Tax Whistleblower Protections for Tax Practitioners

Tax whistleblower protections can cover a practitioner who makes a qualifying disclosure or receives one from an eligible person. Check the relationship and recipient before reporting. If you receive information, restrict access: the duty to protect identity covers details that reveal the sender.

Who Qualifies as a Tax Whistleblower

A protected tax disclosure meets the legal conditions for the person, information and recipient. An ordinary tax tip-off can alert the Australian Taxation Office (ATO) without meeting those conditions. Calling an email a whistleblower report does not establish protection.

An eligible whistleblower is an individual with a current or former qualifying relationship to the entity. That includes officers, employees, individual suppliers of goods or services and employees of suppliers. Associates and specified family members or dependants can also qualify. A practitioner who supplies tax services can qualify through that relationship.

Keep the reporting individual separate from their practice company. Record how that individual qualifies and which entity the suspected conduct concerns. The TPB’s whistleblower guidance explains these relationships and the different disclosure tests.

In a fictional example, an employee gives the company’s registered tax agent records suggesting cash sales were omitted. The employee reasonably suspects tax misconduct and considers the records useful to the agent’s tax work. That can be a protected disclosure to an eligible recipient.

By comparison, a practitioner who only reviews a prospective client’s papers cannot assume they qualify as a service supplier. The TPB’s confidentiality questions and answers distinguish that situation from an existing service relationship. Establish the facts before relying on protection.

Choose the Disclosure Recipient

Choose the recipient by the purpose of the disclosure and that recipient’s legal role. Reporting to the ATO and reporting to someone who works with the entity have different tests.

Recipient	What the practitioner must distinguish
Commissioner of Taxation through the ATO	An eligible whistleblower considers the information may assist the Commissioner’s taxation-law functions or duties concerning the entity or its associate.
Tax Practitioners Board (TPB), or the Commissioner for this purpose	The eligible whistleblower considers the information may assist the TPB’s functions or duties under the Tax Agent Services Act or its instruments. This route covers relevant practitioner misconduct.
Eligible recipient for the entity	The eligible whistleblower reasonably suspects tax misconduct or an improper state of affairs. They also consider the information may assist the recipient’s tax-affairs functions or duties.
Lawyer	An individual can disclose information to obtain legal advice or representation about the whistleblower provisions. This is a separate protected route.

Eligible recipients include the entity’s auditor or audit team, its registered tax agent or BAS agent and someone the entity authorises to receive qualifying disclosures. Company directors, secretaries and senior managers qualify, as do other officers or employees with tax-affairs duties. Trustees and partners have their own categories.

The regulations also prescribe the Inspector-General of Taxation as an eligible recipient. A body’s authority to receive identifying information is a separate question from its authority to receive a qualifying initial report. A regulator’s name alone does not settle either question.

Before sending, record the chosen category and why the information meets its test. Use the relevant regulator’s reporting channel. The TPB accepts reports through its complaints form, but an ordinary complaint does not automatically qualify for protection.

Protect Identity When You Receive a Disclosure

Restrict the original disclosure before investigating its contents. Protection covers the whistleblower’s identity and information likely to identify them, including information you obtain indirectly because of the disclosure.

Use these steps when a client-connected person contacts you:

1. Preserve the original message and attachments in a restricted file. Record receipt, the suspected conduct and the person’s stated relationship to the entity.
2. Check whether you are an eligible recipient for that entity. Escalate uncertainty to a lawyer without circulating the report through the practice.
3. Record who can access the file and why. Agree a safe contact method with the sender and explain the limits of confidentiality.
4. Prepare a separate investigation copy. Review identifiers before giving anyone access, and record the legal basis for each disclosure.

Section 14ZZW of the Taxation Administration Act permits identity disclosures through specified routes. These include the Commissioner, a member of the Australian Federal Police, a lawyer advising on these provisions or the whistleblower’s consent. The regulations also authorise the TPB, Inspector-General of Taxation and Australian Charities and Not-for-profits Commissioner.

Investigation has a narrower exception. It must exclude the person’s identity, be reasonably necessary to investigate the reported misconduct and involve all reasonable steps to reduce identification risk. An internal investigation is not blanket permission to circulate the sender’s details.

Incorrect handling would forward the employee’s email to the director for an explanation. The address identifies the employee, and attachments may identify them even after you remove the address.

A safer approach is to retain the original privately and assess a separate account of the suspected omitted sales. Remove signatures and document properties. Also assess unique details, such as who alone attended a meeting. If the account still identifies the employee, obtain advice before circulating it.

Handle the Client Confidentiality Decision

Assess whistleblower protection separately from your ordinary duty to keep client information confidential. Under Code item 6, disclosure generally requires client permission or a legal duty. A qualifying whistleblower disclosure has its own statutory protection against liability for making it.

The TPB guidance on confidentiality recognises that a qualifying disclosure to the TPB or ATO can protect against Code item 6 disciplinary action. That does not authorise every complaint, attachment or later disclosure. Nor does protection for a voluntary disclosure establish a duty to report.

Separate the proposed whistleblower disclosure from any compulsory notice or breach-reporting obligation. Each has its own legal basis. Asking the client for permission can expose the whistleblower, so obtain independent advice before contacting a client implicated in the allegation.

Give the lawyer enough information to assess your position:

• Your personal role, the engagement and the service relationship with each relevant entity.
• The original communications, supporting records and who has already seen them.
• The grounds for suspicion and the proposed recipient, purpose and documents to send.
• Any identity consent, confidentiality terms, threats or urgent filing obligations.
• Your own involvement, including work you prepared, advice you gave and possible errors or omissions.

Ask the lawyer to assess eligibility, identity handling and the proposed disclosure’s protection. Where your conduct is implicated, establish who the lawyer represents before sharing interests with the client. Apply APES 110 to threats to your professional judgement. Handle the advice under the separate rules for legal professional privilege.

Understand the Limits of Protection

Protection for making a qualifying disclosure does not erase liability for the misconduct it reveals. A tax agent who participated in false reporting needs separate advice about that conduct, even when their disclosure qualifies.

The Act also limits the use of information disclosed to the Commissioner or TPB against the discloser in criminal or penalty proceedings. Proceedings about false information are excepted. Do not assume the same evidentiary protection applies to a report made only to an internal recipient.

Victimisation and threats of detriment can breach the law. Detriment can involve dismissal, harassment, damage to reputation or financial loss. If a threat occurs, preserve its exact words and context in the restricted file. Keep relevant correspondence, changes to duties or contracts and evidence of resulting loss.

Tell your independent lawyer promptly and consider reporting the threat through the appropriate authority. Seek urgent police help for an immediate safety risk. Court remedies can include compensation or injunctions where the legal conditions are met. An investigation or compensation award is not automatic.

Anonymous reporting is possible, but the surrounding facts can still reveal the source. Avoid promising complete anonymity to someone who approaches your practice. Before the next disclosure, confirm the recipient, the information they need and the lawful basis for sharing anything that could identify the whistleblower.