Recommendation And Reference Letters: Legal Considerations For Australian Businesses

Reference and recommendation letters can carry real weight in Australia. A well‑written endorsement can help a former employee land their next role or support a supplier in winning new work. At the same time, what you put in writing can create legal risk if it’s inaccurate, unfair or discloses information you shouldn’t share.

If you’re an employer, manager or business owner who’s been asked to “put something in writing,” it pays to slow down and get the detail right. In this guide, we cover what reference letters are, whether you need to provide one, the key legal risks in Australia, and practical steps to write a helpful, low‑risk reference. We’ll also outline simple processes and documents that can protect your organisation.

What Are Recommendation And Reference Letters?

A recommendation or reference letter is a written statement that vouches for a person’s character, skills, performance or suitability for a role, program or opportunity. In business, you’ll commonly see them requested for:

• Current or former employees (employment references)
• Contractors, interns or volunteers you’ve supervised
• Suppliers, partners or professional peers (business references)

There are two broad types:

• Character references – focus on integrity, attitude and soft skills.
• Professional or employment references – focus on duties performed, results, conduct and role fit.

The tone and content should reflect your direct knowledge. If you didn’t directly supervise the person, keep your comments narrow and factual.

Do You Have To Provide A Reference Letter?

In most cases, you’re not legally required to provide a reference. It’s generally your choice whether to give a full endorsement, provide a limited “statement of service” (confirming dates, job title and duties) or decline.

Keep these points in mind before you answer a request:

• Check your commitments. If an Employment Contract or internal policy promises a reference or statement of service, stick to it.
• Be consistent and fair. Apply a clear, consistent practice across requests to reduce complaints or perceptions of bias.
• Avoid unlawful reasons for refusal. Anti‑discrimination and workplace laws prohibit adverse action for protected reasons (for example, race, sex, disability, pregnancy, age, religion). While you can choose not to provide a reference, do not make that decision because of a protected attribute or because someone exercised a workplace right.

If you’re uncomfortable endorsing someone, a neutral statement of service is a safe alternative.

What Are The Key Legal Risks In Australia?

By issuing a reference, your organisation is making statements that others may rely on. The main risks to manage are accuracy, fairness and privacy.

1) Defamation And Negligent Misstatement

Defamation can arise if you publish false statements that damage the person’s reputation. Negligent misstatement can arise if you provide statements that are misleading or careless, a third party relies on them, and suffers loss as a result.

To reduce risk, ensure serious claims are supported by records (for example, performance reviews or outcome data), avoid exaggerations, and don’t speculate about matters you didn’t witness.

2) Privacy, Consent And Access

Privacy rules are nuanced in Australia. Many private sector “small business operators” (generally with an annual turnover of $3 million or less) are exempt from the federal Privacy Act 1988 (Cth), unless a specific exception applies (for example, health service providers or businesses that trade in personal information). There is also an employee records exemption for private sector employers handling employee records where it is directly related to the employment relationship.

What this means for references:

• Get consent. Even where the Privacy Act may not apply, it’s best practice to obtain written consent before sharing information about a current or former worker. A brief consent email or a Privacy Collection Notice helps set clear expectations.
• Share only what’s necessary. Limit your letter to information that’s accurate, work‑related and relevant to the request.
• Access isn’t guaranteed. Unlike popular belief, individuals don’t always have a right to see references about them. Small business exemptions and access exceptions (for example, evaluative or confidential information) can apply. Treat confidentiality with care and avoid promising secrecy you can’t legally maintain.

Having a clear, up‑to‑date Privacy Policy helps your team understand how personal information is collected and disclosed in your business.

3) Discrimination, Victimisation And Adverse Action

Comments that refer to protected attributes (such as disability, pregnancy, age or religion) can expose you to discrimination risk. Avoid statements about health, family responsibilities, cultural background or other protected characteristics. Stick to job‑related facts and outcomes.

Be careful not to refuse a reference as a way of penalising someone for raising a workplace complaint or exercising a workplace right (for example, taking parental leave). That can raise adverse action or victimisation issues.

