Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
“Do we still have to wear masks at work?” is one of those questions that keeps coming back - especially when there’s a seasonal wave of illness, a vulnerable customer base, or a workplace outbreak.
If you’re running a small business, the answer is rarely a simple yes or no. Mask mandates in Australia have changed a lot over the last few years, and what’s “required” can depend on your location, your industry, and what government health directions are in place at the time.
At the same time, even if there is no current public health requirement to wear a mask, you may still have obligations to keep workers and customers safe - and in some cases, it can be reasonable (and lawful) to require masks in your workplace.
Below we’ll walk you through how mask mandates work in Australia, what your legal responsibilities look like as an employer or business operator, and how to set a practical mask policy that supports safety without creating unnecessary conflict.
Important: This article is general information only, not legal advice. Public health directions and workplace safety expectations can change quickly and vary between states and territories. If you’re unsure what applies to your business, you should check the current directions for your jurisdiction and get legal advice for your situation.
Are There Mask Mandates In Australia Right Now?
In Australia, mask mandates usually come from legally enforceable public health directions made by a state or territory government (and, in some specific settings, requirements can also come from Commonwealth rules or regulator guidance - for example, aged care requirements or aviation-related settings).
These directions can change quickly. They may be introduced, tightened, relaxed, or removed depending on:
- case numbers and community transmission levels,
- hospital capacity or outbreak management,
- specific high-risk settings (for example, health services or aged care), and
- the risk profile of certain workplaces or events.
For small businesses, the key point is this: even if masks aren’t broadly mandated across the community, they may still be required in particular industries or settings. For example, requirements have historically been more common in:
- healthcare and clinical environments,
- aged care and disability support settings,
- public transport and transport hubs (at certain times),
- correctional and other controlled environments, and
- outbreak-affected workplaces (sometimes via specific directions).
If you operate across multiple states (or you have remote teams who work in different locations), it’s also important to remember that public health directions are not uniform nationwide.
So, rather than relying on what “everyone else is doing”, it’s safest to treat mask requirements as a compliance issue you regularly check - just like licences, insurance, or your employment paperwork.
What Are Your Legal Obligations If You Run A Workplace?
Even when there isn’t a specific government mask mandate, you’re not operating in a “no rules” zone.
As a business owner, you generally have duties under work health and safety (WHS) laws (or, in Victoria, under the Occupational Health and Safety Act 2004 (Vic)) to provide a safe workplace, so far as is reasonably practicable. That duty doesn’t just apply to employees - it can also extend to contractors, visitors, and others who may be affected by your operations.
In practice, this means you should be thinking about infection control (including mask use) through a risk-management lens:
- What hazards exist in your workplace? (close contact, poor ventilation, high customer volume, vulnerable clientele)
- What is the likelihood of harm? (for example, outbreaks can impact business continuity even if illness is “mild”)
- What controls are reasonably practicable? (including masks, ventilation, distancing, cleaning, and leave policies)
A mask policy can be one of several controls you use. Whether it’s legally required or just recommended, your focus should be on what is reasonable and proportionate to the risk in your workplace.
WHS duties are often discussed as an employer “duty of care”, and it’s worth understanding what that means in real-world terms for business owners: duty of care.
Can You Require Employees To Wear Masks Even Without A Government Mandate?
Often, yes - but you need to do it carefully.
In many workplaces, asking employees to wear a mask can be a lawful and reasonable direction, particularly where:
- workers are in close contact with customers or each other,
- the workplace includes vulnerable people (for example, elderly clients or immunocompromised customers),
- there is a known outbreak or heightened risk, or
- mask-wearing is consistent with the kind of work being performed (for example, frontline service roles).
However, it’s not simply a matter of announcing “masks are mandatory” and expecting compliance. Whether a direction is enforceable depends on the circumstances. It’s more likely to be enforceable if:
- it’s tied to a genuine WHS reason (not personal preference),
- it’s applied consistently and fairly,
- you’ve consulted with workers where required (noting consultation duties can differ by jurisdiction and by your business’s arrangements), and
- you’ve considered reasonable exceptions and accommodations.
