Director Penalty Notices in Australia in 2026: The ATO Risks Company Directors Can't Ignore

The ATO Is Making It Clearer Than Ever, Company Debts Can Become Director Debts

A lot of small business owners still think of PAYG withholding, GST and super as company obligations that sit inside the company shell.

That is a dangerous assumption.

In Australia, the ATO’s director penalty regime can make current and former company directors personally liable for some unpaid company tax and super debts. That means a problem that starts as a BAS or payroll issue can become a personal liability issue surprisingly quickly.

In 2026, this matters even more because the ATO is continuing its push on compliance, earlier intervention and reporting discipline. It has also been moving some businesses to monthly GST reporting and reminding businesses to review whether they have crossed GST turnover thresholds that trigger more demanding reporting methods from 1 July 2026.

If you are a director, or about to become one, this is not a technical side issue. It is core risk management.

What a Director Penalty Actually Covers

According to the ATO, directors can become personally liable for a company’s unpaid:

• PAYG withholding
• GST
• super guarantee charge (SGC)

The ATO calls these liabilities director penalties.

It can issue a Director Penalty Notice (DPN) and begin recovery action 21 days after the notice is issued if the penalty is not remitted or successfully defended.

That 21-day window is one of the most misunderstood parts of the regime. It is not 21 business days. It is not 21 days from when you happen to open the letter. The ATO says the period starts from the day the DPN is posted or left at the address registered with ASIC.

If your ASIC records are wrong, that does not protect you.

The ASIC Address Point Is More Important Than Many Directors Realise

The ATO says it will generally send a DPN to the address registered with ASIC for a current director. If there is no ASIC address, it may use the last known address.

That means an outdated ASIC address can create a nasty situation where:

1. the notice is validly issued,
2. the 21-day period starts running,
3. you do not actually see the notice in time,
4. recovery options narrow fast.

For a director who has moved house, changed offices, stopped using an accountant’s address, or stepped back from day-to-day admin, this is a very real operational risk.

The Three Timers Every Director Needs to Understand

The director penalty regime really revolves around three timing rules.

H3 1. The 21-day DPN clock

Once a DPN is issued, the ATO says you have 21 days to take action that may remit the penalty, if the law allows remission in your case.

H3 2. The 3-month reporting rule for PAYG and GST

For PAYG withholding and GST, the availability of remission depends heavily on whether the liability was reported within 3 months of the due date.

H3 3. The 30-day new-director window

A newly appointed director of an existing company can become liable for old unpaid and unreported debts unless the company deals with them within 30 days of appointment.

These timelines are short enough that a quarterly bookkeeping delay can turn into a personal-liability problem before a director feels the full seriousness of it.

The 3-Month Rule for PAYG and GST

This is the rule that catches a lot of businesses.

The ATO says that if unpaid PAYG withholding or GST is reported within 3 months of the due date, the associated director penalty may still be remitted if, within 21 days of the DPN, one of the following happens:

• the company pays the debt in full
• an administrator is appointed
• a small business restructuring practitioner is appointed
• the company begins to be wound up

But if PAYG or GST is reported more than 3 months late, or remains unreported, the penalty generally can only be remitted by paying the debt in full.

That is a huge difference.

H3 Example of why timing matters

This is why lodging on time, even when you cannot pay on time, is usually far better than lodging late. It does not make the debt disappear, but it can preserve options.

SGC Is Stricter Again

Super guarantee charge is particularly serious because it relates to unpaid employee super.

The ATO’s DPN material makes clear that SGC can give rise to personal liability as well. Directors should assume the safest path is:

• ensure payroll super is being reconciled correctly
• ensure any shortfalls are identified quickly
• do not assume that fixing super later is low-risk
• do not use super as a temporary working-capital buffer

With Payday Super already scheduled to commence from 1 July 2026, the operating discipline required around super is only getting tighter.

The ATO Is Also Tightening GST Reporting Behaviour

A separate ATO focus area published in 2026 is a useful signal about where compliance settings are heading.

The ATO said that in March 2025 it notified 3,500 businesses with poor compliance histories that they would be moved from quarterly to monthly GST reporting from 1 April 2025. It described those businesses as having ongoing poor compliance behaviours such as:

• paying late or not paying the amount due
• not lodging or lodging late
• reporting incorrectly

As at March 2026, the ATO said the campaign had produced early signs of better engagement:

The ATO also published another reminder in April 2026 about GST turnover thresholds.

The GST Thresholds Directors Should Check Before 1 July 2026

The ATO’s April 2026 guidance said businesses that exceed certain GST turnover thresholds need to use different reporting and accounting methods.

The ATO said it would move some businesses to the correct GST reporting and accounting methods from 1 July 2026 if they had not updated themselves.

