Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- Why Compliance Matters From Day One
Step-By-Step: Build A Compliant Business Foundation
- 1) Choose A Structure And Register Properly
- 2) Get Your Core Registrations
- 3) Lock In Your Essential Contracts And Policies
- 4) Set Up Compliant Hiring And Workplace Practices
- 5) Privacy And Data Protection (Including The Small Business Exemption)
- 6) Bake In Australian Consumer Law Obligations
- 7) Keep Records And Plan For Growth
- What Legal Documents Should You Have?
- Key Takeaways
Running a business in Australia is exciting - but figuring out your legal obligations can feel overwhelming if you’re not sure where to start.
The good news is you can lay strong foundations with a few core decisions and documents, then build simple habits that keep you compliant as you grow.
This guide walks you through the essentials: the laws that typically apply, the key contracts and policies to put in place, and a step-by-step approach to set up your business the right way from day one.
Why Compliance Matters From Day One
Compliance isn’t just about avoiding fines. It helps you build trust with customers, reduce risk and protect your personal assets.
When your structure, contracts and policies are clear, you can make faster decisions, resolve issues sooner and spend more time on growth.
Most importantly, the best compliance programs are simple, repeatable and right-sized for your stage. You don’t need a legal department - just a plan, a few tailored documents and good habits.
Step-By-Step: Build A Compliant Business Foundation
1) Choose A Structure And Register Properly
Your structure affects tax, liability, ownership and how you can raise capital. In Australia, most small businesses start as a sole trader, partnership or company.
- Sole trader: Fast to set up and inexpensive. You control everything, but you’re personally responsible for business debts.
- Partnership: Two or more people share control and profits. Partners are generally personally liable unless you use a different entity.
- Company: A separate legal entity. It offers limited liability, clearer governance and is often better suited to scaling or taking on investment.
If you’re planning to hire, bring in co-founders or raise funds, many owners opt for a company for credibility and protection. A guided Company Set Up process can streamline decisions like shareholding, director appointments and your constitution.
2) Get Your Core Registrations
Most businesses will need an Australian Business Number (ABN). Companies also receive an Australian Company Number (ACN) and must keep ASIC details up to date.
For tax, Goods and Services Tax (GST) registration is required if your GST turnover meets or is likely to meet the $75,000 threshold in a 12‑month period. You can also register voluntarily. This is general information only - always check your tax obligations with an accountant.
If you trade under a name that isn’t your personal name or your company’s legal name, register a business name with ASIC so the public can identify who’s behind your brand.
3) Lock In Your Essential Contracts And Policies
Clear, tailored contracts set expectations, allocate risk and help you resolve issues quickly. Customer terms, supplier agreements and internal policies do a lot of the heavy lifting day to day. We’ve listed the core documents most businesses need below.
4) Set Up Compliant Hiring And Workplace Practices
If you’re engaging staff or contractors, make sure your arrangements are lawful. Misclassifying workers or underpaying can lead to penalties and back‑pay liabilities.
Put a written Employment Contract in place for each employee (casual, part‑time or full‑time), align pay and conditions with the Fair Work system and implement basic policies across conduct, leave, performance and safety.
5) Privacy And Data Protection (Including The Small Business Exemption)
If you collect personal information, you need to consider privacy from the start. In Australia, many small businesses with annual turnover under $3 million are exempt from the Privacy Act 1988 (Cth). However, important exceptions apply - for example, if you provide health services, trade in personal information, handle credit reporting information, or contract with the Commonwealth, you may still be covered.
Even if an exemption applies today, it’s best practice to publish a clear and accessible Privacy Policy and to collect only what you need, secure it appropriately and respond to customer requests about their data. This builds trust and prepares you for growth (or if your status changes).
If you operate online, display Website Terms and Conditions covering acceptable use, intellectual property and liability. Ensure your cookie disclosures and consent mechanisms reflect how your site actually works.
6) Bake In Australian Consumer Law Obligations
If you sell goods or services, the Australian Consumer Law (ACL) will likely apply. Your advertising must be accurate, your sales processes must be fair and your refunds and guarantees must honour consumer rights.
At a minimum, align your marketing and sales processes with section 18 of the ACL on misleading or deceptive conduct, and make sure your returns and warranty processes are clear and lawful (especially if you offer any voluntary warranties).
7) Keep Records And Plan For Growth
Good record‑keeping is part of compliance. Keep contracts, approvals and tax records organised, version control your policies and diarise renewals and review dates.
If you have co‑founders or investors (or plan to), set decision‑making rules and expectations early. A robust Shareholders Agreement can prevent deadlocks, protect minority holders and outline exits.
What Laws Do Australian Businesses Need To Follow?
Corporations And Business Structures
Companies are regulated by the Corporations Act and overseen by ASIC (the corporate regulator). Directors must act in the company’s best interests, maintain proper records and avoid insolvent trading. Sole traders and partnerships don’t have directors’ duties, but owners are personally liable for debts and obligations.
Whichever structure you choose, keep your registrations current, store key resolutions and keep ASIC or ABR details up to date.
Australian Consumer Law (ACL)
The ACL applies nationally to most sales of goods and services. Core obligations include:
- Don’t mislead or deceive (including through silence or fine print).
- Honour consumer guarantees (acceptable quality and fit for purpose).
- Avoid unfair contract terms (especially in standard form contracts).
- Advertise truthfully (pricing, promotions, comparisons and testimonials).
Align your customer terms and refund processes with these rules to prevent disputes and regulator attention. If you offer a voluntary warranty, make sure your wording complies with ACL requirements.
