Yes. Through a director penalty notice (DPN), the Australian Taxation Office can make you personally liable for your company's unpaid PAYG withholding, GST and superannuation — meaning the debt can be recovered from you as an individual, not just from the business. Whether you can still escape that liability depends on one thing: whether you lodged your returns on time. If you did, you usually get a 21-day window to act. If you didn't, the liability can be automatic, with no way out except paying. This is the owner's playbook: how a DPN works, what the 21-day clock really means, and what to do long before a notice ever reaches your letterbox.
Key takeaways
- A director penalty notice can make you personally liable for the company's unpaid PAYG withholding, GST and superannuation guarantee charge — that liability "arises automatically as soon as the company misses its payment due date" (Colin Biggers & Paisley, 2026).
- Lodging on time is your protection. A non-lockdown DPN gives you 21 days to act; a lockdown DPN — triggered when you don't lodge your BAS within three months of the due date — makes you automatically liable with no 21-day escape (Macmillan Lawyers and Advisors, 2026).
- The crackdown is real and accelerating. The ATO's use of DPNs "surged by 136% to more than 84,000 in the 2024-25 financial year" (SmartCompany, 2026).
- Hospitality is in the firing line. Food and beverage services "ranks highest across three key indicators of financial distress: insolvency rates, arrears (late payments) and ATO tax debt defaults over $100,000" (CreditorWatch, 2026).
- The ATO can also bypass you entirely with a garnishee notice that directs your bank to pay the ATO instead of you — no court order required (Worrells, 2026).
Can the ATO really come after you personally?
For most company debts, no — the whole point of running through a Pty Ltd company is that the company, not you, owes the money. The director penalty regime is the major exception. It lets the ATO transfer three specific company tax debts onto you personally: PAYG withholding (the tax you hold back from staff wages), GST, and the superannuation guarantee charge that applies when super is paid late or short.
The trigger is earlier than most owners assume. A director's personal liability "arises automatically as soon as the company misses its payment due date" — the penalty exists from that moment, and the DPN is simply the ATO's tool to start recovering it from you (Colin Biggers & Paisley, 2026). So by the time a notice arrives, the liability has usually been building quietly for months.
This is no longer a rare event. The Tax Ombudsman reported that the ATO's use of DPNs "surged by 136% to more than 84,000 in the 2024-25 financial year", and is now running a formal investigation into how the ATO uses them (SmartCompany, 2026). After years of pandemic-era leniency, the ATO has shifted firmly back to recovery — which is exactly why understanding your exposure now matters.
What's the difference between a lockdown and non-lockdown DPN?
This is the distinction that decides whether you have options or none. It comes down entirely to whether you lodged on time.
Non-lockdown DPN. You reported the debt — you lodged your BAS or instalment activity statement for PAYG and GST, and reported your super — but the company didn't pay. Because you were transparent, the law gives you a way out: you have 21 days from the date of the notice to resolve your personal liability (Colin Biggers & Paisley, 2026).
Lockdown DPN. A lockdown DPN is issued where a company "doesn't pay its PAYG Tax, GST or superannuation and fails to lodge its BAS (within 3 months of being due) or SGC Statements (by required dates)." In that situation, "the directors will not have the grace period of 21 days and are automatically held personally liable" (Macmillan Lawyers and Advisors, 2026).
The practical lesson is blunt and counter-intuitive: lodge on time even when you can't pay. Lodging keeps the debt in non-lockdown territory, which preserves your 21-day options. Going quiet — not lodging because you're afraid of the bill — is what springs the lockdown trap.
What can you do inside the 21-day window?
If you've received a non-lockdown DPN, the clock is short and real. You can avoid personal liability if, within 21 days of the notice, one of the following happens (Macmillan Lawyers and Advisors, 2026):
- The company pays the debt in full. The cleanest outcome — the penalty is remitted.
- You appoint a voluntary administrator. This places the company's affairs in the hands of an external administrator.
- You appoint a small business restructuring practitioner. A lighter-touch process designed for smaller, viable businesses.
- The company is placed into liquidation. Winding up the company within the window also remits your personal penalty.
A crucial warning for lockdown DPNs: these escape routes don't apply. "Voluntarily placing the company into Liquidation or Voluntary Administration will not avoid personal liability" once a lockdown DPN is in play (Macmillan Lawyers and Advisors, 2026). With a lockdown notice, the only way to clear your personal liability is to pay the debt.
Do not wait out the 21 days hoping it resolves itself. Get a registered insolvency or tax professional on the phone the day the notice arrives — the right move depends on whether the business is viable, and the window is too tight to work that out alone.
Can the ATO empty your restaurant's bank account?
Effectively, yes — through a separate tool called a garnishee notice, and it can happen without going to court. A garnishee notice lets the Commissioner "require the third party to pay that money to the Commissioner rather than paying it to, or continuing to hold it for, the tax debtor", issued by written notice under the Taxation Administration Act (Worrells, 2026). In plain terms: the ATO can instruct your bank to hand over money from your business account, or direct a customer who owes you to pay the ATO instead of you.
