What Is a Director Penalty Notice and How Do You Avoid One?

What Is a Director Penalty Notice and How Do You Avoid One?

What if the ATO can reach through your company and come directly for your home, your savings, and your personal assets, without warning? They can, through a director penalty notice, and in 2024-25 they issued 84,000 of them, up 136% in a single year. Most directors who receive a DPN didn't know they were at risk until the letter arrived. WIAA's registered tax agents work with company directors on DPN prevention and response, and understanding the rules before a notice arrives is far cheaper than managing one after the fact. This guide explains what a DPN is, the critical distinction between lockdown and non-lockdown notices, and what directors should be doing right now.

TL;DR: What Every Director Needs to Know

• A DPN makes a company director personally liable for unpaid PAYG withholding, Superannuation Guarantee Charge, and certain GST amounts

• There are two types: non-lockdown (21-day) DPNs and lockdown DPNs, with fundamentally different options available under each

• Lockdown DPNs arise from lodgement failure, not payment failure. Filing on time, even without paying, keeps you non-lockdown

• Directors have 21 days from the date of posting of a non-lockdown DPN to act before personal recovery begins

• Resigning as a director does not eliminate liability for debts that arose during your tenure

• The ATO issued 84,000+ DPNs in 2024-25, up 136% year-on-year, and enforcement is intensifying in 2026

• If you have already received a DPN, stop reading and call a professional today. The 21-day window started the moment the ATO posted it.

Bottom line: A director penalty notice is one of the most serious personal financial risks a company director faces. Understanding the rules before a notice arrives is far cheaper than managing one after the fact.

Jump to a Section

• What Is a Director Penalty Notice?

• Lockdown vs Non-Lockdown DPNs: The Critical Distinction

• Payday Super and DPN Risk from 1 July 2026

• How the ATO Issues and Serves a DPN and Why Your ASIC Address Matters

• What to Do When You Receive a DPN (You Have 21 Days) — If you've received one, start here

• New Directors: The 30-Day Grace Period

• Resignation Does Not Remove Liability

• How to Avoid a Director Penalty Notice

• Two Director Penalty Notice Examples

• Common Mistakes Directors Make

• FAQ

• Ready to Review Your Business Tax Compliance?

What Is a Director Penalty Notice?

A director penalty notice (DPN) is a formal notice issued by the Australian Taxation Office under the Tax Administration Act 1953 that makes a company director personally liable for certain unpaid company tax debts.

The DPN regime exists because PAYG withholding, superannuation, and GST are treated as trust money. When a company deducts tax from employee wages or collects GST from customers, that money is held on trust for the ATO. Directors are responsible for ensuring it is remitted. When it is not, the ATO can pursue directors personally.

The regime covers specific debt types, not all company tax debts. Understanding which categories trigger DPN exposure is the starting point. The three categories of debt covered by a DPN are:

• PAYG withholding. Tax deducted from employee wages and withheld, but not remitted to the ATO

• Superannuation Guarantee Charge (SGC). The penalty that arises when a company fails to pay the required super on time, including interest and ATO administration fees

• Net GST amounts. Certain GST liabilities where the company has collected but not remitted the tax

It is important to understand that the DPN applies to the SGC, not simply unpaid super. Once a company misses the quarterly super deadline, the obligation converts from an SG obligation to an SGC liability, which includes the shortfall plus penalties.

Bottom line: A DPN makes the company's tax debt the director's personal debt. The family home, personal savings, and other assets are all at risk once a DPN is issued and not resolved.

Lockdown vs Non-Lockdown DPNs: The Critical Distinction

The single most important concept in DPN law is the difference between a lockdown DPN and a non-lockdown DPN. The options available to directors under each are fundamentally different.

The distinction is critically important because many directors assume that if they cannot pay, they can simply appoint a liquidator and avoid personal liability. That is only true for non-lockdown DPNs. For lockdown DPNs, the only way to remove personal liability is to pay the debt in full.

When Does a Lockdown DPN Arise?

A lockdown DPN arises when:

• The company fails to lodge a BAS or IAS within 3 months of the due date, and PAYG withholding is outstanding

• The company fails to lodge an SGC statement within 1 month and 28 days after quarter end, and SGC is outstanding

• The company under-reports the SGC liability within those timeframes

The super lockdown window is significantly shorter than the PAYG window, which is why superannuation is the most common source of lockdown DPN exposure. Many companies miss the SGC statement due date, triggering lockdown before they even realise the obligation has converted.

Bottom line: Lockdown DPNs arise from lodgement failure, not payment failure. Lodging on time, even when you cannot pay, is the single most important protection against lockdown exposure.

What if the only thing standing between you and a lockdown DPN is a lodgement you didn't know you had to file? For most directors who receive lockdown notices, that's exactly what happened.