For directors, the risk is obvious. If finance systems are loose, debt can build in parallel with reporting errors, and that is exactly the combination that increases DPN exposure.

A Realistic Example of How a Director Can Get Trapped

Imagine a construction company with these quarterly obligations:

Now imagine the business is hit by delayed client payments and tries to “catch up next quarter”.

Month 1, it lodges late. Month 2, it enters a payment arrangement but defaults. Month 3, the bookkeeper leaves. Month 4, the BAS is still not right. Month 5, the ATO estimates part of the debt. Month 6, a DPN arrives at an old ASIC address.

At that point, the issue is no longer only about company cash flow. It is about whether one or more directors now face personal exposure of $131,000.

That is why directors cannot outsource all visibility to the bookkeeper or tax agent. Help matters, but accountability still sits with the director.

New Directors Need to Do Due Diligence Properly

The ATO says a new director of an existing company can become personally liable for debts that were due before they were appointed unless, within 30 days, the company:

• pays the amount in full
• appoints an administrator
• appoints a small business restructuring practitioner
• is wound up

That means accepting a directorship without checking the tax position is risky.

H3 A minimum due diligence checklist for new directors

Before accepting appointment, ask for:

• latest integrated client account statement from the ATO
• BAS lodgment history
• PAYG withholding position
• super guarantee payment status
• STP reconciliation
• details of any payment arrangements and whether they are up to date
• confirmation ASIC records are current

If management resists providing that, treat it as a red flag.

Resigning Does Not Always Solve the Problem

Another common mistake is assuming resignation ends exposure.

The ATO says a resigning director can still be liable for penalties relating to liabilities that:

• were due before resignation, or
• became due after resignation but relate to a period when the person was still a director

It also says directors can remain liable after the company is deregistered.

So if the plan is, “I’ll resign and let the rest sort itself out”, that plan may fail badly.

What Directors Should Do the Moment Trouble Appears

The goal is not to wait for a DPN. The goal is to stop the business getting there.

H3 1. Separate reporting risk from payment risk

Even if the company cannot pay in full, it should still aim to report correctly and on time. Late lodgment can destroy remission options.

H3 2. Reconcile payroll and super weekly, not casually

Super errors become very expensive when ignored.

H3 3. Review ASIC records immediately

Director addresses, officeholders and company details should be accurate now, not after a notice arrives.

H3 4. Ask for ATO statements, not just internal summaries

Internal spreadsheets can miss debt, estimates, penalties and defaulted arrangements.

H3 5. Escalate earlier than feels comfortable

If the business cannot see a clear path to catching up, directors should get advice early on restructuring, payment arrangements, asset sales, or other formal options.

A Simple Director Risk Dashboard

Here is a practical internal dashboard many SMEs should be running every month.

If you are seeing two or more red indicators, you should assume the risk has moved beyond routine bookkeeping.

Why This Is Also a Cash Flow Discipline Issue, Not Just a Legal Issue

A DPN problem usually starts long before the notice itself. It often begins with weak weekly reporting rhythm.

If payroll is run without same-week super reconciliation, BAS figures are estimated from incomplete records, and debt is tracked only when the accountant asks for documents, directors lose the ability to act early. By the time the business sees the full picture, the most flexible options may already be gone.

That is why stronger finance cadence matters. A business that updates debtors, wages, super, GST and cash position every week can usually see a problem while it is still a management problem. A business that reviews those items every quarter may only see it once it is already a director-liability problem.

For many SMEs, the immediate fix is not complicated. It is better bookkeeping, faster lodgment discipline, a 13-week cash flow forecast, and a standing monthly board or management review of ATO balances and payment status.

Final Takeaway

In 2026, Australian company directors need to think about tax and super debts as governance risk, not just admin.

The key numbers and dates matter:

• DPN recovery action can start 21 days after issue
• remission for PAYG and GST changes sharply after 3 months
• new directors have a 30-day window to deal with existing unpaid liabilities
• the ATO moved 3,500 businesses to monthly GST reporting from 1 April 2025
• businesses above $10 million GST turnover may need full BAS and accruals reporting
• businesses above $20 million GST turnover may need monthly GST reporting from 1 July 2026

The practical lesson is straightforward. Lodge on time. Reconcile accurately. Keep ASIC details current. Do not let unpaid PAYG, GST or super drift into the background.

Need a Second Set of Eyes on Your Company Tax Position?

If you want help reviewing BAS lodgments, GST reporting, super obligations or whether your business structure and controls are fit for 2026, find an accountant on WealthWorks. If your situation may need a broader restructure, cash flow plan or succession review, you can also browse business and tax professionals on WealthWorks.