Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Creating a safe, healthy workplace isn’t just good business - it’s the law in Australia. Strong work health and safety (WHS) practices protect your team, contractors, customers and anyone else affected by your operations, and they also protect your business from disruption and costly incidents.
If you’re running a business or leading a team, you don’t need to be a safety expert to get this right. You do need to understand who has legal duties, what those duties involve day to day, and the practical steps that help you comply (and build a positive safety culture).
This guide breaks down the WHS basics in plain English and shares practical tips you can implement straight away. It’s general information to help you get started - for advice about your specific situation, it’s best to speak with a legal professional.
What Is Work Health And Safety (WHS)?
WHS is about managing risks to people’s physical and psychological health that arise from work. The laws are preventive: they focus on identifying hazards, controlling risks and consulting with workers, so injuries and illnesses are avoided in the first place.
Most states and territories have adopted “model” WHS laws to harmonise the approach across Australia. While there are jurisdictional differences (for example, Victoria has separate OHS legislation), the core concepts are consistent: place people’s safety first, manage risks so far as reasonably practicable, and continuously improve your systems.
Who Has Legal Duties Under WHS Laws?
WHS laws talk about “Persons Conducting a Business or Undertaking” (PCBUs), “officers,” “workers” and “other persons at a workplace.” This language is broader than “employer/employee” because it covers modern ways of working (such as contractors, labour-hire, volunteers and gig work).
PCBU: The Primary Duty Of Care
The PCBU - often the business entity - holds the primary duty to ensure, so far as reasonably practicable, the health and safety of workers and others. That includes safe work premises, safe plant and substances, safe systems of work, information, training and supervision, and monitoring health and conditions at the workplace.
It’s helpful to think of this as your overarching duty of care to maintain a safe environment and manage risks that could foreseeably cause harm.
Officers: Due Diligence
Company directors and senior decision-makers are “officers” under the Corporations Act and WHS laws. They must exercise due diligence to ensure the PCBU complies with its obligations. Practically, that means staying up to date on WHS, ensuring appropriate resources and processes are in place, receiving and responding to incident and risk information, and continually verifying that systems are working.
Workers And Other Persons: Reasonable Care
Workers (employees, contractors, labour-hire workers, trainees, volunteers and more) must take reasonable care for their own safety and that of others, follow reasonable WHS instructions, and cooperate with policies and procedures.
Visitors, customers and other persons at the workplace also have responsibilities to take reasonable care and comply with reasonable instructions.
Consultation, HSRs And Participation
Consultation with workers is mandatory when identifying hazards, making decisions about risk controls, proposing changes, and developing procedures. Consultation can be informal, via toolbox talks and team meetings, or more formal with Health and Safety Representatives (HSRs) and committees where requested or required.
Good consultation isn’t just a legal tick-box - it’s one of the most effective ways to uncover hazards early and make practical improvements that people actually use.
Core Compliance Tasks For Australian Workplaces
Below are the day-to-day building blocks most workplaces need to meet WHS obligations and reduce risk.
1) Risk Management That Actually Works
- Identify hazards: Walk the floor, consult staff, review incident and near-miss data, and consider non-physical hazards like fatigue, bullying and work-related stress.
- Assess risks: Consider likelihood and consequence. Focus first on risks with potential for serious harm.
- Control risks: Use the hierarchy of controls - eliminate hazards where possible, then substitute, isolate, or use engineering controls before administrative controls and PPE.
- Review controls: After incidents, when changes occur (new equipment, processes, layouts, remote work arrangements) and at set intervals, check whether controls still work as intended.
Documenting this process makes it easier to train new starters, demonstrate compliance and keep improvements on track.
2) Training, Supervision And Competency
Provide role-specific induction and refresher training, not just a generic safety slide deck. Make sure people are competent before working unsupervised, and tailor training for higher-risk tasks (e.g. hazardous chemicals, forklifts, working at heights).
Record who was trained, when, and on what. Competency checks and sign-offs help you verify that training sticks - especially in safety‑critical roles.
