What Is A ‘COVID-Safe’ Workplace?

COVID-19 is no longer new, but it hasn’t disappeared. As an employer in Australia, you still have a duty to keep people safe at work, manage health risks, and respond quickly if cases arise.

So what does being “COVID‑safe” actually look like now? It’s about building practical, legally compliant systems that reduce risk and keep your business running - without adding unnecessary complexity.

In this guide, we’ll break down what a COVID‑safe workplace means under Australian law, the core policies and documents you should have, and simple steps to set up or refresh your plan.

What Does “COVID‑Safe” Mean In Australia?

“COVID‑safe” is a practical way of describing your work health and safety (WHS) approach to COVID‑19. Under Australia’s WHS framework, you must do what’s reasonably practicable to protect workers and others from risks - and COVID‑19 is a known risk.

This means identifying hazards (for example, close contact tasks or poor ventilation), assessing the likelihood and harm, and implementing controls like improved airflow, hygiene measures, training and clear procedures if someone becomes unwell.

COVID rules may vary slightly between states and industries, but the underlying duty is consistent: take reasonable steps to prevent illness at your workplace, consult with workers, and keep appropriate records. A strong COVID‑safe approach also supports your broader duty of care as an employer.

Key Elements Of A COVID‑Safe Workplace

Risk Assessment And A Simple Plan

Start with a current, commonsense risk assessment. Consider your specific tasks, work locations, and workforce. Office-based risks look different to a workshop, warehouse or customer-facing venue.

Then document a short plan that covers:

• How you minimise exposure (ventilation, layout, PPE where relevant)
• Hygiene (cleaning, handwashing, respiratory etiquette)
• When people should stay home or test, and how they notify you
• What to do if someone is symptomatic or tests positive at work
• How you consult employees, deliver training, and keep records

The plan doesn’t have to be long - it just needs to be clear, practical and tailored to your business.

Vaccination, Masks And Other Controls

Whether you can direct employees to be vaccinated or to wear masks depends on your risk profile and the reasonableness of the direction. Many employers choose a risk‑based approach: encourage vaccination, provide masks for higher‑risk tasks, and keep a supply of rapid tests for certain scenarios.

Where you issue directions, ensure they are lawful and reasonable, consult workers, and consider any medical or religious exemptions sensitively. If vaccination or mask use is required at certain sites (e.g. by a client, landlord or health setting), make those requirements explicit in your onboarding and site access procedures.

Ventilation And Hygiene

Good ventilation is one of the most effective controls. Practical steps include opening windows and doors where safe, servicing HVAC systems, using higher‑grade filters, and deploying portable HEPA purifiers in smaller or poorly ventilated rooms.

Pair this with accessible sanitiser, regular cleaning of high‑touch surfaces, and simple signage reminding people about hand hygiene and staying home if unwell.

Managing Symptoms, Testing And Positive Cases

Your policy should make it easy for people to do the right thing. Set out when staff should stay home (e.g. symptomatic or positive), who they notify, and any testing you reasonably require.

Include a short script for managers to follow if someone becomes unwell on site, where isolation should occur, and how you clean and notify impacted team members or visitors. Build in a process to support return to work after illness, which may include a clearance in specific roles - more on that below.

Training, Consultation And Record‑Keeping

Train your team on the basics: how COVID‑19 spreads, what controls you use, and how to report issues. Consultation is a WHS requirement, so give workers a say - they often spot practical improvements.

Keep concise records of your risk assessment, consultation, training, and incidents. You don’t need to store everything forever, but you should be able to show what steps you took and why.

Do I Need New Policies Or Contracts?

Most businesses will benefit from a short, tailored COVID‑safe policy supported by clear contracts and privacy documentation. The goal is consistency - so everyone knows the standard and managers have a framework for decisions.

• Workplace Policy: A simple policy can bundle your controls, reporting steps and site access rules (including any client or landlord requirements). A tailored Workplace Policy makes expectations clear and supports a consistent response across teams.
• Employment Contract: Your contracts should include lawful, reasonable direction clauses, the ability to vary working location or hours if needed, and references to and incorporation of your health and safety policies. If yours are light on these points, it may be time to refresh your Employment Contract.
• Privacy Policy And Collection Notices: Health information is sensitive information under the Privacy Act. If you collect vaccination status, test results or symptom declarations, you’ll need a compliant Privacy Policy and a clear Privacy Collection Notice explaining what you collect, why, and how it’s stored.
• Employee Privacy Guidance: Managers need practical rules about who can access health information and how to store it. An Employee Privacy Handbook helps protect sensitive data and reduce internal misuse.

Not every business will need every document, but having the right combination in place makes day‑to‑day decisions easier and more defensible.

What Can I Ask Employees To Do Legally?

Australian employers can give directions that are both lawful and reasonable in the circumstances. Reasonableness depends on the role, specific risks, and the available alternatives (for example, can the task be done remotely?).

Work Location And Working From Home

You can usually direct employees to work from home or return on‑site if the direction is reasonable. Many businesses use a hybrid model and reserve the right to adjust settings in response to public health risks or client requirements. Make sure your contracts and policies support that flexibility.

