Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you employ people in Australia, work health and safety (WHS) isn’t just a box to tick - it’s part of running a safe, sustainable business. A sound understanding of OHS/WHS helps you prevent incidents, meet your legal obligations and create a workplace where people can do their best work.
The good news? You don’t need to be a safety engineer to get this right. With a practical framework, clear policies and the right contracts, you can manage WHS risks confidently and stay compliant as you grow.
In this guide, we’ll walk through what WHS means for small businesses, who’s responsible, the steps to set up your WHS system, the core documents you’ll need, and common issues you’re likely to encounter (with simple ways to handle them).
What Does OHS/WHS Mean For Small Businesses In Australia?
Work health and safety (often still called occupational health and safety, or OHS) is about protecting workers and other people (like contractors, customers and visitors) from harm arising from work. In most Australian states and territories, WHS laws follow a similar model: you must identify and manage risks so far as is reasonably practicable. In simple terms, that means taking sensible steps to prevent people from being hurt or becoming unwell because of your work activities.
For small businesses, WHS isn’t only about hard hats and high-vis. It covers physical risks (e.g. slips, trips, manual handling), health risks (e.g. hazardous chemicals, noise), and psychosocial hazards (e.g. bullying, high job demands, poor support). It also includes how you consult with workers, how you handle incidents and near-misses, and how you keep records to show you’re on top of your obligations.
Importantly, WHS is not one-size-fits-all. The risks in a café will look different to the risks in a consulting firm or a warehouse. Your obligations scale with the nature of your operations and the level of risk. That’s why your WHS approach should be tailored to your specific business model, premises and team.
Who Is Legally Responsible For WHS In Your Business?
The primary duty of care sits with the “person conducting a business or undertaking” (PCBU). If you’re a sole trader, partnership, company or not-for-profit employing staff or engaging contractors, you’ll generally be a PCBU. The PCBU must ensure, so far as reasonably practicable, the health and safety of workers and others affected by the work.
Company directors and officers also have a “due diligence” obligation - they must take reasonable steps to ensure the business complies with WHS duties. This means staying informed about risks, making sure resources are available for safety, and verifying that your policies and processes are actually working in practice.
Workers themselves have responsibilities too (for example, to take reasonable care for their own safety and to follow reasonable instructions), but these do not replace the business’ overarching duties. A practical way to think about it is that your business carries the main responsibility to create safe systems of work and supervise them effectively.
From an employment law perspective, WHS sits alongside your broader duty of care as an employer to provide a safe workplace. If you meet WHS obligations and embed them into daily operations, you reduce the risk of injuries, claims and reputational damage.
Step-By-Step: Setting Up A Compliant WHS System
You don’t need an elaborate manual to meet WHS obligations. Start with a simple, repeatable system that fits your business. Here’s a practical roadmap.
1) Identify Your Hazards And Risks
- Walk through your physical space and list hazards (e.g. uneven flooring, heavy lifting, hot surfaces, computer workstations).
- Consider less visible risks like fatigue, aggressive customers, cash handling, driving between sites or psychosocial hazards.
- Rate each risk (likelihood and consequence) and prioritise the ones with the biggest potential harm.
2) Control The Risks “So Far As Reasonably Practicable”
- Eliminate the risk if you can (e.g. replace a hazardous chemical with a safer alternative).
- If elimination isn’t feasible, minimise the risk with safer equipment, guards, signage, training and supervision.
- Personal protective equipment (PPE) should be your last line of defence, not your only control.
3) Consult With Your Workers
- Ask your team about hazards and what would help. They often spot issues early.
- Set up regular touchpoints (toolbox talks, team meetings, or an item in staff catch-ups).
- Encourage reporting of hazards and near-misses without blame - this is how you learn and improve.
4) Put Clear Policies And Procedures In Place
- Write simple procedures for tasks with higher risk (e.g. manual handling, working alone, using machinery).
- Document how you report incidents, investigate them and follow up with improvements.
- Bundle your safety and workplace rules into a accessible set of policies (online or in a handbook) so staff can refer to them anytime.
For a streamlined approach, many businesses implement a tailored Workplace Policy suite so the rules are consistent and enforceable.
5) Train, Supervise And Keep Evidence
- Induct new starters on your WHS rules and show them how to do their tasks safely.
- Provide refresher training where risks change or new equipment is introduced.
- Record attendance, training topics and assessments - if something happens, you’ll need to show what you did.
6) Manage Contractors And Visitors
- Give contractors a site induction and set clear safety expectations in your contract.
- Coordinate safety if multiple businesses share a site so everyone understands who’s doing what.
- Ensure visitors (delivery drivers, clients) are told about any site hazards and controls they must follow.
7) Plan For Incidents And Emergencies
- Have first aid resources and trained first aiders appropriate to your risk profile.
- Set clear emergency procedures (fire, medical incidents, violent behaviour) and practice them.
- Know when you must notify the regulator (e.g. serious injuries or dangerous incidents) and how to preserve the site if required.
8) Review Regularly
- After an incident or near-miss, update your controls and training.
- Review your risk assessment annually or when your operations change (new location, new services, higher staffing).
- Directors/officers should verify that policies are alive in the business - not just stored on a shelf.
What Policies, Training And Documents Should You Have?
WHS becomes manageable when the rules are written down in plain English and backed by the right contracts. Consider the following core documents.
- Workplace Health And Safety Policy: Sets your commitment to safety, responsibilities, consultation, risk management, incident reporting and continuous improvement. Often sits within a broader Staff Handbook.
