Two limbs. That is the whole difference between an offshore engagement that sits outside the Fair Work Act and one that quietly sits inside it, and most firms that get caught fail on the first limb rather than the second.

Offshore staffing is legal in Australia. No law stops an Australian business from engaging people who live and work overseas, and thousands of firms do it. But "is it legal" is the wrong question to spend your time on, because the answer is yes and it tells you nothing useful. The question that actually matters is narrower: which Australian obligations follow the work across the border, and which ones stay behind?

Four areas do the real work here. Employment law, tax, privacy, and, if you hold a registration, your professional code. Here is how each one lands.

The short answer, and the better question

There is no offshore staffing licence in Australia, no approval process, and no register you have to join. What exists instead is a set of general obligations that apply depending on how the arrangement is structured and what data moves through it. Get the structure right and the compliance burden is modest. Get it wrong and you can end up with Australian employment obligations you never budgeted for, attached to a person you thought sat entirely outside the system.

Employment law: the two limb test that catches people out

The Fair Work Act applies to Australian based employees of Australian employers. Section 35(2) defines that term broadly, and it can reach employees whose work happens entirely overseas.

There is an exception, and it has two limbs. The employee must be engaged outside Australia, and the employee must perform their duties outside Australia. Both have to be satisfied. Miss either one and the exception does not apply.

The second limb is usually easy. Someone living and working in Colombo or Manila is plainly performing duties outside Australia. The first limb is where firms come unstuck, because "engaged outside Australia" is decided by ordinary contract law principles. Where was the offer made? Where was it accepted? Where was the contract signed and received? Firms routinely assume the exception applies simply because the work happens offshore, then discover the engagement itself was formed in Australia.

If the exception does not apply, parts of the Fair Work Act can attach. Termination processes in particular need to comply with both the Australian framework and the law of the country where the person actually lives.

Courts and the Fair Work Commission look at substance, not labels. Reporting lines, whether the person attends Australian management meetings, whether they follow Australian workplace policies, whether they are paid from an Australian bank account through Australian payroll, and whether super is being contributed under Australian law all point toward a connection with Australia. Working occasionally with an Australian team is not enough on its own. But the more a person functions as part of the Australian business rather than a distinct foreign operation, the stronger the connection becomes.

Tax and superannuation: what does not follow the work

This is the part most firms are relieved by, and it is broadly good news.

PAYG withholding generally does not apply where the worker is a non-resident deriving foreign sourced income. Superannuation guarantee obligations generally do not apply where all the work is performed overseas by a non-resident. Double tax agreements matter here as well. The agreement between Australia and the Philippines, for instance, generally prevents Australia from taxing employment income unless the work is performed in Australia.

Two cautions attach to that. The first is that these positions depend on the worker genuinely being a non-resident performing work genuinely outside Australia, which loops straight back to the substance question above. The second is that obligations in the worker's own country do not disappear because Australian ones do not apply. Local income tax, local social security, local payroll reporting and, in some structures, permanent establishment risk all sit on the other side of the arrangement and need advice in that jurisdiction.

There is also a classification question underneath all of this. Since the August 2024 changes to the Fair Work Act, the characterisation of a worker as employee or contractor turns on the real substance of the relationship rather than the wording of the contract. Calling someone a contractor does not make them one, and misclassification can create exposure across tax, payroll tax and workers compensation.

Privacy: the obligation that does follow the data

This is the one that follows you across the border, and it is the area firms underestimate most.

Australian Privacy Principle 8 governs cross border disclosure of personal information. Where it applies, you have to take reasonable steps to ensure the overseas recipient handles the information in line with the Australian Privacy Principles. Section 16C then makes you accountable for acts or practices of that overseas recipient which would have breached the APPs. In plain terms, if your offshore provider mishandles personal information, that can land on you.

Worth noting: a disclosure happens when an overseas recipient accesses the information, whether or not the data itself is stored in Australia. Keeping the server onshore does not, by itself, take you outside APP 8.

There are exceptions. One is where the recipient is subject to a law or binding scheme that protects the information in a substantially similar way to the APPs. Another is consent, but the consent exception is narrower than it sounds. You have to expressly inform the individual that if they consent, APP 8 will not apply, and the guidance is clear that this should include telling them that you will not be accountable under the Privacy Act and that they will not be able to seek redress under it. A vague line in a privacy policy saying information "may be disclosed overseas" does not do that job.

If you are a registered tax or BAS agent

A further layer applies, and it is specific.

The Tax Practitioners Board has published guidance on offshoring, TPB(PN) 2/2018 and the accompanying guidance statement. Under Code item 6, you need your client's permission before disclosing their information, and the guidance is unusually specific about what that permission has to cover. You must tell the client what type of information will be disclosed, to whom, and where, including where data will be stored on overseas servers. This can sit in an engagement letter or another signed agreement. Generic wording will not satisfy it.

Under Code item 7, the service still has to be provided competently, and adequate supervision and control arrangements have to be in place. That obligation does not soften because the work went offshore or because the person doing it is not a registered agent. The onus sits with you.

More recently, section 40 of the code obligations requires tax practitioners to establish and maintain a system of quality management giving reasonable confidence of compliance. Firms using outsourced services remain responsible for quality control of that arrangement.

Where firms actually get caught

In practice the failures cluster in a few predictable places. Engagement documents signed in Australia when the firm assumed otherwise. Privacy notices that gesture vaguely at overseas disclosure without meeting the consent standard. Engagement letters that mention offshoring in general terms but never name what data goes where. Contractor labels applied to relationships that function as employment. And supervision that exists on paper but has no reviewer, no checkpoint and no record.

None of these are exotic. They are all documentation problems, which is the good news, because documentation problems are fixable before they become disputes.

What a compliant arrangement looks like on paper

At minimum: engagement structured and documented deliberately, with attention to where the contract is formed. A written confidentiality agreement with the offshore provider. IT security controls covering both sides of the arrangement. Client engagement letters that name the information disclosed, the recipient and the location, if you are a registered agent. Privacy notices that meet the APP 8 standard rather than gesturing at it. Named supervision with an actual review step. Tax advice in both jurisdictions before the first person starts.

That is a real list, but it is a one time setup, not an ongoing burden. Firms that do it properly at the start rarely revisit it.

The honest caveat

This is general information, not legal or tax advice. The application of every point above turns on the specific facts of your arrangement, and the Fair Work Commission has been explicit that these are practical, fact based assessments rather than tick box tests. Before you engage anyone offshore, get advice on your particular structure from an employment lawyer and a tax adviser, and get advice in the worker's jurisdiction too.

What you should take from this is not a legal conclusion. It is that offshore staffing is lawful and well trodden in Australia, the obligations are knowable, and almost all of the risk is in the structure and the paperwork rather than in the idea itself.