It's not hypothetical. The ATO stated "it only issued 14,000 garnishee notices for small businesses in the past financial year, accounting for 0.5% of 'collectable debt cases'" (Worrells, 2026). For a hospitality business running on thin daily cash flow, a frozen or drained operating account can be the difference between making payroll and not.
Why are restaurants getting hit hardest?
Because the sector is, on the numbers, the most financially stressed in the country. CreditorWatch found that food and beverage services "ranks highest across three key indicators of financial distress: insolvency rates, arrears (late payments) and ATO tax debt defaults over $100,000" (CreditorWatch, 2026). The same research reported "a record 1 in 10 hospitality businesses in Australia shut down over the past 12 months", with 9.6% closing their doors (CreditorWatch, 2026).
Stack the pressures and the pattern is obvious: wages, energy, insurance and food costs all rising while diners tighten up. When cash gets tight, the ATO is often the creditor that gets paid last — PAYG and super are easy to defer for "just one more quarter." That deferral is exactly what builds the personal liability a DPN later collects. Mapping where every dollar goes is the first defence; our Australian restaurant cost breakdown walks through each line.
How do you stop a DPN before it ever arrives?
Prevention is far cheaper than a 21-day scramble. The habits that keep you out of director-penalty territory are unglamorous but decisive:
- Lodge every BAS and SGC statement on time, even when you can't pay. This is the single most important move — it keeps any future DPN in non-lockdown form and preserves your options (Macmillan Lawyers and Advisors, 2026).
- Keep super current — it's about to get harder to let slide. From 1 July 2026, Payday Super requires super to be paid at the same time as wages, received by funds within seven business days of payday (Fair Work Ombudsman, 2026). Late super turns into a super guarantee charge faster than ever — and that charge is one of the three debts a DPN can pin on you. The same on-costs are broken down in what restaurant staff really cost in Australia.
- Set up an ATO payment plan early. It's far easier to arrange before debt balloons than after a notice issues. Lodging keeps you eligible.
- Protect cash flow at the source. Every dollar lost to avoidable costs is a dollar that could have cleared a BAS. Cutting unnecessary fees and commissions — for example by taking direct orders through your own website instead of paying delivery-app margins — keeps more cash in the account to meet your tax obligations. The card surcharge ban checklist covers one of the fee changes landing this year.
- Keep your ASIC details current. The ATO sends a DPN to your address on the ASIC register, and the 21-day clock runs from the date of the notice — not the date you read it. An out-of-date address can cost you the entire window.
Where to get help fast
If money is tight or a notice has landed, don't go silent and don't go it alone. The free, government-funded Small Business Debt Helpline (1800 413 828) offers confidential financial counselling for small business owners. Pair it with a registered tax agent or insolvency practitioner who can read your specific notice and act inside the window. The worst outcome is doing nothing while the 21 days run out.
Frequently asked questions
Can the ATO take my house for my restaurant's tax debt?
Not directly through a DPN itself — a DPN makes you personally liable for the debt. But once you're personally liable, the ATO can pursue you like any creditor, which can ultimately put personal assets at risk if the debt isn't resolved. That's why acting inside the 21-day window matters so much.
What three debts can a director penalty notice cover?
PAYG withholding, GST, and the superannuation guarantee charge (Colin Biggers & Paisley, 2026). Other company debts, such as company income tax, are not covered by the director penalty regime.
How long do I have to respond to a DPN?
A non-lockdown DPN gives you 21 days from the date of the notice to act. A lockdown DPN gives you no grace period — the liability is automatic (Macmillan Lawyers and Advisors, 2026).
What's the difference between a lockdown and non-lockdown DPN?
A non-lockdown DPN is issued when you lodged your returns on time but didn't pay — you keep the 21-day options. A lockdown DPN is issued when you failed to lodge your BAS within three months of the due date (or didn't report super on time) — liability is automatic and the 21-day escape routes don't apply (Macmillan Lawyers and Advisors, 2026).
Should I stop lodging my BAS if I can't pay it?
No — that's the most dangerous thing you can do. Not lodging within three months turns a future DPN into a lockdown DPN with no way out. Always lodge on time, then arrange a payment plan for what you owe.
Does placing my company into liquidation cancel my personal liability?
Only for a non-lockdown DPN, and only if you do it within the 21-day window. For a lockdown DPN, liquidation or administration won't remove your personal liability (Macmillan Lawyers and Advisors, 2026).
Can the ATO take money straight from my business bank account?
Yes, through a garnishee notice, which can direct your bank to pay the ATO instead of you, without a court order (Worrells, 2026).
How common are director penalty notices now?
Very. The ATO's use of DPNs "surged by 136% to more than 84,000 in the 2024-25 financial year" (SmartCompany, 2026).
Why does Payday Super matter for my DPN risk?
From 1 July 2026, super must be paid alongside wages and received within seven business days (Fair Work Ombudsman, 2026). Late super becomes a super guarantee charge sooner — and that charge is one of the debts a DPN can pin on you personally.
Where can I get free help with restaurant tax debt?
The government-funded Small Business Debt Helpline (1800 413 828) offers free, confidential financial counselling. Combine it with a registered tax agent or insolvency practitioner for advice specific to your notice.
