Victoria Liquor Licensing 2026: Owner's Compliance Guide

Victoria's liquor licensing framework tightened in 2025, and 2026 brings new compliance expectations for Melbourne venues and regional hospitality businesses. If you're running a restaurant, bar, café, or bakery in VIC, understanding the current rules—and the common pitfalls—could save you thousands in fines and operational disruption.

This guide covers what's changed, what you need to do now, and a counter-intuitive tactic most owners miss.

What's new in Victoria hospitality licensing for 2026?

The Victorian Gambling and Casino Control Commission (VGCCC) and the Department of Justice oversee liquor licences in VIC. While the core categories haven't shifted, enforcement has sharpened, and the ATO is cross-referencing venue compliance records more closely than ever.

Key changes:

• Stricter public health incident reporting — venues must now notify regulators within 48 hours of serious incidents (not 5 days as before).
• Enhanced patron data logging — venues serving alcohol must maintain digital records of peak-hour patron counts for venues over 200 capacity.
• Penalty rate clarity for public holidays — ANZAC Day, Melbourne Cup Day, Christmas, and Boxing Day now have explicit wage floor guidance (typically 150% of ordinary rate, sometimes 200%).
• Supplier invoice audits — the ATO is sampling hospitality venue invoices from major suppliers (Bidvest, PFD, Countrywide) to cross-check GST claims and food/beverage cost reporting.

If your venue holds a general licence (on-premises consumption), a packaged licence (bottle shop or takeaway), or a small venue licence, you're affected.

Do you need to renew your liquor licence in 2026?

Victorian liquor licences are issued for 3-year terms. If your licence was granted or renewed in 2023, you'll need to lodge a renewal application by mid-2026 (typically 60 days before expiry).

Check your licence expiry date now. Visit the VGCCC online portal or contact your local council's licensing team. Missing the deadline can trigger a lapsed-licence penalty—venues operating without a current licence face fines up to $15,000 and immediate trading suspension.

Renewal checklist for VIC venues

1. Confirm expiry date — check your original licence document or the VGCCC portal.
2. Audit your premises — ensure fit-out and security meet current standards (CCTV, emergency exits, incident logbooks).
3. Gather financials — prepare 2 years of profit-and-loss statements and GST records (the ATO now cross-checks these).
4. Review staff training records — all staff handling alcohol must have current Responsible Service of Alcohol (RSA) certification (valid for 3 years in VIC).
5. Lodge early — submit your renewal 90 days before expiry, not 60. This gives you buffer time if the regulator requests clarifications.

Public holiday wage penalties: ANZAC Day, Melbourne Cup, Christmas

One of the biggest compliance blind spots in hospitality is penalty-rate miscalculation. Victoria's Fair Work rules mandate specific penalty rates for public holidays—and venues often get it wrong, then face back-pay claims and audits.

2026 public holiday rates in Victoria:

• ANZAC Day (25 April) — 150% of ordinary rate (or 200% if worked on the actual day and it falls on a weekend).
• Melbourne Cup Day (first Tuesday in November) — 150% in metropolitan Melbourne; ordinary rate outside the metro area.
• Christmas Day (25 December) — 200% of ordinary rate (or time off in lieu).
• Boxing Day (26 December) — 150% of ordinary rate.

Pro tip: Use a hospitality-specific payroll system (or spreadsheet template) that auto-flags public holidays. Don't rely on memory or your rostering app—those rarely sync with Fair Work rules. If you're manually calculating, you're almost guaranteed to slip up.

If an employee works a public holiday, you must also provide a penalty-free day off (usually within the next 4 weeks) unless they've agreed otherwise in writing. Failing to do so opens you to Fair Work complaints and back-pay orders.

Supplier invoice audits: What the ATO is looking for

The ATO has begun cross-referencing hospitality venue invoices from major suppliers (Bidvest, PFD, Countrywide, and regional suppliers) against GST returns and food-cost claims.

Here's what they're checking:

• Invoice discrepancies — if your claimed food cost is 28% but invoices show 35%, they'll ask questions.
• Duplicate or missing invoices — venues sometimes claim the same invoice twice or fail to record cash purchases.
• Supplier mismatches — if you claim a local supplier but invoices show a major distributor, inconsistencies trigger audits.
• Alcohol vs. food split — venues misclassify alcohol as food (or vice versa) to manipulate cost reporting.

What to do:

1. Digitise all invoices — scan and store supplier invoices in a centralised system (Google Drive, Xero, Wave). Don't rely on paper or email folders.
2. Reconcile monthly — each month, match invoices to your accounting software. If Bidvest says you bought $5,000 in stock but your records show $4,500, find the gap.
3. Tag by category — clearly label each invoice as food, beverage, or non-consumable. This prevents misclassification.
4. Keep delivery dockets — the ATO loves delivery dockets because they show quantity and date. Store these alongside invoices.

Incident reporting: The 48-hour rule

Victoria now requires venues to report serious incidents (assaults, sexual harassment, drug seizures, or hospitalisation) to the regulator within 48 hours, not 5 days.

Incidents must be logged in your incident register (a physical or digital logbook) and include:

• Date, time, and nature of incident.
• People involved (staff, patron, third party).
• Police reference number (if applicable).
• Action taken.
• Witness names and contact details.

If you don't report within 48 hours, you risk a compliance notice. If you don't report at all, the fine can be $5,000+.

Counter-intuitive tactic most owners miss: Don't wait for the incident to "settle." Report it to the regulator even if the patron apologised, even if the police didn't attend, even if it seems minor. Venues that over-report (rather than under-report) rarely face penalties. The regulator sees over-reporting as transparency; under-reporting looks like cover-up. Use this to your advantage.

RSA certification: Non-negotiable in 2026

Every person who serves, sells, or handles alcohol in your VIC venue must hold a current Responsible Service of Alcohol (RSA) certificate. In Victoria, RSA is valid for 3 years.

The regulator now spot-checks venues and asks staff to produce proof on the spot. If a staff member can't show a valid certificate, you face a compliance notice and potential trading suspension.

Action items:

• Maintain a spreadsheet of all staff RSA expiry dates.
• Send staff renewal reminders 60 days before expiry.
• Don't let staff work alcohol-related duties if their RSA has lapsed (even by one day).
• Keep copies of certificates in a secure file (digital is fine).

Where Calso fits in

Compliance admin—tracking licence renewal dates, incident logbooks, staff RSA expiry, supplier invoice reconciliation, and public holiday penalty calculations—eats hours every week. Calso automates operational admin so you can focus on the floor. Our platform flags licence renewal deadlines, logs incidents with timestamp and witness capture, tracks staff certifications, and reconciles supplier invoices against your records. That's one less thing to worry about when the regulator calls.

Want early access?

Calso is currently invite-only. If you're serious about staying ahead of VIC compliance and reclaiming hours lost to admin, join the waitlist at calso.com.au/join for founding-venue access. Limited spots available in Melbourne and regional Victoria—and your competitor might already be on the list.

Key takeaways

• Check your licence expiry date now; renew 90 days ahead of deadline.
• Audit public holiday penalty rates (ANZAC Day 150%, Christmas 200%)—payroll errors trigger Fair Work complaints.
• Digitise supplier invoices and reconcile monthly; the ATO is cross-checking hospitality venues.
• Report serious incidents within 48 hours, even if they seem minor.
• Ensure all staff hold current RSA certificates; the regulator spot-checks.
• Over-report compliance issues to the regulator, not under-report—transparency protects you.

Stay compliant, stay trading.