BAS reporting requirements