Most private lending legal risks in Victoria sit in the security documents: the mortgage, the general security agreement, the guarantee. A Director Penalty Notice (DPN) sits somewhere else. It is a statutory instrument that moves a company’s unpaid tax onto the director personally, and it does so without asking the lender, without registering on the title, and without appearing in any of the usual searches.
A DPN does not compete with your mortgage in the ordinary sense. It changes the borrower you thought you were dealing with.
What a DPN Actually Does
The Australian Taxation Office issues a DPN under the Taxation Administration Act 1953. It applies to a defined set of company obligations: PAYG withholding, GST, the superannuation guarantee charge (SGC), and net amounts owing from Business Activity Statements. Where those obligations are unmet, the ATO can make each director personally liable for the amount.
Personal liability is the point. It bypasses the corporate veil that ordinarily shields directors from company debts. If the company cannot pay, the ATO can pursue the director’s own savings, property and other assets.
For a lender, the practical question is not whether the ATO will recover. It is what happens to your borrower’s financial position, and to any security you hold over the director’s assets, once the notice lands.
Lockdown and Non-Lockdown: The Distinction That Matters
The ATO issues two categories of DPN, and the difference turns on lodgment timing rather than the size of the debt.
A non-lockdown DPN arises where the company lodged its BAS, IAS or SGC statement on time, or within three months of the due date, even if the underlying debt remains unpaid. In that case the director has real choices within the response window: pay the debt, appoint an administrator, appoint a small business restructuring practitioner, or begin winding up the company.
A lockdown DPN arises where reporting is more than three months late, or where an SGC statement was not lodged by its due date. Here the options collapse. Full payment is the only route that removes personal liability. Appointing an administrator or liquidator does not help.
For a lender, the two notice types produce different recovery outcomes. A borrower director facing a lockdown notice is in a materially different position from one facing a non-lockdown notice, and the difference is not visible from the company’s accounts.
The 21-Day Window and Why It Compresses Your Options
Once issued, a DPN gives the director 21 days to act. The clock runs from the date of issue, not the date of receipt. The ATO sends the notice to the director’s ASIC-registered address, which may not be the company’s trading address or the address on your loan documents.
Two consequences follow for lenders.
First, a borrower may be partway through the response window before they tell you anything. Directors often spend the first week or two seeking accounting advice, and lenders hear about it later.
Second, the deadline is hard. If the director does nothing, the ATO can move against them personally through garnishee notices on bank accounts, bankruptcy proceedings, or referral to a collection agency. Any of those outcomes affects the borrower’s capacity to service your facility.
Where the ATO Sits in the Queue
Lenders sometimes assume the ATO ranks behind secured creditors. That is only partly right, and the qualification matters.
For unsecured company debts, the ATO generally ranks alongside other unsecured creditors. But a DPN operates differently. It creates a personal liability, and the ATO’s recovery powers against the individual, including garnishee and bankruptcy, sit outside the company’s creditor waterfall entirely. The director’s personal assets can be reached even where the company itself has no distributable surplus.
Where you hold a mortgage or charge over the director’s personal assets, whether by way of guarantee or third-party security, the ATO’s recovery against those same assets becomes a live concern. The interaction between your security and the ATO’s statutory recovery is not always resolved by priority rules alone. It depends on the asset, the nature of the security and the sequence of events.
This is the same structural issue that arises with statutory charges that erode security value. A charge you did not create can still affect what your security is worth.
Due Diligence for Private Commercial Loans
DPN exposure rarely appears in standard due diligence. A title search will not show it. A company search will not show it. PPSR registration will not show it. The notice is issued to an individual, not registered against any asset.
What a lender can do is build the question into the file.
- Ask directly whether the borrower or any guarantor director has received ATO correspondence about unpaid PAYG, GST or superannuation.
- Check lodgment history where the borrower will provide it. Late BAS lodgments are the precursor to lockdown notices.
- Consider whether the loan structure relies on the director’s personal assets as the real security, and if so, how exposed those assets are to ATO recovery.
- Build reporting obligations into the facility. A requirement to notify the lender of any ATO notice within a short period gives you time to respond.
None of this eliminates the risk. It shortens the period during which you are unaware of it.
How Lenders Respond When a DPN Appears
The first step is to establish which type of notice has been issued. That determines whether the borrower has options or whether full payment is the only path.
Where the notice is non-lockdown and the window is still open, the borrower may have room to negotiate. A payment arrangement with the ATO is possible in some cases, though the ATO can refuse where there is a history of non-compliance. General Interest Charge continues to accrue on the outstanding balance throughout any arrangement, and a payment plan does not cancel the DPN itself. The notice remains live until the debt is paid in full.
Where the notice is lockdown, the analysis is narrower. Full payment is the only route that clears the director’s personal liability. That payment can come from any source, including refinance or new lending, which is where a private lender may find itself both exposed on the existing facility and presented with a new opportunity.
If the borrower proposes to use a new loan to pay out the ATO, the lender needs to understand the structure. If the new facility is secured against the same assets the ATO is pursuing, the priority question resurfaces. If it is secured against different assets, the analysis changes. Either way, the documentation needs to reflect what is actually being secured and against what risk.
Where the borrower instead proposes administration or liquidation, the position depends on the notice type. For non-lockdown notices, appointing an administrator within the window can remove personal liability. For lockdown notices, it does not. A lender holding a guarantee from a director who assumes administration will protect them personally may find that assumption is wrong.
The intercreditor position can also shift. If the ATO is pursuing the director personally while the company continues to trade, the director’s attention and resources are divided. That affects the practical reality of the loan, even where the legal position is unchanged.
Resignation and the Limits of the Corporate Veil
Directors sometimes assume resignation solves the problem. It does not, at least not reliably.
Liability for non-lockdown notices typically attaches based on when the relevant obligations fell due and when the reporting period closed. Resigning before those points may affect whether a director is pursued, but the timing rules are strict and the outcome depends on the specific facts. Once the DPN has been issued, resignation does not remove liability. The ATO can still pursue the former director personally.
For a lender relying on a guarantee from a director who has resigned, this matters. The guarantee may still be enforceable, but the director’s willingness and capacity to meet it may have changed.
The Victorian Legal Services Board’s risk outlook identifies mortgage financing as an emerging risk area for lawyers’ ethical conduct, which is relevant to how lenders and their advisers document and monitor their exposures. The ASIC key issues outlook similarly notes heightened scrutiny of private credit arrangements.
Practical Takeaways for Lenders
A DPN is not a matter you can leave to the borrower’s accountant. It affects the borrower’s personal balance sheet, which is often the real security behind a private commercial loan.
Three practices appear in files where DPN risk is managed well. Lenders ask about ATO lodgment history before settlement, not after. They require notification of any ATO notice within a defined period. And they understand, before a problem arises, whether their security is over company assets, personal assets, or both.
Where a DPN has already been issued, the priority is speed. The 21-day window is short, and the options narrow as it closes. Understanding which type of notice is in play, and what it means for the security you hold, is the starting point.
Book an appointment with one of our Lawyers to discuss your specific needs.
Book a ConsultationA Note on the Information We Share
Reading this information does not create a lawyer-client relationship between you and SLK Lawyers. This only occurs with a formal written agreement. Content is current at publication and applies to Victorian law unless stated otherwise. It is general information only and not a substitute for specific legal advice. Strict time limits apply to legal claims. You should seek immediate legal advice on your specific situation to ensure your rights are protected.