Is It Legal to Hire an Offshore Virtual Assistant in Australia?
Yes, hiring an offshore VA is legal in Australia. Here's how super, PAYG, payroll tax, the Privacy Act and the managed-agency model actually work.
The short answer
Yes, it is legal for an Australian business to hire an offshore virtual assistant (VA). No law prevents you engaging someone overseas to do admin, support or back-office work for your business. The questions worth getting right are not “can I?” but “how is this taxed?”, “is the working relationship classified correctly?” and “what are my privacy obligations when I share customer data?”
This page is general information, not legal or tax advice. For your specific situation, check with the ATO, Fair Work, the OAIC, or a qualified adviser.
Tax and super: what usually applies
In the typical case, a Manila-based VA who is a foreign resident for tax purposes and performs all work in the Philippines generates none of the usual wage-based obligations for an Australian client. Here is why.
Superannuation. The ATO states plainly that an employer is not required to make super contributions for a foreign resident for tax purposes who is paid to do work outside Australia. There is a wrinkle worth knowing: under section 12(3) of the Superannuation Guarantee (Administration) Act 1992, a contractor on a contract “wholly or principally for their labour” can be deemed an employee for super. The case-law test (from Dental Corporation v Moffet and the ZG Operations / Jamsek line) asks whether there is a contract, whether more than half its value is for the person’s labour, and whether they must work personally without delegating. But even where all three limbs are met, the separate residency-and-location exclusion still removes the super liability for a foreign resident working outside Australia. So the labour test does not create a super obligation for an offshore non-resident VA.
PAYG withholding. The ATO says withholding is unlikely to be required for payments to a foreign-resident employee for services performed outside Australia, unless the work falls into special categories (entertainment, sports, construction or gaming junkets) or the income is Australian-sourced with a taxing right. General admin and support work performed and sourced overseas does not fall into those categories, so no PAYG withholding is required.
Payroll tax. Payroll tax is a state and territory tax on wages connected to services performed in Australia. Under the harmonised nexus rules in the Payroll Tax Act 2007 (adopted across most states, though Western Australia has historically differed), wages for services performed wholly outside Australia for a continuous period of more than six months are exempt, and once that six-month threshold is passed, the first six months are also exempted. The timing point matters: until the engagement has run beyond six months offshore, the exemption is not yet confirmed, so factor that in for short engagements. For an ongoing VA performing all services in the Philippines, the wages are not Australian taxable wages.
GST. Buying services from an offshore supplier can trigger the reverse charge, requiring you (not the supplier) to self-assess 10% GST. But the reverse charge does not apply where the acquisition is for a fully creditable business purpose. For an ordinary business buying VA services for its taxable operations, the acquisition is fully creditable, so the net GST is nil. A real cost only arises if you make input-taxed supplies (such as financial services or residential rent) or use the service partly for private purposes.
The Privacy Act: your real obligation
If your VA touches customer details, emails, CRM records or payment data, the Privacy Act 1988 is where your genuine compliance work sits, not super or PAYG.
Australian Privacy Principle 8 (cross-border disclosure) permits sending personal information overseas, but it keeps you accountable. In practice that means:
- Take reasonable steps to ensure the overseas recipient handles the data consistently with the Australian Privacy Principles. Under APP 8, an act by the overseas recipient that breaches the APPs can be treated as your breach, so this is not a box-tick.
- Update your privacy policy to disclose that personal information may be disclosed to, or handled by, recipients overseas.
- Use a written data-handling and confidentiality clause covering security, permitted use, and what happens on termination.
- Apply least-privilege access: give the VA only the data the role genuinely needs, ideally through your own systems with logging, not by emailing spreadsheets around.
These steps apply whether you engage the VA directly or through an agency. A managed agency should already have data-handling terms, NDAs and access controls in place, but you remain accountable, so confirm it.
Classification risk: the Pascua caution
The clearest cautionary example is Pascua v Doessel Group Pty Ltd [2024] FWC 2669. A Philippines-based worker engaged directly from 2022 by a Queensland law firm to do paralegal and administrative work was found by the Fair Work Commission, in a decision in late 2024, to be an employee, not a contractor, despite a contract labelling her a contractor. (It was an employee-classification matter, not a tax or super case, and the remedy was decided separately.) The lesson: when you engage an offshore worker directly and the relationship looks like employment, a “contractor” label may not hold. Classification turns on the substance of the relationship.
How the managed-agency model keeps it clean
Engaging your VA through a managed agency changes the structure in your favour. The agency engages the VA as its contractor; your contract is with the agency for a service; and you pay a single GST or service invoice rather than wages. Because you are not the VA’s employer and do not pay the VA directly, the wage-based obligations (super, PAYG withholding, payroll tax) do not attach to you in the usual way. That service fee is also an ordinary deductible business expense under section 8-1 of the ITAA 1997, with no wages, super or PAYG split to manage.
This is the honest structural advantage, not a magic shield. The protection depends on the agency genuinely being the engaging party and bearing the worker relationship correctly, exactly the point Pascua turns on. Day-to-day substance still matters too: if you direct and control the VA exactly like an employee, the agency layer alone will not settle the question. Done properly, with the agency carrying the engagement, you get capacity without the employment overhead.
For the full picture on super and tax, see our pillar guide: Do you pay super and tax on a virtual assistant in Australia?. If you’d like us to walk through how a compliant, managed engagement would look for your business, book a discovery call.