- Risk Assessment Templates And Safe Work Procedures: Short, practical guides that show staff how to perform higher-risk tasks safely.
- Incident Reporting And Investigation Procedure: Explains how to report incidents, what to record and who investigates. Include a simple form.
- Bullying, Harassment And Discrimination Policy: Addresses psychosocial hazards, reporting channels, investigation and consequences. If you receive a complaint, have a clear process to handle workplace harassment and discrimination claims.
- Drug And Alcohol Policy: Sets expectations and consequences. If relevant to your risk profile (e.g. driving, machinery), document when and how testing can occur in line with your drug testing obligations.
- Employment Contract: Aligns job descriptions, hours and conduct with safety expectations and policies. Make sure each role has a current Employment Contract that references your policies.
- Contractor Agreement: If you engage contractors, set out safety responsibilities, site rules and insurance requirements in a written Contractor Agreement.
- Workplace Policy Suite: Bundle key policies (WHS, IT, communications, leave, grievance, performance) into a coherent, enforceable set - a tailored Workplace Policy makes rollout and compliance much easier.
Not every business will need every document on day one, but most will need several. The goal is to have policies that reflect your actual operations, so they’re easy to follow and enforce.
Common WHS Issues For Small Businesses (And How To Handle Them)
Every business is different, but these issues come up often. Address them early to avoid stress later.
Monitoring And Surveillance At Work
Security cameras or monitoring tools can help manage safety risks (e.g. theft, aggressive behaviour), but there are legal limits. If you use surveillance, make sure you’re across your obligations - the rules vary by state and can include notice requirements, limits on audio recording and special rules for bathrooms and private areas. If cameras are part of your safety strategy, review what’s permitted under workplace surveillance laws and ensure your policy explains what monitoring occurs and why.
Drug And Alcohol Risks
Where impairment could create serious risks (for example, driving, plant and equipment, working at heights), you may need a clear drug and alcohol policy and, in some cases, a fair testing regime. Consistency, privacy and procedural fairness are essential. Before implementing testing, understand the legal framework and reflect it in your drug and alcohol approach, including when testing is reasonable, how consent is handled and what happens after a non‑negative result.
Psychosocial Hazards (Bullying, Workload, Conflict)
Psychosocial hazards are now a major WHS focus. This includes bullying, harassment, remote work isolation, high job demands and unclear roles. They should be risk‑assessed and controlled like any other hazard. Embed behavioural expectations in your code of conduct, train managers to address concerns early and provide confidential reporting channels. If an employee takes time off due to work‑related stress, your obligations continue - make sure your processes for managing stress leave align with your WHS duties and privacy obligations.
Communication And Policy Compliance
Policies only work if people understand them. Keep policies short and practical, build them into inductions, and use plain language. It helps to align your rules with any applicable laws on workplace communication (for example, expectations for respectful conduct, acceptable use of devices and channels, and after-hours boundaries for low-risk roles). Spot checks and refreshers go a long way - a 10‑minute toolbox talk can prevent a costly incident.
Hours, Breaks And Fatigue
Fatigue is a real safety risk. Make sure rosters and overtime practices are reasonable for the nature of the work, and that employees take proper breaks. This is both a WHS issue and an employment law issue - your approach to workplace break laws should factor in safety, not just minimum legal entitlements.
Investigations And “Stand Down” Decisions
Serious incidents or allegations may require you to move quickly to protect safety. In higher‑risk cases, that could include temporarily changing duties or removing someone from the workplace while you investigate. Make sure you follow a fair process, document your reasons and keep the disruption proportionate to the risk. Your policies, contracts and investigation procedure should set clear expectations on cooperation and confidentiality, and your managers should know the steps to follow.
WHS And Your Broader Employment Law Obligations
WHS isn’t isolated - it overlaps with your wider legal duties as an employer. In practice, this means your employment documentation, policies and day‑to‑day management should all pull in the same direction.
- Make safety “real” in your contracts and onboarding. Your Employment Contract should reference compliance with your policies and safe systems of work. Your inductions should cover risk areas and reporting processes.
- Use policies to give practical effect to your duty of care. For example, if driving is part of the job, include rules on seatbelts, mobile phone use and fatigue management.
- Treat allegations consistently and fairly. If you receive a complaint of bullying or harassment, follow the process in your complaints and investigation framework while ensuring safety for everyone involved.
- Keep your documents in sync. If you update a WHS procedure (e.g. lone worker rules), update related policies and any task‑specific instructions so staff only see one version of the truth.
- Train managers in the “why” as well as the “what”. They don’t need to be lawyers, but they should know the basics of consultation, risk assessment and reasonable management action.
When your WHS system is aligned with your contracts and policies, it’s easier to manage risk day‑to‑day and defend decisions if they’re challenged.
Key Takeaways
- A sound understanding of OHS/WHS means identifying your unique risks and controlling them “so far as reasonably practicable” - not copying a generic manual.
- The primary duty of care sits with your business (the PCBU), and directors must exercise due diligence to ensure compliance.
- Build a simple system: assess risks, consult, write clear procedures, train and supervise, manage contractors, plan for incidents and review regularly.
- Put your rules in writing with a WHS Policy, incident procedures, code of conduct and role‑appropriate contracts; align everything through a coherent Workplace Policy suite.
- Tackle common pain points early - surveillance, drug and alcohol risks, psychosocial hazards, communication expectations and fatigue - with short, practical policies and training.
- Integrate WHS with employment law: ensure your Employment Contracts, policies and management practices all support a safe workplace.
If you’d like a consultation on building a practical WHS framework for your small business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








