What the law actually says
Australia runs a national Do Not Call Register. If a number is on it, you may not make an unsolicited marketing call to it, and the responsibility sits with the business making the call rather than with whoever supplied the list.
Two things about that are worth pausing on. The first is that the register covers landlines, mobiles and VoIP numbers. The second is that a list you bought last quarter is already out of date, because people add themselves to the register every day.
There are exemptions. Registered charities, educational institutions, government bodies and political parties can call registered numbers. Most B2B software companies are none of those things.
The business-number question
The register is aimed at individuals rather than organisations, and a published business line is generally treated differently from a personal number. This is where teams get comfortable and then get caught, because the modern reality is that a great many business contacts are mobile numbers that belong to a person, not to a switchboard.
The safe position is straightforward: wash the list anyway. Screening a number costs a fraction of a penny. Not screening it is the expensive option.
Washing a list, in practice
Washing means submitting your numbers to be checked against the register and getting back a result for each one. It is not a one-time exercise. A register check has a shelf life, and the accepted practice is to re-check before each campaign rather than once when the list is built.
What you should end up with, per contact:
- The number as submitted
- The result: clear, listed, or not applicable
- The date and time of the check
- Which campaign the check was performed for
That fourth item is the one people leave out, and it is the one that matters when somebody asks you to demonstrate compliance for a specific campaign six months later.
Calling hours, and the holiday problem
Permitted calling hours in Australia are weekdays from 9:00am to 8:00pm, and Saturdays from 9:00am to 5:00pm. No calls on Sundays. No calls on public holidays.
Two details cause most of the accidental breaches:
Time zones are local to the person you are calling
Australia spans three standard time zones, and only some states observe daylight saving. A campaign timed against Sydney will be dialling Perth two or three hours early depending on the month. Perth does not observe daylight saving. Adelaide is half an hour offset from the eastern states. None of this is difficult, but it does have to be handled per contact rather than per campaign.
Public holidays are per state
There is no single national holiday calendar. Victoria stops for a horse race. Western Australia and Queensland have their own days. A campaign configured in June and left running will eventually dial somebody on a public holiday unless the schedule knows which state the number belongs to.
Why the penalty structure changes the maths
This is the part that reframes the whole exercise. Breaches are assessed per contravention, and each call is a contravention.
One list that was never washed is not one mistake. It is as many mistakes as there were numbers on it.
Compare that to how most teams think about compliance risk, which is roughly the same way they think about a parking fine: an annoying fixed cost, absorbed and forgotten. It is not that. A single misconfigured campaign against a few thousand unwashed numbers is a materially different order of exposure, and it is why the person who signs off on outbound in a new market is usually reluctant to sign at all.
What good looks like
Whether you build this yourself or buy it, the same five things need to be true before anyone dials:
| Control | What it means |
|---|---|
| Register wash | Every number screened before the campaign starts, not when the list was bought |
| Per-contact record | Result and timestamp stored against the contact, retrievable later |
| Local calling window | Hours applied in the contact's own time zone, daylight saving included |
| State holiday calendar | Schedule aware of which state each number belongs to |
| Sign-off before launch | Someone acknowledges the market's rules, and that acknowledgement is recorded |
None of these are exotic. What makes them hard is that they are five separate disciplines, usually owned by nobody in particular, and each one is invisible until it fails.
The short version
Wash every number before every campaign. Store the result with a timestamp. Apply calling hours in the contact's local time, not yours. Keep a state-level holiday calendar. Have somebody sign off, and keep the signature.
Do those five things and calling into Australia is an ordinary sales activity. Skip any of them and it is a per-call liability that grows with your volume.
Sellora AI is a fully autonomous Virtual SDR built to handle everything before the sales meeting, from prospect discovery and research to personalised outreach, live AI calls, follow-up, qualification and meeting booking. It runs the register wash, the local calling windows and the recorded sign-off inside the compliance boundaries you set before launch.
This is a practical summary written for sales and operations teams, not legal advice. The Australian Communications and Media Authority publishes the current rules, and if you are entering the market it is worth having somebody qualified read them alongside your process.