Is a virtual assistant in Australia an employee or an independent contractor?

Whether a virtual assistant (VA) is an employee or an independent contractor in Australia depends on the terms of the written agreement and the nature of the working relationship. Following the High Court decisions in CFMMEU v Personnel Contracting Pty Ltd (2022) 275 CLR 165 and ZG Operations Australia Pty Ltd v Jamsek (2022) 275 CLR 254, the primary test focuses on the terms of the written contract. Key contractual indicators of independent contractor status include: the VA holding a valid ABN and invoicing for services; the VA controlling their own work methods, hours, and equipment; the VA being free to work for other clients; the engagement being for defined deliverables or a fixed retainer for a capped number of hours; and the VA bearing their own business costs. The Fair Work Ombudsman scrutinises arrangements where a VA works exclusively for one client, takes direction on how tasks are performed hour-by-hour, uses the client's equipment, and works during specific required hours — all of which are factors associated with employment. A well-drafted Virtual Assistant Contract that genuinely reflects an independent contractor relationship is the most important protection against a sham contracting finding.

What privacy obligations apply when a virtual assistant handles client data in Australia?

Virtual assistants routinely handle personal information — including client contact details, employee information, email correspondence, calendar details, and financial records — that is protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The Privacy Act applies to organisations with an annual turnover of more than $3 million, and to certain smaller businesses in regulated industries. For those covered by the Act, APPs require that personal information be collected only for a stated purpose, stored securely, not disclosed to third parties without consent, and handled in accordance with a published privacy policy. The Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act requires entities to notify affected individuals and the Office of the Australian Information Commissioner (OAIC) of eligible data breaches — those likely to cause serious harm. Even where the Privacy Act does not strictly apply (e.g. a small business engaging a VA), strong data security practices are essential because VAs typically have access to email accounts, cloud storage, CRM systems, and other platforms containing sensitive business and personal information. A VA Contract should specify required security measures, including multi-factor authentication, password management, and data breach notification obligations.

What happens to system access and data when a virtual assistant contract ends in Australia?

When a Virtual Assistant Contract ends, the client should immediately revoke the VA's access to all systems, platforms, and accounts. This includes email accounts (Google Workspace, Microsoft 365), CRM systems, social media accounts, cloud storage, project management tools, and any other platforms to which the VA had access. The client should change all shared passwords and revoke any authorised user access immediately on termination. A well-drafted VA Contract should require the VA to: (1) immediately cease using all Client systems on the date of termination; (2) delete or return all Client data in their possession within a specified period (e.g. 7 days); and (3) confirm compliance with these obligations in writing. The client should audit all systems to ensure the VA's access has been successfully revoked and check for any unexpected downloads, data transfers, or changes made before termination. Under the Privacy Act 1988 (Cth), any personal information held by the VA must be returned, destroyed, or de-identified when it is no longer needed for the purpose for which it was collected. Failure to properly manage off-boarding of a VA with access to sensitive systems is a significant data security and business continuity risk.

Can a virtual assistant in Australia work for multiple clients simultaneously?

Yes — a genuine independent contractor, including a virtual assistant, is free to provide services to multiple clients simultaneously. In fact, the right to work for multiple clients simultaneously is one of the key indicators of independent contractor status under the multi-factor test applied by Australian courts. A VA who works exclusively for a single client on a full-time basis, and who is economically dependent on that client, is more likely to be found to be an employee than a genuine independent contractor, regardless of the label applied by the parties. A Virtual Assistant Contract should expressly acknowledge the VA's right to provide services to other clients, subject to any confidentiality obligations and the requirement to avoid material conflicts of interest with the engaging client. The ability to provide services to other clients is also an important commercial protection for the VA — it means the VA is not economically dependent on a single client, which is an indicator of genuine business independence.

What authority can a virtual assistant be given to manage social media or communicate on a client's behalf?

A virtual assistant can be given authority to manage social media accounts and communicate on a client's behalf, but this authority should be clearly defined and limited in a written contract. Without clear limits, a VA who posts inappropriate content, responds to complaints incorrectly, makes commitments on the client's behalf, or discloses confidential information through a client's social media account can cause significant reputational and legal harm. A well-drafted Virtual Assistant Contract should specify: (1) which platforms the VA has access to (e.g. LinkedIn, Instagram, Facebook, X/Twitter); (2) what types of content the VA can publish without prior approval (e.g. pre-approved scheduled posts); (3) what actions the VA must flag to the client before responding (e.g. negative comments, complaints, media inquiries, unusual direct messages); (4) what the VA cannot do without explicit client approval (e.g. making public statements about the client's business, products, or pricing); and (5) how the VA should handle urgent situations (e.g. a social media crisis) outside of agreed working hours. The VA should also be prohibited from using the client's social media accounts for any personal purpose or in connection with any other client.

Virtual Assistant Contract (Australia) — Australia

Create a legally compliant Virtual Assistant Contract tailored to Australian law. Covers sham contracting compliance (Fair Work Act 2009 s357–359), ABN and GST requirements, data privacy and security (Privacy Act 1988, Australian Privacy Principles), system access and credentials, confidentiality, social media authority, response time commitments, and superannuation. Suitable for remote virtual assistants providing administrative, executive support, social media, calendar management, and general business support services across Australia.

What Is a Virtual Assistant Contract (Australia)?

