Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Does OHS/WHS Mean In Australia?
- Is It OHS Or WHS - And Does It Matter?
- What Are Your Core WHS Duties As A Small Business?
How To Set Up WHS In Your Business (Step-By-Step)
- 1) Map Your Work And Identify Hazards
- 2) Assess Risks And Choose Controls
- 3) Build Practical Procedures And Training
- 4) Set Up Consultation And Reporting Channels
- 5) Prepare Your Emergency And Incident Response
- 6) Document Your WHS System
- 7) Address Psychosocial Hazards
- 8) Stay On Top Of Privacy And Health Data
- Do Contractors, Remote Workers And Volunteers Count?
- What Documents And Policies Should You Have?
- What Laws And Regulators Should You Know?
- Key Takeaways
If you’re hiring staff, working with contractors or even running a sole trader operation with occasional help, work health and safety isn’t optional - it’s a core part of running a compliant, sustainable business in Australia.
You’ll hear people use OHS and WHS interchangeably. So which is correct, and what do you actually have to do as a small business to meet your legal obligations?
In this guide, we’ll break down OHS/WHS in plain English, explain where the terms differ, and give you a practical checklist to get your systems in place - from duties and consultation through to policies, training and incident response.
What Does OHS/WHS Mean In Australia?
Occupational Health and Safety (OHS) and Work Health and Safety (WHS) both describe the legal framework that requires businesses to keep workers and others safe. They share the same goal: preventing injury, illness and death at work.
Across most of Australia, the modern laws are called Work Health and Safety laws and are based on the model WHS Act and Regulations developed by Safe Work Australia. These “harmonised” WHS laws apply in the Commonwealth (federal), New South Wales, Queensland, South Australia, Tasmania, the Australian Capital Territory and the Northern Territory.
Victoria uses its own occupational health and safety regime - the Occupational Health and Safety Act 2004 (Vic) - and the term OHS remains common there. Western Australia has adopted laws based on the model WHS approach (WHS Act 2020 (WA)).
Despite the naming differences, the core ideas are very similar: businesses have a primary duty to ensure, so far as is reasonably practicable, the health and safety of workers and other persons who may be affected by the work.
Is It OHS Or WHS - And Does It Matter?
Short answer: use WHS unless you’re talking specifically about Victoria’s laws, where OHS is the usual term. In everyday conversations, most people in business won’t mind which term you use.
What matters is compliance, not the label. Your obligations - to manage risks, consult with workers, provide training, maintain safe systems and notify serious incidents - exist under both OHS and WHS frameworks. If you operate across multiple states, you’ll need to consider the rules in each location and standardise your internal policies to meet the strictest applicable requirements.
One more naming difference to know: WHS laws use “PCBU” (person conducting a business or undertaking) to identify the duty holder. That includes companies, sole traders, partnerships, associations and more. OHS laws in Victoria use “employers” and “self‑employed persons,” but in practice, if you control the work, you likely have duties.
What Are Your Core WHS Duties As A Small Business?
Whether you call it OHS or WHS, the duties look very similar across Australia. At a high level, your responsibilities include:
- Primary duty of care: As a PCBU or employer, you must ensure, so far as is reasonably practicable, the health and safety of workers and other people who could be affected by your work. This is your overarching duty of care.
- Managing risks: Identify hazards, assess the risks and implement control measures using the hierarchy of control (eliminate, substitute, isolate, engineer, admin, PPE). Review controls regularly.
- Safe work environment and systems: Provide safe premises, plant (equipment), structures, and work systems, including maintenance, guarding, traffic management and housekeeping.
- Information, training, instruction and supervision: Make sure workers are competent and supervised for the tasks they perform, including inductions and refresher training.
- Consultation: Consult with your workers on WHS matters, and if there are health and safety representatives (HSRs), involve them too.
- Incident response and notification: If a notifiable incident occurs (death, serious injury/illness, or a dangerous incident), you must preserve the site (as far as safe) and notify your regulator immediately.
