USA
Canada
Australia
Introduction
Tax agent outsourcing obligations have become a genuine compliance question for Australian practices, not just a back-office decision. As more firms use outsourced bookkeepers, offshore analysts and cloud-based tools including outsourcing partners like NCSGX Australia to keep up with client demand, the Tax Practitioners Board has been explicit: it regulates who is accountable for a tax agent service, not where that work is physically performed. Understanding exactly what that means, and where practices most often get it wrong, is the difference between a compliant arrangement and a Code of Professional Conduct breach.
What the TPB Means by Outsourcing and Offshoring
The TPB draws a clear line between two related but distinct arrangements in its outsourcing and offshoring guidance. Outsourcing is entering into an arrangement with a third party a bookkeeping firm, an IT provider, an external reviewer to provide a specific process, function or activity on the practice’s behalf. Offshoring specifically means using overseas-based staff or contractors, such as offshore bookkeepers or data-processing teams, to deliver tax agent or BAS services.
A “third party” under this framework is broader than most practitioners assume, it captures outsourced contractors, related entities, service trust structures, and even cloud storage providers holding client data.
Who These Obligations Apply To
These obligations apply to every registered tax agent and BAS agent individual, company or partnership regardless of practice size. A sole practitioner using one offshore bookkeeper carries the same disclosure, supervision and record-keeping duties as a large multi-partner firm running an entire offshore team.
Which Legal and Regulatory Obligations Apply to Tax Agent Outsourcing?
Three separate frameworks intersect here. The Tax Agent Services Act 2009 and its Code of Professional Conduct Determination set out the core duties of honesty, confidentiality and competence that apply regardless of who is doing the work this is where the TPB Code of Professional Conduct outsourcing provisions sit. Sitting alongside this, the Privacy Act’s Australian Privacy Principle 8 governs any cross-border disclosure of client personal information directly relevant to offshoring client data, as accountants Australia-wide increasingly do.
Disclosure Obligations to Clients
Clients are entitled to know, in plain terms, whom their information is being disclosed to and where including whether that disclosure occurs overseas and where the data will ultimately be stored. This isn’t a courtesy; it’s a documented requirement, typically satisfied through engagement letters, signed agreements or clear written correspondence before any offshore work begins.
Consent and Confidentiality of Client Information
Written client consent to share information with third-party accountant arrangements should be obtained before, not after, data crosses that boundary. Under APP 8’s cross-border disclosure rules, a practice generally remains accountable for how an overseas recipient handles that information, unless reasonable contractual steps are in place or a valid exception applies so consent alone doesn’t remove the practice’s ongoing responsibility.
Supervisory Arrangements and Quality Control
Can accountants outsource work overseas and still meet their obligations? Yes but only with supervision that’s real, not ceremonial. The TPB’s guidance on supervision, competency and quality management makes registered practitioners fully responsible for services delivered on their behalf, whether by employees, contractors or offshore staff.
In practice, that means:
- A sufficient number of registered practitioners actively reviewing work, matched to actual workload volume
- Documented training in Australian tax law for any offshore or outsourced staff
- Genuine quality assurance and review processes not a single signature applied to a large batch of completed work
- Registered practitioners maintaining current technical knowledge and taking reasonable care in applying tax law correctly
Due Diligence on the Offshore or Outsourced Provider
Before engaging any provider, practices should confirm IT security controls (encrypted transmission, access restrictions, audit trails), confidentiality agreements covering the specific engagement, the provider’s relevant competency, and often overlooked whether the practice’s own professional indemnity insurance actually extends to outsourced or offshore work.
Record-Keeping Requirements
Registered agents must keep records that correctly show the nature, scope and outcome of every tax agent service provided, retained for at least five years, in English or readily convertible to English. Where a third party performs part of that work, the obligation to document it properly still sits with the registered practitioner outsourcing the task doesn’t outsource the record-keeping duty.
Common Compliance Gaps in Australian Practices
A few gaps show up repeatedly across TPB practice note outsourcing guidance and industry commentary:
- Relying on verbal client awareness instead of documented, written consent
- Assuming cloud accounting software automatically satisfies disclosure and privacy obligations
- One registered agent reviewing an unrealistic volume of offshore-prepared work a pattern the TPB has previously characterised as “registration for rent”
- Never reviewing whether professional indemnity insurance actually covers outsourced arrangements
- No documented separation between preparation, review and lodgement stages
Compliance Checklist for Practices Using Offshore or Outsourced Support
- Written client disclosure naming the third party, location, and data handling
- Documented client consent obtained before any offshore work begins
- Engagement letter or agreement covering confidentiality and data security
- Supervision ratio matched to actual review workload, not just sign-off
- Training records for offshore or outsourced staff on Australian tax requirements
- PI insurance confirmed to cover outsourced service delivery
- Five-year record-keeping process covering work performed by third parties
How NCSGX Can Help
NCSGX Australia works as an extension of accounting and bookkeeping practices under a structure built around the supervision and quality-management expectations outlined above, documented review workflows, trained staff, and clear separation between preparation and sign-off, so the registered agent’s oversight stays genuine rather than nominal.
For practices weighing up outsourcing tax agent work overseas against building an in-house team, our bookkeeping and back-office support is set up with the disclosure documentation, IT security controls and client-consent processes practices need to have ready before engaging any third party. Our broader finance and accounting operations support can also help firms document these arrangements from day one, rather than retrofitting compliance after the fact.
Conclusion
Tax agent outsourcing obligations aren’t a barrier to using offshore or outsourced support, they’re a framework for doing it properly. Practices that document disclosure, secure genuine written consent, maintain real supervision and keep proper records can use outsourcing to manage capacity pressures without taking on unnecessary regulatory risk.
Frequently Asked Question (FAQ)
Does a tax agent need written client consent before sending data offshore?
Yes. Clients should give documented consent through an engagement letter, signed agreement or clear written correspondence before any of their information is disclosed to an offshore provider.
Does using cloud accounting software hosted overseas count as offshoring under TPB rules?
It can. Cloud storage may be treated as a “third party” arrangement requiring disclosure, particularly where an overseas-based provider can access client data, though contractual control arrangements can affect how it’s classified.
Does the disclosure obligation apply to onshore outsourcing as well as offshoring?
Yes. Disclosure obligations apply whenever a third party is engaged to provide services on the practice’s behalf, regardless of whether that third party is based in Australia or overseas offshoring simply adds the cross-border data element.
Who is responsible if an offshore provider causes an error in a lodged return?
The registered tax or BAS agent remains fully accountable. Engaging a third party, onshore or offshore, does not transfer professional responsibility for the accuracy of lodged returns or client advice.
Do BAS agents have the same outsourcing obligations as tax agents?
Yes. The disclosure, consent, supervision and record-keeping obligations apply equally to registered BAS agents using outsourced or offshore support for BAS-related services.
Does the engagement letter need to name the offshore provider?
Best practice is to specify whom and where the disclosure will be made, including the offshore provider or location, rather than referring to outsourcing in general terms this gives clients a clear, accurate picture of who is handling their information.
