Payroll Compliance Audit Australia: Practical Checklist for ASX & Large Employers (2026)

Last reviewed: 16 July 2026

A payroll compliance audit Australia employers can no longer afford to postpone is the single most effective step for limiting underpayment exposure in 2026. The commencement of Payday Super on 1 July 2026, requiring superannuation guarantee (SG) contributions to be received by an employee’s fund within seven business days of each pay date, has compressed the margin for error and created a new category of compliance breach that did not exist under the former quarterly regime. At the same time, the Fair Work Ombudsman (FWO) continues to pursue enforcement action against large employers, and the Federal Court’s class-action docket for wage underpayment claims shows no sign of slowing.

For ASX-listed and other large employers, the question is no longer whether to audit but how quickly a forensic, litigation-ready audit can be scoped, executed and documented before exposure crystallises into regulatory action or representative proceedings.

This guide sets out a practical, step-by-step audit framework built for HR directors, general counsel, payroll managers and heads of compliance at large Australian employers. It covers the new Payday Super timing obligations, a detailed payroll audit checklist, evidence-gathering protocols, litigation risk scoring, remediation pathways and the post-audit governance controls that should follow. Every factual claim regarding legislative dates and regulator expectations is referenced to the Australian Taxation Office, Treasury, APRA, the Fair Work Ombudsman or the Federal Register of Legislation.

The objective is straightforward: identify underpayments before they are found for you, remediate them in a defensible manner, and build an evidence package that stands up to scrutiny, whether from a regulator, a plaintiff law firm or a board audit committee.

What Is a Payroll Compliance Audit, Scope and Outcomes

A payroll compliance audit is a systematic examination of an organisation’s payroll processes, data and outputs against its legal obligations under applicable modern awards, enterprise agreements, the National Employment Standards (NES), the Fair Work Act 2009 (Cth) and superannuation legislation including the Superannuation Guarantee (Administration) Act 1992 (Cth). Its purpose is to determine whether employees have been paid correctly, identify any shortfalls, quantify liabilities and produce a remediation plan supported by an evidence package.

There are three broad audit types, and most large employers will use a combination:

For ASX employers payroll risk extends beyond financial exposure. A material underpayment that surfaces publicly can trigger continuous disclosure obligations, director liability questions and reputational harm that depresses share price, making pre-emptive auditing a governance imperative, not simply an HR exercise.

Payday Super and Superannuation Timing 2026, What Employers Must Know

The single largest regulatory change affecting payroll compliance in 2026 is Payday Super. Under the reforms announced in the Treasury’s Securing Australians’ Superannuation package and implemented through amendments to the Superannuation Guarantee (Administration) Act 1992, the existing quarterly SG payment deadline has been replaced by a pay-cycle-aligned obligation effective 1 July 2026.

The Seven-Business-Day Rule

From 1 July 2026, employers must pay SG contributions so that the employee’s superannuation fund receives the contribution within seven business days of each pay date. This is a receipt-based test, not a remittance-based test, meaning the employer bears the risk of clearing-house and fund-processing delays. The ATO’s developer guidance confirms this timing standard and sets out the data and messaging protocols that payroll software must support.

Transitional Arrangements, 1 to 28 July 2026

Contributions made between 1 and 28 July 2026 will first be applied to any outstanding quarterly SG amounts for the April–June 2026 quarter. Employers that were already in arrears on quarterly contributions should treat this window as an opportunity to clear legacy liabilities before the new per-pay-cycle reporting begins.

SBSCH Closure and Clearing-House Readiness

The Small Business Superannuation Clearing House (SBSCH) ceased accepting new contributions on 30 June 2026. Employers previously reliant on the SBSCH must have transitioned to an alternative clearing house or direct fund payment method. Industry observers expect this transition to be a source of errors in Q3 2026, particularly for employers that did not test alternative payment channels during the lead-up period.

Payday Super Compliance, Impact by Employer Type

APRA’s Payday Super readiness communications confirm that RSE licensees (super funds) have been preparing to accept more frequent contributions and report receipt data back to the ATO. Nevertheless, fund-processing delays remain a risk variable that employers must factor into their remittance timetable.

Designing the Payroll Compliance Audit for ASX and Large Employers, Governance and Project Plan

A wage underpayment audit at scale is a cross-functional project. Treating it as a purely operational payroll exercise, without legal oversight, forensic rigour or board-level sponsorship, produces outputs that may not withstand regulatory or litigious scrutiny. The following governance framework reflects the expectations industry observers see in class-action discovery and FWO compliance notices.