Make It Part Of A Clear Workplace Policy
One of the easiest ways to reduce confusion is to document your expectations and processes in a written workplace policy, so it’s not being made up day-to-day. Many small businesses build this into their Workplace Policy framework (particularly if you have multiple sites or supervisors managing teams).
Check Awards, Agreements And Employment Contracts
Your ability to direct employees can also be influenced by the employment terms that apply (including modern awards and any enterprise agreements), and what’s written into your contracts.
If you’re updating safety expectations, it can be a good time to check whether your Employment Contract and workplace documentation supports the rules you need to run your business safely.
What If An Employee Says They Can’t Wear A Mask?
This is where many businesses get stuck - and where taking a measured, legally-informed approach matters.
An employee may raise:
- a medical issue (for example, a condition affected by mask-wearing),
- a mental health concern (for example, anxiety related to face coverings), or
- another reason they believe prevents compliance.
In these scenarios, it’s usually not about “winning” the argument. It’s about managing risk, avoiding discrimination issues, and keeping your workplace safe.
You may be able to request reasonable evidence and consider alternative controls. For example, you might explore:
- moving the employee to a lower-risk task or location,
- allowing a different type of face covering where appropriate,
- working-from-home arrangements (if the role allows), or
- additional distancing or physical barriers.
Where health concerns are raised, employers sometimes ask for medical confirmation about whether someone can safely perform duties and what adjustments are needed. If you’re unsure what you can ask for (and how to do it appropriately), this guidance can help: medical clearance.
If you’re dealing with a high-conflict issue (or you’re considering disciplinary action), getting advice early can help you avoid escalating a situation into an unfair dismissal or discrimination claim. This is a common reason businesses speak with an employment lawyer.
How Do You Implement A Mask Policy That Actually Works?
A mask policy is most effective when it’s treated like any other safety control - not just a sign on the wall.
Here’s a practical approach that also helps you stay on the right side of your legal obligations.
1. Do A Simple Risk Assessment
You don’t necessarily need a 40-page report. But you should be able to explain why masks are required (or recommended) in your workplace.
Ask yourself:
- Are people working in close proximity?
- Is ventilation poor, or are you in an enclosed space?
- Are customers unwell likely to attend (for example, certain service industries)?
- Do you serve vulnerable people?
- What happens to your business if 30–50% of staff are off sick?
This helps you set rules that are sensible and defensible - and avoids the perception that the policy is arbitrary.
2. Consult And Communicate Clearly
Consultation is a key WHS theme. Even in a small business, it’s good practice to talk to your team before rolling out a new rule that affects day-to-day work. Depending on your jurisdiction and circumstances, there may also be formal consultation requirements.
When you announce the policy, include:
- when masks are required (all day, only during customer interactions, only in shared spaces),
- what kind of masks are acceptable,
- who provides them (business or employee),
- exceptions and how they’re assessed, and
- what happens if someone refuses (a clear, step-based process).
Clarity reduces disputes - and keeps your managers consistent.
3. Make It Easy To Comply
If you require masks, you should think about practicalities. For example:
- Keep masks available on site (especially for customers or visitors who arrive unprepared).
- Train staff on when to replace masks and how to dispose of them.
- Consider comfort and job impact (for example, long shifts in hot environments).
Small steps like this can turn a “rule” into a workable safety practice.
4. Align It With Other Controls
Masks are only one layer. Your approach may be stronger (and feel fairer) if you bundle masks with other sensible controls such as:
- ventilation improvements,
- encouraging unwell staff to stay home,
- cleaning high-touch surfaces, and
- clear processes for outbreaks.
This also helps if you ever need to show you took reasonable steps to manage workplace safety.