Payday Super and DPN Risk from 1 July 2026

From 1 July 2026, the Payday Super reforms require employers to pay super contributions within 7 business days of each pay run, rather than quarterly. This is one of the most significant changes to employer super obligations in years, and it directly changes the DPN risk profile for every employer in Australia.

The compliance implications for directors:

• Super must now be paid with every payroll cycle, not once a quarter

• The frequency of potential compliance failures increases from quarterly to fortnightly or weekly

• A payroll system error that previously created one missed quarter now creates multiple missed payment events

• The ATO has flagged risk-based compliance enforcement from the commencement of Payday Super, including through its practical compliance guideline PCG 2026/1

For directors, the practical response is to ensure payroll systems are configured to automatically calculate and remit super with each pay run, and that reconciliation processes can detect missed payments immediately rather than at quarter end.

Bottom line: Payday Super increases the frequency of super compliance obligations from 4 times per year to every pay cycle. Directors who relied on quarterly reviews to catch super issues need to upgrade their monitoring systems before 1 July 2026.

Payday Super starts 1 July 2026. If your payroll system isn't configured to remit super within 7 business days of each pay run, your DPN risk profile changes from that date. Book a free 15-min payroll compliance chat to check your exposure before the change takes effect. Call 1800 942 843 or email tax@whatifadvice.com.au. 

How the ATO Issues and Serves a DPN and Why Your ASIC Address Matters

The ATO issues a DPN by posting it to the director's ASIC-registered address. This is legally significant in several ways.

The service rules are where directors most commonly lose the 21-day window without realising it. These are the mechanics that matter:

• The DPN is deemed given when posted to the ASIC-registered address, not when received or read

• If a director's ASIC-registered address is outdated, the notice is still legally valid from the date of posting

• The 21-day response window begins on the date of posting, not the date the director actually receives the letter

• Directors who do not update their ASIC address can find themselves out of time before they even open the envelope

The practical implication is clear. Every director must ensure their ASIC-registered address is current at all times. Failure to do so is one of the most avoidable ways to lose the 21-day response window.

Bottom line: The 21-day clock starts when the ATO posts the notice, not when you read it. An outdated ASIC address can cost you the only meaningful window to act.

What to Do When You Receive a DPN (You Have 21 Days)

If a director receives a DPN, the response must be immediate. The 21-day window is not a suggestion.

Received a DPN today? The 21-day window has already started. Call 1800 942 843 immediately or email tax@whatifadvice.com.au. WIAA's registered tax agents work with directors in exactly this situation and can help you determine whether you're looking at a lockdown or non-lockdown notice and what options remain available.

Step 1: Confirm the Notice Is Genuine

Contact the ATO directly or through a professional adviser to confirm the notice is authentic. DPN fraud does occur. Verify the amounts against company records and confirm the lodgement history to determine whether the notice is lockdown or non-lockdown.

Step 2: Determine Lockdown or Non-Lockdown

The answer depends on whether the relevant BAS, IAS, and SGC statements were lodged on time. Check lodgement records with your accountant or through ATO Online Services immediately.

Step 3: Understand Your Options

If the notice is non-lockdown, you have meaningful choices. If it's lockdown, you have one. Here are the four options available under a non-lockdown notice:

• Pay the debt in full. The penalty is remitted if the company pays the full amount within 21 days.

• Appoint a voluntary administrator. If appointed within 21 days, the director's personal liability may be remitted for non-lockdown amounts.

• Appoint a liquidator. If winding up commences within 21 days, the director's personal liability may be remitted for non-lockdown amounts.

• Enter small business restructuring. If the company is eligible, commencing a small business restructuring process within 21 days may remit the penalty.

For lockdown notices, the options narrow to one. This is why lodgement is the single most important compliance habit a director can have:

• Pay the debt in full. There is no alternative. Administration, liquidation, and restructuring do not protect directors from lockdown amounts.

Step 4: Act Within 21 Days

Whatever the option, it must be executed within 21 days of the date of posting. Legal and professional advice should be sought on day one of receiving the notice, not day 20.

Bottom line: Receiving a DPN is a genuine emergency. The 21-day window is short, and the consequences of inaction are personal financial liability with no further appeal.

New Directors: The 30-Day Grace Period

When a new director is appointed to a company, they have a 30-day grace period before they become personally liable for pre-existing PAYG withholding and SGC debts.

During those 30 days, the new director can investigate the company's tax position and take appropriate action without incurring personal liability for historical debts. After 30 days, they become liable for those historical obligations unless they have already taken steps such as appointing an administrator or liquidator.

This rule has significant practical implications:

• Incoming directors should conduct tax due diligence on day one, not wait

• If historical non-compliance is discovered, the 30-day window must be used to act

• The 30-day period does not protect against debts that arise after appointment

Bottom line: New directors have 30 days to identify and act on pre-existing DPN exposure. Conducting tax due diligence before or immediately after appointment is essential.

