ASRS Group 2 Reporting Starts July 2026: Act Now

I had a conversation in January with the CFO of a mid-sized logistics company in Brisbane. Around 280 employees, just over $200M revenue. He'd heard about ASRS but figured it was "a big company thing." When I walked him through the Group 2 thresholds, he went quiet for about ten seconds. Then: "So we're already behind."

He's not alone. Financial years starting on or after 1 July 2026 trigger mandatory climate disclosures for Group 2 entities - which means if your financial year runs the standard 1 July to 30 June, your first reporting period started this month. These disclosures aren't buried in some CSR annex nobody reads. They go inside your annual financial report. Directors sign off on them under the same liability provisions that apply to your profit and loss statement.

That last part deserves repeating because I don't think it's fully sunk in across the mid-market yet. Same liability framework. Same personal exposure for directors. The Corporations Act penalties go up to $15 million or 10% of annual turnover - whichever is larger.

What's Changed Since February 2026

As of today, 20 July 2026, this is no longer a future-tense problem for most Group 2 entities. If your financial year runs 1 July to 30 June, you're already inside your first ASRS reporting period - the clock that matters now is your reporting deadline at year-end, not a start date somewhere on the calendar. If you haven't engaged an assurance provider or started your data build, you're behind, not early. The catch-up move is the same as the original plan below, just compressed: confirm your Group 2 status this week, get an assurance provider on the phone this week (not "this quarter"), and start pulling twelve months of utility and fuel data immediately so your Scope 1 and 2 numbers have a real trail behind them by year-end.

If your financial year runs 1 January to 31 December instead, your Group 2 obligations don't start until 1 January 2027. You've got roughly five months of genuine runway left - the sixteen-week plan later in this article still applies to you, just counted back from your own start date rather than 1 July.

Update: Six Weeks Into Group 2 Reporting

As of mid-August 2026, the two-speed pattern we flagged in July has hardened rather than closed. Some Group 2 entities went into 1 July with their data pipeline, governance framework, and assurance engagement already locked in - they're processing quarterly data as it comes. Many others are still assembling the basics: confirming which utility accounts they actually have data for, reconciling gas consumption recorded in megajoules on some invoices and gigajoules on others, and chasing down source PDFs that were "saved somewhere" rather than filed.

The assurance bottleneck we warned about is no longer a prediction - it's the binding constraint. Market reports suggest larger sustainability assurance practices were substantially booked by March, and some mid-tier firms that still had capacity in February are now quoting engagement timelines that push into late 2027, which means some Group 2 entities won't get their methodology reviewed until they've already been collecting a full reporting year of data. If an assurance provider flags an incorrect emission factor or a missed Scope 1 source at that point, you're reworking months of work, not weeks. We go through what this looks like in practice in ASRS Group 2 Is Live: What We're Seeing in the First Month - if you haven't locked in an assurance provider yet, that's the more urgent read right now, not this one.

Treasury Is Reviewing the Assurance and Scope 3 Rules (open from late August 2026 and closing 2 October 2026)

While you're mid-way through your first Group 2 reporting period, Treasury opened a public consultation in late August 2026, closing 2 October 2026, on "efficiency-enhancing" reforms to the ASRS framework. Three things are on the table: easing or delaying the escalation from limited to reasonable assurance, clearer guidance on core reporting concepts, and - most relevant if you're chasing supplier data right now - boundaries on what information large reporters can demand from smaller companies in their value chain for Scope 3 disclosures.

Don't treat this as a reason to slow down. The government has explicitly said any changes will be sequenced to avoid disruption, and won't affect what you report for FY2026-27 - Scope 3 disclosure obligations for those who've reached their second reporting year are staying in place. Nothing about your current reporting period, your current assurance engagement, or your current Scope 1/2 obligations changes because a consultation paper exists. Treat this as a "watch this space for FY2027-28 onward" item, not a reason to pause your build-out.

Are you actually caught by Group 2?

Worth checking before you panic. You qualify if you meet two out of three: $200M+ consolidated revenue, $500M+ gross assets, or 250+ employees.

