For most Australian tax records, the ATO generally requires retention for 5 years from when the record was prepared or obtained, or when the relevant transaction was completed, whichever is later. Longer periods can apply to capital gains tax assets and certain company, employee, and minimum tax records.
A Sydney medical professional may keep invoices neatly in accounting software, while paper receipts sit in a drawer and contractor records remain in an email inbox. An unexpected Australian Taxation Office (ATO) information request can expose those gaps quickly. ATO record keeping requirements are an ongoing stewardship obligation, not a year-end exercise completed only before lodging a return.
Table of Contents
- Why ATO Record Keeping Is a Year-Round Obligation
- How Long You Must Keep Your Tax Records
- What Records the ATO Expects You to Keep
- Digital Versus Paper Record Keeping
- Penalties and Audit Preparedness
- Sector-Specific Record Keeping Considerations
- Building Your Record Keeping Compliance System
Why ATO Record Keeping Is a Year-Round Obligation
Consider a sole trader who receives an ATO request for evidence supporting income, deductions, and GST transactions. The business owner may know that the transactions occurred, but knowledge isn't enough. The ATO expects written records that explain what happened and support the figures reported in tax and related statements.
The practical problem usually isn't a total absence of records. It's fragmentation. Sales invoices may be in one platform, bank statements in another, receipts on a phone, and contractor documents in personal email accounts. When those systems don't connect, the business owner or adviser has to reconstruct the audit trail under pressure.
The ATO's baseline rule is broad. Businesses must keep records relating to tax, superannuation, and registration affairs, including income, expenses, GST documents, employee and contractor records, bank records, and evidence used to prepare tax returns. Most records must be retained for 5 years, with the retention period generally running from the later of preparation or receipt of the record, and completion of the relevant transaction or act. ATO record keeping rules for business
Stewardship principle: A compliant record is one that another person can understand, retrieve, and connect to the relevant transaction without relying on your memory.
This guide is for medical professionals, small and medium business owners, entrepreneurs, not-for-profit organisations, Chinese enterprises and new migrants establishing in Australia, and professionals managing complex financial affairs. It addresses retention periods, record categories, digital storage, penalties, sector considerations, and the design of a system that remains usable as people, entities, and transactions change.
You can also use Everglow's Australian tax year-end guidance as a broader reference for preparing financial information before lodgment.
Who this article is for: Australian business owners, sole traders, professionals, partnerships, not-for-profits, and new migrants who need a practical understanding of ATO record keeping.
Currency note: This article reflects Australian rules, thresholds and regulator guidance current as at 09/2026.
How Long You Must Keep Your Tax Records
The standard period is 5 years for most business records. The ATO's practical test for a small business is that records must explain all transactions, be in writing, be in English or easily translated, and be retained for the required period. The starting point isn't necessarily the date you paid a bill or issued an invoice. The ATO generally applies the later of when the record was prepared or obtained, and when the transaction or act was completed. ATO guidance for small business record keeping
That later-of approach matters when a document is received after a transaction, or when a transaction remains incomplete. A retention calendar should therefore record the relevant transaction date and the document date, rather than applying one automatic deletion date to every file.
Retention periods that need special treatment
Some records sit outside the ordinary framework:
- Capital gains tax assets: Keep records for as long as you own the asset, plus 5 years after sale or other disposal, as explained in the ATO guidance on records kept longer than 5 years.
- Company and certain employee records: Business.gov.au guidance indicates that some categories may need to be kept for 7 years.
- Global and domestic minimum tax records: Certain records may need to be kept for 8 years or more, depending on the applicable obligations.
The CGT rule is particularly important for property, shares, and other assets where acquisition costs, improvement costs, ownership details, and disposal information may be needed long after the original purchase. A missing contract or cost document can make later tax calculations harder to support.
Retention also needs to account for live reviews, objections, disputes, and unresolved matters. Even when an ordinary retention period appears to have ended, deleting relevant records while an issue remains active could leave the taxpayer unable to answer a request properly.
A written documentation standards framework can help an organisation decide how records are named, approved, stored, and reviewed. When records reach the end of their retention period, disposal should also be controlled. A secure data destruction guide may help businesses think through confidential paper and electronic disposal practices.
What Records the ATO Expects You to Keep
The ATO doesn't require a file to be impressive. It requires the file to explain the transaction and support the tax treatment. That means a bank entry alone may not explain why an expense was incurred, while an invoice without proof of payment may not show the complete trail.
The core record categories
Income records include invoices, sales records, receipts, cash income documentation, and records of asset disposals. These documents support the completeness of reported income and help reconcile accounting records to bank deposits.
Expense records include supplier invoices, receipts, contracts, lease documents, and supporting evidence for business deductions. The record should make clear what was purchased, when, from whom, and why it relates to the business. Everglow's guidance on supporting tax deductions when a receipt is unavailable is relevant where a business is trying to reconstruct evidence rather than relying on an unsupported claim.