Resignation Does Not Remove Liability

One of the most dangerous misconceptions about DPNs is that resigning as a director before the ATO issues a notice removes personal liability. It does not.

Directors remain personally liable for:

• PAYG withholding, SGC, and GST obligations that arose during their tenure, regardless of when the DPN is issued

• Debts that were incurred while they were a director, even if they resigned years before enforcement

The ATO can issue a DPN to a former director for debts relating to the period when they held the role. The liability attaches to when the obligation arose, not when the notice is issued.

This is particularly relevant for directors who resign from struggling companies hoping to distance themselves from financial problems. Resignation without resolving underlying tax obligations creates an ongoing personal liability that can surface years later.

What if you resigned from a struggling company three years ago thinking you'd left the problems behind? For directors who didn't resolve the underlying tax obligations before resigning, the DPN can arrive years later.

Bottom line: Resignation does not protect against DPN liability for debts incurred during your tenure. If the company has unresolved tax obligations when you resign, your personal exposure continues.

How to Avoid a Director Penalty Notice

WIAA's registered tax agents see the same compliance failures repeatedly across small business clients. The list below is what we actually tell directors, not textbook theory.

• Lodge every BAS, IAS, and SGC statement on time, every time. Lodgement is the key variable. Even if the company cannot pay, lodging on time keeps the debt in non-lockdown territory, preserving the 21-day options.

• Pay super on time, every time. For PAYG withholding, lodgement failure triggers lockdown after 3 months. For super, the window is 28 days from the SGC due date. Super is the highest-risk category.

• Update your ASIC-registered address immediately whenever it changes. The ATO posts DPNs to this address and the 21-day clock starts from the posting date regardless of actual receipt.

• Monitor your company's tax position monthly, not quarterly. Waiting until quarter end to identify compliance gaps creates unnecessary lockdown risk.

• Conduct tax due diligence before accepting a directorship. New directors have 30 days to act on pre-existing exposure. Use it.

• Seek professional advice immediately if the company is struggling to meet its PAYG or super obligations. Early engagement with the ATO for a payment plan is far preferable to a lockdown DPN.

• Do not assume resignation protects you. If the company has tax obligations that arose during your tenure, your personal liability continues after resignation.

Bottom line: Avoiding a director penalty notice requires consistent, disciplined compliance with lodgement and payment obligations. The cost of compliance is a fraction of the cost of resolving a lockdown DPN.

None of these protections require sophisticated tax planning, just disciplined compliance. WIAA's registered tax agents work with company directors to establish the lodgement and payment systems that keep DPN exposure off the table. Single-issue compliance review starts at $1,500. Book a free 15-min scoping chat.

Two Director Penalty Notice Examples

Example 1: Michael, Director of a Small Construction Business

The most important lesson in DPN law is this: lodgement and payment are separate obligations. Michael's example shows exactly what it costs to confuse them.

Michael is the sole director of a small construction company in Brisbane. During a slow period, the company struggles for cashflow and stops paying employee super for two consecutive quarters. The company also misses the SGC statement lodgement deadline for both quarters.

The ATO identifies the non-compliance and issues a lockdown DPN for the full SGC liability including penalties and interest.

Michael's position:

• Because the SGC statements were not lodged within 1 month and 28 days after quarter end, both amounts are locked down

• Appointing an administrator or liquidator will not remove his personal liability

• The only way to resolve the matter is to pay the full amount personally or negotiate a payment plan directly with the ATO

The total liability including the SGC shortfall, penalties, and interest is $42,000. Michael pays it personally over 12 months via an ATO payment arrangement.

The lesson: if Michael had lodged the SGC statements on time, even without paying a cent, both amounts would have been non-lockdown. Appointing an administrator within 21 days of receiving the DPN could have remitted his $42,000 personal liability entirely. The lodgement alone would have been the difference.

Example 2: Sandra, New Director of a Struggling Retail Company

Sandra is appointed director of a retail company owned by her husband. She discovers within her first two weeks that the company has three quarters of unpaid PAYG withholding totalling $78,000 and has not lodged the relevant BAS returns.

Her options within the 30-day grace period:

• Pay the full $78,000 company debt to clear the liability

• Appoint a voluntary administrator to the company within 30 days

• Commence winding up within 30 days

Sandra engages an insolvency adviser immediately. Given the company's broader financial position, they recommend voluntary administration. The administrator is appointed within 22 days of Sandra's appointment. Her personal liability for the pre-existing PAYG debt is remitted.

The lesson: the 30-day grace period for new directors is only valuable if it is actively used. Sandra's immediate response on appointment, rather than waiting, protected her from a six-figure personal liability.

