HR record keeping is one of the most unglamorous parts of running a business… until the Fair Work Ombudsman shows up unannounced. Then it matters a lot.
Whether you’re a sole trader with your first employee or a small business owner managing a team of ten, your legal obligation to maintain accurate, accessible employee records isn’t optional. And the Fair Work Ombudsman issued 743 infringement notices for record-keeping and pay slip breaches in 2024–25 alone, totalling $838,000 in fines.
The good news? Getting your HR records right doesn’t require an HR team. It just requires the right system and a clear understanding of what’s actually required.
What is HR record keeping?
HR record keeping is the process of collecting, organising, storing, and maintaining documents and data related to your employees throughout the employment lifecycle, from the day they apply to years after they leave.
It covers everything from employment contracts and tax file number declarations to performance reviews, leave balances, timesheets, and termination paperwork. In Australia, many of these records are legally required under the Fair Work Act 2009, the Privacy Act 1988, and various state-based WHS legislation.
Think of your HR records as the paper trail that proves you’ve done the right thing by your team. When a dispute arises, your records are your first and most powerful line of defence.
Why is accurate HR record-keeping critical?
Is this really a legal requirement, or just good admin practice?
It’s both — but the legal requirement part should not be underestimated. The Fair Work Act sets out specific, mandatory obligations for Australian employers, and breaching them carries real financial penalties. This isn’t about box-ticking. It’s about protecting your business.
Legal compliance and audit readiness
The Fair Work Ombudsman can conduct unannounced audits of your business at any time. During an inspection, they’ll ask to see employment records, pay slips, time and attendance records, and leave balances. You have seven days to produce records after a request — and if those records don’t exist, you’re already in breach.
In 2023–24, the FWO recovered $473 million in unpaid wages for nearly 160,000 workers, issuing 2,574 compliance notices in the process. The majority of those cases started with missing or inadequate employment records. Proper record keeping won’t just protect you from fines — it gives you the evidence you need to demonstrate you’ve paid your team correctly from day one.
Dispute resolution and employee protection
Employment disputes happen. A former employee claims they were underpaid. A worker says they took less annual leave than your records show. Without documentation, it’s your word against theirs — and under the Fair Work Act, the burden of proof often falls on the employer.
Good records give you a clear, timestamped account of what was agreed, what was paid, and when. They protect your employees’ entitlements too, which matters if you ever sell your business or transfer staff to a new entity.
Streamlining payroll and administration
Think about how long it takes to find the right employment contract when you need to check a team member’s agreed hours. Or to calculate someone’s leave entitlements without a reliable attendance history. Disorganised records slow everything down and create room for costly errors.
Around one in three Australian organisations still rely on spreadsheets to manage employee information, according to ELMO’s 2025 HR Industry Benchmark Report. Spreadsheets may feel familiar, but they’re not built for compliance — they have no audit trail, no access controls, and no automated alerts when records go stale.
Strategic data for business growth
Your HR records aren’t just a compliance tool. They’re a business intelligence resource. Tracking headcount trends, leave patterns, turnover rates, and wage costs helps you spot problems before they become expensive. Planning to hire? Your historical records will tell you exactly what roles, rates, and hours drove your best periods of growth.
What types of HR records should be maintained by businesses?
Recruitment and onboarding documents
Before someone starts, you’re already generating records that need to be kept. These include:
- Job applications and interview notes: especially if a hiring decision is ever questioned
- Tax File Number (TFN) declarations: required by the ATO before you process any pay run
- Superannuation choice forms: mandatory under the Super Guarantee rules
- Right to work evidence: passport, visa, or relevant documentation confirming eligibility to work in Australia
- Signed employment contracts: even for casual workers; always document the agreed terms in writing
Keep originals (or certified copies) of all identity documents in a secure location.
Employment contracts and salary history
Your employment contract is the foundation of the employment relationship. It should capture the role, employment type (full-time, part-time, casual), agreed hours, rate of pay, and any applicable award or enterprise agreement.