Audit Governance

• Executive sponsor. A C-suite officer (CFO or General Counsel) with authority to allocate budget, direct data access and report to the board.
• Steering committee. Representatives from Legal, HR, Payroll, Finance, IT and Internal Audit. If external counsel is retained, they should attend to preserve privilege over certain work product.
• Audit lead. An experienced payroll auditor or forensic accountant, internal or external, who understands award interpretation, payroll systems and data extraction.
• Privilege protocol. Determine at the outset which audit workstreams will be conducted under legal professional privilege (typically the liability quantification and litigation risk assessment) and which will be produced as operational documents.

Sampling and Population

Full-population audits are ideal but rarely feasible for employers with thousands of employees across multiple awards and pay cycles. A stratified sampling strategy should prioritise:

• High-risk cohorts. Employees on complex awards with overtime, penalty rates, shift loadings or allowances.
• Long-tenure employees. Greater cumulative underpayment exposure.
• Recent system changes. Any pay-cycle or system migration in the past 24 months.
• Contractor / labour-hire populations. Sham contracting risk and SG misclassification.

The sample size should be statistically defensible, typically 10–15 per cent of the total population across each identified risk cohort, with full-population testing for super-timing compliance under Payday Super.

Systems and Data Pulls

Request raw data exports, not summary reports, from the payroll system, time-and-attendance platform, rostering software, HR information system (HRIS) and superannuation clearing house. Key data fields include employee ID, pay date, hours worked (ordinary and overtime), base rate, loadings, allowances, leave accruals, SG calculation inputs, SG payment dates and fund receipt confirmations.

Technical Payroll Audit Checklist, Step-by-Step Tasks

This section constitutes the core payroll audit checklist for large Australian employers. Each step should be documented, with findings recorded in a standardised workpaper format that can serve as evidence in regulatory or court proceedings.

Step 1, Pay Condition Mapping

1. Identify every modern award, enterprise agreement and individual flexibility arrangement (IFA) that covers employees in scope.
2. Map each employee to the correct instrument and classification level.
3. Document pay conditions: base rate, overtime rates, penalty rates, shift loadings, allowances, leave loading, and any above-award arrangements.
4. Red flag: employees classified under a single “catch-all” award classification when their duties span multiple levels or awards.

Step 2, Time and Attendance Reconciliation

1. Extract raw time-and-attendance data for the audit period.
2. Reconcile recorded hours against rostered hours and payslip hours.
3. Identify discrepancies, unreported overtime, missed breaks triggering penalty payments, or time rounding that systematically disadvantages employees.
4. Red flag: consistent rounding down of clock-in times or systematic deletion of overtime entries.

Step 3, Award and NES Entitlement Checks

1. For each sampled employee, recalculate gross pay for each pay period using the mapped conditions and actual hours.
2. Compare recalculated amounts against actual payments.
3. Check NES entitlements: annual leave (including leave loading), personal/carer’s leave, redundancy pay, notice periods and public holiday rates.
4. Red flag: leave loading consistently omitted from annual leave payments under awards that require it.

Step 4, OTE Calculation and Ordinary Hours

1. Review the definition of Ordinary Time Earnings (OTE) applied by the payroll system.
2. Confirm whether overtime, bonuses, commissions and allowances have been correctly included or excluded from the OTE base for SG calculation purposes.
3. Cross-check against ATO Ruling SGR 2009/2 (or its replacement guidance) for the treatment of specific payment types.
4. Red flag: bonuses or commission payments excluded from OTE without a valid basis, resulting in SG shortfalls.

Step 5, Superannuation and Payday Super Compliance

1. For each pay run from 1 July 2026, confirm the date SG contributions were remitted and the date the employee’s fund received the contribution.
2. Verify the contribution amount equals the correct SG percentage applied to OTE.
3. Check that the clearing house or direct payment method is operational and delivering contributions within the seven-business-day window.
4. For the transitional period (1–28 July 2026), confirm contributions were applied to outstanding quarterly amounts.
5. Red flag: fund receipt dates consistently falling on business day 6 or 7, indicating a process with no buffer for clearing-house delays.

Step 6, Payroll Tax Reconciliation

1. Reconcile taxable wages reported to each state and territory revenue office against actual payments.
2. Confirm grouping provisions have been correctly applied (related entities, common employees).
3. Check for contractor payments that should have been included in the payroll tax base.
4. Red flag: revenue-office audit notices already received, or payroll tax returns filed late without voluntary disclosure.