When you’re hiring, written terms set clear expectations from day one. Having an Employment Contract that aligns with your WHS policies supports consistent, safe work practices.
3) Managing Contractors, Labour-Hire And Remote Work
Multiple PCBUs often share duties at the same workplace (e.g. host employer, labour-hire agency, specialist contractors). You must consult, cooperate and coordinate activities with other duty holders so controls are aligned and gaps are closed.
For remote and hybrid work, “workplace” includes a home office or customer site. Assess ergonomic risks, lone worker procedures, emergency response and communication tools for those locations. Clear workplace policies can set expectations for safe remote work set‑ups and incident reporting.
4) Psychosocial Hazards And Wellbeing
WHS covers psychological health as well as physical safety. Psychosocial hazards include high job demands, low control, poor support, remote or isolated work, bullying, harassment, violence and poor change management.
Control measures might include workload planning, clear role design, respectful communication norms, support pathways, and early intervention processes. Training managers to handle performance, behaviour and conflict issues in a fair, lawful way reduces risk, and strong workplace communication practices help hazards surface early.
5) Incident Notification, Records And Inspections
- Notifiable incidents: Deaths, serious injuries/illnesses and dangerous incidents must be notified to the regulator immediately, and the incident site usually preserved until an inspector directs otherwise.
- Recordkeeping: Keep risk assessments, training records, consultation notes, maintenance logs, and incident investigations. Good records prove that controls are in place and working.
- Engaging with inspectors: Regulators can enter workplaces, request documents, interview staff and issue notices. Treat visits as opportunities to improve - and make sure someone is ready to brief the inspector on your WHS systems.
What Happens If You Don’t Comply?
Non‑compliance can lead to immediate disruption and significant penalties - and, of course, the human cost of harm. Understanding the enforcement tools helps you prioritise prevention.
Enforcement Tools And Penalties
- Improvement and prohibition notices: Inspectors can require you to fix issues or stop dangerous activities until controls are in place.
- Infringement notices: On‑the‑spot fines for certain contraventions.
- Prosecutions: Category 1 (reckless conduct), Category 2 (failure exposing an individual to risk of serious harm) and Category 3 (failure to comply) offences carry significant fines. Individuals can also face imprisonment for Category 1 offences.
- Enforceable undertakings: In some cases (excluding the most serious), a regulator may accept a legally binding undertaking to improve safety instead of prosecution.
Officers can be personally liable if they fail to exercise due diligence. That’s why governance, not just paperwork, matters.
Insurance And Indemnity Limits
Insurance cannot be used to cover criminal penalties under WHS laws, and indemnifying officers for certain liabilities may be restricted. Relying on insurance alone is not a compliance strategy - the emphasis stays on prevention and robust systems.
Practical WHS Best Practices You Can Implement Now
Here are pragmatic, low‑friction steps that make a real difference - especially for small and growing businesses.
- Make leaders visible in safety: Start meetings with a safety moment, invite feedback and act quickly on hazards. This builds trust and keeps risks front of mind.
- Keep policies short and usable: Long manuals gather dust. Create concise procedures for critical risks and make them easy to find and follow. Where needed, support with a broader employee privacy or conduct handbook.
- Use simple checklists: Pre‑start checks for vehicles and plant, opening/closing checklists and job safety analyses help teams do the right thing consistently.
- Design training around real tasks: Demonstrations, buddy systems and competency sign‑offs often beat classroom slides.
- Close the loop on reports: If someone raises a hazard, let them know what changed. Visible improvements encourage more reporting.
- Measure what matters: Track leading indicators (e.g. completed inspections, corrective actions closed, training completion) as well as lag indicators (injuries). Use short, regular reviews to iterate.
- Map shared duties with contractors: Clarify who controls what, how information is shared, and how to escalate issues on shared sites.
- Plan for psychosocial risks: Include respectful behaviour, workload and support in your risk register. Early, fair performance and behaviour management reduces harm.
If you operate in a safety‑critical environment, think carefully about competency management, fatigue controls and, where appropriate, lawful drug testing programs with clear thresholds and privacy safeguards.
