How Long Must Australian Businesses Keep Records? Compliance Guide

Running a business in Australia isn’t just about great products and loyal customers. Keeping accurate, complete records is a core legal requirement - and it’s critical for smooth audits, protecting your position in disputes, and making confident decisions as you grow.

So how long do you actually need to keep records, and which ones? The answer depends on the type of record and which law applies. In this guide, we’ll break down the standard retention periods, where longer timeframes apply, what happens if you don’t keep adequate records, and simple steps to stay compliant without the admin overwhelm.

One quick note before we dive in: the tax timing rules can be nuanced. It’s a good idea to check specific timing questions with your accountant, and reach out to our team for legal guidance on contracts, employment, privacy and company records.

What Counts As A Business Record?

“Business records” cover any documents that explain your income, expenses, assets, liabilities, activities or decisions. Think both paper and digital formats - the law generally treats electronic copies the same as paper, provided they’re a true, readable copy and you can produce them when required.

• Tax invoices, receipts and expense records
• Bank statements, reconciliations and accounting system reports
• Payroll and HR files (payslips, leave, super, rosters, flexibility arrangements)
• Contracts and commercial agreements, including variations and correspondence
• Registers and other company records (if you operate a company)
• Asset registers, stocktake and inventory records
• Insurance policies and claims records
• Compliance records (WHS, privacy, incident reports, licences and permits)

If your business collects or stores personal information, your handling of that data is also a record-keeping issue. Make sure your Privacy Policy is clear on what you keep, how long you retain it and how it’s secured, and consider your obligations under broader data retention laws in Australia.

How Long Do You Need To Keep Records In Australia?

There isn’t a single “one size fits all” rule. Different laws set different minimum timeframes. As a general rule of thumb, keep records for the longest minimum period that applies to that type of record. Below are the key categories most businesses deal with.

Tax, GST and General Financial Records: At Least 5 Years

Under Australian tax law, most records that explain your income and expenses must be kept for a minimum of 5 years. The start date for that 5‑year clock depends on the record:

• Income tax records are generally kept for 5 years from the date you lodge your return for that income year.
• GST records are generally kept for 5 years from when the transaction or relevant act occurred (not just when you lodge your BAS).
• If the ATO amends an assessment, you may need to retain records for 5 years from the date of the amended assessment.

Electronic records are fine as long as they are a true and complete copy, readable in English, and can be produced on request.

Because tax timing can be complex (for example, when losses are carried forward), confirm specific dates with your accountant.

Capital Gains Tax (CGT) Records: Keep For Ownership Period + 5 Years

Records that establish the cost base and ownership details of CGT assets need to be kept for as long as you own the asset, and then for at least 5 years after you dispose of it. If you have net capital losses that you carry forward, you may need to keep relevant records until those losses are fully used.

Employment Records: 7 Years (Minimum)

If you employ staff, the Fair Work Act and Fair Work Regulations require you to keep prescribed employment records for at least 7 years after the record is made. This includes (among other things):

• Details of hours worked, pay, superannuation and leave
• Payslips and employment agreements
• Employee flexibility arrangements and guarantees of annual earnings (if any)
• Termination records

In practice, it’s prudent to align related HR documents (like your Employment Contract and policy acknowledgements) to this 7‑year minimum.

Company Records: 5–7 Years (Some Records Longer)

Companies have specific obligations under the Corporations Act 2001 (Cth):

• Financial records must be kept for 7 years (this includes invoices, ledgers and working papers that explain transactions and financial position).
• Minute books for meetings and resolutions must be kept for at least 5 years.
• Registers (for example, members and officeholders) must be maintained and kept up to date - in practice, you maintain these for as long as the company exists.

Make sure your corporate governance documents - such as your Company Constitution and board minutes - are complete, consistent and stored securely. Where co‑owners are involved, keeping a current Shareholders Agreement and documenting resolutions clearly will help you demonstrate decision‑making and compliance.

WHS and Industry-Specific Records: 5–30 Years (Sometimes More)

Work health and safety (WHS) laws can require significantly longer retention in some situations. While many WHS records should be kept for at least 5 years, records relating to exposure to hazardous substances or health monitoring often need to be kept for 30 years. Some high‑risk industries and licensed activities (for example, health, aged care, childcare, liquor, construction) have their own record‑keeping requirements.

If you operate in a regulated sector, check the specific rules that apply to your licence or accreditation, and align your retention schedule accordingly.

Consumer, Contract and Commercial Records: Keep For Limitation Periods

To manage risk under the Australian Consumer Law and contract law, keep key commercial records (customer terms, supplier agreements, warranties, complaints and refunds) for at least the relevant limitation period for claims in your state or territory (often 6 years for simple contract claims). Keeping a clean paper trail helps you manage refunds, prove agreed terms and resolve disputes efficiently. If you sell online, ensure your Website Terms and Conditions and customer confirmations are stored and retrievable.

When In Doubt, Keep The Longer Period

If multiple rules apply to a record type, adopt the longest minimum period. For instance, HR and payroll documents commonly intersect with tax rules - in that case, 7 years is a safe baseline.