- Worker participation and issue resolution: Have a process for raising safety concerns, resolving issues and protecting workers from victimisation for speaking up.
- Duties to others: Protect visitors, customers, suppliers and the public who may be impacted by your work activities.
- Officer due diligence: Company directors and senior officers must exercise due diligence - actively ensure the business has and uses appropriate WHS resources, processes and systems.
Penalties can be significant for breaches, including large fines and, in many jurisdictions, industrial manslaughter offences for the most serious cases. Investing early in a robust WHS setup is the smart (and lawful) path.
How To Set Up WHS In Your Business (Step-By-Step)
Getting WHS right doesn’t have to be overwhelming. Break it into clear steps and embed it into your day-to-day operations.
1) Map Your Work And Identify Hazards
- List your tasks, locations and roles (including contractors and remote workers).
- Identify obvious hazards (manual handling, slips and trips, machinery, vehicles, chemicals, electricity).
- Include less visible hazards: psychosocial risks (work pressure, bullying, customer aggression), fatigue, lone work and environmental conditions.
2) Assess Risks And Choose Controls
- Assess how likely harm is and the potential consequences.
- Apply the hierarchy of control, aiming to eliminate risks where possible. For example, substitute a hazardous chemical for a safer one, install guarding, or redesign a process to remove manual lifting.
- Document your reasoning and decisions in a simple risk register. Review regularly and after incidents or changes.
3) Build Practical Procedures And Training
- Write concise procedures for critical tasks (e.g., operating machinery, working at heights, managing aggressive customers, emergency responses).
- Deliver induction and role‑specific training. Keep attendance records and schedule refreshers.
- Tailor training for supervisors - they set the tone for safe work every day.
4) Set Up Consultation And Reporting Channels
- Agree on how you’ll consult staff about WHS (toolbox talks, team meetings, online forums). If you have HSRs, include them regularly.
- Make it easy to report hazards, near misses and incidents - ideally a simple form or app with quick triage.
- Ensure workers know there is no negative consequence for reporting safety issues in good faith.
5) Prepare Your Emergency And Incident Response
- Develop an emergency plan (evacuation, first aid, fire response, severe weather). Test it with drills.
- Decide who leads responses and who communicates with authorities and families.
- Set a process for incident investigation, corrective actions and regulator notifications.
6) Document Your WHS System
- Keep your policies, procedures, risk register, training records and incident records in one place - digital is fine.
- Integrate WHS into your broader people and governance documents, like your Workplace Policy framework and Staff Handbook.
- Review at least annually or when you change equipment, processes, locations or staffing.
7) Address Psychosocial Hazards
- Most jurisdictions now require you to manage psychosocial risks (e.g., work overload, conflict, harassment, remote work isolation) just like physical risks.
- Set expectations around respectful conduct, workload management and support pathways. If issues escalate, processes like standing down an employee pending investigation may be relevant in serious cases.
- Train managers in early intervention, reasonable adjustments and return‑to‑work coordination.
8) Stay On Top Of Privacy And Health Data
- Health and incident records can contain personal and sensitive information. Have a clear Privacy Policy and limit access to “need‑to‑know.”
- Establish a response plan for any loss or unauthorised access to personal information - including a Data Breach Response Plan.
Do Contractors, Remote Workers And Volunteers Count?
Yes. WHS duties cover anyone who performs work for your business, not only direct employees.
- Contractors and labour‑hire: You must manage risks in your workplace that affect contractors and labour‑hire workers. Where duties overlap (e.g., with a host or labour‑hire agency), you must consult, cooperate and coordinate activities so risks are effectively controlled.
- Remote and hybrid workers: Your duty extends to the work they perform at home or other locations you direct. Practical steps include safe remote work policies, ergonomic guidance, incident reporting and regular check‑ins.
- Volunteers: Most WHS laws apply to volunteers as workers. Provide appropriate induction, supervision and equipment just as you would for employees.