Step 7, Third-Party Vendor and Contractor Checks

1. Review contractor engagement arrangements for sham-contracting indicators under the Fair Work Act 2009.
2. For labour-hire arrangements, confirm the host employer’s obligations (if any) under applicable modern awards and state labour-hire licensing schemes.
3. Verify that payroll software vendor configurations align with current award rates, vendors do not always update rate tables on time.
4. Red flag: large populations of “independent contractors” performing work indistinguishable from employees, with no SG contributions.

How Often Should Payroll Audits Be Done?

For large and ASX employers, best practice is a three-tier cadence: continuous automated monitoring of each pay run, quarterly focused reconciliations targeting high-risk cohorts, and an annual forensic audit covering all entities and instruments. Additional spot audits should be triggered by any system migration, award variation, enterprise agreement renewal or regulator inquiry.

Evidence and Documentation, What Courts and Regulators Expect

The evidentiary expectations of the Federal Court and the FWO are well established. The Fair Work Ombudsman’s Guide to Self-Auditing Your Business sets out a practical framework, but employers defending class actions or responding to compliance notices need a more granular evidence protocol.

Core Documentary Evidence

• Payslips. Every payslip issued during the audit period, in native digital format with metadata intact.
• Pay-run exports. Raw data from the payroll engine showing calculation inputs and outputs for each employee per pay period.
• Timesheets and roster records. Original time-and-attendance data, including edit logs showing any manual amendments.
• Award interpretation documents. Internal memos, legal opinions or configuration notes that record how award clauses were interpreted and applied.
• Payroll configuration logs. System configuration files, rate tables, rule sets and any change-request tickets that modified payroll calculations.
• Authorisation records. Evidence of who approved payroll configurations, rate changes and system updates.
• SG payment and receipt confirmations. Clearing-house transaction records and fund receipt acknowledgements, critical for Payday Super compliance.
• Remediation communications. All correspondence with affected employees, super funds, the ATO and the FWO regarding identified shortfalls and rectification.

Chain of Custody and Privilege

Preserve all data exports in their original format with timestamps. Where the audit is conducted under legal professional privilege, maintain a clear separation between privileged analysis (e.g., litigation risk assessment) and non-privileged operational outputs (e.g., remediation payments). Courts have been willing to order production of audit reports where privilege has been waived through selective disclosure or where the dominant purpose of the audit was operational rather than legal.

Litigation Risk Indicators and Class-Action Triggers, Scorecard for In-House Counsel

Not every underpayment finding will attract a class action or regulatory prosecution. The following scorecard helps in-house counsel assess underpayment class action risk by weighting the indicators that plaintiff firms and regulators prioritise when deciding whether to commence proceedings.

Recommended actions by aggregate score:

• Predominantly Low. Complete remediation, document thoroughly, report to board. External counsel optional.
• Predominantly Medium. Engage external counsel, complete remediation under privilege, consider voluntary disclosure to FWO. Prepare litigation hold on all relevant data.
• Predominantly High. Engage external counsel and forensic accountants immediately. Assume class-action and/or prosecution risk. Issue litigation hold. Brief the board. Consider voluntary disclosure strategy, but only after legal advice on criminal exposure under wage-theft provisions.

Payroll Remediation Plan, Pathways, Voluntary Rectification and Dealing with Regulators

Once the audit quantifies underpayments, a structured payroll remediation plan is essential. Regulators and courts evaluate the employer’s response as much as the original breach. The likely practical effect of a well-documented, prompt remediation is a materially lower penalty and reduced appetite for class-action funding.