GST and BAS records should allow the business to trace amounts reported in Business Activity Statements back to taxable sales, purchases, tax invoices, and payment records. A GST figure copied into a spreadsheet without source documents creates a weak audit trail.
Employee and contractor records support PAYG withholding, superannuation, payroll, and contractor payment treatment. Employment records and contractor documentation should be held with enough context to explain the arrangement and payments.
Bank and finance records connect the accounting file to real cash movement. Bank statements, loan documents, interest statements, and business credit card records can identify omissions, duplicate entries, private components, and unexplained transfers.
The table below provides a working compliance map. The minimum period is expressed using the ATO baseline unless a longer category-specific period applies.
| Record Category | Supports | Minimum Retention |
|---|---|---|
| Income and sales | Income reporting and transaction reconciliation | Generally 5 years |
| Expenses and purchases | Deductions and business cost evidence | Generally 5 years |
| GST and BAS | GST reporting and activity statement preparation | Generally 5 years |
| Employees and contractors | PAYG withholding, superannuation, and payment records | Generally 5 years, with some records potentially requiring longer retention |
| Bank and financial records | Cash-flow reconciliation and supporting evidence | Generally 5 years |
| CGT asset records | Cost base and capital gain or loss calculations | Ownership period plus 5 years after disposal |
Records should be written in English or in a form that can be easily translated. For a business dealing with overseas suppliers or a Chinese enterprise establishing in Australia, retaining the original document alongside a clear English explanation may make the file substantially easier to review.
Digital Versus Paper Record Keeping
Digital storage is acceptable, but convenience isn't the compliance test. The ATO permits paper records to be scanned and stored electronically when the electronic version is a true and clear reproduction, hasn't been altered or manipulated after storage, remains retrievable and readable by tax officers, and is kept for the statutory period. ATO record keeping tips for electronic records
A scan saved as IMG_4812 on one employee's phone may technically exist, but it is a poor operating system. A well-designed digital file should identify the date, supplier, transaction type, entity, and relevant tax period. It should also be backed up independently of the device used to capture it.
Choosing between formats
Paper can work well for a small practice with low transaction volume and secure physical storage. It becomes harder to manage when staff work across locations, documents arrive electronically, or a reviewer needs a complete file quickly.
Digital records are easier to search, duplicate, and share with an adviser. They also create new risks, including accidental deletion, weak access controls, inconsistent naming, and dependence on one platform. Cloud accounting products, document management systems, and ordinary structured folders can all be useful, provided the business controls access and maintains reliable backups.
The ATO expects taxpayers to provide viewing facilities and, where necessary, print or supply copies. A digital system should therefore be tested by asking a simple question: could someone unfamiliar with the business retrieve a complete record and understand it without asking the owner to explain every step?
Everglow's cloud accounting solutions provide one possible reference point when assessing how accounting records, source documents, and adviser access might work together. The right choice depends on transaction volume, staff responsibilities, sensitivity of information, and the organisation's ability to maintain the system.
Penalties and Audit Preparedness
Record keeping is a legal obligation with a financial consequence. Under section 288-25, the ATO identifies an administrative penalty of 20 penalty units for a record-keeping contravention. The ATO penalty practice statement records a penalty unit value of $170 for contraventions on or after 28 December 2012, producing $3,400 per breach at that rate. ATO penalty practice statement
The same ATO material records earlier guidance using $110 per penalty unit, or $2,200 for 20 units, demonstrating why the dollar value must be checked against the relevant penalty-unit setting and contravention date. These penalties apply to record-keeping obligations arising on or after 1 July 2000.
The risk isn't limited to failing to keep any documents. A business may have records but still fall short if they are incomplete, altered, inaccessible, or retained for too short a period. Multiple systems, changing staff, external bookkeepers, and unclear ownership can each create a gap.
Preparing before an information request
A sensible review asks:
- Can staff trace transactions: Match invoices, receipts, bank movements, and accounting entries.
- Can the business explain classifications: Document private, business, capital, GST, and contractor treatment.
- Can an adviser retrieve files: Test access without relying on one person's inbox or device.
- Can unresolved matters be identified: Flag reviews, objections, disputes, and longer-retention assets.
If gaps emerge, preserve what remains and reconstruct the file carefully using contemporaneous evidence. Don't backdate documents or edit records to make them appear complete. A transparent note explaining what was reconstructed, why, and from which supporting sources is more defensible than a polished but unreliable file.
Everglow's audit and compliance service can be relevant where an organisation needs an independent review of its record architecture, controls, or response process. Record keeping is risk management, not a signal that an audit is inevitable.
Sector-Specific Record Keeping Considerations
The same ATO framework produces different practical demands in different organisations. A GP partnership, a trades business, a not-for-profit, and a newly arrived professional may all need income, expense, bank, and tax records, but the supporting evidence and privacy considerations won't look the same.
