Information Collection Requirements for the Australian Illegal Logging Prohibition Act (ILPA)

What Timber Importers & Processors Must Collect, Verify, and Report

Here’s a question compliance teams across Australia’s timber industry are grappling with right now: if an audit lands on your desk tomorrow, could you produce the full set of ILPA-required documentation for every regulated timber product you imported in the last five years? If the answer involves spreadsheets, email inboxes, and a nervous call to your logistics team, you’re not alone, but you’re also not protected. ILPA’s information collection requirements are detailed, supplier-dependent, and spread across your entire upstream supply chain. Getting them wrong means enforcement action. Getting them right requires a system.

Under the Australian Illegal Logging Prohibition Act 2012 and its Regulations, importers of regulated timber products and processors of raw logs must collect a defined set of information spanning harvest origin, species identity, legal authorization, supplier identity, and chain of custody before importing or processing. This due diligence system requires you to not just gather documents but assess legality risk and store records for a minimum of five years. Non-compliance carries penalties of up to AUD $222,000 for corporations.

This guide breaks down exactly what information you must collect, from which points in your supply chain, with what level of verification and what best-practice documentation looks like under Australian Department of Agriculture scrutiny.

Key Takeaways

1. ILPA requires importers and domestic processors to conduct due diligence – collecting specific supplier, harvest, and legality documentation – before placing timber products on the Australian market.
2. The information requirements span 11+ data categories, from harvest location coordinates to species-level legality documentation, and must be stored for 5 years.
3. Manual data collection leaves companies exposed to audit risk; platforms like TraceX automate the collection, verification, and storage of ILPA-required documentation across complex, multi-tier supply chains.

Why ILPA Compliance Is a Data Problem, Not Just a Legal One

ILPA was enacted to ensure Australian importers and processors don’t inadvertently fund illegal deforestation. But the law’s teeth are in the detail. It doesn’t just prohibit the import of illegally logged timber it requires you to prove you took reasonable steps to determine legality. That proof is an information collection and assessment exercise.

The Department of Agriculture enforces ILPA through a risk-based compliance program. Auditors will ask: What information did you collect? From whom? How did you assess the legality risk? What did you do when the picture wasn’t clear? Without documented, verifiable answers, you’re exposed even if the timber itself was legally sourced.

ILPA compliance is not a checkbox exercise; it’s a risk-calibrated information management process. The Regulations require your due diligence system to be proportionate to the level of risk your supply chain carries. Low-risk, certified suppliers require less documentation depth. High-risk origins (based on FAO governance data, Transparency International CPI scores, and species-specific export restrictions) demand greater verification rigour. This means your information collection system must be dynamic, not a static form.

Explore our complete guide to the Australian Illegal Logging Prohibition Act and learn what it means for timber importers and processors.
Read the Complete ILPA Guide

Ensuring compliance with AILPA requires proper due diligence, supplier verification, and traceability.
Learn How to Achieve ILPA Compliance

Who Must Comply? Importers vs. Domestic Processors

ILPA creates two distinct compliance obligations one for importers, one for domestic processors of Australian raw logs. The information collection requirements differ between them.

The critical distinction: importers must act before the goods cross Australian customs. Domestic processors must act before processing begins. In both cases, the due diligence system must be documented and reproducible – auditors will assess your system, not just individual shipments.

Many importers assume that sourcing from a country with an existing Bilateral Agreement (e.g., Indonesia under the FLEGT framework) automatically satisfies illegal logging prohibition act (ILPA) requirements. It doesn’t; while such agreements evidence lower risk, they don’t eliminate the information-collection obligation. You still need to collect the core data set; you simply have a stronger basis for concluding legality.

What Information Must You Collect? The 11-Category Framework

The Australian Illegal Logging Prohibition Regulation 2012 specifies the information a due diligence system must include. We’ve organized it into 11 operational categories to make implementation practical.

Regulators review your system against these categories. Missing even one can trigger a ‘system deficiency’ finding, which escalates the enforcement response.

Category 1: Product Description

You must be able to describe the regulated timber product precisely, covering trade name, common name, and scientific species name. This is not optional. illegal logging prohibition act (ILPA) requires species-level identification because the legality of harvest often depends on whether a specific species is protected under the source country’s laws, CITES listings, or regional forestry regulations.

