Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Essential Workplace Policies: A Practical Checklist For Small Businesses
- 1) Code Of Conduct / Workplace Behaviour Policy
- 2) Anti-Bullying, Harassment And Discrimination Policy
- 3) Work Health And Safety (WHS) Policy
- 4) Leave And Attendance Policy
- 5) Privacy, Confidentiality And Data Handling Policy
- 6) IT, Email And Acceptable Use Policy
- 7) Social Media Policy
- 8) Surveillance, CCTV And Workplace Monitoring Policy
- 9) Drug And Alcohol Policy (Where Relevant)
- 10) Whistleblower Policy (Sometimes Required)
- Key Takeaways
When you’re running a small business, it can feel like workplace policies are something only big employers worry about.
But the reality is that clear workplace policies are one of the easiest ways to protect your business, set expectations with staff, and reduce the risk of disputes before they start.
The good news is you don’t need a 100-page manual to get this right. What you do need is a set of policies that actually match how your workplace operates, reflect your legal obligations, and give your team practical guidance they can follow day-to-day.
Below, we’ll walk you through why workplace policies matter, which ones are most common for Australian small businesses, and how to roll them out in a way that’s realistic (especially when you’re time-poor and juggling everything else). This article is general information only and doesn’t replace tailored legal advice for your specific situation.
Why Workplace Policies Matter (Even If You Have A Great Team)
Workplace policies are basically the “rules of the road” for how work is done in your business.
They help you explain expectations upfront, handle issues consistently, and show you’ve taken reasonable steps to manage workplace risks.
Policies Help You Prevent Disputes (Not Just Respond To Them)
Many workplace problems don’t start with bad intentions. They start with unclear expectations.
For example:
- An employee assumes they can work from home informally, but you expect onsite work.
- A team member thinks it’s fine to post workplace photos on social media, but your clients expect confidentiality.
- A manager thinks they can “just check” someone’s emails, but you haven’t set any boundaries around monitoring and privacy.
Strong policies give you a clear reference point when you need to have the “we need to fix this” conversation.
Policies Support Compliance And Good Management
If you employ staff in Australia, you’ll be working within a framework that includes the Fair Work Act, modern awards/enterprise agreements (where applicable), WHS obligations, anti-discrimination laws, privacy requirements, and more.
Policies don’t replace your legal obligations, but they can help you show that you’ve:
- communicated standards clearly,
- trained staff on what’s expected, and
- put processes in place to respond to issues fairly.
This is particularly important when you need to manage conduct or performance, or when you’re dealing with a complaint.
Policies Protect Your Brand And Your Customer Relationships
Small businesses often win by being consistent and trustworthy. Your workplace policies can support that by setting standards around customer interactions, confidentiality, conflicts of interest, and professional behaviour.
If you’re in a service-based industry, your policies can be part of the system that keeps quality high even as you grow your team.
Are Workplace Policies Legally Required In Australia?
This is where small business owners often get stuck: do I legally need workplace policies?
There isn’t usually one single law that says “every employer must have a workplace policy document” in all cases.
However, in practice, having certain policies (and having them implemented properly) can be crucial for meeting your obligations and managing risk. Also, depending on your industry, size, where your staff are based, and what your workplace does, you may have additional requirements.
What’s “Must-Have” vs “Strongly Recommended”?
A helpful way to think about it is:
- Must-have policies: commonly needed to support legal compliance, safety, and fair processes.
- Strongly recommended policies: not always mandatory, but often essential for risk management and clear expectations.
Also, remember that policies work best when they line up with your employment documents. If you’re hiring staff, a well-drafted Employment Contract is often the starting point, and your policies and procedures should support it.
Policies Should Match Your Business Reality
It’s tempting to copy a policy template from another business, but that can create more risk than it solves.
If your policy says you do something (for example, “all complaints will be investigated within 48 hours”) and you don’t actually follow that, it can undermine you later if there’s a dispute.
A better approach is to create policies that:
- reflect how you operate today,
- are scalable as you grow, and
- are clear enough that managers can apply them consistently.
Essential Workplace Policies: A Practical Checklist For Small Businesses
Not every small business needs the same policy suite. A café with casual staff will have different needs to a tech startup handling customer data.