But here's the bit that keeps catching people. There's a second pathway - through the NGER Act. If your corporate group is already a registered NGER reporter (thresholds: 50 kt CO2-e scope 1 and scope 2, or 200 TJ energy), you're automatically Group 2 even if you miss the size tests above. ASIC's Regulatory Guide 280 from March 2025 covers this in detail. I'd specifically look at the section on determining reporting obligations - it's about four pages long and fairly readable, which is unusual for ASIC.

Asset owners with $5 billion or more under management also get pulled in, though that's a narrower group.

The NGER pathway catches people because a company can have relatively modest revenue and headcount but still trigger NGER through energy-intensive operations. I know of a food processing business in regional Victoria - maybe 180 staff, $120M turnover - that reports under NGER because of their gas consumption. They're Group 2 now and didn't realise it until November.

What went wrong with Group 1

Group 1 entities (500+ employees, $500M+ revenue, or $1B+ gross assets) began reporting for financial years from 1 January 2025. By early 2026, their first sustainability reports were landing alongside annual financials.

Oxford Economics published an analysis of the early results that flagged three recurring problems. I've heard versions of each from auditors and sustainability consultants across Sydney and Melbourne, so this isn't theoretical.

Problem one: the consultant trap. Companies spent big - I've heard numbers ranging from $150K to north of $400K - to get consultants to build their first-year climate disclosure. The deliverable was a model, often in Excel, that produced the required disclosures for one specific year. Come year two, the consultant's gone, the Excel model makes assumptions nobody internal understands, and you're essentially starting over. One Big Four partner described this to me as "buying a house of cards."

Problem two: scenario analysis that floats in space. A lot of Group 1 entities grabbed the IEA Net Zero by 2050 scenario, or one of the NGFS pathways, and wrote their strategy section around it. The issue is these are global scenarios. Auditors started asking uncomfortable questions: how does a 1.5°C pathway translate to your specific revenue streams in Australia? What does it mean for your asset valuations in Western Australia versus Tasmania? If you can't bridge from the global pathway to your actual P&L line items, the assurance provider will flag it. Several did.

Problem three: numbers that moved under assurance. This one is the most damaging. Some companies' financial impact estimates changed materially once an assurance provider started testing them. That immediately raises questions about methodology. If your numbers shift when someone checks your work, what were they based on in the first place? The practical lesson coming out of Group 1: spending half your AASB S2 budget on getting the underlying data right, and skipping the polished report visuals, would have landed a better outcome.

First-year disclosure requirements (the actual list)

AASB S2 organises climate disclosures into four pillars. Rather than describe each one generically, I'll flag where I've seen Group 2 companies get stuck.

Governance. The standard wants evidence that your board actually oversees climate risks - not that you created a committee and listed it on page 47 of your annual report. Assurance providers want to see board minutes, see agenda items, understand how climate feeds into capital allocation decisions. If the honest answer is "it doesn't yet," that's a problem you need to fix in the next sixteen weeks, not paper over.

Strategy and scenario analysis. This is where Group 1 burned the most cash, as mentioned above. Expect to spend $50K-$100K on external scenario analysis if you don't have in-house capability. My advice (and yes, I'm biased toward DIY approaches): start with two scenarios - a 1.5°C aligned pathway and a higher-warming scenario in the 2.5-3°C range. Map each to three or four of your most material revenue and cost lines. Don't overcomplicate it in year one. The standard expects improvement over time.

Risk management. How you identify and assess climate risks, and critically, how that process connects to the risk register your board already reviews. Climate risk can't live in a sustainability silo that reports to the marketing department. If your Chief Risk Officer hasn't been involved in this work yet, you have a governance gap.

Metrics: Scope 1 and Scope 2 emissions. This is the one with zero safe harbour protection (more on that below). Your emission numbers need to be right. Not directionally correct. Not roughly estimated. Right. Calculated using the GHG Protocol, with auditable source data for every figure.