• Trade name and common name of the product
• Scientific name (genus and species) of all timber species present
• Description of the product form (solid wood, veneer, plywood, paper, etc.)
• HS (Harmonized System) tariff code confirming it is a regulated product

Category 2: Country of Harvest

The country where the timber was harvested not processed, not exported from, is foundational to legality risk assessment. In complex supply chains involving re-processing through third countries, you must trace back to the point of original harvest.

• Country of harvest (ISO country code acceptable)
• Sub-national region or state of harvest (where available and relevant to legality)
• Coordinates or geographic identifiers for the harvest area (increasingly expected for high-risk origins)

Category 3: Supplier Identity and Contact Details

You must document who supplied the timber product to you, the direct supplier as well as maintain information enabling you to trace back through the supply chain where necessary.

• Full legal name and trading name of the immediate supplier
• Business address and country of registration
• Contact details (email, phone) for the responsible person
• Business registration or tax ID number (where available)

Category 4: Volume and Quantity

Quantification enables traceability and acts as a cross-reference against shipping documentation. Discrepancies between declared and actual volumes are a red flag for illegal substitution.

• Volume in cubic metres or weight in tonnes (as applicable to the product type)
• Quantity of units (for processed products like furniture or flooring)
• Consistency check: volume declared must align with Bill of Lading and customs entry

Category 5: Legal Authorization for Harvest

This is the heart of illegal logging prohibition act (ILPA) due diligence. You must collect documentation that establishes the timber was legally harvested under the laws of the country of harvest. Relevant documents vary by jurisdiction but commonly include:

• Timber concession or harvesting licence issued by the competent authority
• Forest management plan or approved harvest permit
• CITES export permits (for CITES-listed species)
• FLEGT licence (where source country has an operational VPA with the EU – relevant for Indonesia)
• PEFC or FSC chain of custody certificate (reduces risk but doesn’t eliminate collection requirement)
• Government-issued legality assurance documents (e.g., Indonesia’s SVLK/V-Legal certificate)

Don’t just collect the document – verify it. illegal logging prohibition act (ILPA) due diligence standard expects you to take ‘reasonable steps’ to confirm that licences and permits are genuine and currently valid. This means cross-referencing against the issuing authority’s online register where available, and flagging documents that cannot be independently verified for enhanced scrutiny.

Category 6: Chain of Custody Documentation

For timber that has passed through multiple processing or export stages, you need documentation that maintains an auditable link from forest to your facility.

• Transaction records (commercial invoices, purchase orders) at each stage
• Transport documentation (Bill of Lading, airway bill, CMR waybill) covering each leg
• Packing lists with species and volume consistent with harvest documentation
• Third-party inspection or verification reports (SGS, Bureau Veritas, Intertek)
• Phytosanitary certificates and Australian biosecurity import permits

Category 7: Exporter Information

The exporter (who may differ from the harvester or first processor) must also be identified, particularly where there’s a risk of mixing legally and illegally sourced timber in the export country.

• Full legal name and trading address of the exporter
• Export licence number (where the source country requires export licensing)
• Country of export (which may differ from country of harvest – important for re-processed goods)

Category 8: Source Country Legal Framework Assessment

Your due diligence system must demonstrate that you’ve assessed the legal framework governing timber harvesting in the source country. This is the risk-assessment backbone of illegal logging prohibition act (ILPA) compliance.

• Summary of source country’s forestry legislation and enforcement capacity
• Assessment tools used: FAO Forest Resources Assessment, Transparency International CPI, Forest Governance Index
• Documentation of any bilateral agreements or recognized certification schemes applicable
• Assessment of species-specific export restrictions under source country law

Category 9: Risk Assessment Record

Having collected the information above, you must formally assess and document the risk that the timber was illegally logged. This assessment must be proportionate to the risk identified.

• Risk rating assigned (e.g., Negligible / Low / Medium / High)
• Basis for risk rating – which information points drove the assessment
• Any risk mitigation measures applied (enhanced verification, third-party audit, hold on import pending resolution)
• Sign-off by responsible compliance officer with date

Category 10: Certification and Third-Party Verification

Certification doesn’t replace illegal logging prohibition act (ILPA) information collection but it does significantly reduce the depth of verification required and strengthens your risk assessment.

