Director Penalty Notices Australia: What Directors Must Know

Director Penalty Notices Are Back. Here's What Happens If the ATO Knocks.

The ATO issued more than 84,000 Director Penalty Notices in 2024-25. That's a 136% increase on the prior year. The total collectable debt the ATO is chasing has hit $105 billion. And the Tax Ombudsman has announced a formal review of DPN practices in 2026.

This isn't background noise. It's a compliance environment that has materially changed. Directors who were coasting on quiet ATO enforcement are now receiving personal liability notices for debts they assumed belonged to the company.

Here's exactly what a Director Penalty Notice is, when it arrives, and what happens after it does.

Quick Answer: What Is a Director Penalty Notice?

A Director Penalty Notice (DPN) is a formal notice issued by the Australian Taxation Office that makes a company director personally liable for unpaid PAYG withholding tax, superannuation guarantee charge, or GST. Once a DPN is issued, the director has 21 days to respond. If the notice is a "lockdown" DPN, personal liability cannot be avoided by placing the company into administration or winding it up. The debt must be paid personally. DPN exposure applies to all current directors, including silent, passive, or recently appointed ones.

The 6 Things Directors Need to Know About DPNs Right Now

Before the mechanics:

DPN exposure arises the moment a company misses a PAYG, super, or GST payment. The ATO doesn't need to issue the notice for the liability to attach.
There are two types of DPN: non-lockdown and lockdown. The lockdown version removes your ability to use administration or wind-up as a defence. It's the one that ends careers.
The 21-day window after a DPN is issued is not a negotiation window. It's a legal deadline. Miss it and the ATO can sue you personally.
Payday Super has created a new DPN trigger. From 1 July 2026, super must reach the employee's fund within 7 business days of payday. Directors can become personally liable for unpaid SGC within 60 days of the missed payment.
Newly appointed directors have 30 days of grace. After that, they inherit full personal liability for pre-existing company debts in the relevant categories.
Departure Prohibition Orders are being used alongside DPNs. The ATO has already issued more than 21 in FY2025-26, more than the entire prior year combined. Directors with outstanding DPN debt can be prevented from leaving Australia.

What Triggers a Director Penalty Notice

PAYG Withholding

Every time your business runs payroll, it withholds tax on behalf of employees and remits it to the ATO. If those remittances fall behind, the ATO can issue a DPN making the director personally liable for the outstanding amount.

The threshold question is whether the BAS returns covering those periods were lodged on time. This determines which type of DPN applies and what options remain.

Director Rule: PAYG withholding isn't a company expense you can defer under cash pressure. It's money you've already taken from employee pay packets. Holding it for working capital creates personal liability, not just a company debt.

Superannuation Guarantee Charge

Unpaid superannuation generates a Super Guarantee Charge rather than just the original super amount. The SGC includes the original unpaid contributions, daily compounding interest calculated from the original due date, and an administrative component. It's materially larger than the original obligation.

Under the pre-July 2026 quarterly system, super needed to be unpaid and unreported for more than 28 days after the quarter end before directors faced lockdown personal liability. From 1 July 2026, the timeline has compressed significantly. Under Payday Super rules, if contributions aren't received by the employee's fund within 7 business days of payday, the company must report the shortfall. Directors become personally liable for unpaid SGC at the earlier of 60 days after the missed payday, or when the ATO estimates the SGC liability using STP data.

That's a much shorter runway than the old quarterly model.

GST

A less commonly known trigger. Where a company has outstanding GST liabilities and BAS returns are not lodged within 3 months of the due date, directors face lockdown DPN exposure on those amounts as well.

The Two Types of DPN: One Gives You Options. One Doesn't.

Non-Lockdown DPN

A non-lockdown DPN is issued when the company has lodged its returns on time but hasn't paid the amounts owing. The director has 21 days from the date of the DPN to take one of four actions:

Pay the debt in full
Enter into a payment arrangement with the ATO
Appoint a voluntary administrator
Appoint a liquidator to wind up the company

Any of these four actions, taken within the 21-day window, remits the penalty and removes personal liability. The company still owes the debt, but the director's personal exposure is lifted.

Note: entering a payment arrangement does not itself remit the penalty. The payment arrangement must be in place and the director must still act within the 21-day window. If the arrangement is entered after the 21-day window closes, personal liability is already locked.