Common Mistakes Directors Make

Not lodging BAS and SGC statements when the company cannot pay. Lodgement and payment are separate obligations. Failing to lodge to avoid drawing the ATO's attention triggers lockdown and removes the most valuable defensive options.

Assuming resignation protects them. Directors who resign from struggling companies without resolving tax obligations retain personal liability for debts incurred during their tenure, sometimes for years.

Treating super as the last priority when cashflow is tight. Super is the shortest-window lockdown category and the most aggressively enforced. It should be treated as the first priority, not the last.

Not updating their ASIC-registered address. The 21-day clock starts from the posting date. An outdated address can mean the window has expired before the director even knows the notice was issued.

Waiting to seek professional advice. Many directors wait until day 15 or 18 of the 21-day window before seeking help. This leaves insufficient time to properly assess options and act.

Not conducting due diligence before accepting a directorship. Accepting a directorship without reviewing the company's tax position exposes incoming directors to historical liabilities they knew nothing about.

Assuming a payment plan with the ATO prevents a DPN. A payment plan may delay ATO action but does not prevent a DPN from being issued if lodgement obligations are not being met.

What if the most expensive mistake on this list is the one you're currently making without realising? The ones that compound the longest are usually the ones that seem harmless: a structure that's never been reviewed, a Division 7A loan that's never been formalised, an SGC statement that was never filed.

FAQ

I just received a director penalty notice. What do I do first? Call a registered tax agent or insolvency adviser immediately, today, not tomorrow. The 21-day window started the moment the ATO posted the notice, which may have been days ago. Determine first whether the notice is lockdown or non-lockdown, because the options available to you depend entirely on that distinction.

What company debts can the ATO chase me personally for? A DPN covers three categories: PAYG withholding (employee tax deducted but not remitted), Superannuation Guarantee Charge (including the shortfall, interest, and penalties when super is not paid on time), and certain net GST amounts. Not all company tax debts trigger director personal liability.

What is the difference between a lockdown and non-lockdown DPN? A non-lockdown DPN arises when statements are lodged on time but the debt is unpaid. Directors have 21 days to pay, appoint an administrator, appoint a liquidator, or commence small business restructuring. A lockdown DPN arises when statements are not lodged on time. Only full payment removes personal liability under a lockdown notice.

Will resigning as director protect me from a DPN? No. Directors remain personally liable for obligations that arose during their tenure regardless of when they resigned. The ATO can issue a DPN to a former director years after resignation.

How long do I have to respond to a director penalty notice? Directors have 21 days from the date of posting to take action on a non-lockdown DPN. The clock starts from the posting date, not the date of receipt. If your ASIC address is outdated, the window may already be running without your knowledge.

What happens if I ignore a director penalty notice? After the 21-day window expires without action, the ATO may commence personal recovery proceedings. This can include garnishing personal bank accounts, placing caveats on property, and initiating bankruptcy proceedings.

Does Payday Super change my DPN exposure? Yes. From 1 July 2026, super must be paid within 7 business days of each pay run. This increases the frequency of potential compliance obligations and the risk of missed payments triggering SGC liability. Payroll systems need to be updated to remit super with each pay cycle.

Can I negotiate with the ATO after receiving a DPN? Possibly. For non-lockdown amounts, the ATO may consider payment arrangements, but you must be proactive and act within the 21-day window. For lockdown amounts, the only resolution is payment in full. In either case, engaging a registered tax agent immediately to manage ATO communication is strongly recommended.

What should I do if I receive a DPN? Seek professional advice immediately, on day one. Confirm whether it is lockdown or non-lockdown, identify the available options, and execute the chosen option well within the 21-day window. Do not wait.

Ready to Review Your Business Tax Compliance?

Director penalty notices are preventable. The right compliance support means you never need to use the 21-day window because you never receive a notice.

Three ways to get help, depending on where you are right now:

• If you've received a DPN: Call 1800 942 843 immediately. The window is already running. WIAA's registered tax agents can assess your position and help you act within the time remaining.

• If you're concerned about your compliance position: Email tax@whatifadvice.com.au for a no-obligation assessment of your lodgement history and super payment status.

• If you want to set up proper systems before the Payday Super deadline: Book a free 15-min chat online to review your payroll configuration and compliance processes before 1 July 2026.

Still asking what if about your company's compliance position? The time to find out is before the ATO does.

WIAA combines registered tax agents and AFSL-licensed financial advisers under one roof. Offices in Brisbane and Melbourne, virtual nationwide. AFSL 528250.

General Advice Disclaimer: This information is general in nature and does not take into account your personal financial situation, needs, or objectives. You should consider whether it is appropriate for you and seek personal financial advice before making any decisions. Director penalty notice rules are complex and time-sensitive. Seek specific legal and tax advice immediately if you have received or expect to receive a DPN. What If Advice is an Authorised Representative under Beryllium Advisers Pty Ltd, AFSL 528250.