WHS Laws In Australia: What Small Businesses And Startups Need To Know

When you’re building a small business or startup, it’s easy to focus on the exciting parts: product, customers, revenue, growth.

But if you’re hiring staff, bringing contractors on-site, running a warehouse, opening a clinic, or even just operating from a small office, you’ll need to understand Australia’s WHS laws (work health and safety laws).

WHS isn’t just a “big business” issue. In practice, many of the most common WHS problems happen in smaller teams, because processes are still being built and everyone is wearing multiple hats.

This guide breaks down WHS laws in plain English, from a business owner’s perspective, with a practical checklist you can use to get your WHS foundations in place. This article is general information only and not legal advice.

What Are WHS Laws (And Who Do They Apply To)?

WHS laws are the rules that require you to keep people safe at work. They cover preventing injuries, managing risks, training workers, and putting the right safety systems in place.

In Australia, WHS is regulated at a state and territory level. Many jurisdictions have adopted the “model” WHS laws (or versions of them), but there are important differences depending on where you operate - and not every state has adopted the model framework in the same way (for example, Victoria has its own occupational health and safety regime).

WHS laws generally apply if you’re a:

• Business owner or startup founder operating a business (including online-first businesses with staff)
• Employer with employees (full-time, part-time or casual)
• Engager of contractors (including subcontractors and some gig-style arrangements)
• Controller of a workplace (like a shop, studio, warehouse, or shared workspace you manage)

It’s also worth noting that WHS obligations can apply even when you don’t “employ” someone in the traditional sense. For example, if you have contractors working at your site, you may still need to manage site safety, access, inductions, and risk controls.

Why WHS Matters For Startups

For startups, WHS tends to pop up earlier than expected.

You might start out as a two-person company on laptops, but quickly expand into:

• co-working spaces
• fulfilment and logistics
• site visits and installations
• events and activations
• clinics, studios or workshops
• hybrid/remote work models

The earlier you set up a sensible WHS framework, the easier it is to scale safely (and to show investors, enterprise customers, and insurers that you’re running a well-managed operation).

Your Core WHS Duties As A Business (PCBU) Under WHS Laws

Under WHS laws, the key duty-holder is usually a PCBU, which stands for Person Conducting a Business or Undertaking. In most cases, if you’re running a business, you’re a PCBU (although the terminology and structure of duties can vary by jurisdiction).

As a PCBU, your core obligation is to ensure health and safety so far as is reasonably practicable.

That phrase matters because it recognises that:

• not every risk can be eliminated completely, but
• you must take reasonable steps to identify risks and control them.

What Does “So Far As Is Reasonably Practicable” Mean In Practice?

In practical terms, it means you should be able to show that you’ve:

• identified likely hazards in your business
• assessed how serious those risks are
• put controls in place that are proportionate to the risk
• trained people and documented what you do
• reviewed and improved your approach over time

If something goes wrong, regulators will often look at what you did before the incident, not what you do after it.

Directors And Founders Also Have Duties

If you run your startup through a company, the company as the PCBU has WHS duties, but directors and officers can also have personal duties to exercise due diligence and ensure the business is meeting its WHS obligations (noting that the exact labels and duties can differ between states and territories).

This is one reason it’s worth building WHS into your governance early, alongside your financial and operational reporting.

WHS Risk Management: The Practical Steps To Get Compliant

WHS can feel broad, but it’s easier when you treat it like a repeatable business system.

Here’s a practical WHS approach many small businesses use.

1) Identify Hazards In Your Workplace

A “hazard” is anything that could cause injury or harm. Depending on your business, hazards might include:

• manual handling (lifting, packing, moving stock)
• slips, trips and falls (especially in retail or hospitality)
• plant and equipment (tools, machinery, vehicles)
• psychosocial hazards (bullying, stress, fatigue, poor workload design)
• hazardous substances (chemicals, cleaning agents)
• working at heights
• remote or isolated work
• aggressive customers or security risks

Even if your business is “office based”, hazards can still exist (for example, poor workstation setup, fatigue from excessive hours, or psychosocial risks in high-pressure teams).

2) Assess The Risks

For each hazard, ask:

• How likely is it to happen?
• What’s the potential consequence if it happens?
• Who could be affected (employees, contractors, customers, visitors)?

This helps you prioritise. You don’t treat every risk the same way.

3) Implement Controls (And Use The Hierarchy Of Control)

WHS laws expect you to use sensible controls. A common approach is the “hierarchy of control” (from most effective to least):

• Eliminate the hazard (remove it completely)
• Substitute (swap for something safer)
• Isolate (separate people from the hazard)
• Engineering controls (physical changes like guards, ventilation)
• Administrative controls (procedures, training, signage, rostering)
• PPE (personal protective equipment)

For example, if you’re running a small warehouse operation, it’s often not enough to just “tell people to lift safely”. You may need trolleys, racking, workflow changes, and training.

4) Train, Induct And Supervise

WHS compliance is rarely just about having a policy in a folder. Regulators will often expect you to be able to show that workers were:

• inducted into the workplace
• trained on relevant tasks
• supervised appropriately (especially if new, young, or inexperienced)
• able to raise issues

This is particularly important if you scale quickly or rely on casuals, contractors, or labour hire arrangements.