Lockdown DPN

A lockdown DPN is issued when returns were not lodged within 3 months of their due date, or for super under the new Payday Super rules, when the SGC is not reported within the required timeframe. This is the version that removes options.

When a lockdown DPN arrives, the director cannot remit the penalty by placing the company into administration or winding it up. The only way to extinguish the liability is to pay the debt personally in full.

The Federal Court decision in Ostwald & Ors v Commissioner of Taxation, handed down in July 2026, confirmed this approach. Three brothers, all directors of a company that failed to lodge Super Guarantee Statements for three quarters, were held personally liable for the unpaid SGC after receiving DPNs. The Court rejected their application for review, reinforcing that the statutory defences require strict compliance with lodgement timeframes and that post-due-date lodgement does not retroactively protect directors.

Director Rule: The difference between a non-lockdown and a lockdown DPN is the difference between having options and having none. Lodgement on time, even when you can't pay, keeps the non-lockdown outcome available. Not lodging removes it entirely.

The Payday Super Complication

Payday Super has materially changed the DPN risk profile for directors of businesses with employees.

Under the old quarterly model, super could fall 3 to 4 months behind before lockdown DPN exposure crystallised. That lag gave directors time to identify the problem and act. Under Payday Super, the window is 60 days from the missed payday, or whenever the ATO estimates the SGC using STP data, whichever comes first.

The ATO has confirmed it will use Single Touch Payroll data to identify employers who are paying wages but not making corresponding super contributions. The data matching is automated. The ATO will identify discrepancies faster than most payroll teams will catch them internally.

For businesses with fortnightly payroll, that's 26 super payment events per year, each a potential DPN trigger if the contribution doesn't reach the fund within 7 business days.

Director Rule: Payday Super doesn't just create a payroll compliance obligation. It creates 26 annual DPN exposure events for a business on fortnightly payroll. Miss one and the lockdown clock starts.

Who Gets a DPN: The Director Definition Is Broader Than You Think

A DPN can be issued to any person who was a director at any point during the period the liability arose. This includes:

Directors who have since resigned, if they were a director when the liability arose and didn't take action during their tenure
Newly appointed directors, after a 30-day grace period from their appointment date
Shadow directors, people who act in the position of director without formal appointment, in certain circumstances
Directors of dormant companies that have accumulated PAYG or super liabilities

Resignation is not a complete defence if the liability arose during the director's tenure. A director who resigns without ensuring the obligations were addressed remains personally exposed for the period they were on the register.

Director Rule: If you are a registered director of any company, including a dormant one, check whether it has outstanding PAYG, super, or GST obligations. Your ASIC registration is the ATO's starting point. Your awareness of the debt is not a condition of the notice.

What to Do If a DPN Arrives

The 21-day window is not time to understand the problem. It's time to act on a plan you should have already made.

Immediately:

Engage a qualified adviser with DPN experience. This is not a matter to handle through a general accountant or without legal input.
Establish whether the DPN is lockdown or non-lockdown. The type determines what options remain.
Obtain the exact amounts from the ATO and verify them against company records. The ATO can and does issue DPNs based on estimates. The estimated amount may be higher than the actual liability.
Assess whether the company can pay the debt in full, enter a payment arrangement, or whether administration or wind-up is required.

Do not ignore the notice. The ATO can sue the director personally after 21 days and does so. Departure Prohibition Orders can be applied. Asset recovery proceedings can follow.

How Directors Prevent DPN Exposure

The prevention is simpler than the cure.

Lodge all returns on time, regardless of ability to pay. On-time lodgement keeps the non-lockdown DPN available and preserves options. Late lodgement locks the lockdown version and removes them.
Treat PAYG and super as non-deferrable. Cash pressure never justifies holding PAYG or delaying super. Both create personal liability. Both are better addressed through a payment arrangement with the ATO than through informal deferral.
Build a complying payroll system for Payday Super. Under the new rules, super must reach the fund within 7 business days of payday. Confirm your payroll software and clearing house can process this reliably.
Check your director registrations. Pull your current ASIC director registrations. If you're listed as a director of any company, verify its PAYG, super, and GST position. Dormant companies are not exempt.
Set up a weekly ATO position review. As part of the weekly financial governance cadence, include a check on BAS lodgement status and super payment confirmation. A 10-minute check weekly prevents a 21-day crisis.

