Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Keeping people safe at work isn’t just good business - it’s a legal requirement in Australia. Whether you run a growing startup or a busy retail store, Work Health and Safety (WHS) laws set the standard for how you manage risks, train staff and respond when something goes wrong.
If you’re unsure where to start, you’re not alone. The good news is that with a simple, practical plan - and the right documents - you can meet your obligations and protect your team, your customers and your business.
In this guide, we’ll break down the WHS basics in plain English, explain who is responsible for what, and outline the steps you can take right now to stay compliant across Australia.
What Are Work Health And Safety (WHS) Laws In Australia?
WHS laws aim to prevent harm at work by requiring businesses to identify hazards, manage risks and involve workers in safety decisions. Most states and territories have adopted harmonised WHS laws based on the Model WHS Act, Regulations and Codes of Practice. The principles are the same across the country, with some local differences in detail and penalties. If you operate in multiple states, you should check the rules that apply in each location.
At the core of the law is a “primary duty of care.” This means the business must ensure, so far as is reasonably practicable, the health and safety of workers and others affected by the work. “Reasonably practicable” asks what a reasonable person would do to reduce risk, considering the likelihood and severity of harm, what is known about the risk, and the cost of controls.
WHS laws sit alongside other laws you already know, such as employment law and the Australian Consumer Law. For example, your duty of care to employees overlaps with WHS duties, and good WHS practices often support fair work and anti-discrimination compliance too.
Who Has Duties Under WHS - And What Are They?
WHS laws use some specific terms to describe who must do what. Understanding these roles helps you allocate responsibilities correctly in your business.
Person Conducting a Business or Undertaking (PCBU)
The PCBU is usually your business entity (for example, your company). The PCBU has the primary duty of care to provide safe work premises, safe plant and structures, safe systems of work, adequate facilities, information, training and supervision.
Officers
Company directors and senior decision-makers are “officers” under WHS laws. They must exercise “due diligence” - that is, take reasonable steps to ensure the PCBU complies. Due diligence includes keeping up to date on WHS, ensuring resources and processes are in place to manage risks, and verifying those processes are being followed.
Workers
Workers include employees, contractors, labour hire staff, apprentices and volunteers. Workers must take reasonable care for their own safety and comply with reasonable instructions and policies.
Other Persons
WHS duties also extend to others who may be affected by your work, such as customers, visitors and members of the public.
How Do I Comply With WHS Laws In Practice?
Compliance is about embedding safety into everyday operations. Here’s a step-by-step approach that works for most businesses.
1) Identify Hazards
Walk through your workplace and list anything that could cause harm: manual handling, slips and trips, machinery, vehicles, electrical risks, hazardous chemicals, fatigue, violence or aggression, and psychosocial hazards (like high job demands, bullying or poor change management).
2) Assess Risks
For each hazard, consider the likelihood of harm and how serious it could be. Prioritise the highest risks first - this is where your time and money make the greatest difference.
3) Control Risks
Apply the “hierarchy of controls”: eliminate the hazard if you can, or substitute, isolate, or engineer controls to reduce exposure. Use administrative controls (procedures, supervision, training) and personal protective equipment (PPE) where needed.
4) Consult With Workers
Consultation is mandatory. Talk with workers and health and safety representatives about hazards and controls, and invite feedback when introducing new processes or equipment. Strong workplace communication helps you spot risks early and build a safety culture.
5) Train And Supervise
Make sure everyone knows how to do their job safely. Provide induction training, job-specific instructions and refresher training. Record what’s been delivered, to whom and when.
6) Keep Records And Review
Document your risk assessments, policies, procedures, training and incident reports. Review your controls regularly and after any incident or near miss. Continuous improvement is part of compliance.
Key Risk Areas Businesses Often Overlook
Every workplace is different, but these areas commonly cause issues for small and growing businesses.
Psychosocial Hazards And Mental Health
WHS laws now clearly recognise psychosocial hazards - things like job strain, poor support, exposure to trauma, bullying and harassment. Managing these risks is just as important as physical safety. Integrate mental health into your WHS risk assessments and ensure managers understand their obligations under both WHS and Fair Work obligations regarding employee mental health.
Remote And Hybrid Work
If people work from home or offsite, your WHS duties follow them. Provide guidance on safe workstations, breaks, working hours and incident reporting. You may need to assess home work areas (self-assessments are common) and set clear expectations with a Remote Work Procedure under your broader Workplace Policy framework.
Drugs And Alcohol
Where safety is critical (e.g. driving, operating machinery, healthcare), consider a clear Drug And Alcohol Policy and lawful testing process. Ensure any program is proportionate and respects privacy and procedural fairness - our guide on drug testing steps through what’s reasonable for employers.
Mobile Phones And Distractions
Distraction is a real risk in warehouses, construction, driving and even customer-facing roles. A practical Mobile Phone Policy sets rules for using devices at work and helps supervisors manage breaches consistently.
Contractors And Labour Hire
WHS duties apply to contractors too, and they can be shared between PCBUs. Coordinate with host businesses and suppliers on induction, supervision, permits to work and incident response. Make sure contracts and onboarding materials clearly set out safety expectations and responsibilities.
Hazardous Substances And Plant
Where chemicals or equipment are involved, keep Safety Data Sheets up to date, maintain registers, ensure guarding and lockout/tagout procedures, and provide PPE and training. Follow relevant Codes of Practice for your industry.
Policies, Contracts And Training: Getting Your WHS House In Order
Good documentation makes WHS real. It tells people what to do, helps you train effectively and proves you’re meeting your obligations.