- Visitors and customers: Manage public risks arising from your operations (think trip hazards, vehicle movements, chemicals, security, aggressive behaviours).
What Documents And Policies Should You Have?
Your WHS system doesn’t need to be complicated, but it does need to be documented and tailored to your risks. Common documents for small businesses include:
- WHS (or OHS) Policy: A short statement of your commitment, responsibilities, objectives and consultation approach. This sets expectations across the team.
- Risk Register: A live list of hazards, risk ratings, controls and review dates. Keep it simple and up‑to‑date.
- Safe Work Procedures (SWPs): Practical instructions for higher‑risk tasks and equipment (include photos where useful).
- Emergency Plan: Roles, evacuation routes, assembly points, contact details and drill schedule.
- Incident Reporting And Investigation Forms: A straightforward way to capture what happened, immediate actions, root causes and corrective actions.
- Training Matrix And Records: Who needs what training and when, with evidence of completion.
- Consultation Records: Minutes of toolbox talks, HSR consultations, safety committee notes and communications.
- Fitness For Work And Testing Procedures: If relevant to safety‑critical roles, have clear, lawful processes for issues like fatigue and drug testing.
- Code Of Conduct And Behaviour Policies: Cover bullying, harassment, respectful behaviour and use of technology - your mobile phone policy can sit here too.
- People & Governance Documents: Consolidate the above within your broader Workplace Policy framework and Staff Handbook so WHS is embedded in day‑to‑day operations.
Depending on your industry, you may also need specialist documents like Safe Work Method Statements (SWMS) for high‑risk construction work, a hazardous chemicals register, or plant (equipment) inspection and maintenance records.
What Laws And Regulators Should You Know?
Each state and territory has its own safety regulator (for example, SafeWork NSW, WorkSafe Victoria, Workplace Health and Safety Queensland). They publish codes of practice and guidance that explain how to comply with the law. While codes aren’t law themselves, they’re persuasive - following them is strong evidence of compliance.
At a minimum, be familiar with the WHS/OHS Act and Regulations that apply where you operate, relevant codes of practice for your hazards, and any licensing schemes (e.g., high risk work licences, electrical or plumbing licences, asbestos removal, major hazard facilities). If you operate across borders, plan your policies and training to meet the highest common denominator.
Common WHS Questions From Small Businesses
Do I need a dedicated WHS manager?
Not necessarily. In small teams, the owner, a director or a senior manager often takes responsibility. What matters is that someone competent has time and authority to run the system.
Is a generic WHS policy enough?
Templates can be a starting point, but they need tailoring to your risks, processes and language. Regulators expect documents that reflect what you actually do in practice.
How often should we train staff?
Provide induction before work starts, then refresher training at sensible intervals and whenever tasks, equipment or risks change. Keep records so you can demonstrate compliance.
What if a serious incident happens?
Focus on immediate safety and first aid, preserve the scene (if safe to do so), notify the regulator if it’s notifiable, and begin an internal investigation. Update your controls so it doesn’t happen again.
Key Takeaways
- OHS and WHS mean the same thing in practice: keeping people safe at work. Most jurisdictions use WHS; Victoria uses OHS.
- Your core duties are to manage risks, consult workers, provide safe systems, train people, and notify serious incidents - supported by officer due diligence.
- Contractors, labour‑hire workers, volunteers and remote staff are covered by your safety duties, not just employees.
- Build a practical WHS system: risk register, clear procedures, training, consultation, emergency and incident processes, and fit‑for‑purpose documentation.
- Embed safety within your people framework using a concise Workplace Policy, a user‑friendly Staff Handbook and a compliant Privacy Policy for handling health data.
- Prioritise psychosocial risks alongside physical hazards, and have clear processes for issues that may require investigation or standing down an employee pending investigation.
- Getting early advice on duties, policies and systems can save time, reduce risk and demonstrate compliance if regulators ever come knocking.
If you’d like a consultation on setting up OHS/WHS for your small business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.








