Hospitality compliance checklist Australia: food, licences, workers and WHS

A useful hospitality compliance checklist starts with what the venue actually does. A café that cooks and serves ready-to-eat food, a hotel bar, a mobile caterer and an accommodation-only business do not have identical food, liquor or council obligations. All need to identify worker and public risks; only some need particular food safety management tools or responsible-service-of-alcohol evidence. Use the checklist below to record the rule, owner and proof for your activities and location. It is an operating aid, not a declaration that every row is legally required for every Australian venue.

The national Food Standards Code establishes core food requirements. State and territory regulators and local councils enforce and administer much of the venue’s food, liquor and premises framework. The Australian Government’s accommodation and food-services guide advises businesses to identify licences by location and service. Begin with that map; then use current primary rules for the applicable jurisdiction.

Set the venue profile first

Complete these fields before treating any checklist answer as final:

The checklist owner should record applicable / not applicable / uncertain, the source consulted, evidence location and action due date. “Not applicable” needs a reason, especially for a food business that has not checked Standard 3.2.2A.

1. Confirm permissions and service boundaries

• [ ] Identify food-business registration, notification or licence requirements with the council or state authority before trading, and record the approval or notification reference. Requirements vary. For example, NSW directs food businesses to notify the council or Food Authority before starting, with stated exceptions.
• [ ] Check premises approval, change of use, building/fire arrangements, outdoor dining, signage, waste and temporary-event requirements with the relevant authority. business.gov.au lists these as possible permissions, not universal licences.
• [ ] If selling alcohol, check the correct local liquor licence, its venue/area/hours/age and service conditions, responsible service of alcohol (RSA) training rules, and how staff status is checked. Do not apply one state’s RSA course or renewal rule nationally.
• [ ] Confirm any accommodation-specific health, fire, pool, accessibility or guest-safety obligations for the property and jurisdiction. This food-led checklist does not replace a hotel’s building or guest-safety review.
• [ ] Keep a change gate for new delivery channels, outdoor areas, catering, packaged products, late-night trade or another location. A licence or notification may need variation.

Evidence: current approval/licence, conditions, council correspondence, site plan, renewal date and a named person responsible for checking changes. The register should distinguish a legal permission from an internal “approved” status.

2. Apply the food-safety standards that fit the business

• [ ] Check Standards 3.2.2 and 3.2.3 on food-handling practices, hygiene, premises and equipment. Use FSANZ’s Safe Food Australia for practical interpretation.
• [ ] Classify the business under Standard 3.2.2A only if it handles unpackaged, potentially hazardous, ready-to-eat food in the covered food-service, catering or retail activities. Category one and category two have different tools; do not declare every café category one without examining its processing activities.
• [ ] Where category one applies, identify the food safety supervisor, trained food handlers and how critical food-safety controls are substantiated. Where category two applies, check the supervisor and handler training requirements. FSANZ explains that category one needs all three tools and category two the first two.
• [ ] Check whether a separate food safety program is required for the venue type and jurisdiction. Do not confuse the 3.2.2A evidence tool with a universal requirement to create a formal food safety program for every business.
• [ ] Confirm food handlers have the knowledge and skills relevant to their duties, including casual staff and supervisors. Record training and observe the task. A certificate alone does not show a worker handles a changed menu or equipment safely.

Category example: a venue receives and serves unpackaged ready-to-eat potentially hazardous food, while another prepares it through processing on site. Their 3.2.2A category can differ. Document the actual handling steps, then verify the classification against FSANZ and the local food regulator. Recheck it after a menu or process change.

3. Check each food-handling control in operation

Use these prompts for a walk-through, not just a policy-file review:

Do not publish one universal temperature or holding-time table divorced from food type and process. Use the current Code, FSANZ guidance and local food authority. A log that records an out-of-range reading must also show what happened to the food, who decided and whether the equipment was fixed. If the venue is category one, FSANZ’s evidence tool describes how prescribed controls can be substantiated; records are one way, and the relevant officer must be able to see effective control.

4. Make allergen information reliable at the point of service

• [ ] Maintain current ingredient and recipe information, including supplier substitutions and menu specials.
• [ ] Give staff a clear way to escalate an allergy question to someone who can verify the answer. Avoid a guess based on a menu icon or an old recipe card.
• [ ] Control cross-contact during preparation, service, delivery and shared-equipment use; train staff to explain limits honestly.
• [ ] Where the business packages and labels food, check the plain-English allergen-labelling requirements for that product. Do not assume that a restaurant menu has exactly the same labelling format as a packaged item.
• [ ] Review allergy incidents and near misses, including whether a supplier or recipe change was communicated to the serving team.

