What ATO Compliance Actually Requires When You Outsource
Many Australian business owners worry that using an overseas bookkeeper will create compliance problems with the ATO. In practice, the ATO has no rule against offshore bookkeeping. What it cares about is the accuracy and completeness of what gets lodged — not who prepared the numbers.
Your compliance obligations remain exactly the same whether your bookkeeper is in Melbourne or Mumbai:
- Lodge BAS on time (monthly, quarterly, or annual depending on your GST registration)
- Report income and expenses accurately under Australian tax rules
- Keep records for the minimum required retention period
- Make records available to the ATO on request
The only practical difference is that you must ensure your Indian bookkeeper understands Australian-specific rules — GST tax codes, BAS excluded items, input taxed supplies, and the Australian financial year (1 July–30 June). These are not complicated for a firm that specialises in Australian clients, but they are not something a generalist Indian accountant will know automatically.
BAS and GST — Who Is Legally Responsible for Accuracy?
This is the question Australian business owners ask most often — and the answer is clear: you are always responsible, regardless of who prepares the figures.
Your Indian bookkeeper is a service provider. They prepare the BAS figures. But the legal obligation to lodge correctly sits with you as the business owner — or, if you use one, your registered BAS agent in Australia. The ATO's position is simple: signing off on a BAS means you accept responsibility for its accuracy.
| Task | Who Does It | Who Is Legally Responsible |
|---|---|---|
| Categorise transactions in Xero / MYOB | Indian bookkeeper | You (business owner) |
| Prepare BAS draft figures | Indian bookkeeper | You (business owner) |
| Review BAS for accuracy before lodgement | You or your BAS agent | You (business owner) |
| Lodge BAS with the ATO | You or your registered BAS agent | You (business owner) |
| Respond to ATO audit queries | You or your accountant | You (business owner) |
| Retain source documents | You (in Australia) | You (business owner) |
The Privacy Act and Sending Financial Data Overseas
Australia's Privacy Act 1988 applies when you send personal information — including employee records, payroll data, and client details embedded in invoices — to an overseas recipient. This does not mean you cannot outsource to India. It means you have obligations before you do.
Under Australian Privacy Principle 8 (APP 8), before disclosing personal information to an overseas recipient you must either:
- Take reasonable steps to ensure the overseas recipient will handle the data in accordance with Australian Privacy Principles, or
- Obtain the individual's consent to the overseas disclosure
In practice for bookkeeping, "reasonable steps" means:
- A signed Data Processing Agreement or NDA with your Indian firm that commits them to confidentiality and appropriate data handling
- Using secure transfer methods — Xero or MYOB user invitations, encrypted file portals, or secure cloud sharing — never plain email attachments for sensitive documents
- Not sharing more personal data than necessary — for example, invoices with customer names are necessary; sharing a full client database is not
- Confirming the Indian firm has a clear data destruction or return policy when the engagement ends
Note: if your business turnover is under A$3 million and you are not a health service provider, some Privacy Act obligations do not apply. However, good data practice is still advisable regardless of turnover threshold.
Record Keeping Requirements — What the ATO Expects
The Tax Administration Act 1953 requires you to keep business records for a minimum of 5 years from when they were prepared or obtained (or 7 years for capital gains tax records). This is your obligation — not your bookkeeper's.
| Record Type | Minimum Retention Period | Who Must Keep It |
|---|---|---|
| Invoices issued and received | 5 years | You (business owner) |
| Bank statements | 5 years | You (business owner) |
| BAS lodgements and ATO correspondence | 5 years | You (business owner) |
| Payroll records (STP-reported) | 5 years | You (business owner) |
| Capital gains asset records | 7 years after disposal | You (business owner) |
| Bookkeeper's working papers / reconciliations | 5 years (best practice) | You or your bookkeeper |
The practical implication: your source documents — invoices, receipts, bank statements — must remain accessible to you in Australia. Using Xero or MYOB as your accounting system ensures all data lives in the cloud (on servers that meet Australian compliance requirements), not only on your Indian bookkeeper's local hard drive. Never accept an arrangement where you cannot access your own books independently of your bookkeeper.
Learn more about how we handle Australian records on our Australia bookkeeping services page.
What Your Engagement Agreement Must Include
A written agreement is not just good practice — it protects you legally and clarifies compliance responsibilities from day one. Before any data is shared, your agreement with your Indian bookkeeping firm should cover:
- ☑ Scope of work — exactly what tasks the firm will perform (transaction coding, BAS preparation, payroll, reconciliations)
- ☑ BAS review process — confirmation that all BAS drafts are sent to you for review and approval before lodgement
- ☑ Data confidentiality / NDA — commitment to not disclose your financial data to any third party
- ☑ Data transfer method — specification of how data will be shared (Xero invitation, secure portal — not plain email)
- ☑ Data retention and destruction — what happens to your data when the engagement ends
- ☑ Australian Privacy Act acknowledgement — firm's commitment to handling personal data to Australian Privacy Principle standard
- ☑ Turnaround times and SLAs — response times, BAS delivery dates relative to ATO lodgement deadlines
- ☑ Liability clause — what the firm is liable for in the event of an error in the prepared figures
- ☑ Termination terms — notice period and data handover process on exit
Does Outsourcing to India Increase Your ATO Audit Risk?
No. The ATO uses a risk-based model to select businesses for audit. The factors that trigger attention are errors and patterns in your returns — not the location of whoever prepared them. Specifically, the ATO looks for:
- GST claimed that does not match income reported
- Large or unusual deduction claims relative to income
- Cash income industries (hospitality, trades, retail) with no GST on sales
- Significant year-on-year fluctuations without a clear business reason
- Omitted income identified via third-party data matching (banks, share registries, online platforms)
An Indian bookkeeper who prepares clean, consistent BAS lodgements that match your bank records reduces your audit risk — because the numbers are correct. An Indian bookkeeper who misunderstands Australian GST codes and makes recurring errors increases your risk, just as a careless local bookkeeper would.
The lesson: it is the quality of the bookkeeping, not the geography, that matters. See our outsourced bookkeeping service page for how Sharma Jyoti and Co handles Australian GST compliance.
Written by Sharma Jyoti, CA (ICAI) — Founder, Sharma Jyoti and Co. We are an ICAI-registered CA firm specialising in outsourced bookkeeping for Australian, US and UK businesses. We prepare BAS, handle Xero and MYOB accounts, and operate under signed NDAs and data agreements with every client. Learn more about our firm →
Related Reading