A Director Penalty Notice (DPN) is a formal notice from the Australian Taxation Office that transfers a company’s unpaid PAYG withholding, GST, or Superannuation Guarantee Charge (SGC) obligations directly onto its directors as personal debt. Once issued, the ATO can pursue a director’s personal assets if the company fails to clear the liability within 21 days. We have seen the ATO issue more than 84,000 DPNs in FY2024-25, up from around 26,700 the prior year, so this is an enforcement tool the ATO is using at scale.[1]
Our founder, Nitin Saby, spent years inside the ATO as a Tax Counsel Network Law, Interpretation Specialist and Tax Specialist Executive before becoming a Tax Principal at a top-10 CAANZ firm. That vantage point shapes how we read DPN exposure: a personal financial crisis in the making for directors who act too slowly or not at all.
What a Director Penalty Notice Does
A DPN creates what the ATO calls a parallel liability. The director’s personal obligation mirrors the company’s unpaid debt, and any payment made against either reduces both simultaneously.[2] The notice covers three specific obligations:
- PAYG withholding: income tax withheld from employee wages but not remitted to the ATO
- Goods and Services Tax (GST): net GST reported on business activity statements (BAS) but unpaid
- Superannuation Guarantee Charge (SGC): compulsory employee superannuation contributions that went unpaid
If the company cannot satisfy the debt, the ATO can pursue the director personally through garnishee orders, legal proceedings, or bankruptcy action. Your bank accounts, vehicles, and real estate are all within reach.[2]
This letter marks the beginning of personal enforcement.
The Two Types of DPN: Standard and Lockdown
The distinction between a standard (non-lockdown) DPN and a lockdown DPN is the most consequential technical point in the entire regime. It determines whether you have genuine options or whether your personal liability has already crystallised.
Standard (non-lockdown) DPN is issued when the company has lodged its BAS, instalment activity statements (IAS), and SGC statements within the required timeframes but the underlying debts remain unpaid. Because the reporting obligations were met on time, the director retains four avenues to remit personal liability within the 21-day window: pay the debt in full, enter into a payment arrangement, appoint a voluntary administrator, or place the company into liquidation.[3]
Lockdown DPN is issued when the company failed to lodge those same returns within the required timeframes. For PAYG withholding and GST, the critical threshold is three months after the due date. For SGC, the threshold is 28 days after the due date of the SGC statement.[3] Once a lockdown DPN is issued, the only way to remit personal liability is to pay the debt in full. Appointing an administrator or liquidator will not help. The options that exist for a standard DPN simply do not apply.
Most directors who end up in lockdown territory did not realise they were heading there until the notice arrived.
Why Timing Is Everything for Director Penalty Notices
The 21-day clock starts the moment the ATO posts the notice to the director’s residential address registered with the Australian Securities and Investments Commission (ASIC), regardless of when the director physically receives it.[2] Postal delays, interstate travel, or a change of address that was never updated with ASIC all eat into that window without pausing it.
Three timing traps cause the most damage in practice:
The ASIC address trap. If your registered address with ASIC is outdated, the DPN is still legally valid and the 21-day period still runs. You can miss the entire window without ever seeing the letter.
The lodgement history trap. The type of DPN you receive is determined by decisions made months or years before the notice arrives. By the time a lockdown DPN lands, the options that would have been available under a standard DPN are already gone. Lodgement compliance is the variable that determines how much personal exposure you carry.
The resignation trap. Stepping down from the board does not extinguish personal liability for obligations that accrued during your tenure as a director. Former directors remain exposed for the periods they held office.[2]
We cover the broader pattern of escalating ATO enforcement in our article on DPNs coming faster and more often than ever, which sets this regime in the context of the ATO’s wider debt recovery posture.
What Directors Can Do Within the 21-Day Window
For a standard DPN, the 21-day window is real and usable, provided you move immediately. The four options available are:
- Pay the debt in full. The company or the director satisfies the outstanding liability. Personal liability is remitted.
- Enter a payment arrangement. The ATO may agree to a structured repayment plan, though this is discretionary and requires active negotiation.
- Appoint a voluntary administrator. Placing the company into voluntary administration within the 21-day period can remit the director penalty for standard DPN liabilities.
- Place the company into liquidation. Commencing a creditors’ voluntary winding up within the window achieves the same remission for standard DPN amounts.
For a lockdown DPN, none of options 3 or 4 apply. Payment in full is the only path to remission of personal liability. Understanding which type of DPN you have received is therefore the first task, and it requires examining the company’s lodgement history against the relevant timeframes, alongside the face of the notice itself.[3]
Our ATO dispute resolution service covers the full spectrum of ATO enforcement responses, including DPN strategy, objections, and negotiated outcomes.