But there are some common “core” policies that most Australian employers should consider.
1) Code Of Conduct / Workplace Behaviour Policy
This policy sets the baseline for professional behaviour. It’s often where you define expectations around respect, communication, punctuality, following lawful directions, and appropriate behaviour with customers and colleagues.
It can also tie into your disciplinary process (for example, warnings and investigation steps) so your response to conduct issues is consistent.
2) Anti-Bullying, Harassment And Discrimination Policy
Even if you have a small team, you still need to actively manage the risk of bullying, harassment, and discrimination.
A strong policy usually covers:
- what behaviour is not acceptable (with practical examples),
- how staff can raise concerns,
- how you’ll handle complaints (confidentiality, fairness, and anti-victimisation), and
- possible outcomes (warnings, training, disciplinary action).
This is one of those areas where a clear internal process can make a huge difference if a complaint arises.
3) Work Health And Safety (WHS) Policy
WHS duties apply across Australia, and your WHS obligations will depend on your state/territory and your industry.
Your WHS policy typically sets out your commitment to safety, reporting hazards and incidents, consultation with workers, and responsibilities for managers and workers.
In many workplaces, WHS also overlaps with other policies like incident reporting, first aid, and fatigue management.
4) Leave And Attendance Policy
This policy helps reduce confusion (and payroll issues) by setting clear rules around:
- how to request leave,
- notice requirements for planned leave,
- what evidence is required for sick leave, and
- how you handle no-shows and lateness.
It’s also a practical place to explain any internal processes you use (apps, forms, who approves leave) so your team knows what to do.
5) Privacy, Confidentiality And Data Handling Policy
Many small businesses collect personal information-employee records, customer contact details, marketing lists, online orders, or CCTV footage.
Your internal policy should explain how staff must handle personal information, passwords, devices, and confidential business information.
If you have staff handling sensitive business information, you may also want to align this with an Employee Privacy Handbook approach, so your team understands boundaries around workplace privacy and monitoring.
6) IT, Email And Acceptable Use Policy
If your staff use company devices, company email addresses, workplace Wi-Fi, or access customer databases, an IT/acceptable use policy is a practical must.
It usually covers:
- permitted and prohibited use of systems,
- password standards and security,
- rules about downloading software, and
- how you manage cybersecurity incidents.
Many businesses formalise this through an Acceptable Use Policy, particularly where you want clear boundaries and enforceable standards.
7) Social Media Policy
A social media policy is less about controlling people’s personal lives and more about protecting your business.
Common areas covered include:
- who can speak publicly on behalf of the business,
- what staff can post about customers or workplace events,
- confidentiality and privacy considerations, and
- what happens if someone posts harmful or misleading content connected to your business.
8) Surveillance, CCTV And Workplace Monitoring Policy
If you use CCTV, monitor emails, track vehicles, or use security systems in the workplace, you need to be careful. Surveillance laws can differ significantly by state and territory, and the “right” approach depends on what you’re doing and why.
It’s worth getting clear on the rules before installing cameras or monitoring communications, and aligning this with your written policies so staff are not caught off guard. For many small businesses, a good starting point is understanding workplace camera laws and documenting how and when surveillance is used.
9) Drug And Alcohol Policy (Where Relevant)
If you operate vehicles, machinery, or safety-critical work, a drug and alcohol policy can be an important part of your WHS approach.
This policy might cover fitness for work expectations, reporting obligations, and any testing process (where appropriate and lawful). If you’re considering testing, it’s important to do it carefully and consistently, as outlined in guidance around drug testing employees.
10) Whistleblower Policy (Sometimes Required)
Whistleblower protections can apply to certain types of organisations (for example, many companies and some other entities regulated under the Corporations Act). Where the legal requirement applies, an eligible business must have a compliant whistleblower policy.
Even where it’s not strictly required, having a process for reporting misconduct can support good governance and create a safer culture. In those cases, a Whistleblower Policy can set expectations around reporting, confidentiality, and how disclosures are handled.
How To Implement Workplace Policies Without Overwhelming Your Team
Writing policies is only half the job. The bigger risk is having a policy folder that nobody reads, nobody follows, and nobody can remember when something goes wrong.