5) Keep Records And Review Regularly

Documentation doesn’t need to be complicated, but you should have a way to record things like:

• risk assessments
• incident reports
• training and inductions
• equipment checks/maintenance
• WHS meetings or toolbox talks

As your business changes (new location, new equipment, new product lines, new delivery method), you should revisit your WHS controls.

Employees, Contractors, And “Consultation” Under WHS Laws

One of the most overlooked parts of WHS laws is the requirement to consult with workers, so far as reasonably practicable.

This doesn’t need to be formal or slow. For a small business, consultation can be as simple as:

• regular check-ins about safety issues
• having a clear reporting process for hazards and incidents
• including WHS in team meetings
• getting input before changing rosters, processes, equipment or sites

The key is that workers should have a reasonable opportunity to contribute to decisions that affect their health and safety.

Contractors And Shared Responsibilities

If contractors are involved, WHS responsibilities can overlap. You may need to coordinate with other duty-holders (for example, a building manager, a principal contractor, or another business in a shared workspace).

In practice, this is where clear documentation becomes critical: what’s your role, what’s theirs, what training is required, and who is responsible for what controls.

If you’re onboarding workers, having a properly drafted Employment Contract can help set expectations around safety obligations, policies, and lawful directions.

Common WHS Compliance Areas Small Businesses Miss

Most business owners don’t ignore WHS on purpose. It’s usually a mix of “we didn’t realise it applied to us” and “we’ll fix it later”.

Here are a few areas where small businesses and startups often get caught out.

Workplace Policies That Don’t Match Reality

If you have policies, they need to be workable and actually followed.

For example, if your policy says “no one works alone”, but your rostering regularly leaves one person to close up, that’s a red flag.

Many businesses include WHS expectations in a broader handbook or workplace policy suite (particularly as they grow), and that’s often a good time to review employment compliance generally through an award compliance check as well.

Psychosocial Hazards (Stress, Bullying, Workload)

WHS isn’t just physical risks. Psychosocial hazards can be a major issue, especially in fast-moving startups where workloads are high and boundaries can be blurry.

Practical controls might include:

• clear role descriptions and priorities
• reasonable working hours and break expectations
• a process for reporting concerns
• training managers on respectful workplace conduct

Remote And Hybrid Work Safety

If you have remote staff, you still have WHS responsibilities.

That doesn’t mean you need to inspect everyone’s home office weekly, but you should consider:

• workstation setup guidance
• reporting processes for injuries and hazards
• fatigue and after-hours expectations
• mental health and isolation risks

Security, Cameras, And Privacy

Some businesses add CCTV for safety and security reasons (like deterring theft or managing aggressive customer incidents). But you’ll want to balance WHS and operational needs with privacy and surveillance rules.

If this is relevant to your workplace setup, it’s worth understanding CCTV laws and how they interact with your internal policies and notices.

What Documents And Systems Should You Have For WHS?

There isn’t one perfect set of WHS documents for every business. The right setup depends on your industry, your workplace, and the level of risk.

That said, most small businesses and startups benefit from having a few core documents and processes that support WHS compliance and reduce uncertainty as they grow.

• WHS Policy / Safety Policy: A clear statement of how your business approaches safety, responsibilities, and reporting.
• Risk Register / Risk Assessments: A central record of hazards, risk levels, and controls.
• Induction Checklist: A consistent onboarding process for new staff and contractors (including site rules and emergency procedures).
• Incident Reporting Procedure: A straightforward way to report, investigate, and respond to incidents and near-misses.
• Training Records: Proof that staff were trained on relevant equipment and procedures.
• Emergency Plan: Evacuation procedures, first aid arrangements, and escalation contacts.

WHS documentation also tends to work best when it fits neatly into your broader business documentation.

For example, if you operate through a company, having a clear governance framework (including a tailored Company Constitution) can help define decision-making and responsibilities as you scale, which supports better WHS oversight too.

If You Collect Employee Or Customer Data, Don’t Forget Privacy

Many WHS processes involve collecting personal information (incident reports, medical clearances, workplace investigations). If your business handles personal information, you should also think about privacy compliance and having an appropriate Privacy Policy in place, especially if you collect information through a website or app.

Clear Customer-Facing Terms Can Reduce On-Site Risk

If customers attend your premises (studio, clinic, warehouse pick-ups, events), your customer terms can help set expectations about behaviour, safety directions, and access conditions.

Depending on your business model, Website Terms and Conditions can also be useful where bookings, memberships, or online instructions form part of how customers interact with your business.

Key Takeaways

• WHS laws apply to small businesses and startups, not just large employers, and they often apply even when you engage contractors or run a shared workplace.
• As a PCBU, your core duty is to provide a safe work environment so far as is reasonably practicable, which usually means identifying hazards, controlling risks, and training your team.
• A practical WHS system includes risk assessments, inductions, incident reporting, training records, and regular reviews as your business grows and changes.
• Common WHS problem areas for startups include psychosocial hazards, remote work safety, and policies that don’t reflect what actually happens day-to-day.
• WHS compliance works best when it’s supported by strong documentation, including clear employment arrangements and broader business governance documents.

If you’d like help setting up your WHS documentation and workplace foundations, you can reach Sprintlaw at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.