Masks, Vaccination And Testing

You can require masks for particular tasks or environments where risk is higher. For vaccination or testing, a risk‑based approach is key: think about the likelihood and consequence of transmission in your workplace, any third‑party mandates, and reasonable adjustments. Always consult employees and consider exemptions and alternatives where appropriate.

Medical Evidence And Return‑To‑Work Clearances

In some circumstances, you can request evidence that an employee is fit to return to work or evidence of illness. The rules depend on your policies, the applicable industrial instrument, and privacy considerations. If you’re unsure what you can ask for, check the basics around requesting medical certificates and get tailored advice if needed.

Anti‑Discrimination And Workplace Fairness

Handle exemptions and health conditions sensitively. Avoid blanket approaches that could indirectly discriminate, and offer reasonable adjustments where practical. Good consultation and clear documentation of your risk assessment will support your decisions.

COVID‑Safe For Customers, Contractors And Visitors

COVID‑safety doesn’t stop with employees. Think about how your controls apply to contractors, customers and visitors, especially if you operate in shared or public spaces.

• Site Access And Terms: If certain premises or clients require masks or vaccination, communicate that ahead of time and incorporate it into your contractor onboarding or venue hire terms. Keep signage clear and friendly so customers know what to expect.
• Privacy And Records: If you collect any health data (like vaccine status for site access), collect only what you need, store it securely, and delete it when it’s no longer necessary. Your obligations around storage and deletion sit alongside broader data retention laws.
• Consumer Law: If COVID‑19 affects service delivery, your communications and refunds still need to comply with the Australian Consumer Law (avoid misleading statements and honour your remedy obligations). Clear, up‑to‑date terms can help manage expectations.

Step‑By‑Step: How To Launch Or Update Your COVID‑Safe Plan

1. Map Your Risks: List your roles and tasks, look at where people interact, and identify higher‑risk settings (closed rooms, close‑contact work, customer‑facing areas).
2. Consult Your Team: Ask staff what’s working and where the pinch points are. Consultation is both a WHS requirement and a practical way to uncover easy wins.
3. Decide Your Controls: Pick proportionate controls: ventilation improvements, hygiene supplies, layout tweaks, masks for certain tasks, and a sensible testing/symptom approach.
4. Set Clear Rules For Illness: Outline when to stay home, who to notify, and what happens if someone becomes unwell at work. Include return‑to‑work guidelines that align with current public health advice and your risk profile.
5. Update Policies And Contracts: Put a concise COVID‑safe policy in place, ensure your Employment Contract supports reasonable directions, and refresh privacy documents (your Privacy Policy and collection notice) if you handle health information.
6. Train Managers And Staff: Deliver a short briefing on your controls, incident steps and reporting. Give managers a checklist so responses are consistent.
7. Keep It Lean And Current: Record your risk assessment and training, but don’t over‑collect data. Review your plan at sensible intervals or when the risk profile changes.
8. Get Targeted Legal Help: If you’re introducing vaccination or testing requirements, dealing with exemptions, or handling sensitive health data, a quick review by our team can de‑risk your approach. We can also prepare a tailored Workplace Policy that folds in your WHS and privacy settings.

Frequently Asked Questions

Do I Still Need A COVID Plan If Mandates Have Eased?

Yes - even without specific mandates, your WHS duty continues. A short, risk‑based plan shows you’ve thought about the risks in your workplace and set proportionate controls.

Can I Store Employees’ Vaccination Status?

You can collect and store vaccination status if it’s necessary for your lawful purpose (for example, to meet client site rules or manage risk), but you must handle it as sensitive information. That means clear disclosure, secure storage, limited access, and timely deletion consistent with your Privacy Policy.

What If A Client Requires Vaccination For Site Access?

Communicate early, check contract terms, and ensure your onboarding and rostering respect the requirement and any applicable exemptions. Where possible, consider alternative duties for impacted staff.

Do I Have To Provide Rapid Tests Or Masks?

Not always, but it can be a reasonable control in higher‑risk settings. Think about the tasks, environment, and whether the control meaningfully reduces risk. If you require use, providing the item is often the fair approach.

Key Takeaways

• A COVID‑safe workplace is simply your WHS duty applied to COVID‑19: identify risks, implement reasonable controls, and keep clear procedures.
• Focus on practical controls - ventilation, hygiene, risk‑based mask or testing settings, and simple incident steps for symptoms or positive cases.
• Back your approach with the right documents: a concise COVID‑safe policy, strong Employment Contract clauses, and privacy documentation if you handle health information.
• Directions to staff must be lawful and reasonable, with consultation and care around exemptions, medical evidence and anti‑discrimination.
• If you collect health data, treat it as sensitive information under the Privacy Act and align your practices with your Privacy Policy and relevant data retention obligations.
• Document your risk assessment and training, keep the plan lean, and review it when your risks change.

If you’d like a consultation on setting up or refreshing a COVID‑safe workplace plan, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.