Whenever pay rates are updated, whether via a promotion, a Fair Work minimum wage increase, or a renegotiation, record it in writing and date it. You should also keep a running salary history so you can demonstrate at any point exactly what an employee was paid and when the rate changed.
Performance reviews and disciplinary notes
Performance records matter well beyond the conversation you had in the meeting room. If you ever need to manage an underperforming employee, restructure a role, or defend a termination decision, a clear history of documented conversations (including informal check-ins, performance improvement plans, and formal warnings) provides the context regulators and courts need to assess whether a process was fair.
Practical tip: Date every note. Include who was present in the conversation. Note what was agreed and by when. A short, factual record written at the time is worth far more than a detailed account written weeks later from memory.
Time, attendance, and leave records
Under the Fair Work Act, employers must keep records of the hours worked by employees who receive penalty rates, overtime, or are on certain modern awards. For many small businesses, this means tracking:
- Start and finish times (and any unpaid breaks)
- Overtime hours
- Leave taken (annual leave, personal/carer’s leave, public holidays)
- Leave balances at any point in time
This is where the UNSW case is a useful reference. The university was fined $213,120 by the Federal Circuit Court, not for underpaying staff, but purely for poor record keeping. Inspectors couldn’t determine what hours casual staff had worked because UNSW had no reliable timesheets. The judge described the solution as “very simple and immediate.” Don’t let a fixable admin gap cost you six figures.
WHS (Work Health and Safety) and incident reports
Every Australian employer has WHS obligations, and record keeping is part of them. You need to keep records of:
- Workplace induction and safety training
- Hazard identification and risk assessments
- Incidents, injuries, and near-misses (including first aid treatments)
- Workers compensation claims and return-to-work plans
Safe Work Australia requires incident records to be kept for at least five years. In some jurisdictions and industries, that period is longer. Check your state’s WHS legislation for specifics.
Termination and exit documentation
The employment relationship doesn’t end when someone walks out the door, and neither does your record-keeping obligation. When an employee leaves, document:
- Written notice provided (by either party)
- Final pay calculation, including any outstanding annual leave payout
- Redundancy or severance details (if applicable)
- Separation confirmation and reason for leaving
Under the Fair Work Act, records of former employees must be kept for seven years after the employment ends. This is non-negotiable.
HR document retention: How long should you keep records?
Current employee requirements
For current employees, your records should always be up to date and accessible. The Fair Work Act requires employers to keep employment records for a minimum of seven years. That clock starts from the date each record is made, not from when employment ends.
The records must be:
- In a legible form (printed or digital)
- In English (or easily converted to English)
- Accessible to the FWO if requested
Post-employment retention rules
Once an employee leaves, keep their complete employment file for seven years from the date their employment ended. This covers pay records, attendance records, leave records, and any disciplinary documentation.
Don’t be tempted to clear out records early to save storage space. The FWO can investigate historical underpayments going back years, and a missing record is treated as a missing entitlement.
Tax and superannuation record guidelines
The ATO has its own record-keeping requirements that run parallel to the Fair Work Act. For payroll and tax records, the ATO generally requires a minimum of five years of retention, covering:
- PAYG withholding records
- Superannuation contribution records
- Single Touch Payroll (STP) reports
- Workers’ compensation premium records
If you’re reporting through STP (which is mandatory for all employers), your payroll software will automatically generate a digital record with the ATO each pay cycle. Still, you’ll need to maintain your own internal records to reconcile against.
Paper vs. digital: the shift to cloud-based storage
What are the risks of manual paper filing?
Paper-based HR systems feel manageable when you have two or three employees. By the time you have ten, they’re a liability. Physical files:
- Can be lost, damaged, or destroyed (flood, fire, or a well-meaning “clean-out”)
- Have no audit trail; you can’t prove who accessed or changed a record
- Are impossible to back up reliably
- Cannot be accessed remotely (which matters when the Fair Work Ombudsman calls on a Friday afternoon)
- Require manual duplication if you need to share information with payroll, accountants, or legal advisors
The shift away from paper isn’t just a convenience choice. ELMO’s 2025 HR Benchmark Report identifies continued reliance on spreadsheets and manual processes as the second-highest organisational challenge for Australian businesses, citing data security as a primary concern.
