OH&S Compliance For Small Businesses: Legal Duties And Common Pitfalls

If you run a small business, “oh & s” can feel like one more thing on an already long to-do list.

But in practice, OH&S (often called WHS in Australia) is one of the most important legal responsibilities you have as a business owner. It affects how you hire, how you train, how you manage hazards, and how you respond when things go wrong.

The good news is that OH&S doesn’t have to be complicated. When you break it down into practical steps, you can build a safer workplace and protect your business from fines, claims, downtime and reputational damage.

Below, we’ll walk you through what oh & s means for small businesses in Australia, what your key legal obligations typically look like, the compliance steps you can implement (without drowning in paperwork), and the common pitfalls we often see small businesses fall into.

What Does “OH&S” Mean In Australia (And Why Is It Called WHS)?

In everyday conversation, many Australians still say “OH&S” (Occupational Health & Safety). In most Australian laws and regulator guidance, you’ll often see “WHS” (Work Health & Safety).

For small business owners, the label matters less than the outcome: you have legal duties to keep people safe at work.

Note: WHS/OH&S requirements are set by state and territory laws and regulators. Most jurisdictions follow the model WHS laws, but there are differences (for example, Victoria uses its own OHS Act, and some duties/definitions can vary). This article is general information only - it’s important to check the rules that apply where your business operates.

Who Has OH&S Duties In A Small Business?

OH&S duties apply broadly. Depending on your structure and how you operate, you may have duties as a:

• PCBU (Person Conducting a Business or Undertaking) - essentially, the business operator (this can be a sole trader, company, partnership, etc.)
• Officer (for example, directors and some senior decision-makers) - with duties around due diligence
• Worker - employees, contractors, labour hire workers, apprentices, trainees, work experience students, and sometimes volunteers
• Other persons at the workplace - like visitors, customers, delivery drivers, or members of the public who could be affected by your work

So if you’re thinking “I only have one casual staff member” or “they’re a contractor, not an employee”, it’s still very likely oh & s obligations apply.

Is OH&S Only For High-Risk Industries?

No. While construction, manufacturing, transport and hospitality often get more attention, OH&S applies to every workplace, including offices, retail stores, clinics, warehouses, home-based businesses, and mobile services.

Even “low-risk” businesses can face serious hazards (think: slips and falls, manual handling, bullying, fatigue, poor ergonomics, vehicle risks, client aggression, or psychological injury).

What Are Your Key OH&S Legal Obligations As A Small Business Owner?

Across Australia, WHS/OH&S laws require you to take reasonable steps to provide and maintain a safe work environment. The exact wording differs depending on your state or territory, but the overall theme is consistent.

Generally, your obligations include taking steps to ensure (so far as is reasonably practicable):

• a safe workplace (including safe access and exits)
• safe systems of work (how tasks are performed day-to-day)
• safe plant and structures (equipment, tools, fit-out, vehicles, machinery)
• safe handling and storage of substances and materials
• information, training, instruction and supervision for workers
• monitoring of workplace conditions (and sometimes workers’ health, where relevant)

The “Reasonably Practicable” Standard (In Plain English)

“Reasonably practicable” doesn’t mean you have to eliminate every risk in the universe. It means you must do what is reasonably able to be done to ensure health and safety, considering things like:

• how likely a hazard is to cause harm
• how serious that harm could be
• what you know (or should know) about the risk and ways to control it
• what controls are available and suitable
• the cost of controls (but cost alone usually won’t justify doing nothing if the risk is significant)

Your Duty Of Care Doesn’t Stop At Employees

A common misconception is that oh & s is “an HR thing” that only applies to employees.

In reality, you’re usually managing broader legal responsibilities, including a duty of care to keep workers and others safe in the context of your business operations.

This is especially important if you run a customer-facing business (like retail, hospitality, health services, education, or trades), where your work activities can impact the public as well as your team.

A Practical OH&S Compliance Checklist For Small Businesses

If you’re building your oh & s compliance from scratch (or trying to tighten it up), it helps to think in systems. You want repeatable processes that don’t rely on one person remembering everything.

