New South Wales has the largest hospitality market in Australia and some of the toughest regulation to go with it. Liquor & Gaming NSW runs thousands of compliance inspections a year, and the fines for credential failures hit hard.
This guide covers every credential NSW venue operators need to track in 2026: validity periods, renewal requirements, and the specific fines for each breach.
RSA (Responsible Service of Alcohol)
Everyone who serves, sells, supplies, or promotes alcohol needs an RSA. That includes bar staff, floor staff, bottle shop attendants, managers, and security working at licensed premises.
RSA certificates last 5 years from completion. They're issued through Service NSW after completing a course with a registered training organisation. New staff can work under an interim certificate for up to 90 days while their full RSA competency card is processed.
Venues must keep copies of all staff RSA certificates and produce them on demand during inspections.
RSA penalties in NSW
| Offence | Maximum penalty |
|---|---|
| Employing a person without RSA | $11,000 per person |
| Failing to produce RSA records on request | $5,500 |
| Serving alcohol to an intoxicated person (staff) | $11,000 |
| Serving alcohol to an intoxicated person (licensee) | $55,000 |
| Permitting intoxication on premises | $11,000 |
A single compliance visit that finds three staff with expired RSAs could mean $33,000 in fines.
RCG (Responsible Conduct of Gambling)
Any staff member who operates, monitors, or supervises gaming machines needs an RCG, including bar staff working next to gaming rooms.
RCG certificates last 5 years from completion, issued through Service NSW. At least one RCG-certified person must be on-site whenever gaming machines are running.
Fines reach $11,000 for failing to have RCG-certified staff during gaming operations. Repeated non-compliance can affect your gaming machine entitlements.
Food Safety Supervisor
At least one nominated Food Safety Supervisor must be on-site or reasonably available during all food handling operations. Certificates last 5 years.
When a Food Safety Supervisor leaves or their certificate expires, you have 30 working days to appoint a replacement.
| Offence | Maximum penalty |
|---|---|
| Operating without a Food Safety Supervisor | $55,000 (corporation) |
| Failing to maintain food safety records | $27,500 |
| Handling food in an unsafe manner | $275,000 (serious offences) |
Working With Children Check (WWCC)
Staff at venues hosting all-ages events, family dining areas, or employing under-18 workers who interact with minors need a WWCC.
WWCCs last 5 years, with continuous monitoring by the Office of the Children's Guardian. Employers must verify every WWCC through the online system. Just sighting the card isn't enough.
Penalties reach $22,000 for an individual and $110,000 for a body corporate for employing someone in child-related work without a valid WWCC.
Security licence (crowd controller)
Anyone performing crowd control, patron screening, or security functions needs a Class 1C licence issued by NSW Police under the Security Industry Act 1997.
Licences run for 1 or 5 years. All security staff must carry their licence on duty, and venues must verify licence validity before engagement. Security firms need a master licence, and incident registers must be kept wherever security are deployed.
Engaging unlicensed security can result in fines over $55,000. If an incident involves an unlicensed crowd controller, the venue's liability exposure is extreme.
First aid and CPR
You need enough trained first aiders to cover all operating hours, proportionate to your venue's size and risk profile.
- First Aid Certificate (HLTAID011): 3 years
- CPR Certificate (HLTAID009): 12 months
Watch the mismatch. A staff member can have a current first aid certificate but an expired CPR component, which means they're not compliant as a designated first aider. This catches a lot of venues out.
NSW compliance calendar 2026
| Period | Action |
|---|---|
| Ongoing | Random compliance inspections by Liquor & Gaming NSW |
| March-April | Autumn compliance blitz targeting late-night venues |
| July | Updated RSA course content takes effect |
| September | Annual licence renewal period |
| Year-round | Local council food safety inspections |
Building your compliance system
The hard part is tracking all these credentials across a workforce that keeps changing. With hospitality turnover above 30% a year, registers go stale fast. At a minimum, you need a system that:
- Tracks every credential for every staff member, including casuals and agency staff
- Alerts you 30, 60, and 90 days before expiry so renewals happen on time
- Stores digital copies of all certificates for instant retrieval during inspections
- Handles the CPR/First Aid mismatch by tracking sub-components with different expiry dates
VenueShield is built for this, giving NSW venue operators a single source of truth for every credential, every expiry date, and every compliance obligation across their whole team.