Benefits of digital HR document management
Moving to a digital system doesn’t mean going fully paperless overnight. It means having a structured, searchable, backed-up repository for your employment records. The practical advantages include:
- Instant retrieval: search by employee name, document type, or date instead of rifling through folders
- Automated retention reminders: prompts when records are due for review or deletion
- Audit trails: every action is timestamped and logged
- Remote access: manage records from anywhere, especially useful for multi-site businesses
- Integration with payroll: when your HR records feed directly into your payroll software, you eliminate duplicate data entry and reduce errors
74% of Australian payroll professionals believe AI can improve compliance and reduce errors in record keeping, according to the Australian Payroll Association’s 2025 Payroll AI Adoption Report. The tools are ready. The question is whether businesses are.
Are employee documents stored in the cloud secure?
Storing employee records digitally doesn’t mean storing them anywhere. Under the Privacy Act 1988, Australian employers are required to take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access.
When choosing a cloud HR or payroll platform, look for:
- Australian data residency — data stored on Australian servers
- Role-based access controls — managers can see what they need to; nothing more
- Encryption in transit and at rest
- Regular security audits and compliance certifications (such as ISO 27001 or SOC 2)
- Multi-factor authentication (MFA)Â for all user accounts
A reputable payroll platform will make these details publicly available. If they don’t, ask before you sign up.
Best practices for managing employee files
Establishing access hierarchies — who sees what?
Not everyone in your business needs to see every piece of HR documentation. A team leader doesn’t need to see another employee’s medical certificates. Your bookkeeper needs payroll figures, not disciplinary notes.
Set up access tiers from the start:
- Full access: business owner and HR manager (if applicable)
- Payroll access: payroll administrator, accountant, or bookkeeper (pay and tax records only)
- Manager access: direct supervisors (their team members’ performance records and attendance)
- Employee self-service: individual access to their own records, pay slips, and leave balances
The simpler your access structure, the easier it is to audit who has seen what, which matters when a privacy complaint or a records dispute arises.
Regular file audits and cleaning
Schedule a records audit at least once a year. The goal is to:
- Check that all current employee files are complete and up to date
- Confirm retention periods and flag records ready for secure disposal
- Identify gaps — missing contracts, unsigned forms, or outdated emergency contacts
- Update records to reflect role changes, rate adjustments, or new awards
A 30-minute annual review will save you hours of scrambling when a compliance issue surfaces.
Standardising naming conventions
This sounds like a small thing. It’s not. A consistent file naming convention means anyone in the team can locate a document quickly without having to ask the person who originally filed it.
A simple structure works well:
[EmployeeID]_[LastName]_[DocumentType]_[Date]
For example: EMP007_Smith_EmploymentContract_20240301
Apply the same logic to your folder structure — one top-level folder per employee, with subfolders by category (Contracts, Payroll, Leave, Performance, Offboarding). Consistency is everything.
Frequently asked questions about HR record keeping
What is the penalty for poor record-keeping?
For record-keeping and pay slip breaches, the Fair Work Ombudsman can issue infringement notices with on-the-spot fines of up to $1,650 per contravention for an individual or up to $8,250 per contravention for a corporation. Serious or repeated breaches can result in court proceedings, where penalties can reach $16,500 per contravention for an individual and $82,500 per contravention for a body corporate.
UNSW’s $213,120 fine for systemic record-keeping failures was the result of multiple breaches across a sustained period — proof that poor record keeping isn’t a one-time fine, it compounds.
Do employees have the right to access their own records?
Yes. Under the Fair Work Act, employees (and their representatives) have the right to request access to their employment records. Employers must make records available within a reasonable timeframe. Refusing or obstructing access is itself a breach of the Act.