Here’s a practical compliance checklist you can implement in most small businesses.

1) Identify Hazards In Your Actual Workplace (Not A Generic Template)

Start with a walk-through and a “what could go wrong?” approach. Consider hazards like:

• slips, trips and falls
• manual handling (lifting, pushing, repetitive tasks)
• tools, equipment and machinery
• electricity and fire risks
• chemicals and cleaning products
• noise, heat, and ventilation
• vehicle and driving risks
• remote or isolated work
• aggressive customers or clients
• stress, fatigue, bullying, and psychosocial risks

Tip: if you have multiple sites (even two locations), each workplace can have different hazards.

2) Assess Risks And Choose Controls (Use The Hierarchy Of Controls)

Once you’ve identified hazards, assess the risk and choose controls. A common approach is the “hierarchy of controls” (from most effective to least effective):

1. Eliminate the hazard (remove it entirely)
2. Substitute (replace it with something safer)
3. Engineering controls (physical changes, guarding, ventilation)
4. Administrative controls (procedures, training, scheduling, signage)
5. PPE (personal protective equipment)

For example, relying only on PPE (like gloves) without fixing an unsafe process is a common compliance weakness.

3) Train Your Team And Supervise (Especially During Onboarding)

Training is where many small businesses unintentionally fall short. The legal expectation is not just that you “have a policy”, but that workers understand how to do their job safely and are supervised appropriately.

This is particularly important when onboarding new staff, casuals, juniors, apprentices, or anyone moving into a new role.

Your employment documentation should support this. For example, having a clear Employment Contract and well-communicated workplace rules helps set expectations around safety procedures, reporting incidents, and following directions.

4) Put The Right Workplace Policies In Place (And Actually Use Them)

Policies are not just “paperwork” for the sake of it. They’re part of how you show your business has a system to manage risks.

In many workplaces, it’s sensible to implement workplace policies that cover areas like:

• incident and hazard reporting
• first aid and emergency procedures
• manual handling
• equipment use and maintenance
• harassment, bullying and discrimination
• fatigue management
• working from home / remote work
• drugs and alcohol (where relevant)

Many small businesses package these together into a central handbook so your team knows where to find the rules. A tailored Staff Handbook can be a practical way to make your policies clear and consistent.

5) Manage Contractor Safety (Because “They’re Not An Employee” Isn’t A Shield)

Small businesses regularly rely on contractors, subcontractors, gig workers, and consultants. OH&S duties can still apply, and contractor incidents can still create liability and operational disruption for your business.

At a minimum, you should:

• vet contractors for capability and appropriate licences/insurance
• communicate site rules and safety procedures
• coordinate work if multiple parties are involved (so tasks don’t create new risks)
• use written agreements that clearly allocate responsibilities

From a legal risk-management perspective, a well-drafted Contractors Agreement can help clarify safety responsibilities and reduce disputes if something goes wrong.

6) Keep Records (Because If It Isn’t Documented, It’s Hard To Prove)

Documentation is not the same as compliance, but it matters. If you ever need to respond to a regulator, insurer, or claim, records help show what your business did to manage safety.

Common OH&S records include:

• risk assessments and control measures
• training logs (including induction)
• maintenance and inspection records
• incident reports and investigations
• consultation notes (toolbox talks, safety meetings)

For small businesses, the key is to keep records simple and consistent, so you can actually maintain them over time.

Common OH&S Pitfalls For Small Businesses (And How To Avoid Them)

In our experience, small businesses don’t usually ignore oh & s on purpose. More often, issues come from moving fast, wearing too many hats, and relying on informal processes that don’t scale.

Here are some of the most common pitfalls we see, and what you can do instead.

Pitfall 1: Relying On Verbal Instructions Only

If your safety system relies on “we just tell people how to do it,” you’re exposed when:

• a supervisor is away
• a new worker starts
• a contractor arrives onsite
• there’s an incident and memories differ

What to do instead: use short written procedures for high-risk tasks, run quick toolbox talks, and keep a record of training/induction.

