Most small businesses are legally compliant in some areas and exposed in others, and the gap usually shows up only when something goes wrong. A 10-point legal health check tests whether your business structure, employment contracts, Fair Work compliance, work health and safety duties, privacy obligations, tax registrations, insurance, intellectual property, commercial lease, and succession plan are all in order under current 2026 NSW and federal law.
- Criminal wage theft has been in force since 1 January 2025; intentional underpayment can attract up to 10 years’ imprisonment and fines of $1.565 million for individuals.
- The Right to Disconnect now covers small businesses (from 26 August 2025), and your contracts and policies should reflect it.
- Superannuation Guarantee sits at 12% of ordinary time earnings from 1 July 2025.
- The NSW payroll tax threshold is $1.2 million in annual wages, administered by Revenue NSW.
- Privacy Act changes give individuals a new statutory tort for serious invasions of privacy and require disclosure of automated decision-making in privacy policies from 2026.
Why compliance matters for small businesses
Most small business owners are good at what they do. However, the legal foundations behind the business can go unreviewed for years. Small gaps can become serious problems during a Fair Work investigation, a SafeWork NSW visit, a customer dispute, an insurance claim, a lease issue, or a sale.
Several important changes have taken effect in 2025 and 2026. These include criminal underpayment laws, the right to disconnect for small businesses, the 12% Superannuation Guarantee rate, NSW payroll tax thresholds, and privacy law changes. The 10 areas below are the ones that often need attention in small businesses.
1. Business structure
Your business structure affects personal liability, tax, control, reporting, and how easy it is to bring in partners, investors, or a successor. A structure that worked when you started may no longer suit the business if revenue, staff numbers, risk, or family involvement have changed.
A sole trader is simple to set up but carries unlimited personal liability, so the family home, savings and vehicles can be exposed if the business is sued. A partnership shares control, but each partner is jointly and severally liable for partnership debts. A company is a separate legal entity with limited liability and a base company tax rate of 25% for base rate entities, compared with personal marginal rates of up to 47% for sole traders. A trust offers flexible income distribution and asset protection at the cost of more administration.
If your business has grown materially since incorporation, the right structure today may not be the one you started with. Restructuring is far cheaper than dealing with personal liability after a claim.
A verbal agreement may exist at law, but it gives limited protection when a dispute arises. Every employee should have a written contract that reflects the Fair Work Act, the National Employment Standards, and the correct Modern Award or enterprise agreement.
A clear employment contract should cover the employee’s role, employment type, classification, ordinary hours, pay, super, leave, notice, probation, confidentiality, and intellectual property. It should also align with current workplace rights, including the right to disconnect where relevant.
The National Employment Standards set minimum entitlements for employees in Australia, and workplace instruments cannot provide conditions below those standards. Modern Awards add minimum terms such as pay, hours, rosters, breaks, allowances, penalty rates, and overtime. Before issuing or updating a contract, confirm the correct Award and classification for the role.
Two material Fair Work changes have landed since 2025, and both create real risk if ignored.
Criminal wage theft has applied from 1 January 2025. Intentional underpayment of wages and entitlements is now a criminal offence under the Fair Work Act, with penalties for individuals of up to 10 years’ imprisonment and fines of up to $1.565 million, and corporate penalties up to $7.825 million. Honest mistakes are not criminal, but if an employer becomes aware of an underpayment and fails to fix it, ongoing non-compliance can become an offence. Small businesses with fewer than 15 employees that comply with the Voluntary Small Business Wage Compliance Code will not be referred for prosecution.
Right to Disconnect has covered small businesses from 26 August 2025. Employees can refuse to monitor, read or respond to work contact outside ordinary hours unless that refusal is unreasonable. Contracts and workplace policies should set out expectations around out-of-hours contact.
Employers must keep employee records for 7 years, including pay rates, hours, super, leave balances and pay slips, and pay slips must be issued within 1 business day of each pay period.
Every business in NSW, regardless of size, has a primary duty of care under the Work Health and Safety Act 2011 (NSW). There is no exemption for sole traders or micro businesses.
As a Person Conducting a Business or Undertaking (PCBU), you must ensure, so far as is reasonably practicable, the physical and psychological health and safety of your workers and anyone else affected by your work. In practical terms, this requires documented risk assessments, applying the strict hierarchy of controls (eliminate, substitute, isolate, engineer, administrative controls, and relying on personal protective equipment only as a last resort), providing adequate information, training, and supervision, conducting genuine consultation with workers, and immediately reporting notifiable incidents to SafeWork NSW.
