NSW Digital Incident Register — What’s Required Since July 2024
Since July 2024, every NSW gaming venue must maintain a Digital Incident Register that meets prescribed standards. Paper registers are out. Spreadsheets do not qualify. Here is what the DIR actually requires and how to know whether your venue is compliant right now.
What Changed in July 2024
The Digital Incident Register requirement was a significant shift for NSW gaming venues. Before July 2024, most venues kept incident records in a physical book, a spreadsheet, or a bespoke internal system. The state accepted a broad range of formats and focused compliance on the content.
From July 2024 onward, the format itself is regulated. Liquor & Gaming NSW (L&GNSW) requires venues to operate a digital system that is tamper-evident, time-stamped, attributable, and available for inspection. The requirement is part of a broader program of reforms — tightening gaming-floor accountability, reducing the risk of record manipulation after the fact, and enabling faster regulator and police access to incident evidence.
A venue that is still running a paper book or a shared spreadsheet is not meeting the current NSW standard. The penalty exposure is real, the inspections are happening, and the transition window has closed.
What the DIR Must Capture
The Digital Incident Register captures gaming-floor incidents that venues are required to document under NSW gaming law. The scope is broader than many venues realise.
Categories of Incidents
- Patron management — refusals, removals, intoxicated patrons, underage attempts
- Self-exclusion actions — new exclusions, re-admissions, breaches of exclusion
- Responsible gambling interventions — patron welfare checks, distress indicators, intervention outcomes
- Gaming machine incidents — malfunctions, large payouts, disputed credits, jackpots requiring verification
- Altercations and security events — physical incidents, verbal incidents, police calls
- Regulator and emergency services attendance — L&GNSW inspections, police visits, emergency response
- Minors in gaming areas — attempts to enter, refusals at entry, observed presence
- Equipment and environment — CCTV outages, signage issues, access control failures
The list is not exhaustive. The principle is that anything a regulator or the licensee would want to know about, retrospectively, should be in the register.
The Compliance Standards
Being “digital” is not enough. The DIR must meet specific standards that distinguish it from an unstructured digital file.
1. Contemporaneous Recording
Entries must be made at or near the time of the incident — not at the end of the shift, not the next day. “Contemporaneous” is a legal term of art: if the entry is not made when the memory is fresh and the events are current, the record loses evidential weight.
2. Time-Stamped
Every entry must carry a system-generated timestamp that cannot be edited by the user. The timestamp must record the date and time of the entry itself, and separately should capture the date and time of the incident.
3. Attributable
Every entry must be attributed to the staff member who made it. Anonymous entries do not meet the standard. The system must authenticate users and record who made each entry.
4. Tamper-Evident
Edits and deletions must be visible. If an entry is amended, the history of the amendment (original content, new content, reason, who changed it, when) must be retained. A system that allows silent editing fails this requirement.
5. Retained
Entries must be retained for the prescribed period (typically at least three years under NSW gaming records obligations, but longer under some regimes). Disposal at the end of retention must be logged.
6. Inspectable
L&GNSW inspectors and NSW Police must be able to access the register on request. The system must support producing records quickly, filtered by date range, incident type, or staff member.
Why Spreadsheets Don’t Cut It
A shared spreadsheet appears to meet the “digital” requirement at first glance. It fails the compliance standards in multiple ways:
- Silent editing — any user with access can change any cell without leaving a trace
- Unreliable timestamps — date/time fields are user-entered and can be backdated or altered
- Unclear attribution — “last modified by” captures the last editor, not the author of each row
- No access logging — the spreadsheet cannot tell you who viewed what, when
- Version control gaps — lost changes, overwritten rows, accidental deletions
- Scaling problems — multi-venue groups have no coherent way to consolidate records
L&GNSW inspections increasingly ask to see the audit trail behind specific entries. A spreadsheet cannot produce one. The register might exist, but the evidential value of its contents is weak.
