SME legal essentials and what Australian small business owners need to get right

Running a small business means carrying a running list of things you know you should sort out: the contracts, the registrations, the policies, the deadlines. Most of the legal trouble that hits Australian SMEs is not exotic. It comes from a handful of predictable gaps, a brand name that was never checked, a hire made on a handshake, customer terms that were never written down. This guide walks through the foundations you need to get right, and flags the points where the law is more specific than the general advice you usually hear.

What counts as an SME (and why the label doesn't decide your obligations)

The Australian Bureau of Statistics counts businesses in employment size bands, from micro businesses of 0 to 4 employees through to small (5 to 19), medium (20 to 199) and large (200 or more). It treats businesses with fewer than 20 employees as small businesses, and that band alone accounts for more than 97% of all Australian businesses. When people talk about SMEs, they usually mean businesses with fewer than 200 employees.

The important thing to understand is that "SME" is a statistical label, not a legal category. The laws that affect you are triggered by what you actually do, and each law draws its own line:

Corporations Act: s 45A of the Corporations Act 2001 (Cth) distinguishes "small" from "large" proprietary companies. A company is large if it satisfies two of three tests: consolidated revenue of $50 million or more, gross assets of $25 million or more, or 100 or more employees. Cross that line and your financial reporting and audit obligations change, even though you might still think of yourself as an SME.
Privacy Act: the Privacy Act 1988 (Cth) has its own test under s 6D. A business is a "small business" for the purposes of its exemption if its annual turnover for the previous financial year was $3 million or less.
Australian Consumer Law: the consumer guarantees and unfair contract terms rules apply to businesses that supply goods or services to consumers, with no size threshold at all.

So the honest answer to "am I an SME?" is "which law are you asking for?" The label won't tell you your obligations. Your activities will.

Choosing a structure: what it means for who pays when things go wrong

The first big decision is your business structure, because it decides who is personally on the hook if the business can't pay its debts:

Sole trader: the cheapest and simplest option, but there is no separation between you and the business. Business debts are your debts, and creditors can pursue your personal assets.
Partnership: two or more people share control and profits, but each partner is jointly liable for the partnership's debts, including debts another partner incurred.
Company: a separate legal entity. The company owes the debts, and shareholders generally are not liable beyond their investment. In return you take on ASIC registration, annual lodgements and directors' duties.
Trust: often used for asset protection and income distribution, but more complex to establish and administer, because a trustee (usually a company) holds the assets and carries the liability.

Most growing SMEs end up in a company, for limited liability and for credibility with customers and investors. You can change structure later, but it costs time and money, and it gets harder once contracts, leases and registrations are already in your own name or the business's name.

Registrations to get sorted before you trade

Before you take money from your first customer, work through these registrations:

ABN: an Australian Business Number is the base registration. You need one to register for GST, to register a business name, and to send tax invoices that let customers claim input tax credits.
Business name: registered with ASIC. If you trade under a name other than your own personal name (as a sole trader) or the company's legal name, you must register it, and it is an offence to trade under an unregistered business name. A business name is the name you trade under; a company name is the legal name of the company; they are separate registers. Registering a business name does not give you exclusive rights to the name, which is where trade marks come in.
GST: you must register once your GST turnover reaches $75,000 or more, and you have 21 days from the point you are required to register. GST is 10% on most goods and services. Non-profit bodies have a higher threshold, while taxi and ride-sourcing drivers must register regardless of turnover.
Company registration: if you are incorporating, the company is registered with ASIC and given an Australian Company Number. You also decide whether to operate under the default replaceable rules in the Corporations Act or under your own constitution.