How Do WHS Laws Interact With Employment And HR?
WHS sits alongside workplace and employment law. They’re different systems, but they meet in the real world on topics like working hours, breaks, supervision and behaviour at work.
Industrial instruments (like modern awards and enterprise agreements) set minimum entitlements such as pay, breaks and rostering. While awards don’t replace WHS laws, managing fatigue and providing adequate rest breaks are core safety controls - so align your rosters and hours with both WHS risk management and your industrial obligations.
From an HR perspective, support your WHS program with clear documentation. Safe work expectations belong in role descriptions, onboarding and performance frameworks. A tailored workplace policy suite can cover incident reporting, risk controls, remote work, consultation, fitness for work and respectful behaviour. When you collect or store incident or health data, ensure you handle it lawfully and transparently with an appropriate Privacy Policy.
Contracts should work hand‑in‑hand with your systems. An Employment Contract that references relevant policies, training and safety obligations helps set expectations clearly and consistently. If you’re unsure how these elements should fit together in your business, speaking with an employment lawyer can help you tie WHS, HR and privacy requirements into a coherent whole.
Communication, Culture And Reporting
Communication is a safety control. Channels for raising concerns should be clear, confidential where appropriate and free from reprisal. Transparent updates on hazards, incidents and corrective actions help everyone understand how risks are managed and encourage participation. If you’re formalising channels, consider how your existing workplace communication rules apply to safety discussions and records.
Common Pitfalls To Avoid
- Paper without practice: Having a policy that isn’t used can be worse than having no policy. Keep it practical.
- One‑off training: Induction alone won’t cut it - plan refreshers, toolbox talks and competency checks.
- Ignoring psychosocial risks: Bullying, poor workload design and unclear roles are WHS issues, not just HR issues.
- Not coordinating with other PCBUs: Overlaps with labour‑hire or contractors are a common gap. Agree who does what before work starts.
- Reactive investigations: Don’t wait for harm. Near‑misses are gold - treat them like incidents and learn from them.
Putting It All Together: A Simple WHS Roadmap
Step 1: Understand Your Risks
List your top 5–10 hazards (physical and psychosocial), who could be harmed, and what controls exist. Then prioritise improvements using the hierarchy of controls.
Step 2: Set The Ground Rules
Draft short, practical procedures for high‑risk work and incident reporting. Align policies with how your team actually works - including remote or mobile work.
Step 3: Train And Verify Competency
Run relevant induction and task‑specific training, appoint competent supervisors and record completions. Build in quick on‑the‑job checks to confirm competency.
Step 4: Consult And Improve
Hold regular safety discussions, encourage hazard reporting and close the loop with visible fixes. Support HSRs if your team wants formal representation.
Step 5: Align HR, Privacy And Safety
Make sure contracts, policies and data handling are consistent with your WHS system. Where you handle worker health information, ensure your Privacy Policy reflects those practices.
Step 6: Prepare For Incidents
Define what’s notifiable, who calls the regulator, how to preserve the site, and who manages communications. Keep templates ready for incident reports and investigation notes.
Step 7: Review And Report
Schedule quarterly reviews of leading and lagging indicators, corrective actions, contractor performance and due diligence activities. Use the findings to update your risk controls and training plan.
Key Takeaways
- WHS laws place duties on PCBUs, officers, workers and others to manage risks to physical and psychological health so far as reasonably practicable.
- Core compliance work includes risk assessments, effective controls, role‑specific training, consultation, incident management and continuous improvement.
- Officers must exercise due diligence - that means ensuring the business has resources, processes and verification for WHS, not just policies on paper.
- Non‑compliance can trigger notices, fines and prosecutions, with serious personal liability for officers in severe cases.
- Align safety with HR: use clear workplace policies, an Employment Contract that supports safe work, and a compliant Privacy Policy for worker information.
- Keep it practical: short procedures, targeted training, simple checklists and strong consultation will lift safety and make compliance easier.
If you would like a consultation on work health and safety, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.