How the ATO Decides to Issue a DPN
The ATO does not issue DPNs at random. The regime is triggered by specific lodgement and payment failures, and the ATO’s systems flag these automatically. Understanding the ATO’s internal decision logic is precisely where our insider knowledge adds value.
The ATO monitors BAS, IAS, and SGC lodgement dates continuously. When a company falls behind on both lodgement and payment, the system identifies which obligations have crossed the lockdown thresholds and which have not. That classification determines the type of DPN the ATO issues, and it is made before the notice is printed.[2]
Directors of privately owned groups and founder-led businesses frequently discover DPN exposure during a broader ATO audit or review, at which point the lodgement history for prior periods becomes highly relevant. We explain how the ATO selects targets for compliance action in our piece on how the ATO selects who to audit, which is worth reading alongside this article.
For SMEs and sole traders operating through a company structure, the practical takeaway is straightforward: BAS and SGC lodgement deadlines are not administrative inconveniences. They are the variables that determine whether a future DPN gives you options or removes them entirely.
Protecting Yourself Before a DPN Arrives
The most effective DPN strategy is the one that happens before the ATO sends anything. For directors of SMEs and privately owned groups, that means three concrete governance practices:
Treat lodgement deadlines as non-negotiable. Late lodgement is the mechanism that converts a manageable standard DPN risk into a locked-down personal liability. A company that lodges on time, even when it cannot pay immediately, preserves the director’s options.
Keep your ASIC address current. The 21-day clock runs from the date of posting to your registered address. An outdated address does not pause the clock; it simply means you lose days you cannot recover.
Seek specialist advice at the first sign of cash flow pressure. Directors who engage a specialist when the company first falls behind on BAS payments have far more room to manoeuvre than those who wait for the DPN to arrive. The six stages of a tax dispute article outlines how ATO enforcement typically escalates and where early intervention makes the most difference.
If a DPN has already arrived, contact us immediately. The 21-day window is not a negotiating timeline; it is a hard legal deadline, and the options available on day one are not available on day 22.
Frequently Asked Questions
How does a Director Penalty Notice work?
A DPN creates a parallel personal liability for a company director, mirroring the company’s unpaid PAYG withholding, GST, or SGC obligations. The ATO posts the notice to the director’s ASIC-registered address, and the director has 21 days to act. Any payment made against the company’s debt or the director’s personal liability reduces both simultaneously. If no action is taken, the ATO can pursue the director’s personal assets through garnishee orders, legal proceedings, or bankruptcy action.
Can you get out of a Director Penalty Notice?
For a standard (non-lockdown) DPN, yes, personal liability can be remitted within the 21-day window by paying the debt, entering a payment arrangement, appointing a voluntary administrator, or placing the company into liquidation. For a lockdown DPN, the only path to remission is full payment of the debt. The type of DPN you receive depends entirely on whether the company lodged its returns on time before the notice was issued, so the answer to this question is often determined by decisions made months earlier.
What is a Director Penalty Notice issued by the ATO?
A DPN is a formal enforcement notice the ATO issues to hold company directors personally liable for specific unpaid company tax and superannuation obligations: PAYG withholding, GST, and the Superannuation Guarantee Charge. It is one of the ATO’s primary debt recovery tools, and its use has grown sharply, with more than 84,000 notices issued in FY2024-25 alone. The notice is not a warning; it is the start of personal liability enforcement.
How long is a director liable after resignation?
Resignation from a company’s board leaves personal liability intact for obligations that accrued during the period of directorship. A former director remains exposed to DPN liability for PAYG withholding, GST, and SGC amounts that were due while they held office. The ATO can issue a DPN to a former director for those periods even after they have left the board. Liability attaches to the tenure itself.
What is the difference between a standard and a lockdown DPN?
A standard DPN is issued when the company lodged its returns on time but left the underlying debt unpaid. It gives directors 21 days and four options to remit personal liability. A lockdown DPN is issued when the company failed to lodge returns within the required timeframes: three months after the due date for PAYG withholding and GST, or 28 days for SGC. Once locked down, the director’s only option is to pay the debt in full. Voluntary administration and liquidation do not remit lockdown liability.
[1] de Jonge Read, “Director Penalty Notice (DPN) Australia: What To Do in 21 Days,” https://djra.com.au/faqs/director-penalty-notice/, FY2024-25 DPN issuance volume figures.
[2] Australian Taxation Office, “Director penalties,” https://www.ato.gov.au/individuals-and-families/paying-the-ato/if-you-don-t-pay/firmer-action-we-may-take/director-penalty-regime, parallel liability definition, 21-day rule, ASIC address rule, resignation liability.
[3] Aptum Legal, “Standard vs Lockdown Director Penalty Notices,” https://aptumlegal.com.au/blog/standard-vs-lockdown-director-penalty-notices-what-every-director-needs-to-know/, lodgement timeframe thresholds triggering lockdown classification and remission options.