What Happens If You Don’t Keep Adequate Records?

Inadequate record‑keeping can create real headaches. Beyond day‑to‑day inefficiency, there are legal and financial consequences:

• Tax risk: If you can’t substantiate income or deductions, the ATO can disallow claims, issue amended assessments and apply administrative penalties. Penalty amounts are set by law and can change over time.
• Employment compliance: The Fair Work Ombudsman can take enforcement action for missing or inaccurate employee records and payslips, with significant penalties for serious or repeated breaches.
• WHS exposure: Failure to retain required WHS documents can impact incident investigations and regulatory compliance, particularly in higher‑risk environments.
• Dispute risk: Without reliable records, it’s harder to enforce contracts, manage warranties and refunds, or defend claims.

Good records also build trust with customers, suppliers and investors - and they reduce the time and cost of audits, due diligence and external reviews.

Practical Tips To Stay Compliant (Without The Admin Overload)

Record‑keeping doesn’t have to be complicated. A few practical steps will dramatically reduce your risk and save time later.

• Standardise your systems: Use reputable accounting and payroll platforms, implement role‑based access, and turn on audit trails. These systems automatically capture much of what you need for tax and employment compliance.
• Document your policy: Set a clear, written record‑keeping and retention policy so your team knows what to capture, where to store it and when to archive or securely destroy it.
• Store securely, back up and test: Use secure cloud storage, set retention tags/folders, and test restore processes so you know records are actually retrievable.
• Create a contract register: Track key dates (renewals, expiries), versions and notices for all your agreements. A central register paired with a light process for contract review makes compliance easier.
• Capture “context” too: Save quotes, scopes of work, change orders, emails and approvals alongside the signed agreement. This evidence matters if there’s a dispute.
• Align privacy with retention: Make sure your Privacy Policy accurately reflects the categories of personal information you collect, your legal basis, storage location and retention periods.
• Schedule periodic clean‑ups: Once minimum periods pass - and you’re not in the middle of an audit, dispute or investigation - securely destroy records according to your policy.

Tip: If you restructure (for example, moving from sole trader to company), keep records from the old structure for at least the applicable retention period after the transition.

Which Legal Documents Help With Record‑Keeping And Compliance?

Well‑drafted documents make it easier to know what to keep, why you keep it and for how long. They also create the “paper trail” you need to prove what was agreed.

• Privacy Policy: Explains the personal information you collect, how you use it, where you store it and your retention approach - essential if you handle customer or employee data. Link this with your internal data map and retention schedule.
• Employment Contract: Sets out role, pay, hours, leave, confidentiality and termination terms, and supports your Fair Work record‑keeping obligations. Keep signed contracts, variations and acknowledgements for at least 7 years. Try a tailored Employment Contract for permanent staff.
• Website Terms and Conditions: Records the rules for site use, liability limits and IP ownership, and supports consumer law compliance for online sales. Your checkout records and acceptance logs should be retained with your Website Terms and Conditions.
• Shareholders Agreement: If you operate a company with co‑owners, this document clarifies decision‑making, share transfers, records access and dispute processes - and ensures governance is documented from day one. Consider a Shareholders Agreement alongside your registers.
• Company Constitution: Sets the rules for running your company and complements ASIC and Corporations Act obligations. Keep the current Company Constitution and any amendments with your minute books and registers.
• Customer or Supplier Contracts: Your service terms, scopes, change orders and acceptance records are central to your rights and obligations. Store final versions and key correspondence together and diarise retention periods.

Not every business needs every document, but most will need several. If you’re unsure, we can help you prioritise the essentials for your model and build a practical filing and retention approach around them.

Destroying Old Records: What’s Allowed?

Once the minimum retention period has passed - and there’s no live audit, investigation or dispute - you can securely destroy records. Use professional shredding for paper, and secure wiping or deletion approaches for digital files (including backups according to your policy).

Make sure your process includes checks for “holds” (for example, if you receive a regulator notice or a pre‑action letter). Suspend destruction for any relevant records until the issue is resolved.

Key Takeaways

• Most tax and financial records must be kept for at least 5 years, but some categories - like employment records and company financial records - require 7 years or more.
• CGT records should be kept for the entire ownership period and at least 5 years after disposal; WHS exposure and health monitoring records can require retention for up to 30 years.
• Where multiple rules apply, adopt the longest minimum period and ensure electronic copies are complete, readable and retrievable on request.
• Missing records can mean denied deductions, penalties, Fair Work issues and higher dispute risk - good systems are far cheaper than remediation.
• Practical tools like a contract register, clear retention policy, secure storage and the right documents (Privacy Policy, Employment Contract, Shareholders Agreement, Company Constitution) make compliance manageable.
• For tax timing specifics, speak with your accountant; for legal documents and record‑keeping frameworks, getting tailored legal advice early will save time and reduce risk.

If you’d like a consultation on record‑keeping and compliance for your Australian business - or help putting the right contracts and policies in place - you can reach our team at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.