Director Actions This Week

DPN risk is not theoretical for most established businesses. It's sitting in the payroll system right now.

Pull your ASIC director registrations across all entities. List every company you're currently registered as a director of. Check the ATO position on each.
Confirm PAYG remittances are current. Every BAS period where PAYG was withheld from employees should have a corresponding remittance. If any are outstanding, address them before lodgement of the next return.
Verify super payments under the Payday Super rules. Confirm your clearing house is processing contributions within 7 business days of each payday and that the contributions are reaching the fund, not just being submitted.
Check your BAS lodgement dates. If any BAS returns are more than 3 months overdue, lockdown DPN exposure for GST and PAYG already exists. Get qualified advice before the ATO acts.
Download the Director Playbook at mrdirector.com.au/#download-playbook for the compliance governance framework covering PAYG, super, and ATO obligations.
If you're a single director carrying all compliance and governance responsibility, the Single Director Business Assessment will surface where the DPN exposure is sitting in your current structure.

FAQ: Director Penalty Notices

What is a Director Penalty Notice and who can receive one?
A Director Penalty Notice is a formal ATO notice that makes a director personally liable for unpaid PAYG withholding, superannuation guarantee charge, or GST. It can be issued to any current or former director who was on the ASIC register when the liability arose. Newly appointed directors have a 30-day grace period from their appointment date, after which they are personally exposed for pre-existing liabilities in these categories.

What is the difference between a lockdown and non-lockdown DPN?
A non-lockdown DPN gives the director 21 days to pay, enter a payment arrangement, appoint a voluntary administrator, or wind up the company. Taking any of these actions remits the penalty. A lockdown DPN removes the administration and wind-up options. The only way to extinguish a lockdown DPN liability is to pay the debt in full. Lockdown status is triggered when returns are more than 3 months overdue, or for super under Payday Super rules, when SGC is not reported within the required timeframe.

Can I avoid a DPN by resigning as a director?
Not for liabilities that arose during your tenure. A director who resigns without ensuring the company's PAYG, super, or GST obligations were addressed remains personally liable for the amounts that accrued while they were on the register. Resignation can protect against future liabilities, provided it is properly recorded with ASIC and the company has no outstanding lodgements at the time of resignation.

What happens if the ATO's DPN amount is wrong?
The ATO can estimate liabilities based on STP data or prior period lodgements. The estimated amount may be higher than the actual liability. Directors have the right to dispute the quantum, but they must still act within the 21-day window on the notices they receive. Engaging an adviser promptly to verify the amount against company records is a critical first step.

How does Payday Super change DPN risk?
Under the old quarterly super model, directors had months before lockdown DPN exposure crystallised. Under Payday Super, super must reach the employee's fund within 7 business days of each payday. Directors can become personally liable for unpaid SGC within 60 days of the missed payment, or when the ATO estimates the SGC using STP data. For a business on fortnightly payroll, this creates 26 potential DPN exposure events per year rather than four.

Can I enter a payment plan with the ATO to avoid personal liability?
For a non-lockdown DPN, entering a payment arrangement within the 21-day window is one of four options that remits the penalty. However, the arrangement must be entered before the 21-day window closes. Entering an arrangement after the deadline does not extinguish personal liability already incurred. The ATO can still pursue the director personally for the debt even while a payment plan is in place if the 21-day window has passed.

What is a Departure Prohibition Order and can the ATO really stop me from leaving Australia?
A Departure Prohibition Order prohibits a person from leaving Australia until a tax debt is resolved. The ATO has increased its use of DPOs significantly, issuing more than 21 in FY2025-26 alone. A DPO can be issued alongside or after a DPN where the ATO has concerns about debt recovery. Directors with outstanding personal DPN liability who attempt to travel internationally can be stopped at the border.

Ready to map the DPN exposure sitting in your business before the ATO does it for you?

The Established Business Assessment covers the compliance and governance gaps most directors are carrying without knowing it. Or apply to work with Benjamin directly if you want the structure reviewed before a notice arrives.

Benjamin Collins is a financial adviser and director with 17 directorships since 2014. He works with established Australian business owners to build the governance structures that prevent personal liability from becoming a personal crisis.

This post is general in nature and does not constitute legal or financial advice. If you have received a Director Penalty Notice, seek qualified legal and tax advice immediately. The 21-day window is a legal deadline.