Protecting your brand and the assets you sell on credit

Two areas of protection that SMEs routinely underuse:

Trade marks: before you spend money on branding, packaging and marketing, search the trade mark register at IP Australia to check the name and logo are not already taken in your industry. A registered trade mark gives you exclusive rights across Australia in the classes you register, and it is the practical tool for stopping a competitor from trading on a name that looks like yours.
PPSR: the Personal Property Securities Register is the government's public register of security interests in personal property. If you supply goods on credit, sell with retention of title until you are paid, lease or hire out equipment, or lend money, registering your interest protects you if the buyer or borrower goes under. An unregistered interest can be lost to other creditors or to a liquidator, which is why registration timing matters.

The core documents every SME should have

Every business is different, but these documents are the baseline. Tailor them to your industry and keep them current as the business changes:

Customer terms: set out scope, pricing, payment timing, delivery, warranties, liability limits and what happens on dispute. For an online business, your website terms and conditions serve this function.
Supplier agreements: lock in pricing, delivery timeframes, quality standards, IP ownership and liability, so your supply chain matches the promises you make to customers.
Employment contracts: record role, pay, duties, confidentiality, IP ownership and termination. A written contract at offer stage prevents most disputes about what was agreed.
Privacy policy: explain what personal information you collect, why, and how it is stored and shared. It is a legal requirement for many businesses and an expectation for almost all customers.
Shareholders agreement: if you have co-founders, set the ground rules for decision-making, share transfers, exits and dispute resolution before there is a disagreement to argue about.
Company constitution: governs how the company operates day to day, including director powers, share classes and meetings. It is essential if you are moving beyond the default replaceable rules.
Non-disclosure agreement: protect confidential information when you explore partnerships, suppliers, hires or investment.

Consumer law and privacy: the customer-facing rules

Consumer law

If you sell goods or services, the Australian Consumer Law (ACL), which is Schedule 2 of the Competition and Consumer Act 2010 (Cth), applies from your very first sale. Three parts matter most:

Misleading or deceptive conduct: under s 18 of the ACL, you must not, in trade or commerce, engage in conduct that is misleading or deceptive or is likely to mislead or deceive. This covers advertising, website copy, sales pitches and even what you say on the phone. Overpromising is the classic trap: a claim that is literally true but leaves the wrong impression can still breach s 18.
Consumer guarantees: goods and services supplied to a consumer carry automatic guarantees that cannot be contracted out of. Goods must be of acceptable quality, fit for their purpose and match their description; services must be provided with due care and skill and be reasonably fit for the purpose the customer made known. A person is a "consumer" under s 3 of the ACL for goods or services priced at $100,000 or less, or of a kind ordinarily acquired for personal, domestic or household use. Where a guarantee fails, the customer is entitled to a remedy, which is why blanket "no refunds" signs for faulty goods breach the law.
Unfair contract terms: in standard form consumer and small business contracts, a term is void under s 23 of the ACL if it is unfair. Since the 2022 reforms, proposing or relying on an unfair term can also attract civil penalties, so it is no longer just a drafting problem.

Privacy

If you collect personal information, the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply. The Act's small business exemption under s 6D applies to businesses with annual turnover of $3 million or less, but it is narrower than it sounds: it does not apply if you handle health information as a service provider, trade in personal information, or report to a credit reporting body, among other carve-outs. Reform of the Act is ongoing and the future of the exemption is expected to change, so the position is worth checking rather than assuming. Even where the exemption applies, a clearly worded privacy policy is expected by customers, by payment providers, and by the platforms most online businesses rely on.

Employment and company obligations that keep coming back

Fair Work

If you employ staff, the Fair Work Act 2009 (Cth) sets minimum standards you cannot contract below:

The National Employment Standards: apply to all employees in the national system and cover maximum weekly hours, annual leave, personal and carer's leave, parental leave, notice of termination and redundancy pay, and more. Awards, contracts and enterprise agreements cannot undercut them.
Modern awards: set minimum pay rates, hours and penalty rates for most industries. You need to know which award applies to each role, and that it is being applied correctly.
Onboarding: every new employee must receive a copy of the Fair Work Information Statement, and casual employees also receive the Casual Employment Information Statement.
Record keeping: employers must keep time and wages records and issue pay slips, and the Fair Work Ombudsman actively audits small businesses.
Superannuation: the super guarantee is 12% of ordinary time earnings, and from 1 July 2026 employers must pay super on each payday rather than quarterly under the new Payday Super rules.