A Virtual Assistant Contract is a written agreement used in Australia to formalise the engagement of a virtual assistant (VA) — a remote independent contractor who provides administrative, executive support, social media, and general business support services — on an independent contractor basis. A VA works remotely using their own equipment and internet connection, providing services to clients through digital communication platforms, cloud-based software, and shared online tools.

In Australia, virtual assistants operate as independent contractors under the general law and are not employees for the purposes of the Fair Work Act 2009 (Cth), provided the arrangement is genuinely a contractor relationship rather than a disguised employment arrangement. The Fair Work Act 2009 prohibits sham contracting under Part 3-1, Division 6 (ss357–359), with maximum civil penalties of $469,500 per contravention for a body corporate from 27 February 2024. A well-drafted Virtual Assistant Contract — one that genuinely reflects the independent nature of the arrangement — is the most important protection against a sham contracting finding.

Virtual Assistant Contracts have several distinctive features driven by the nature of remote, technology-enabled service delivery. Data privacy and security obligations are paramount: VAs typically have access to the client's email accounts, calendars, CRM systems, social media accounts, cloud storage, and financial records — all of which contain sensitive business and personal information protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. System access management — including what platforms the VA can access, under what credentials, and how access is revoked at the end of the engagement — is a critical component of the contract. Social media authority provisions define what the VA can and cannot do on behalf of the client, protecting the client from unauthorised or inappropriate communications.

This Virtual Assistant Contract is suitable for VAs providing a wide range of remote support services, including inbox and calendar management, travel coordination, data entry, CRM management, social media scheduling, research, document preparation, customer service support, and general administrative assistance, across all Australian states and territories.

When Do You Need a Virtual Assistant Contract (Australia)?

You need a Virtual Assistant Contract whenever you engage a virtual assistant to provide remote administrative or support services on an ongoing or project basis. The contract is equally important for the client and the VA.

For the client, the contract documents the scope of VA services, the monthly hour cap or deliverables, the fee and payment terms, the data security requirements, the system access permissions, the social media authority, and the confidentiality obligations. Without a written contract, the client faces significant data security risks (the VA may retain access to systems and data after the engagement ends), confidentiality risks (the VA may disclose confidential business information to competitors), and scope creep (the VA may claim additional fees for tasks not agreed in advance). A written contract also documents the genuine contractor nature of the arrangement, reducing sham contracting risk.

For the VA, the contract protects their entitlement to the agreed fee, confirms their right to work for other clients, documents the scope of services so that out-of-scope tasks can be billed separately, and establishes clear notice and off-boarding procedures. Without a written contract, VAs frequently face late payment, expanding task lists without additional compensation, and disputes about what was included in the retainer.

Common situations requiring a Virtual Assistant Contract in Australia include: engaging a VA for inbox and calendar management; retaining a VA to manage social media scheduling and community management; engaging a VA for data entry, CRM updates, and database management; hiring a VA for research and report preparation; retaining an executive VA to support a senior manager or business owner with travel coordination, meeting preparation, and project administration; and engaging a VA for e-commerce order processing and customer service support.

The contract is particularly important when the VA will have access to the client's email accounts, cloud platforms, social media accounts, or financial records — any of which, if mismanaged, can cause serious business disruption or reputational harm.

What to Include in Your Virtual Assistant Contract (Australia)

A well-drafted Virtual Assistant Contract for Australia must address several key elements specific to the remote, technology-enabled nature of VA services and the Australian legal and regulatory environment.

Service scope and hour caps are fundamental. The contract should define precisely what tasks the VA will perform, what tools and platforms they will use, and the maximum number of hours per month included in the agreed fee. A monthly hour cap prevents the client from treating the VA as a full-time employee at a contractor rate, and gives the VA a basis for billing additional hours or tasks separately.

Data privacy and security obligations are the most distinctive and important element of a Virtual Assistant Contract. The VA has access to some of the most sensitive information held by the client — email, calendar, CRM, financial records, and social media accounts. The contract must specify: what systems and platforms the VA can access; what security measures the VA must maintain (passwords, multi-factor authentication, antivirus, VPN); how the VA must handle data breaches; and how system access is revoked and data is returned or deleted at the end of the engagement. These provisions should reflect the requirements of the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

System access management is essential and often overlooked. The contract should list all platforms to which the VA is granted access, specify the credentials or access method for each platform, and provide a clear process for revoking access at the end of the engagement. Clients should change all passwords and revoke access immediately on termination.

Social media and communications authority provisions are important where the VA manages social media or communicates on the client's behalf. The contract should specify exactly what the VA can and cannot do on each platform, the process for approving content before publication, and what situations must be escalated to the client immediately.

Confidentiality obligations must be robust and survive the end of the engagement. The VA is likely to have access to the client's most sensitive business communications, client relationships, pricing information, and strategic plans — all of which must be protected from disclosure to third parties or competitors.

GST, ABN, and sham contracting provisions are mandatory for Australian VA contracts, as they are for all independent contractor arrangements.

What Is a Virtual Assistant Contract (Australia)?

When Do You Need a Virtual Assistant Contract (Australia)?

What to Include in Your Virtual Assistant Contract (Australia)

Frequently Asked Questions

Related Documents

Independent Contractor Agreement (Australia)

Freelance Contract — Australia (Creative, Tech & Professional Services)

Independent Contractor Agreement for Consulting Services (Australia)

Non-Disclosure Agreement (NDA) (Australia)

Service Agreement (Australia)