One piece of genuine good news: Scope 3 emissions reporting is deferred for your first year. You don't have to disclose them until your second reporting period.

I'd still recommend starting Scope 3 data collection now, though. We've been working on our own Scope 3 methodology for months and some categories - purchased goods and services in particular - are genuinely difficult to get right. The supplier data quality problem alone could fill an entire article. Starting twelve months early gives you a baseline, even a messy one, which is infinitely better than starting from nothing.

The assurance piece

External assurance is mandatory from year one for Group 2. It's limited assurance (essentially a review, not a full audit) covering your governance disclosures, climate risk strategy, and Scope 1 and 2 emissions. Reasonable assurance - the full audit - phases in from financial years beginning 1 July 2030.

Don't let the word "limited" relax you. I sat through a presentation from a mid-tier assurance firm in December where they walked through their engagement process. For a Group 2 entity with, say, ten facilities and a vehicle fleet, they estimated 80-120 hours of engagement time. They test your calculation methodology. They trace individual emission figures back to source documents. They interview management about governance processes.

Three questions that keep coming up in every assurance engagement I've heard about:

Where did this specific number come from?
Show me the source document - the actual PDF, not a cell in a spreadsheet.
Walk me through how you got from the source document to the number in your report.

If your current process involves someone downloading utility bills from email, typing figures into Excel, and then running calculations across multiple tabs - and look, that's most mid-market companies right now - then question number two is going to be painful. The source document might be in someone's deleted items folder. The calculation might reference a cell that references another cell that references a lookup table someone built two years ago. Auditors hate this and I don't blame them.

This is the specific problem we built our AI document processing system to solve. Every data point extracts from the source PDF and maintains a link back to it. The calculation chain is logged. When an assurance provider asks "where did this 847 MWh figure come from," there's a direct trail from the number in the report to the AGL bill from Q2 that shows 847 MWh. No digging through email. No reconstructing spreadsheet logic.

Liability: the scary headlines and the actual detail

The $15M penalty figure gets thrown around a lot. Directors can be personally liable under the Corporations Act for misleading climate statements. That's real.

But the government recognised that this is new territory and built in transitional protection. A modified liability period runs from 1 January 2025 through 31 December 2027. During that window, private litigants cannot bring civil claims relating to your Scope 3 emissions, scenario analysis, or transition plan disclosures. Only ASIC can take enforcement action on those specific elements, and even then, ASIC's remedies are capped at injunctions and declarations - no monetary penalties for those particular items during the safe harbour window.

For Group 2 entities starting in July 2026, your first reporting period falls entirely within this transitional window.

Here's what the safe harbour doesn't cover, though. Your Scope 1 and 2 emissions. Your governance disclosures. Any climate-related statements you make outside the sustainability report - in a directors' report, an investor presentation, a press release, or even comments at an AGM. And it doesn't protect statements that are genuinely misleading or deceptive, regardless of where they appear.

Read that paragraph again. Your core emission numbers have no transitional protection. Getting them wrong exposes you from day one. This is why data quality matters so much - it's not an operational nice-to-have, it's a legal shield.

What you'll actually spend

Here are indicative ranges for a mid-market company. Treat them as a starting point and confirm with your providers.

Fractional Chief Sustainability Officer (external): $8,000 to $15,000 per month. That's $96K-$180K annually. Some companies are hiring permanent sustainability managers instead, which runs $140K-$180K fully loaded for someone competent in the Melbourne or Sydney market.

Assurance engagement (limited): $30,000 to $80,000. Depends heavily on how many facilities you have, how clean your data is, and which firm you engage. The Big Four are more expensive but some Group 2 companies prefer mid-tier firms that have more availability and sometimes more pragmatic engagement styles.

Scenario analysis (if outsourced): $50,000 to $100,000 for two scenarios across your material business lines.

Software and data systems: varies enormously. Costs run from $0 (the "we'll do it in Excel" approach, which works until it doesn't) to $50,000+ for enterprise platforms.