Company obligations

If you operate through a company, the Corporations Act adds ongoing duties:

Directors' duties: directors must exercise care and diligence (s 180), act in good faith in the best interests of the company (s 181), and not improperly use their position (s 182) or information (s 183). Breach can mean civil penalties, disqualification and, in serious cases, criminal liability.
Registers and records: companies must keep registers of members and officeholders, maintain financial records, and respond to ASIC lodgements and annual review requirements.

Licences and permits

Depending on your industry, state and territory licences, council approvals or specialised permits may be required before you can lawfully operate. Food handling, building, childcare, liquor and health services are common examples. The requirements vary by state, so check with the relevant regulator before launch rather than after.

The mistakes that cost SMEs the most

These are the recurring failures that drive most of the avoidable legal spend and disputes for small businesses:

Trading without written customer terms: Quotes and invoices that are light on terms leave scope, payment timing, refunds and liability open to argument. Make your terms clear and have customers agree to them before work starts or goods ship.
Overpromising in marketing: Marketing that overstates benefits or hides limitations can breach s 18 of the ACL even when the intent is innocent. Build a simple sign-off step into your content approvals.
Hiring on a handshake: Verbal agreements leave duties, confidentiality and IP ownership unrecorded. Put role-appropriate contracts in place at offer stage, aligned with any applicable award.
Skipping brand checks: A name or logo that clashes with an existing trade mark can force an expensive rebrand. Search before you spend, and consider registering your trade mark as marketing picks up.
Leaving cash flow protections weak: Vague terms, slow invoicing and unclear credit policies choke cash flow. Use clear payment terms, deposits where appropriate, and PPSR registrations to secure your position when you supply on credit.
Missing registration deadlines: GST registration has a 21-day window once the threshold is crossed, and super has its own due dates. The ATO charges penalties for late registration and late payment.

When an SME lawyer earns their fee

The foundations above are things you can largely do yourself with good templates and the government registers. A lawyer earns their fee at the judgement points:

Structure: which structure fits your liability, tax and growth plans, and what it costs to change later.
Contract drafting: customer terms, supplier agreements, employment contracts and shareholders agreements that carry real money need to be drafted or reviewed against your actual operations, not copied from a template.
Trade mark strategy: clearance searching and registration strategy, so you protect the brand you are building rather than discovering a conflict later.
PPSR registrations: registration details matter, and small errors can make a registration ineffective when you need it most.
Award and contract compliance: whether an award applies, whether your contract terms are compliant, and whether your standard terms contain unfair terms.
Privacy: whether the small business exemption applies to you, and how the reforms affect your obligations.

An SME lawyer can also review the documents you already have and tell you which ones are creating risk. At Artificer Legal we work with small and medium businesses on exactly this: setting up properly, and reviewing the contracts, policies and processes you already have in place.

Small business status won't shield you

The most misunderstood idea in this area is that being a small business keeps you outside most regulation. It does not. The Australian Consumer Law applies from your first sale, Fair Work obligations from your first employee, and the Privacy Act applies to many businesses well under the SME headcounts. The exemptions that do exist, like the privacy small business exemption, are narrower than they sound and are being wound back. The structure you choose, meanwhile, decides who pays if it all goes wrong: as a sole trader or partner that is you personally, while a company protects your personal assets but puts statutory duties on you as a director.

Get the foundations right early, and most of what follows is maintenance: a structure that fits, the right registrations, a small set of core documents, and a compliance rhythm that catches deadlines before they become penalties. The businesses that get into trouble are rarely the ones that ignored the law deliberately. They are the ones that assumed being small meant the law would not reach them.

If you would like help setting up your SME, reviewing your existing contracts, or working out which obligations apply to your business, contact Artificer Legal for a consultation.