• FSC (Forest Stewardship Council) certificate number and validity date
• PEFC certificate number and chain of custody coverage
• SFI (Sustainable Forestry Initiative) certification where applicable
• Third-party audit or verification report (particularly important for high-risk origins without recognised certification)

Category 11: Record Retention Metadata

Finally, illegal logging prohibition act (ILPA) requires that your due diligence records be retained for a minimum of five years and be produced on request during an inspection. Your records must be accessible, organized, and retrievable.

• Date due diligence was conducted for each shipment
• Name of the person who conducted the due diligence
• Date of import (or processing)
• Unique shipment or batch reference number enabling linkage to all supporting documents
• Storage location or system reference for all collected documentation

How Deep Does Verification Need to Go?

illegal logging prohibition act (ILPA) uses a proportionality principle: the depth of verification required is calibrated to the risk level of your supply chain. The Regulations don’t prescribe a single verification standard they require ‘reasonable steps’, which the Department of Agriculture interprets through a risk lens.

The Department of Agriculture publishes commodity-specific risk guidance that changes over time. Tropical hardwoods from certain SE Asian origins, for instance, have historically attracted heightened scrutiny. Subscribing to Department updates and adjusting your risk calibration accordingly is part of a robust due diligence system.

What Does an Audit-Ready illegal logging prohibition act (ILPA) Record Look Like?

When the Department of Agriculture conducts a compliance audit, inspectors will assess your due diligence system as a whole not just spot-check individual documents. They want to see that your system is documented, consistently applied, and produces retrievable records.

System Documentation Requirements

• A written description of your due diligence system (policies, procedures, responsible roles)
• Documented risk assessment methodology, including the sources and tools used
• Internal review and update process – how often do you revisit your system?
• Training records showing staff responsible for illegal logging prohibition act (ILPA) compliance are trained

Shipment-Level Record Requirements

• A complete file per shipment or batch, containing all 11 information categories above
• Linkage between the due diligence record and the customs entry (import declaration number)
• Evidence of legality risk assessment with outcome and any mitigation actions
• Storage in a system that allows retrieval within a reasonable timeframe on request

What Inspectors Actually Look For

Based on Department of Agriculture published compliance guidance, the most common system deficiencies found during illegal logging prohibition act (ILPA) audits include: (1) inability to identify species to scientific name, (2) harvest location documented only at country level with no sub-national detail, (3) legality documentation not independently verified, (4) risk assessment not documented – assessment done informally but no written record exists, (5) records stored in emails and folders with no retrieval system. Address all five and you’re already ahead of most of the market.

How TraceX Solves the Illegal Logging Prohibition Act (ILPA) Information Collection Challenge

The core operational challenge in ILPA compliance isn’t understanding what to collect it’s collecting it reliably, consistently, and verifiably across suppliers who may be in Southeast Asia, Central Africa, or South America, operating in different languages, with varying document quality.

TraceX’s Regulatory Compliance Platform was purpose-built for this exact problem. Here’s how it maps to ILPA requirements:

The result: compliance teams spend less time chasing supplier documents and more time on risk decisions. Audit preparation that once took weeks can be produced in hours.

Information Collection Is Your Compliance Foundation

The Australian Illegal Logging Prohibition Act isn’t asking for perfection it’s asking for a documented, systematic, risk-proportionate approach to information collection and legality assessment. The 11 categories we’ve outlined above are the building blocks of a compliant due diligence system. Miss one, and you have a system gap. Miss several, and you have enforcement exposure.

The companies that navigate ILPA audits without incident share a common trait: they’ve built a system, not just assembled a folder of documents. They know where their timber comes from, at species level, with verified legal authorization, across every tier of their supply chain.

For most importers, building that system manually across dozens or hundreds of suppliers in high-risk geographies is operationally unsustainable. That’s the gap TraceX was built to close.

Illegal logging remains one of the biggest threats to global forests and sustainable timber trade. Learn how it impacts ecosystems, supply chains, and regulatory compliance.
Read the Illegal Logging Explained

The timber industry involves a complex network from forest harvesting to final products. Discover how the timber value chain works and the key stakeholders involved.
Understand the Timber Value Chain

Traceability is essential for ensuring timber is legally sourced and deforestation-free. Learn how traceability systems improve transparency across timber supply chains.
Discover Timber Traceability

Frequently Asked Questions (FAQ’s)