What Good DIR Looks Like
Staff Experience
A quick way to log an incident during or immediately after it occurs. Category-driven prompts (so staff know what to include for each incident type). Linked fields where relevant (patron record, transaction, CCTV reference). Mobile-friendly for floor staff with phones or tablets.
System Behaviour
Automatic system timestamps on entry creation and every edit. User authentication recorded on each entry. Amendment history preserved in full. Access log showing who viewed each entry and when.
Inspector Experience
A filtered view showing incidents in any date range, with audit trails attached. Export to PDF or structured file on request. Support for ad-hoc queries (“show me all self-exclusion breaches in the past 12 months”).
Management Experience
Dashboards showing incident trends, repeat patrons, intervention effectiveness. Flags for entries that may warrant escalation to AML/CTF assessment (SMR candidates). Integration with training and responsible gambling data.
The Intersection with AML/CTF
Many DIR entries describe events that also warrant AML/CTF assessment. A self-exclusion breach, an unusual payout pattern, a patron showing signs of distress around cash — these are state incident register events that can also meet the SMR threshold under the federal AML/CTF regime.
A well-designed compliance system recognises this overlap. The DIR entry creates the state record. The system simultaneously assesses whether the event meets SMR criteria and routes to the compliance officer if it does. One event, one entry, both frameworks applied — without duplication and without gaps.
The tipping-off offence under section 123 of the AML/CTF Act applies to SMR information. Even if a DIR entry documents an event that has generated an SMR, the SMR-related information (existence, consideration, preparation) must remain restricted. A single platform must enforce different visibility for DIR entries (broad staff access) and SMR-related assessments (restricted to compliance officer and senior management).
Common DIR Failures
1. Still Using a Book
Any venue running a paper incident book is not DIR-compliant. The transition deadline has passed. The book may continue as a supplementary note-taking tool for staff, but the primary record must be digital.
2. Spreadsheet Labelled “Digital”
A shared spreadsheet is digital only in the narrow sense. It is not compliant. The tamper-evident, attributable, audit-trailed requirements cannot be met by a spreadsheet.
3. Incomplete Categories
Venues that capture patron refusals but miss responsible gambling interventions, or capture incidents but not self-exclusion actions, have partial records. L&GNSW expects comprehensive coverage.
4. Backdated Entries
Entries made days after the event and labelled with the event date do not meet the contemporaneous requirement. An entry should capture both incident time and entry time, and the entry time should be close to the incident.
5. Shared Logins
If staff share a single login to the DIR, attribution is broken. Every staff member involved in gaming-floor operations must have an individual authenticated login.
6. No Retention Protocol
Entries must be retained for the prescribed period. Entries must also be destroyed after retention under privacy principles. A DIR without retention and destruction rules sits outside the compliance framework.
Inspection Readiness
L&GNSW inspections can be scheduled or unannounced. Your DIR must be ready to inspect at any time. Inspection-ready means:
- Login credentials available to inspectors on arrival
- Filter and export functions that work
- Audit trails retrievable for any entry
- Staff able to explain the system and their role in it
- Clear records of training on DIR use
Inspectors who struggle to access the register, or see a system that is poorly populated, will broaden the scope of their inspection to other compliance areas. A well-organised DIR signals a well-organised venue.
Where ComplyIQ Fits
ComplyIQ’s Digital Incident Register meets the July 2024 NSW standard: tamper-evident entries, full amendment history, individual staff authentication, filtered views for inspectors, and retention automation. The same system captures AML/CTF obligations, applies the federal framework where events overlap, and keeps SMR-related assessments visible only to authorised roles.
For the full NSW picture, see our NSW Gaming Compliance Pillar Guide.
One Digital Incident Register. One AML/CTF Platform. One Support Team.
Replace the book, the spreadsheet, and the duplicate AML/CTF tool with one platform that captures every gaming-floor incident, applies both L&GNSW and AUSTRAC frameworks, and produces a clean audit trail on demand. Simpler operations. Lower combined cost. Fewer missed obligations.