Step-by-Step Remediation Process

1. Quantify total liability. Break down by employee, pay period, entitlement type (wages, overtime, leave, SG) and tax implications. Use gross-to-net calculations that account for PAYG withholding adjustments, superannuation on back-payments and any state payroll tax liability on additional wages.
2. Engage external auditors or forensic accountants. For ASX employers, independent verification of the liability quantum adds credibility to board reporting and any voluntary disclosure.
3. Tax and super corrections. Lodge amended SG statements with the ATO. Calculate Superannuation Guarantee Charge (SGC) where contributions were late. Prepare amended PAYG payment summaries or Single Touch Payroll (STP) finalisation events.
4. Voluntary rectification with the FWO. The Fair Work Ombudsman has a stated preference for voluntary compliance. A well-structured proposal, including full quantification, a remediation timetable, employee communications and evidence of systemic fixes, can reduce enforcement action. However, voluntary rectification does not provide immunity from criminal prosecution for wage-theft offences under the Fair Work Act 2009 (as amended). Seek legal advice before approaching the FWO.
5. Employee communications. Notify affected employees individually, explaining the nature of the underpayment, the remediation amount, how it was calculated, and the payment timeline. Provide a contact point for queries.
6. Super fund notifications. Advise relevant super funds of back-payment contributions. Coordinate timing to ensure fund receipt within statutory deadlines.
7. State payroll tax adjustments. If additional wages increase the payroll tax base, lodge amended returns with the relevant state revenue office. NSW, for example, allows voluntary disclosure, and Revenue NSW’s published guidance on payroll tax audits outlines the expected process and potential penalty reductions for self-reporting.

Limits of Remediation

It is critical to understand that full remediation does not guarantee protection from private class actions. Plaintiff law firms may still commence representative proceedings on behalf of employees, particularly where the underpayment was systemic and long-running. Remediation is, however, a powerful mitigant: it reduces the quantum at issue, demonstrates good faith, and can influence a court’s approach to penalties and costs. Early indications suggest that employers who remediate proactively and transparently face significantly lower court-ordered penalties than those who remediate only after enforcement action.

Post-Audit Controls and Continuous Compliance

An audit is a point-in-time exercise. Without ongoing controls, the same errors will recur, particularly as award rates change annually and enterprise agreements are renegotiated. Post-audit, employers should implement:

• Pay-rule change approvals. A formal change-management process for any modification to payroll system configuration, requiring sign-off from Legal/IR and Payroll before deployment.
• Automated pre-pay-run checks. Reconciliation scripts that compare each pay run’s outputs against expected rates and flag exceptions before payments are released.
• Quarterly reconciliations. Targeted reviews of high-risk cohorts, SG timing compliance (fund receipt within seven business days) and payroll tax calculations.
• Vendor contract terms. Payroll software vendor contracts should include SLAs for timely award-rate updates, indemnities for misconfiguration attributable to the vendor, and audit-access rights. A separate Payday Super technical checklist for payroll vendors should form part of the vendor management framework.
• Board reporting. At least quarterly, the board (or audit and risk committee) should receive a payroll compliance dashboard covering exception volumes, remediation progress and superannuation timing metrics.

Next Steps and Templates

Employers ready to commence a payroll compliance audit Australia should take three immediate actions:

1. Download the audit checklist. A structured Excel workbook covering every step outlined in this guide, pay-condition mapping, time reconciliation, award checks, OTE verification, SG timing and payroll tax, with built-in red-flag indicators and workpaper templates.
2. Download the remediation plan template. A standardised framework for quantifying liabilities, scheduling payments, preparing employee communications and lodging voluntary disclosures.
3. Download the evidence checklist. A document-collection protocol aligned with Federal Court and FWO expectations, including chain-of-custody guidance and privilege-marking conventions.

For employers requiring independent legal review of audit findings or litigation risk, specialist employment law counsel with experience in underpayment disputes and class actions against ASX-listed companies can be engaged through the Global Law Experts Australia lawyer directory.

Conclusion

The convergence of Payday Super, sustained class-action activity and heightened regulator enforcement makes 2026 the year that payroll compliance audit Australia obligations move from periodic best practice to urgent governance priority for every large employer. The three actions that should commence this week are: first, commission a scoped payroll audit covering pay conditions, SG timing and high-risk cohorts; second, verify Payday Super readiness, confirm your clearing house delivers fund receipts within the seven-business-day window; and third, preserve evidence and engage specialist employment law counsel to assess litigation exposure before it is shaped by a plaintiff or regulator.

The cost of a well-run audit is a fraction of the liability, reputational damage and management distraction that follow an underpayment class action or regulatory prosecution.

Sources

1. Australian Taxation Office, Payday Super (Software Developers)
2. Treasury, Securing Australians’ Superannuation Package
3. Fair Work Ombudsman, Guide to Self-Auditing Your Business
4. Superannuation Guarantee (Administration) Act 1992, Federal Register of Legislation
5. Fair Work Act 2009, Federal Register of Legislation
6. APRA, Payday Super Readiness
7. Revenue NSW, Payroll Tax Audits & Compliance
8. AustLII, Australasian Legal Information Institute