Core WHS Policies And Procedures
Most businesses benefit from a WHS Policy, Hazard Reporting Procedure, Incident And Near Miss Reporting, Risk Assessment Procedure, Return To Work guidance, and rules tailored to your risks (for example, manual handling, vehicle safety, contractor management, and lone worker procedures). Many of these sit within a comprehensive Workplace Policy suite so they’re easy to roll out and update.
Employment Contracts And Position Descriptions
Set expectations from day one. Your Employment Contract should include WHS obligations (complying with policies, reporting hazards, fitness for work) and reference any role-specific requirements like licences or PPE. Clear position descriptions help managers supervise effectively.
Privacy And Health Information
WHS sometimes involves collecting sensitive information (e.g. medical certificates, fitness-for-work assessments, drug and alcohol results). Handle this data carefully and only collect what you need. A transparent Privacy Policy and access controls will help you manage these records lawfully.
Consultation And Communication
Regular meetings, toolbox talks and safety committees all count towards consultation. Document them. Make sure feedback loops are clear so workers know how to raise issues. Strong workplace communication underpins a healthy safety culture and demonstrates due diligence.
Incident Response, Notifications And Investigations
Even with great controls, incidents can happen. How you respond matters.
Immediate Response
Prioritise first aid and safety. Make the area safe, provide support to those involved and preserve the scene if needed for investigation.
Notifiable Incidents
Serious injuries, illnesses or dangerous incidents may be “notifiable,” meaning you must notify the regulator immediately and keep records. Examples include death, serious head or spinal injuries, serious burns, loss of bodily function, or an incident that exposes a person to a serious risk (like a collapse or explosion). Check the definition in your jurisdiction and train managers to escalate quickly.
Internal Investigation
Investigate promptly to identify root causes and improvements. Capture statements, photos and documents, and implement corrective actions. Where allegations involve conduct issues, follow your disciplinary procedure and ensure a fair process. Well-drafted policies make it much easier to stand someone down or vary duties while you look into serious risks, and they dovetail with your workplace harassment and discrimination processes where relevant.
Support And Return To Work
Support injured workers through recovery and safe return to work. Keep in touch, plan adjustments and monitor progress, aligning with workers compensation requirements in your state or territory.
Penalties, Enforcement And Due Diligence
Regulators can visit your site, request documents, issue improvement or prohibition notices, or prosecute for breaches. Penalties can include significant fines and, in serious cases, prison for individuals. Some jurisdictions have industrial manslaughter offences for extreme negligence resulting in death.
Demonstrating due diligence is your best defence. That means you can show you:
- Stay informed about WHS and your risks
- Provide adequate resources (time, budget, people) for safety
- Have effective processes to manage risks and comply with duties
- Verify those processes are working (through audits, inspections and reviews)
In short: leadership sets the tone. If directors and managers take safety seriously, the rest of the business will follow.
What Legal Documents Will My Business Need For WHS?
Not every business needs every document below, but many will want several of them in place before hiring staff or opening the doors.
- WHS Policy: A plain-English statement of your safety commitments and how you manage responsibilities, consultation and reporting.
- Risk Management Procedure: Sets out how you identify hazards, assess risks, implement controls and review them.
- Incident And Near Miss Reporting: A clear process and form for reporting, investigation and corrective action.
- Drug And Alcohol Policy: Outlines expectations, testing (where lawful and appropriate) and support pathways, consistent with your approach to drug testing.
- Mobile Phone/Devices Policy: Defines safe device use on-site and while driving, often as part of a broader Mobile Phone Policy.
- Contractor Management Procedure: Requirements for onboarding, permits, supervision, and how PCBUs will consult, cooperate and coordinate activities.
- Manual Handling/Equipment Procedures: Safe work instructions for your highest-risk tasks, including PPE requirements.
- Employment Contract: Makes safety obligations clear, links to your policies and covers role-specific requirements - start with a compliant Employment Contract template tailored to your industry.
- Workplace Policy Suite: Bundled policies covering WHS, conduct, bullying and harassment, complaints and grievance, and remote work under a single Workplace Policy framework.
- Privacy Policy: Explains how you collect, use and store health and safety information about staff and visitors; a compliant Privacy Policy is essential if you collect personal information.
Getting these documents right - and training your team on them - reduces confusion, speeds up onboarding and gives you evidence of compliance if a regulator ever asks.
How WHS Interacts With The Rest Of Your Business
WHS doesn’t sit in a silo. It touches nearly every part of your operations.
- Hiring And Onboarding: Build WHS into your onboarding checklist, from inductions and licences to role-specific training. Update your Employment Contract and position descriptions so WHS duties are crystal clear.
- People And Culture: Safety culture is driven by leadership, recognition and accountability. Use meetings, internal comms and one-on-ones to reinforce expectations and recognise good safety behaviours.
- Operations And Projects: Require risk assessments for new equipment, processes and projects. Get safety sign-off before go-live.
- Suppliers And Sites: Bake safety requirements into supplier onboarding and venue/site agreements. Align emergency procedures and incident reporting across PCBUs.
- Data And Records: Store safety records securely and only as long as required. Keep privacy considerations in mind when handling health or incident information via your Privacy Policy.
Key Takeaways
- WHS laws require you to identify hazards, manage risks and involve workers - it’s a core legal duty for every business in Australia.
- Directors and senior leaders must exercise due diligence, which means putting resources and practical systems in place and checking they work.
- Focus on real-world steps: risk assessments, consultation, training, incident reporting and regular reviews.
- Don’t overlook psychosocial risks, remote work, contractors and device use - they’re common sources of non-compliance.
- Clear policies, a tailored Workplace Policy framework, a robust Employment Contract and a compliant Privacy Policy are the backbone of WHS compliance.
- Respond quickly to incidents, notify the regulator where required and use investigations to drive improvements across your business.
If you’d like a consultation on WHS setup and policies for your business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.