Medical professionals and GP partnerships
A medical practice may need to connect patient billing, Medicare claims, private fees, practitioner distributions, practice expenses, equipment purchases, and contractor arrangements. Patient information also requires careful handling. Financial records should provide tax evidence without exposing clinical information unnecessarily to staff or advisers who don't need it.
A partnership should document how income and expenses are allocated, how shared costs are paid, and how practitioner drawings differ from business expenses. Medical equipment may also bring longer-lived asset records, especially where the item has continuing tax relevance.
Small and medium businesses
An SMB needs a system that survives staff turnover and growth. The owner shouldn't be the only person who knows where receipts are stored or how a BAS figure was assembled.
For construction and trades businesses, project costs, subcontractor payments, equipment, vehicle use, and customer deposits can create multiple evidence trails. Professional services firms need reliable records for client invoices, work in progress, reimbursed expenses, and deductible operating costs.
Not-for-profits and new migrants
A not-for-profit may need to separate restricted funds, grants, donations, trading income, payroll, and governance records. ATO obligations sit alongside other reporting and governance responsibilities, so the board should know which records belong to tax compliance and which support broader accountability.
New migrants and Chinese enterprises often need to establish Australian processes while working with documents created overseas. Records must be in English or easily translated. A consistent bilingual naming convention, an English transaction description, and clear entity separation can reduce misunderstanding without removing the original source document.
Building Your Record Keeping Compliance System
A workable system begins at the transaction, not at tax time. Capture the document, identify the entity and tax category, store it in a controlled location, reconcile it to the bank or accounting file, and review exceptions before lodgment.
For Dr Anya Sharma, a Sydney sole trader, the decision may be to separate practice income, professional expenses, equipment purchases, and private spending. If she buys a diagnostic device for $12,000, she should retain the purchase evidence and relevant asset records for as long as the tax treatment requires. Ordinary income and expense records would generally fall within the standard 5-year framework, while an asset connected to a later CGT event may require retention for the ownership period plus 5 years after disposal. The precise treatment depends on the asset and Anya's circumstances.
Anya could use a receipt capture workflow, a cloud accounting file, a bank reconciliation process, and a restricted folder for sensitive practice information. Before lodging, she could test whether a reviewer can trace selected income and expenses from source document to accounting entry and return working papers.
A practical checklist is short:
- Capture: Save invoices, receipts, contracts, statements, and payment evidence.
- Classify: Separate income, deductions, GST, payroll, contractors, capital items, and private components.
- Translate: Add an understandable English description where source records aren't in English.
- Reconcile: Match accounting records to bank and payment records.
- Retain: Apply the ordinary period and identify CGT, company, employee, and minimum tax exceptions.
- Test: Retrieve a sample file without relying on the person who created it.
ATO record keeping requirements are best managed as a continuous control system, not a tax-season clean-up. The correct retention period and storage method depend on the record type, entity, transaction, and circumstances.
Frequently asked questions
How long must most Australian businesses keep tax records?
Most records must generally be kept for 5 years, with the period usually measured from the later of when the record was prepared or obtained and when the relevant transaction or act was completed. Certain records, including CGT asset records and some company or employee records, may require longer retention.
Can the ATO accept scanned receipts?
Yes, provided the electronic copy is a true and clear reproduction of the original, isn't altered after storage, remains readable and retrievable, and can be produced when required. The business should also maintain appropriate viewing facilities and be able to print or supply copies where necessary.
Do records need to be written in English?
Records must be in English or in a form that can be easily translated. Businesses using overseas documents should retain the source material and add enough English context to explain the transaction, parties, amounts, and tax treatment.
What is the record keeping penalty?
The ATO identifies an administrative penalty of 20 penalty units under section 288-25. At the $170 penalty-unit value recorded for relevant contraventions on or after 28 December 2012, that equates to $3,400 per breach. The applicable amount should be checked against the relevant date and law.
Are CGT records subject to the ordinary retention period?
Not necessarily. For CGT assets, the ATO generally requires records to be kept for as long as the asset is owned, plus another 5 years after sale or other disposal. That can be substantially longer than the ordinary business record period.
What should a business do after finding missing records?
Preserve all remaining documents, identify the missing evidence, and reconstruct the transaction trail carefully using reliable supporting material. Don't create or alter records retrospectively. Discuss significant gaps with a qualified tax professional before responding to an ATO review or making a claim.
If you would like clarity on how these principles may apply to your own circumstances, contact Everglow on 1300 913 929 or email contact@everglow.au.
To book directly: Book a meeting with Panbo.
Tags: ATO record keeping requirements, Australian tax compliance, business record keeping, tax records Australia, GST records, digital record keeping, small business tax, medical practice accounting
