Tax and bookkeeping outsourcing: TPB rules firms must know
Bookkeeping outsourcing can help Australian accounting firms manage growing workloads, but overlooking TPB requirements may expose your practice to compliance risks. So, which TPB rules should your firm understand before handing over client work?
Not every bookkeeping task requires registration, and the rules differ depending on the services provided. Your firm must also understand its obligations around client permission, data security, supervision and record-keeping.
This blog explains the essential TPB rules, practical compliance checks and how to maintain professional oversight when outsourcing.
Key takeaways
Not all bookkeeping tasks require TPB registration; regulated tax and BAS services must be assessed separately.
Obtain appropriate client permission before sharing information with an outsourcing provider.
Check provider qualifications, Australian tax experience, data security and record-retention arrangements.
Unregistered providers performing regulated tax work require appropriate supervision and control.
Registered practitioners must generally retain relevant service records for at least five years.
Which bookkeeping and tax services require TPB registration?
Not every bookkeeping task requires registration with the Tax Practitioners Board (TPB). Under the Tax Agent Services Act 2009, requirements depend on the service provided, client reliance and whether it is offered for a fee. The following breakdown explains which tax and BAS services generally require TPB registration and which routine bookkeeping tasks do not.
Tax agent registration
According to the TPB's official tax agent guidance, services generally requiring registration include:
- Preparing and lodging income tax returns.
- Calculating income tax liabilities.
- Providing client-specific tax advice.
- Representing clients in relevant ATO dealings.
BAS or tax agent registration
The TPB's official BAS service guidance identifies the following activities that require BAS agent or tax agent registration when the relevant statutory criteria are met:
- BAS preparation involving tax-law application.
- Determining GST treatment and liabilities.
- Calculating PAYG withholding obligations.
- Payroll services requiring tax-law interpretation.
Routine bookkeeping tasks
The following tasks generally do not require registration when no tax-law interpretation is involved:
- Data entry and bank reconciliations.
- Transaction coding under instructions.
- Payment processing and basic record-keeping.
For accounting firms, this means unregistered offshore personnel may perform regulated work on behalf of a registered practitioner under appropriate supervision and control. Firms should assess individual tasks and provider arrangements before outsourcing.
Unsure which outsourced tasks need TPB oversight?
Book a call now
7 checks before outsourcing tax and bookkeeping
Before engaging an outsourcing provider, accounting firms should assess how the arrangement will affect their professional and regulatory obligations. Lower service costs do not remove the need for appropriate client permissions, competent service delivery, and reliable oversight. Establishing these safeguards early helps firms identify compliance risks before transferring client work.
The checklist below outlines seven essential checks to complete before outsourcing tax and bookkeeping services.
TPB client consent requirements before outsourcing
Under Code item 6 of the TPB's Code of Professional Conduct, registered tax practitioners must obtain client permission before disclosing information to a third-party outsourcing provider, unless they have a legal duty to disclose it. This applies to both domestic and offshore arrangements.
Before transferring client information, your firm should:
- Explain the arrangement: Identify the external provider and the services being outsourced.
- Specify the disclosure: Explain what information will be shared, with whom and where, including overseas locations or data storage where applicable.
- Obtain permission first: Secure informed client approval before granting access or transferring records.
- Document consent: Retain a signed engagement letter, consent form or other clear client authorisation.
The TPB recommends an engagement letter, but you may also obtain permission through other appropriate communication, such as a client's acceptance email.
A practical example of obtaining client permission for offshore bookkeeping
The Tax Practitioners Board (TPB) provides an example involving Lilly & Co, an Australian accounting firm that engages Zheng & Co, a bookkeeping provider in Hong Kong, to complete client work.
Before transferring any client information, Lilly & Co:
- Explains the offshore arrangement in its engagement letter.
- Identifies Zheng & Co as the service provider.
- Obtains each client's explicit permission through a signed engagement letter.
Once permission is obtained, Zheng & Co performs the agreed work, while Lilly & Co retains primary responsibility for the relevant tax agent services.
Accounting firms must obtain appropriate client permission before disclosing information to an outsourcing provider, unless a legal duty permits disclosure. For practical implementation guidance, explore our five steps to onboard an accounting outsourcing partner.
How should firms protect client data in offshore bookkeeping?
Offshore bookkeeping is not automatically less secure than local outsourcing. What matters is how your firm controls access to client information.
We recommend keeping work within your approved accounting systems rather than routinely emailing spreadsheets or downloading client records. Set up:
- Individual logins: Give each accountant a named account with multi-factor authentication.
- Restricted permissions: Provide access only to the information needed for their tasks.
- Secure transfers: Use encrypted connections and approved document-sharing systems.
- Access removal: Disable accounts immediately when staff leave.
- Incident procedures: Agree on how security breaches will be reported and handled.
Where the Australian Privacy Principles apply, APP 8 addresses overseas disclosure, while APP 11 requires reasonable information-security measures. Access through an Australian-controlled system does not automatically remove APP 8 obligations. The actual arrangement determines whether information has been disclosed. For additional operational guidance, explore our blog on maintaining offshore accounting quality.
People also like reading
How should firms evaluate tax outsourcing services before engagement?