The Privacy Act 1988 adds a further obligation: individuals can request access to their personal information at any time, and you must respond within 30 days.
A good practical approach is to give employees direct access to their own records through a self-service portal — it reduces admin requests and demonstrates transparency.
How do I ensure my HR records are Privacy Act compliant?
The Privacy Act 1988 (Cth) applies to most Australian businesses with an annual turnover of more than $3 million, though many smaller businesses collecting sensitive information are also covered. The key obligations are:
- Collect only the information you actually need
- Tell employees what you’re collecting and why (typically done via a privacy notice on your employment forms)
- Store it securely and restrict access appropriately
- Destroy or de-identify records you no longer need
- Respond to access or correction requests promptly
If your business uses a digital HR platform, confirm that the provider’s data handling practices align with the Australian Privacy Principles (APPs).
Can I store HR records exclusively online?
Yes — provided the records are in a form that the Fair Work Ombudsman can access and read. The FWO accepts digital records. What matters is that records are:
- Stored in a readable format (e.g., PDF or a digital system that can export to a readable format)
- Accessible within seven days of a request
- Backed up to prevent loss
Cloud-based payroll and HR platforms are an accepted and practical solution. Just make sure you have a backup and recovery process in place so a server outage or software change doesn’t leave you without records during an audit.
Simplify your HR record-keeping today
HR record keeping doesn’t have to be a filing nightmare. But it does need a system. For most Australian small businesses, that means moving away from spreadsheets and paper folders toward a platform built for compliance.
Payroller’s employee management features give you a central place to track your team’s information: employment details, documents, leave balances, and pay history — all in one place, accessible from anywhere, and built around Australia’s compliance requirements.
When your HR records and payroll live in the same platform, the data flows automatically. No double entry, no version-control headaches, and no scrambling to find the right document when it matters most.
Start for free with Payroller and see how simple HR record-keeping can be.
Frequently asked questions about HR record keeping
What is the penalty for poor record-keeping?
For record-keeping and pay slip breaches, the Fair Work Ombudsman can issue infringement notices with on-the-spot fines of up to $1,650 per contravention for an individual or up to $8,250 per contravention for a corporation. Serious or repeated breaches can result in court proceedings, where penalties can reach $16,500 per contravention for an individual and $82,500 per contravention for a body corporate.
UNSW’s $213,120 fine for systemic record-keeping failures was the result of multiple breaches across a sustained period — proof that poor record keeping isn’t a one-time fine, it compounds.
Do employees have the right to access their own records?
Yes. Under the Fair Work Act, employees (and their representatives) have the right to request access to their employment records. Employers must make records available within a reasonable timeframe. Refusing or obstructing access is itself a breach of the Act.
The Privacy Act 1988 adds a further obligation: individuals can request access to their personal information at any time, and you must respond within 30 days.
A good practical approach is to give employees direct access to their own records through a self-service portal — it reduces admin requests and demonstrates transparency.
How do I ensure my HR records are Privacy Act compliant?
The Privacy Act 1988 (Cth) applies to most Australian businesses with an annual turnover of more than $3 million, though many smaller businesses collecting sensitive information are also covered. The key obligations are:
- Collect only the information you actually need
- Tell employees what you’re collecting and why (typically done via a privacy notice on your employment forms)
- Store it securely and restrict access appropriately
- Destroy or de-identify records you no longer need
- Respond to access or correction requests promptly
If your business uses a digital HR platform, confirm that the provider’s data handling practices align with the Australian Privacy Principles (APPs).
Can I store HR records exclusively online?
Yes — provided the records are in a form that the Fair Work Ombudsman can access and read. The FWO accepts digital records. What matters is that records are:
- Stored in a readable format (e.g., PDF or a digital system that can export to readable format)
- Accessible within seven days of a request
- Backed up to prevent loss
Cloud-based payroll and HR platforms are an accepted and practical solution. Just make sure you have a backup and recovery process in place so a server outage or software change doesn’t leave you without records during an audit.