Implementation is where policies become genuinely useful.
Step 1: Prioritise The Policies That Match Your Biggest Risks
If you’re just starting out, you don’t need to roll out everything at once.
As a practical approach, consider:
- People risk: conduct, bullying/harassment, performance issues
- Safety risk: WHS, fatigue, incident reporting
- Data risk: privacy, IT use, confidentiality
- Customer risk: complaints handling, service standards
Start with policies that reduce your highest operational risk and are most likely to come up in your day-to-day work.
Step 2: Make Policies Easy To Use (Plain English And Practical Examples)
Policies should be written for the real world.
That usually means:
- short sections and clear headings,
- examples of what is and isn’t acceptable,
- a simple “what to do if something happens” process, and
- clear points of contact (who to speak to, how to report, what happens next).
If your policy can’t be applied by a supervisor on a busy day, it’s probably too complex.
Step 3: Connect Policies To Your Contracts And Onboarding
Your onboarding process is the best time to introduce policies, because it’s when expectations are being set.
Common ways to do this include:
- including policies in your staff onboarding pack,
- having employees acknowledge key policies in writing, and
- making sure managers know how to apply policies consistently.
Many small businesses document their policies and key workplace rules through a central Workplace Policy suite (often backed up by employment contracts and role descriptions), rather than scattered documents that conflict with each other.
Step 4: Train Your Team (And Your Managers)
Policies don’t enforce themselves. A short, practical training session can go a long way, especially for:
- anti-bullying/harassment and respectful workplace behaviour,
- privacy and confidentiality, and
- WHS reporting procedures.
For small teams, training can be as simple as a 30-minute walkthrough during onboarding and a refresh once a year (or when a policy changes).
Step 5: Review And Update Policies As Your Business Changes
Workplaces evolve quickly-especially growing businesses.
It’s worth reviewing your policies when you:
- hire your first employee (or your first manager),
- change how you deliver your services,
- start collecting more customer data,
- move into a new premises, or
- introduce new tools (like time-tracking, GPS, or surveillance).
A policy that matched your business last year might be out of date today.
Common Mistakes Small Businesses Make With Workplace Policies (And How To Avoid Them)
Most policy problems aren’t caused by having “no policies”. They’re caused by having policies that don’t match what you actually do.
Mistake 1: Using A Template That Doesn’t Fit Your Workplace
Templates can be a helpful starting point, but you need to tailor them.
If your policy includes rules you can’t enforce (or don’t want to enforce), it can create confusion and inconsistency.
Mistake 2: Inconsistent Enforcement
If policies are enforced strictly for one person and loosely for another, that’s when disputes and unfairness claims tend to flare up.
Consistency matters-even when the situation is awkward or the person involved is a high performer.
Mistake 3: Forgetting About Privacy And Surveillance Rules
Monitoring tools are common (CCTV, email access, time tracking, GPS). But if staff don’t know what’s happening, or if monitoring goes beyond what’s reasonable, you can quickly run into legal and cultural issues.
Having clear written rules and transparent communication is key-and because privacy and surveillance laws are highly state/territory-specific, it’s worth checking the requirements that apply to your workplace before you roll out (or expand) monitoring.
Mistake 4: Treating Policies As “Set And Forget”
Policies should be a living part of your workplace. If your team hasn’t looked at them since they started, you’re missing the main benefit: clarity when it counts.
A quick annual review and refresh training keeps policies useful and credible.
Key Takeaways
- Clear workplace policies help your small business set expectations, reduce disputes, and manage legal risk as you grow.
- While not every policy is legally “mandatory” in every situation, many policies are essential in practice for compliance, safety, and fair processes.
- Most small businesses benefit from core policies around conduct, bullying/harassment, WHS, leave, privacy/confidentiality, IT acceptable use, and social media.
- If you use monitoring tools like CCTV or email access, you should address surveillance transparently in your policies and check the rules that apply in your state or territory.
- Policies only work if they’re implemented properly: keep them practical, train your team, and review them as your business changes.
If you’d like help putting the right workplace policies in place for your business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