Competitive pricing means little if a provider lacks the expertise to handle your firm's tax work. Before signing an agreement, evaluate:
- Australian tax experience: Familiarity with tax returns, BAS preparation and Australian taxation requirements.
- Qualifications: Relevant staff credentials, training and TPB registration where required.
- Delivery capability: Work samples, client references and realistic turnaround times.
- Data protection and security: Check encryption, multi-factor authentication, role-based access and secure data storage. Review the provider's documented security measures. See AccountGlobal's data security practices, including its ISO 27001 certification, restricted access controls and secure remote working arrangements.
- Data control and retention: Confirm who owns and controls client records, how long the provider retains them, and how data will be returned or securely deleted when the engagement ends.
Also, confirm the service scope, responsibilities, escalation procedures and termination terms in writing.
Did you know?
Around 74% of Australian taxpayers used a tax agent to lodge their 2023–24 tax return.
TPB supervision requirements for outsourced tax services
Imagine your offshore accountant identifies an unfamiliar GST transaction while preparing a client's BAS. Should they decide its tax treatment independently?
This is where your firm's supervision arrangements matter.
Under Code item 7, registered practitioners must ensure tax services provided on their behalf are delivered competently. Unregistered providers performing regulated work require appropriate supervision and control by a registered practitioner. Different direct supervision requirements apply when outsourcing to another registered practitioner.
Sections 35 and 40 of the Code Determination also address relevant skills, supervision and documented quality-management systems.
In practice, your firm should assign an appropriate registered supervisor, establish review standards and ensure uncertain tax treatments are escalated before lodgement.
Our blog on managing offshore and onshore teams in parallel explains how to coordinate responsibilities between locations.
What TPB records must firms retain for outsourced tax services?
Moving tax preparation offshore does not remove your firm's record-keeping obligations.
Under section 30 of the Code Determination, registered practitioners must retain records of tax agent and BAS services provided by them or on their behalf for at least five years after the service is completed.
Your firm must maintain records covering:
- Service details: Nature, scope and outcome of work performed.
- Supporting information: Relevant information and calculations considered.
- Client instructions: Advice and instructions received.
- Professional advice: Advice provided, including facts, assumptions and reasoning for complex matters.
Records must be in English or readily accessible and easily convertible into English. They should also be stored securely.
Once outsourcing begins, monitor recurring errors, missed deadlines and corrective actions to identify issues before increasing the workload.
In addition, if your firm provides AUSTRAC-designated services, separate AML/CTF record-keeping requirements may apply, including seven-year retention periods for certain records.
How AccountGlobal supports TPB-aligned bookkeeping outsourcing
AccountGlobal helps Australian accounting firms integrate outsourced support into their existing compliance and review processes.
Here's how we support your firm:
- Clear task allocation: Agree on the scope of bookkeeping, reconciliations, BAS preparation and draft tax returns, with responsibilities documented before work begins.
- Controlled data access: Our data security framework includes ISO 27001 certification, role-based permissions, multi-factor authentication and client-managed access.
- Structured workflows: Our accountants follow documented procedures, with preparation responsibilities and review handoffs agreed with your team.
- Technical escalation: Establish which tax matters require referral to your registered practitioners before work progresses.
Choose project-based accounting support for defined assignments or dedicated virtual accountants for recurring work. Your firm remains responsible for establishing applicable client permissions, professional supervision and final review arrangements.
Want to outsource bookkeeping and tax preparation but concerned about meeting your TPB obligations?
Contact us today to discuss how we can support your bookkeeping and tax preparation workflows while accommodating your firm's TPB obligations.
FAQs on TPB rules for bookkeeping outsourcing
1. Can a registered BAS agent supervise outsourced income tax work?
No. BAS registration alone does not authorise a practitioner to provide income tax agent services. If outsourced work involves preparing income tax returns or advising on income tax, arrange supervision by a registered tax agent, not merely a BAS agent. Check any conditions attached to the supervisor's registration.
2. What information must we disclose to clients under the TPB's updated Code rules?
Under section 45 of the Code Determination, registered practitioners must inform clients about the TPB register, complaints process, and relevant rights and obligations. They must also disclose specified events, such as registration suspension, and registration conditions within applicable timeframes. Provide this information clearly and in writing.
3. Do TPB client identity verification requirements still apply when we outsource?
Yes. Your firm must still undertake appropriate proof-of-identity checks for clients when providing tax or BAS services. If another registered practitioner works for your firm, the TPB permits that practitioner to obtain written confirmation that you verified the client. Document responsibilities and retain evidence of the verification process.
4. What changes must Australian accounting firms notify the TPB about?
Registered accounting firms must notify the Tax Practitioners Board within 30 days of becoming, or when they ought to have become, aware of relevant changes. These include changes to business structure, directors, partners, trading names, contact details and circumstances affecting registration. Some structural changes may require a new registration.
Final thoughts on tax and bookkeeping outsourcing
Bookkeeping outsourcing requires careful planning when work involves regulated tax services and confidential client information.
Australian accounting firms must understand their TPB obligations and establish appropriate permissions, supervision, data protection and record-keeping arrangements before transferring work.
Could gaps in your outsourcing arrangements put your firm's TPB compliance at risk? Book a call with AccountGlobal to discuss your outsourcing requirements and how our services can work within your firm's established processes.
