Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Are Workplace Policies And Procedures?
- Why Do Policies And Procedures Matter In Australia?
- Who Is Responsible And How Are Policies Developed?
Legal Requirements And Compliance Considerations
- Fair Work System: NES, Awards And Employment Contracts
- Work Health And Safety (WHS)
- Anti‑Discrimination, Harassment And Positive Duties
- Privacy And Data Protection
- Australian Consumer Law (ACL)
- Record‑Keeping, Training And Enforcement
- What Legal Documents Should You Have On Hand?
- Creating Policies That People Actually Use
- Key Takeaways
Every Australian business owner wants their workplace to run smoothly, safely and within the law. One of the most reliable ways to achieve this is by having clear, well-documented policies and procedures in place.
You might be wondering what policies you actually need, how to create them, and what good procedures look like in practice. More importantly, why are policies and procedures so crucial - and what could go wrong if you ignore them?
This guide walks you through the essentials from an Australian perspective - covering legal context, best‑practice examples and practical tips so you can set things up confidently and stay compliant as you grow.
Note: This article is general information for Australian businesses and isn’t legal advice. If you’d like guidance tailored to your situation, our team can help.
What Are Workplace Policies And Procedures?
Workplace policies are written rules or statements that set standards in your business. They outline how you operate and what’s expected of staff - for example, your stance on bullying and harassment, safety, internet use, leave requests, conflicts of interest, or remote work.
Workplace procedures are the step‑by‑step instructions that show people how to put those policies into action. Procedures are the “how we do things here” - like how to report a hazard, the steps to request annual leave, or how to escalate a grievance.
Policies set the what and why. Procedures set the how. Together, they promote fairness, consistency and compliance - and make day‑to‑day decisions easier for managers and staff.
Why Do Policies And Procedures Matter In Australia?
It’s easy to assume everyone will “just know” what’s appropriate at work, but unwritten rules can lead to confusion and risk. Well‑crafted policies and procedures help you:
- Manage legal risk: Australia’s workplace laws (such as work health and safety, anti‑discrimination and fair work laws) expect employers to take reasonable steps to provide a safe, fair workplace. Clear, implemented policies are a key part of those steps.
- Prevent disputes: When expectations are written and consistently applied, there’s less room for misunderstandings about conduct, leave, performance, or use of company property.
- Build consistency and culture: Documented standards make it easier to treat people fairly, wherever they work (onsite, hybrid or remote), and help new starters succeed from day one.
- Drive efficiency: Procedures standardise how tasks are done (e.g. incident reporting or approvals), which reduces delays and helps managers make decisions faster.
- Protect your business: If a complaint or claim arises, strong policies - plus proof you communicated and trained on them - can help demonstrate the business acted reasonably.
In short, policies and procedures aren’t just paperwork - they’re a practical toolkit for compliance, risk management and a healthy workplace.
Who Is Responsible And How Are Policies Developed?
Ultimately, owners, directors and senior managers are responsible for ensuring appropriate policies exist and are enforced. In practice, it’s a shared effort:
- Senior leadership: Sets the tone, approves policies and ensures they align with legal obligations and business values.
- HR and people leaders: Draft, update and roll out policies, coordinate training and keep records.
- Supervisors and team leads: Apply policies day‑to‑day, answer questions and escalate issues as needed.
- Employees and contractors: Read, understand and follow policies - and speak up if something isn’t clear or safe.
Developing or refreshing policies doesn’t need to be daunting. A practical process most businesses can follow is:
- Identify your key risks and needs: Think about your industry, size, locations, remote work arrangements, technology, and any higher‑risk activities (e.g. field work or handling sensitive data).
- Check legal requirements: Review relevant Commonwealth and state/territory obligations. At a minimum, consider work health and safety, anti‑discrimination, fair work, privacy and consumer laws.
- Draft in plain English: Keep it short, clear and usable. Avoid jargon so people can actually follow the rules.
- Define the procedures: Set out who does what, by when and how (e.g. forms to use, reporting lines, response timeframes).
- Consult the people who’ll use them: Engaging managers and staff (particularly for safety and conduct policies) helps spot gaps and boosts buy‑in.
- Implement, train and record: Roll policies out properly, collect acknowledgements, deliver training, and store records of what you did and when.
- Review regularly: Revisit at least annually or when you change how you work (e.g. expansion, restructures, new systems or significant law updates).
Many businesses also group policies into a single, easy‑to‑access staff handbook. If you’re at the stage of formalising your suite, a tailored Staff Handbook Package can streamline adoption and updates.
Common Policies And Procedures For Australian Workplaces
There’s no one‑size‑fits‑all list, but most Australian employers benefit from a core set of policies supported by simple procedures.
Core Policies Most Businesses Consider
- Work Health and Safety (WHS) Policy: Sets your commitment to a safe workplace and explains hazard reporting, risk assessments, consultation and incident response.
- Bullying, Harassment and Discrimination Policy: Prohibits unlawful conduct and victimisation, defines unacceptable behaviour, and explains complaint and investigation processes.
- Code of Conduct: Summarises expected standards of professionalism (e.g. respectful behaviour, conflicts of interest, confidentiality, appropriate use of work resources).
- Leave and Attendance Policy: Explains how to request and approve leave, outlines entitlements and documentation requirements, and addresses punctuality and rostering norms.
- IT, Communications and Social Media Policy: Covers acceptable use of devices and networks, information security, passwords, remote access, and responsible online conduct.
- Privacy and Data Protection Policy: Describes how you handle personal information, requests and complaints. Many businesses also publish a website‑facing Privacy Policy.