4) Contract And Policy Compliance

If your contracts or internal procedures regulate who can give references and what can be said, follow them. Centralising references through HR or a nominated manager is a simple way to keep messaging consistent and reduce risk. Documenting your process in a short Workplace Policy or your Staff Handbook can make expectations clear for everyone.

How Do You Write A Safe, Helpful Reference?

You can be supportive and still protect your business. Use these best‑practice tips whenever you draft or approve a letter.

• Confirm the purpose. Ask what the letter is for and who will read it. Tailor your comments to the specific role, program or opportunity.
• Stick to what you know. Only include facts you can verify or observations you personally made. If you didn’t supervise the person, say so and narrow the scope.
• Be accurate and specific. Replace vague praise with examples (for example, “met 95% of sales targets over 12 months” rather than “excellent performer”).
• Keep the tone professional. Avoid personal remarks, medical details, family circumstances or any reference to protected attributes.
• Use neutral, factual language for departures. “Resigned in March 2025” is better than subjective commentary about “leaving on bad terms.”
• Don’t make guarantees. Avoid blanket statements like “will be an asset to any employer.” Prefer “based on my experience, is well‑suited to .”
• Get written authorisation. Keep a brief email from the person authorising you to provide a reference and confirming the recipient. Store it with a copy of your letter.
• Have the right person sign. Follow your internal process so references are issued by an authorised manager or HR.

What Should You Include (And When Should You Decline)?

A clear, concise professional reference usually covers:

• Full name, role title and employment dates
• Key duties and scope of responsibility
• Measured achievements or outcomes (where relevant)
• Core strengths and job‑related skills (with brief examples)
• A measured statement about suitability for the specific opportunity
• Your name, role and contact details for verification (optional)

If performance concerns or misconduct are relevant and you’re considering mentioning them, proceed with caution. Ensure the concern is factually supported (for example, finalised warnings), keep the language neutral, and assess whether a neutral statement of service is a safer route.

It’s okay to decline a reference if you can’t provide a fair, fact‑based endorsement. A simple “Our practice is to provide statements of service rather than character references” keeps things professional and consistent.

When you need to share sensitive details with a third party outside normal recruitment (for example, a regulator or grant body), consider using a Non‑Disclosure Agreement so any non‑public information you provide is handled confidentially.

Policies, Processes And Templates To Put In Place

Putting lightweight guardrails around references helps your team help others - safely. Consider implementing the following:

• Reference protocol. A short internal process outlining who is authorised to give references, when to use a statement of service, and how to store consent and copies.
• Workplace policy. Include your approach to references, privacy and record‑keeping in a simple Workplace Policy or your Staff Handbook.
• Privacy documents. Make sure your Privacy Policy reflects how you handle staff and candidate information, and use a brief Privacy Collection Notice when gathering or sharing personal information.
• Employment documents. Ensure each team member has a current Employment Contract, including confidentiality obligations that continue after employment ends.
• Template letters. Keep a legally reviewed statement‑of‑service template and a concise reference letter template to promote consistency and reduce ad‑hoc drafting risks.

These simple measures reduce the chance of inconsistent messaging, privacy slip‑ups or inadvertent legal exposure.

Key Takeaways

• Reference and recommendation letters carry legal weight - keep them factual, specific and within your direct knowledge.
• You’re usually not obliged to provide a reference, but you should avoid refusing for unlawful reasons and consider a neutral statement of service when in doubt.
• Main risks include defamation, negligent misstatement, privacy issues and discrimination - manage them with consent, accurate records and careful language.
• Privacy in Australia is nuanced: small business and employee records exemptions may apply, and access to references isn’t guaranteed - so don’t promise confidentiality you can’t ensure.
• Put simple guardrails in place: a clear internal process, authorised sign‑off, and core documents like a Privacy Policy, Workplace Policy and Employment Contract.
• Templates and centralised approval help your business support people professionally while minimising risk.

If you’d like a consultation on setting up safe reference and recommendation practices for your business, contact us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.