What About Customers - Can You Ask Them To Wear A Mask?
Customer-facing businesses often want to know whether they can set mask conditions for entry.
In many cases, you can set reasonable conditions of entry to protect staff and other customers - but you still need to manage the risk of discrimination issues and public conflict. Your approach may also depend on the nature of your venue, the services you provide, and any applicable public health directions.
From a practical standpoint, if you want to encourage customer mask use, consider:
- clear signage at entry (and online if you take bookings),
- making masks available at the door, and
- training staff on de-escalation and respectful communication.
If a customer claims they can’t wear a mask due to a medical reason, you should be careful about demanding detailed personal information on the spot. A better approach is to consider alternative service options, such as:
- contactless pickup,
- delivery,
- serving them in a lower-risk area, or
- rescheduling where appropriate.
Ultimately, the goal is to protect safety while minimising legal and reputational risk.
Privacy Issues: Health Information, Mask Exemptions And Record-Keeping
Mask policies can unexpectedly trigger privacy obligations, especially if you:
- ask staff for medical certificates or details about conditions,
- record who is exempt and why,
- keep outbreak registers, or
- collect visitor declarations.
Health information is generally considered sensitive information. Even for small businesses, it’s important to only collect what you genuinely need, store it securely, and limit access.
Two practical steps that can help:
- Use a short, clear Privacy Collection Notice when you collect information directly from staff or customers.
- Make sure your broader Privacy Policy reflects how you handle personal information (especially if you’re collecting information through a website, bookings system, or forms).
It’s also worth limiting what you record. For example, you may not need to keep detailed medical information on file - sometimes it’s enough to record that evidence was sighted and the relevant adjustment was implemented.
Managing Refusals, Conflicts And Workplace Enforcement
Even a well-designed mask policy can lead to pushback. The key is responding in a way that is consistent, calm, and procedurally fair.
If An Employee Refuses
If an employee refuses to follow a mask requirement, your response should depend on:
- the reason for refusal (medical issue vs preference),
- the risk level in your workplace, and
- whether you’ve communicated and consulted properly.
Often, a good first step is a private conversation and a written reminder of the policy, explaining why it exists. If the refusal continues, you may need to follow a performance management or disciplinary process.
Be careful not to rush to termination. Employment decisions that aren’t handled correctly can create legal exposure, particularly if the refusal is linked to a protected attribute (like disability) or if the direction itself isn’t clearly lawful and reasonable in the circumstances.
If Customers Become Aggressive
Mask enforcement can sometimes lead to customer aggression, which is also a WHS issue.
In these situations, your WHS obligations include protecting staff from psychosocial hazards like bullying, harassment, and aggression. That may mean:
- giving staff clear scripts and authority to escalate to a manager,
- setting a “no abuse” standard and backing staff up, and
- reviewing whether the mask policy needs adjustment (for example, shifting from “mandatory” to “recommended” in lower-risk periods, where appropriate).
For many businesses, the safest and most sustainable approach is to create a policy that’s strong enough to manage genuine risks, but flexible enough to avoid constant conflict when community risk is low.
Key Takeaways
- Mask mandates in Australia usually come from state or territory public health directions, and the rules can vary depending on your location and industry.
- Even without a government mandate, you may still have WHS/OHS obligations to manage workplace health risks, and mask-wearing can be a reasonable control in some workplaces.
- You can often require employees to wear masks if the direction is lawful and reasonable in the circumstances, communicated clearly, and applied fairly with appropriate consultation.
- Be careful with exemptions - if someone raises medical concerns, consider reasonable adjustments and only request evidence that is necessary and appropriate.
- Mask policies can raise privacy issues if you collect health information, so your collection practices and documentation should be handled carefully.
- A practical, well-communicated policy (supported by training and other safety measures) is usually more effective than relying on enforcement alone.
If you’d like a consultation on workplace safety policies and employment obligations (including mask requirements), you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