FSANZ’s food-service allergen guidance calls for effective allergen management, staff training and clear, current information when a customer discloses an allergy. If the venue cannot confirm a requested dish is suitable, say so and offer a safe alternative where one exists. A generic “may contain” disclaimer is not a substitute for knowing ingredients and cross-contact controls.

5. Protect staff, contractors and guests

• [ ] Identify task hazards: hot surfaces and liquids, knives, slips, wet floors, manual handling, delivery traffic, cleaning chemicals, fatigue, aggression, lone work and psychosocial risks. Assess who is exposed during peak, closing and cleaning periods.
• [ ] Apply the enacted state/territory WHS or OHS law, consult workers, and use controls that change the work design where reasonably practicable. Review a burn or slip event for its process cause, not just whether a warning sign existed.
• [ ] Induct new and casual workers into site hazards, food and allergen processes, emergency exits, incident reporting and stop-work authority. Re-brief when a menu, layout or equipment changes.
• [ ] Control contractors who enter the venue for cleaning, maintenance, gas/electrical work or deliveries. Coordinate isolation, access, public separation and handback with each business.
• [ ] Check fire and emergency arrangements with the local building/fire requirements; make evacuation routes usable during actual service and events.
• [ ] Record incidents, provide immediate help, decide any report to the relevant local WHS/food authority, and verify corrective action.

Food safety and worker safety overlap but are different legal tasks. A safe food temperature log does not address a kitchen worker’s burn risk. An employee training spreadsheet does not prove the floor-drain problem was fixed. Use the local regulator for legal duties; Safe Work Australia supplies national model guidance rather than acting as the venue’s regulator.

6. Put evidence on a usable review cycle

Keep a short exception list alongside routine records. “Temperature log completed” is less useful than “out-of-range item isolated, assessed and disposition recorded”. Escalate anything that makes food unsafe or a licence condition unfulfilled before continuing the affected activity. Set review frequency from law, risk, licence conditions and actual operation; this table is a management aid, not a statutory timetable.

Three common venue scenarios

Café adds cooked takeaway meals. Reassess the food-handling steps, packaging, holding and delivery controls, allergen information, staff training and the 3.2.2A category. If the change alters premises or trading conditions, ask the local authority whether the notification/approval changes. Do not copy the old dine-in log and assume it now covers delivery.

Bar starts serving food from a contractor kitchen. Check who is the food business operator for each step, who controls safe delivery and service, what the liquor licence allows, and how staff answer allergen questions. Coordinate the contractor’s tasks with staff and guest safety. A commercial contract alone does not prove either business has discharged its obligations.

Hotel has rooms and a breakfast buffet. Keep accommodation/fire/guest-safety requirements in one register and the food operation in another linked section. Determine whether the breakfast activities trigger 3.2.2A and whether alcohol is served. A hotel is not exempt from food requirements merely because accommodation is its main business.

Where Complys fits

The Complys Australia hospitality page is the relevant commercial destination. It publicly describes certificates, food safety records, allergen information, RSA and WHS in a venue evidence workflow. Before this checklist makes a feature promise, an integrator should verify the actual AU product, plan and storage/access model. This checklist does not claim Complys issues food or liquor licences, certifies compliance, performs temperature measurements, prevents allergen cross-contact, or replaces a point-of-sale system. The safe CTA is to assess whether Complys can help organise the evidence and actions the venue has identified, after implementation and commercial claims are independently confirmed.

Frequently asked questions

Does every Australian hospitality business need a food safety supervisor?

No blanket answer covers every operation. Standard 3.2.2A applies to specified businesses handling unpackaged, potentially hazardous, ready-to-eat food. The category determines the tools; other local or sector requirements may also apply. Use FSANZ’s decision guidance and ask the local food authority if classification is unclear.

Is a documented food safety program compulsory for every café?

Do not assume so. Food standards and the 3.2.2A tools apply according to activity, while a formal program can be required under particular standards, jurisdictions or licence conditions. Check the venue’s actual legal category.

Is a cleaning log enough to show food safety?

No. The practice and outcome matter. Records can substantiate controls where required, but they should identify exceptions and corrective actions. An untouched log is weak evidence if staff, equipment or the premises are unsafe.

Can one checklist cover two venues in different states?

Use a common structure, but record each site’s food authority, council, liquor and WHS/OHS requirements separately. Re-check when a venue changes activity or location.

Source, claim, owner, link, product and writer-side QA — 5 October 2026

Writer-side disposition: READY. This is a venue-specific action and evidence checklist, distinct from the software money page. Before publication, validate local food, liquor and WHS/OHS law for the intended venue, exact route/in-flight owner, all Complys implementation and commercial claims, links, and independent whole-page QA. Nothing was published or changed in the Complys repository.