How to build a compliance system that runs itself
- List your obligations by domain Tax, employment, consumer, privacy, WHS, corporate and licensing. Ask your accountant and industry body what you have missed.
- Build the compliance calendar Every recurring item with due date, owner and the evidence you will keep.
- Get the award and classifications right Use the Fair Work Ombudsman tools or an employment adviser. Write the classification into each contract.
- Automate what software can do Bank feeds, STP, super clearing house, BAS preparation and reminders.
- Document WHS and privacy Hazard register, procedures and incident process; privacy policy and breach plan.
- Review contracts and marketing against the ACL Remove unfair terms, fix refund wording, substantiate claims.
- Schedule the annual review Accountant for tax and ASIC, adviser for payroll, owner for the whole calendar each July.
Real-world example
A Newcastle gym discovers what it has been missing
Iron Harbour Fitness is a company with two owner-directors, nine casual trainers and about 600 members. The owners are diligent about BAS because their bookkeeper drives it, but a new trainer asks why her pay slip does not show the weekend penalty rate her friend at another gym receives. A payroll adviser confirms the business has been paying a flat hourly rate below the award for weekend shifts for three years.
The owners calculate and pay the back-pay, correct the classifications in their payroll software and tell the team openly what happened. The same exercise reveals a lapsed business name registration, no written WHS induction for trainers using equipment with members, and membership terms with an automatic renewal clause their lawyer flags as potentially unfair under the ACL. Over two months they build a compliance calendar with eleven recurring entries, assign each to one of the two directors, and book a July review with their accountant and payroll adviser. The remediation cost real money; the system to prevent a repeat cost a weekend.
Common mistakes
- Assuming a flat rate is simpler Paying one hourly rate across shifts usually underpays penalty rates and overtime. The award is the floor, however you structure the pay.
- Treating casuals as outside the rules Casual employees have award rates, loading, and defined rights around conversion to permanent work. Check the current rules with Fair Work.
- Letting the bookkeeper own compliance Lodging on time is not the same as being compliant. The owner is responsible for the whole calendar, not just the BAS.
- Ignoring mail from ASIC Missed annual statements lead to late fees and, eventually, deregistration. Keep the registered office address current.
- No evidence If you cannot show the pay slip, the induction record or the signed contract, the regulator assumes it did not happen.
KPIs to track
- Lodgements on time BAS, super, STP, tax return and ASIC statement lodged by the due date. Target: 100%.
- Employees with written classification Share of staff whose award and level is documented in their contract. Target: all.
- Overdue calendar items Compliance entries past their date. Review weekly; should be zero.
- Months since last payroll audit Compare actual pay to the current award at least annually, ideally after each July rate change.
- WHS incidents and near misses reported Reporting that trends up before trending down usually means the system is starting to work.
Frequently asked questions
Where do I find out which award applies to my staff?
The Fair Work Ombudsman website has an award finder and pay calculator, and the Fair Work Infoline can help. If your business sits between industries, an employment adviser or lawyer can confirm the right award.
Do I need to register for payroll tax?
Only when your total Australian wages exceed the threshold in your state or territory, which differs between jurisdictions. Check with your state revenue office as your wages bill grows.
What happens if I make a genuine mistake?
Regulators generally treat voluntary disclosure and prompt correction more leniently than concealment. Fix it, document it, pay what is owed, and get advice if penalties may apply.
Is a sole trader subject to the same rules?
Most of them. Sole traders avoid ASIC company obligations but still face tax, GST, employment, consumer law, privacy and WHS requirements once they trade or employ anyone.
Key takeaways
- Compliance breaks into six domains; map your obligations in each before you worry about the detail.
- Super, award rates and consumer guarantees are the three areas where small businesses most often go wrong.
- A compliance calendar with owners and evidence turns a scattered burden into a routine.
- Software handles lodgement; a person still has to own correctness.
- Review everything each July when rates and awards change, with your accountant and adviser.
This article is general information only, not financial, legal or tax advice.