- Grievance and Complaints Policy: Provides a fair process for raising and resolving workplace concerns internally.
- Remote and Flexible Work Policy: Sets expectations for hours, communication, safety at home, and equipment responsibilities.
- Drug and Alcohol Policy: Clarifies your approach to impairment, testing (if applicable) and support.
Typical Procedures To Support Those Policies
- Reporting a safety incident: immediate actions, who to notify, forms, investigation steps and corrective actions.
- Escalating a conduct concern: confidential reporting channels, timeframes, who will investigate and possible outcomes.
- Requesting and approving leave: how to apply, evidence needed (e.g. medical certificates), and approval pathways.
- Handling personal information: collecting, storing, accessing and sharing data securely, plus responding to access requests.
- Raising a grievance: stages of escalation, response timeframes and support options (e.g. EAP or support person).
Make procedures simple to follow. Checklists, plain language and clearly defined roles are your friends.
As you expand, you might also add specialised policies (e.g. vehicle use, conflicts of interest for sales teams, supplier due diligence, or a Data Breach Response Plan if you handle customer data at scale).
Legal Requirements And Compliance Considerations
Australian law doesn’t provide a single mandatory list of policies every business must have. Instead, the law expects employers to take reasonable steps to meet their obligations - and written, implemented policies are a practical way to do that. Here’s how key legal areas interact with your policy framework.
Fair Work System: NES, Awards And Employment Contracts
The National Employment Standards (NES) are set by the Fair Work Act 2009 and provide minimum entitlements (like annual leave, personal/carer’s leave and notice of termination). Modern Awards can add extra terms (such as specific break entitlements or penalty rates) that apply to particular industries or roles.
Your policies should reflect these minimums and how they operate in your workplace. For each new hire, use a tailored Employment Contract and ensure your policies align with the contract and any applicable award.
Work Health And Safety (WHS)
Under model WHS laws adopted across most states and territories, you must ensure, so far as reasonably practicable, the health and safety of workers and others. While the legislation doesn’t prescribe a specific “WHS policy” document, having a clear policy and procedures (consultation, risk management, incident reporting and training) is widely regarded as best practice and strong evidence of compliance.
Anti‑Discrimination, Harassment And Positive Duties
Federal and state/territory laws prohibit discrimination, sexual harassment, bullying and victimisation. Employers are expected to take reasonable and proportionate measures to prevent unlawful conduct. A well‑implemented conduct policy, training and a fair complaints process are practical steps that support compliance and help protect your people.
Privacy And Data Protection
The Privacy Act 1988 (Cth) contains obligations for handling personal information. Some small businesses with annual turnover under $3 million may be exempt, but there are important exceptions - for example, health service providers and certain data‑intensive businesses still need to comply. Many businesses also choose to adopt privacy practices (and publish a Privacy Policy) as good governance and to meet customer expectations.
Australian Consumer Law (ACL)
If you sell goods or services, the Australian Consumer Law applies to your advertising, pricing, consumer guarantees and complaint handling. Policies around refunds, warranties and marketing approvals help your teams do the right thing day‑to‑day and reduce the risk of misleading or deceptive conduct under section 18.
Record‑Keeping, Training And Enforcement
Whatever you put in writing only helps if you actually implement it. Keep evidence of training, acknowledgements and updates. Apply policies consistently. If issues arise, follow your own procedures - this consistency carries weight in any external review or claim.
What Legal Documents Should You Have On Hand?
Your exact suite will depend on your operations, but many Australian businesses consider:
- Employment Contract: Sets out duties, pay, hours, confidentiality, IP and termination terms for each employee.
- Workplace Policy/Handbook: Your consolidated rules and procedures in one place; our Workplace Policy and Staff Handbook Package can be tailored to your needs.
- Privacy Policy: Explains how you collect, use and store personal information and how individuals can access or complain (especially important if you operate online) - see Privacy Policy.
- Data Breach Response Plan: A clear playbook for detecting, assessing and notifying eligible data breaches to minimise harm - see Data Breach Response Plan.
- Customer Terms or Service Agreement: If you provide services or sell online, set expectations around scope, pricing, cancellations, liability and dispute resolution.
- Disciplinary and Grievance Procedures: Fair processes that align with your policies and employment contracts.
Getting these documents set up correctly at the start reduces admin headaches and gives managers a reliable reference if issues arise.
Creating Policies That People Actually Use
Practicality is everything. When policies are short, accessible and reinforced through training, your team will refer to them - and compliance becomes part of how you do business, not a one‑off project. If you’re unsure where to begin or want a health check on what you have, our employment lawyers can help prioritise what matters for your size and industry.
Key Takeaways
- Policies set the “what and why”, procedures set the “how” - together they drive compliance, consistency and a safer, fairer workplace.
- Australian law expects employers to take reasonable steps to meet obligations (WHS, anti‑discrimination, Fair Work, privacy and ACL). Written policies, training and records are practical evidence of those steps.
- The NES come from the Fair Work Act, while Modern Awards add extra terms for certain roles or industries; align your policies and Employment Contracts with both where they apply.
- Common policies include WHS, conduct and anti‑harassment, IT and social media, leave, privacy, grievances, and remote work - supported by simple, step‑by‑step procedures.
- Keep policies short, train regularly, record compliance, review annually and apply them consistently - that’s what makes them effective in practice.
- Tailored documents like a Workplace Policy, Staff Handbook and Privacy Policy help your team get things right from day one.
If you need help developing, updating or reviewing your workplace policies and procedures, you can reach us on 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.