Total realistic first-year spend for a Group 2 entity: $200,000 to $350,000 all-in. And this recurs every year, which is the part that makes the "hire consultants to build a one-off model" approach so expensive over time.

Where we think automation gives the fastest dollar-for-dollar return on automation is in data collection. The grunt work of extracting kWh and GJ figures from utility bills, fuel receipts, and supplier invoices - a company processing 150-300 documents a quarter can compress that from weeks of manual work to a few hours. Our NGER compliance approach plugs directly into ASRS because the Scope 1 and 2 data is identical under both frameworks.

A sixteen-week plan that's honest about the timeline

This is the original countdown we wrote in February, built for a 1 July financial year. If your reporting period already started, use it as a compressed catch-up checklist - do the February-to-May steps back to back rather than spread over four months. If your financial year starts 1 January 2027, this is your actual runway, counted back from your own start date.

I won't pretend sixteen weeks is comfortable. It's not. But I've seen companies pull it together in less when they're focused.

February to mid-March. Confirm your Group 2 status - really confirm it, including the NGER pathway. Engage an assurance provider now. I'm hearing that mid-tier firms are already booking up for Group 2 engagements. BDO, Grant Thornton, Pitcher Partners - call them this week, not next month.

March to April. Inventory your emissions data sources. Write down every facility, every utility account number, every fuel supplier, every fleet management system. The goal is a complete map of where your Scope 1 and Scope 2 data physically lives. Start identifying gaps early - a missing gas account or an unmetered fuel supply is easier to sort out now than in September.

April to May. Stand up your data collection system and run a historical test. Process six to twelve months of back data to verify your calculation methodology works end-to-end. This is where problems surface - emission factors applied incorrectly, unit conversions that don't match, consumption figures that look wrong compared to prior periods. Better to find these now.

May to June. Document governance processes, run scenario analysis, and draft disclosures. Get your assurance provider to review early drafts. They'll tell you where the holes are. Fix what you can, flag what you can't, and make sure your board has seen and discussed the disclosures before they go into the annual report.

Is this doable? Yes, if you actually start this week. Not "start thinking about it." Start as in: call an assurance provider, assign an internal project lead, and set up weekly check-ins. The companies that'll struggle are the ones where ASRS is still an agenda item at monthly meetings rather than an active workstream.

Group 1 showed us what happens when preparation slips. Consultants working weekends in November. Assurance providers finding basic data errors in December. Boards signing off on disclosures they don't fully understand because the deadline is tomorrow. Nobody wants to be in that position.

Your reporting period starts 1 July. Do something about it today.

Quick Answers

Has ASRS Group 2 reporting actually started? Yes. For entities with a standard 1 July-30 June financial year, the first mandatory reporting period began 1 July 2026. Entities with a 1 January-31 December financial year start 1 January 2027.

What if my reporting period already started and I haven't begun? You're behind but not out of options. Engage an assurance provider immediately, and compress the data-collection and governance-documentation steps rather than skip them - a rushed but real audit trail beats a polished narrative built on numbers nobody can trace back to source documents.

Does the safe harbour still apply if I start late? Yes. The modified liability period (1 January 2025 to 31 December 2027) covers Scope 3, scenario analysis, and transition plan disclosures regardless of when in that window your reporting period falls. It does not cover your Scope 1 and 2 emissions or governance disclosures, which need to be right from day one - see the liability section above.

I still haven't secured an assurance provider - is it too late? Not too late, but the window is closing fast. Mid-tier firms with spare capacity in February are now quoting engagement timelines into late 2027. Call this week - a later start means your methodology gets reviewed after months of data collection instead of before, which is exactly the sequence that caused rework problems for Group 1 entities.

Is Treasury changing the ASRS assurance or Scope 3 rules right now? It's reviewing them, not changing them yet. A consultation paper open from open from late August 2026 and closing 2 October 2026 is looking at whether to ease the escalation from limited to reasonable assurance and at limiting how much Scope 3 data large reporters can demand from small suppliers. The government has said changes won't apply retrospectively to FY2026-27 - your current reporting period and assurance engagement proceed exactly as planned.