Pitfall 2: Treating OH&S As A One-Off Setup Task

OH&S isn’t something you “set and forget”. Businesses change: new equipment, new rosters, new staff, new locations, new client demands.

What to do instead: schedule periodic reviews (for example, quarterly) and do a review every time something material changes in your operations.

Pitfall 3: Not Consulting Workers (Or Not Taking Concerns Seriously)

Consultation is a key part of WHS frameworks across Australia, and it’s also just good management. Workers are often the first to notice hazards and near misses.

What to do instead: create a simple reporting pathway (even a shared form), encourage “near miss” reporting, and document what you changed as a result.

Pitfall 4: Mishandling Drugs, Alcohol Or Impairment Issues

Some industries have higher impairment risks (or higher consequences if impairment occurs), but any workplace can be impacted.

The risk for employers is taking action without a clear, lawful process (or, on the flip side, doing nothing when there is a genuine safety risk).

What to do instead: if drug and alcohol issues are relevant for your business, make sure your approach is policy-led and consistent. If you’re considering testing, it’s worth understanding the legal and practical issues around drug testing first, because privacy, consent, procedural fairness, and discrimination risks can all arise.

Pitfall 5: Installing Workplace Cameras Without Thinking Through The Legal Issues

Cameras can help with security and safety, but they can also create privacy and surveillance issues if handled poorly.

What to do instead: consider whether cameras are necessary, how footage will be stored, who can access it, and what notice must be given. If cameras are part of your safety strategy, it’s worth checking the rules around workplace cameras before you install them or start recording.

Pitfall 6: Thinking OH&S Only Means Physical Safety

Psychological health is a growing focus for regulators and businesses alike. Bullying, harassment, unreasonable workloads, fatigue, and poor workplace culture can create serious risk.

What to do instead: treat psychosocial hazards like other hazards: identify, assess, control, and review. Make sure managers know how to respond to complaints and support workers appropriately.

What To Do When Something Goes Wrong: Incidents, Near Misses And Notifications

Even strong oh & s systems won’t prevent every incident. What matters is how you respond.

1) Respond Immediately And Make The Site Safe

Your first priority is safety:

• provide first aid and medical support
• remove immediate hazards where safe to do so
• secure the area to prevent further harm

2) Record And Investigate (Without Looking For Someone To Blame)

Incident investigations should focus on causes and prevention, not punishment. Often, the “root cause” is a system issue (training, maintenance, staffing levels, unclear procedures), not just a single person’s mistake.

Keep your investigation notes, outcomes, and any corrective actions. This is valuable both for safety and for demonstrating compliance.

3) Consider Whether You Need To Notify A Regulator

Some serious incidents may need to be notified to your state or territory safety regulator. What counts as a “notifiable incident” (and the timing and process for notification) varies between jurisdictions, but it commonly includes events like a death, certain serious injuries or illnesses, or a dangerous incident (a near miss) arising from work.

If you’re not sure whether something is notifiable, it’s worth getting advice early and checking your local regulator guidance. Delayed reporting can create additional legal risk, on top of the incident itself.

4) Support Your Team And Communicate Changes

After an incident (or even a near miss), people often feel unsettled. Communicating what happened, what’s changing, and how you’ll prevent a repeat can help rebuild trust and reinforce your safety culture.

This is where small businesses can actually do well: you can implement improvements quickly without layers of red tape.

Key Takeaways

• “oh & s” (often called WHS) applies to every Australian small business, not just high-risk industries.
• Your obligations usually include providing a safe workplace, safe systems of work, appropriate training and supervision, and managing risks “so far as is reasonably practicable”.
• A strong OH&S approach is practical: identify hazards, assess risks, implement controls, train your team, and keep simple records.
• Common OH&S pitfalls for small businesses include relying on verbal instructions, treating safety as a one-off task, mishandling contractor safety, and not managing psychological risks.
• Workplace documents matter: clear employment contracts, contractor agreements, and workplace policies help set expectations and support compliance.
• When incidents occur, responding quickly, documenting what happened, and checking notification obligations in your state or territory can reduce legal and operational fallout.

If you’d like help reviewing your OH&S approach, workplace policies, or employment documentation, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.