● Compliance & Safety

How long are we legally required to keep visitor sign-in records in Australia?

A missing visitor record during a court case is a liability gap, not a clerical error. In Australia, while specific retention periods can vary, the WHS Act 2011 requires PCBUs to maintain records that prove they met their duty of care. Our experience shows that these records are often required for 18 months or more to satisfy legal proceedings and customs inquiries.


Your Records Are Your Primary Evidence in Court

Under the WHS Act 2011, Australian PCBUs must be able to demonstrate that they managed site risks and knew who was on site. In our work with Australian and US organisations, we have found that the ability to produce historical visitor data is critical when site incidents move to litigation or regulatory audits.

Paper Logs Are Forensic Nightmares

Most organisations rely on paper logs that are difficult to search and easy to lose. When a legal request arrives, manually scrubbing through months of handwriting creates massive operational delays and increases the risk of missing critical data.

  • Manual systems can take weeks to aggregate the visit history of a single individual over a 12-month period.
  • Paper records lack the searchability required for rapid response to customs or regulatory inquiries.
  • Physical logs are prone to damage or loss, leaving the PCBU unable to prove site occupancy during an incident.
  • Lack of real-time check-out tracking means a log only proves who arrived, not who remained on site.

Digital Records Provide Instant Auditability

A digital visitor management platform transforms a liability into a searchable asset. It ensures that every entry and exit is timestamped and instantly retrievable for any period required by law or internal policy.

  1. Centralised cloud-based visitor management systems allow for instant filtering by visitor name, date, or site location.
  2. Automated data retention policies ensure records are kept for the necessary legal window without manual filing.
  3. Pairing contractor induction and check-in ensures safety credentials are archived alongside the visit record.
  4. The system generates a real-time evacuation report, eliminating the guesswork of who is on site during an emergency.

Time and People: Visitor Management That Works When It Has To

We convert complex compliance obligations into working infrastructure through cloud-connected visitor management and real-time evacuation reporting across Australia and the United States. We have seen first-hand how retrieving 18 months of data for a court case can be the deciding factor in a legal outcome. For over 12 years, we have focused on ensuring that the data you need is available the moment you need it, protecting both your organisation and your people.


Content prepared by Time and People — visitor and contractor management across Australia and the United States.

×