Psychosocial risks are a major compliance priority. You are legally required to assess and control psychosocial hazards, such as excessive workload, occupational violence, bullying, harassment, and poor workplace relationships, using the exact same risk management framework and hierarchy of controls applied to physical hazards. If you need help navigating these obligations, SafeWork NSW offers free advisory visits for small businesses.
5. Privacy and data protection
Under the Privacy Act 1988 (Cth), businesses with annual turnover above $3 million must comply with the Australian Privacy Principles and publish a privacy policy. This strict rule also catches any business providing health services, dealing in personal information or handling tax file numbers regardless of their size.
The Privacy and Other Legislation Amendment Act 2024 introduced two major risks for clinics. First, a statutory tort active since June 2025 allows individuals to sue for serious privacy invasions. A data breach or the misuse of patient records now creates direct civil liability.
Second, by 10 December 2026 practices must disclose in their privacy policies if they use automated tools or AI to make decisions affecting individuals. If your clinic uses AI for client triage, quoting, CRM automation or marketing, you must update your public policies to remain compliant.
Tax registration depends on size and structure, and errors attract ATO attention, late lodgement penalties and interest.
You must keep your ABN details current on the Australian Business Register. GST registration is mandatory once annual turnover reaches $75,000, or $150,000 for non profits, and triggers monthly or quarterly BAS lodgements. You also need PAYG withholding if you employ workers or pay contractors who lack an ABN.
NSW payroll tax applies once total annual wages exceed $1.2 million. This is administered by Revenue NSW and is entirely separate from PAYG.
The Superannuation Guarantee sits at 12% of ordinary time earnings as of 1 July 2025. Contributions must be paid by the quarterly due dates to avoid the Superannuation Guarantee Charge. This strict penalty adds interest, applies administration fees and completely removes your tax deduction for any late payments.
Workers compensation insurance is legally required in NSW before your first employee starts work. It is administered through icare and operating without it is a serious offence.
Public liability insurance is rarely mandatory by law but is consistently required by commercial clinic leases and council permits.
Professional indemnity insurance is strictly mandatory for all AHPRA registered health practitioners. This critical policy covers clinical errors, omissions or negligent advice.
Product liability insurance matters if your practice manufactures or supplies physical health products. Business interruption insurance covers lost income during periods when your clinic cannot operate due to a covered event.
A quick annual review of your policies, expiry dates, coverage limits and exclusions will catch most issues.
Your clinic name, logo and core products are valuable assets but they are not automatically protected against competitors copying your brand.
Registering a business name with ASIC registers your trading name nationally but does not give you exclusive rights to use it. This is a common and dangerous misconception.
Trade mark registration with IP Australia provides enforceable exclusive rights within registered classes. It costs a minimum of $250 per class for a 10 year term and is the only way to stop a competitor from using a confusingly similar name or logo.
Copyright applies automatically upon the creation of original works like website content. Patents protect novel medical inventions and require formal registration.
Commercial leases are legally binding for the full term. Many business owners sign without fully understanding their rent review mechanism, make good obligations or assignment rights.
Key areas to review include the lease term and option exercise dates. You must understand your rent review mechanism whether it is a fixed percentage, CPI, market review or a combination. Pay close attention to make good obligations at the end of the lease as these are often expensive and poorly defined. Check the permitted use clause and any personal guarantees which can expose your personal assets if the practice cannot pay. If you are approaching an option exercise date or rent review get advice well in advance.
There are four essential documents every business owner needs. First is a current will that addresses business interests and names an executor with authority to manage clinic matters. Second is an enduring power of attorney authorising a trusted person to make financial and business decisions if you become incapacitated. Third is a buy sell agreement for multi owner practices setting out what happens on exit. Fourth is a shareholders or partnership agreement governing co owner relationships.
For succession to a family member or key employee early planning enables access to small business CGT concessions. These include the 15-year exemption, the retirement exemption capped at a $500,000 lifetime limit and the 50% active asset reduction.
Speak with Family Focus Legal
Family Focus Legal works with small businesses across Camden, Narellan, Campbelltown and the broader Macarthur region. Our commercial team provides plain-English advice on business structures, employment contracts, Fair Work compliance, commercial leases, intellectual property, and succession planning, so you can resolve compliance gaps before they become claims.
If you would like a structured legal compliance review for your business, we are based at 68 John Street, Camden NSW 2570. Phone us on (02) 4655 4224, email info@familyfocuslegal.com.au, or contact Family Focus Legal to arrange an appointment.