Privacy And Data (Including Notifiable Data Breaches)
As noted above, the Privacy Act may not apply to some businesses under $3 million in annual turnover unless an exception applies. If you are covered, you must handle personal information transparently, collect only what you need, secure it and respond to access/correction requests.
Entities covered by the Act must also assess eligible data breaches and notify affected individuals and the OAIC if the breach is likely to cause serious harm. Your internal processes and your public-facing Privacy Policy should support that response.
Employment And Workplace Relations
When you hire, you must comply with the Fair Work Act, National Employment Standards and any applicable modern awards or enterprise agreements. That includes minimum pay, hours, leave, notice and accurate record‑keeping.
Use a written Employment Contract for each role and ensure a safe workplace under work health and safety laws (risk assessments, training, incident reporting).
Intellectual Property (IP)
Protecting your brand and content early reduces the risk of copycats and strengthens your market position. It’s often wise to register your trade mark for your brand name and logo, and to clarify ownership of IP created by staff, contractors and suppliers in your contracts.
If you operate online, your Website Terms and Conditions should set out IP ownership and permitted use to deter infringement and manage takedown requests.
Advertising, Spam And E‑Commerce
Digital businesses must comply with the Spam Act (consent‑based marketing), the ACL (truthful advertising), privacy rules and relevant platform policies. Be clear about price, shipping, returns, auto‑renewals and cancellation terms at checkout.
Licences, Permits And Leasing
Depending on your industry and location, you may need sector‑specific licences (for example, food handling, alcohol service, construction, health services or childcare) and council approvals (zoning, signage, development). If you lease premises, review permitted use, insurance, maintenance and make‑good obligations carefully before signing.
What Legal Documents Should You Have?
Not every business needs everything on day one, but many will need a mix of the following core documents.
- Customer Terms or Terms of Trade: Explain scope, pricing, delivery, timelines, warranties, liability limits and payment terms. Clear terms protect revenue and reduce disputes.
- Privacy Policy: Explains what personal information you collect, why you collect it and how you use, store and disclose it. Publishing a tailored Privacy Policy is a best‑practice trust signal even if an exemption may apply.
- Website Terms and Conditions: Set rules for using your site or app, including acceptable use, IP ownership and disclaimers. Add your Website Terms and Conditions to the footer and relevant checkout screens.
- Employment Contract: Defines duties, pay, hours, confidentiality and IP. Put the right Employment Contract in place before a new starter begins.
- Workplace Policies: Set consistent standards for conduct, leave, performance, safety and complaints to support Fair Work compliance and fair decision‑making.
- Shareholders Agreement: If you have co‑founders or investors, set rules for decision‑making, equity, exits and disputes in a Shareholders Agreement.
- Supplier/Manufacturer Agreements: Lock in quality, delivery, pricing, confidentiality and IP ownership to protect your supply chain.
- Non‑Disclosure Agreement (NDA): Protect confidential information when discussing partnerships, prototypes or deals before a full contract is signed.
- Warranties Against Defects Statement: If you offer a voluntary warranty, ensure your wording meets ACL requirements to avoid misleading customers.
- Trade Mark Registration: Secure your brand name and logo to deter copycats and simplify enforcement - consider registering your trade mark before major launches or marketing campaigns.
Make sure these documents are tailored to your operations and consistent with one another (for example, don’t promise a “no‑questions‑asked” return in ads if your terms say otherwise).
Common Compliance Pitfalls (And How To Avoid Them)
Misleading Marketing Or Sales Claims
Well‑intentioned copy can still be misleading if it overpromises or omits key information. Calibrate your offers and train your team to comply with section 18 of the ACL. Sense‑check pricing, inclusions and comparisons before publishing.
Missing Or Outdated Privacy And Website Terms
Privacy rules and digital practices change. Review your Privacy Policy regularly, keep cookie disclosures accurate and ensure your Website Terms and Conditions match how your platform actually works (particularly subscriptions, renewals and cancellations).
Contractor vs Employee Confusion
Calling someone a contractor doesn’t make it so. Consider who controls the work, who supplies equipment and how payment is structured. If you’re unsure, get advice and put the correct Employment Contract or contractor agreement in place to reduce risk.
Founders Without A Governance Framework
Handshake deals can unravel as the business grows. A clear Shareholders Agreement sets rules early - helpful when raising capital, changing roles or planning exits.
Unprotected Brand Or Content
If brand recognition is part of your strategy, protect it. Registering your trade mark early can deter copycats and give you stronger enforcement options. Make sure your contracts confirm IP created by employees and contractors is owned by the business.
Gaps Between Promises And Documents
Your marketing, customer terms and internal processes must align. Fix inconsistencies quickly - or honour the higher standard you’ve promised publicly.
Key Takeaways
- Start with structure and registrations: choose a structure that fits your goals, get your ABN/ACN and register a business name if you trade under one.
- Know your thresholds: GST registration is required when you meet the $75,000 turnover threshold (you can register voluntarily) - speak with an accountant for tax specifics.
- Put core contracts and policies in writing: customer terms, a Privacy Policy, Website Terms and Conditions and the right Employment Contract will do most of the heavy lifting.
- Build around the big three: the ACL, privacy (including the small business exemption and its exceptions) and Fair Work requirements should underpin your processes and training.
- Protect your brand and governance: consider trade mark registration and use a Shareholders Agreement if you have multiple owners.
- Keep it simple and repeatable: good record‑keeping, scheduled reviews and clear ownership of compliance tasks make it part of daily business, not a one‑off project.
If you’d like a consultation on legal compliance for your Australian business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.








