Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is A WHS Policy And Why Does It Matter?
- Who Is Responsible For WHS In Your Business?
How To Implement A WHS Policy Step By Step
- 1) Consult Your People And Understand Risks
- 2) Tailor Your WHS Policy To Your Operations
- 3) Integrate Safety Into Contracts And Policies
- 4) Communicate And Train (And Keep It Ongoing)
- 5) Set Up Incident And Hazard Reporting
- 6) Monitor, Measure And Review
- 7) Manage Records, Privacy And Security
- 8) Address Contractors, Visitors And Third Parties
- What Laws Apply To WHS In Australia?
- What Workplace Policies And Documents Should Support Your WHS Policy?
- Practical Tips To Make Your WHS Policy Work Day-To-Day
- Common Pitfalls (And How To Avoid Them)
- Key Takeaways
Every Australian business has a legal and moral duty to keep people safe at work. A clear, practical Work Health and Safety (WHS) policy is how you turn that duty into daily action.
Whether you’re growing fast, hiring your first employee or formalising processes, implementing a WHS policy is one of the smartest risk management moves you can make. It protects your team, reduces downtime and costs, and shows regulators you take safety seriously.
In this guide, we’ll walk through what a WHS policy is, who’s responsible, how to roll it out step by step, the key laws to consider, and the supporting documents that make your policy work in the real world.
What Is A WHS Policy And Why Does It Matter?
A WHS policy is your business’ commitment to creating a safe workplace and the rules, systems and responsibilities that support that commitment. It’s a cornerstone document that guides risk management, training, incident reporting and continuous improvement.
Critically, it also helps you meet your legal duty of care to workers and others who might be affected by your operations (like contractors, customers and visitors). If something goes wrong, a well-implemented policy shows you’ve taken reasonable steps to prevent harm.
Done well, a WHS policy will:
- Set a clear safety vision and define roles and responsibilities across the business.
- Embed risk assessment and control into everyday work, not just paperwork.
- Establish simple processes for training, communication, incident reporting and review.
- Support compliance with state and federal WHS laws and standards.
Who Is Responsible For WHS In Your Business?
Under Australian WHS law, everyone has a role to play, but the scope of responsibility varies:
- Officers (e.g. directors and senior managers) must exercise due diligence to ensure the business meets its WHS duties. That means staying informed, providing resources, and verifying that systems are working.
- Persons conducting a business or undertaking (PCBUs) carry the primary duty to provide a safe work environment, safe systems of work, and appropriate training and supervision.
- Workers (employees, contractors, volunteers) must take reasonable care for their own health and safety, follow policies, and report hazards and incidents.
- Other persons at the workplace (customers, visitors) also have responsibilities to follow safety directions and not put others at risk.
Your WHS policy should spell out these roles in plain English so everyone knows what’s expected. It should also link to supporting documents (like procedures and checklists) so people can find exactly what to do in common scenarios.
How To Implement A WHS Policy Step By Step
Implementation is where your policy comes to life. Here’s a practical, repeatable approach you can use in any industry.
1) Consult Your People And Understand Risks
Start by speaking with workers and HSRs (Health and Safety Representatives) if you have them. Ask what hazards they see and where current controls fall short. Consultation is not only best practice-it’s a legal requirement and will make your policy more effective and accepted.
Identify your top risks by work area and activity (e.g. manual handling, machinery, fatigue, psychosocial risks, remote work, chemicals, vehicles, slips/trips/falls). Then prioritise them using a simple risk matrix (likelihood x consequence).
2) Tailor Your WHS Policy To Your Operations
Draft or update your policy so it reflects how your business actually works. Avoid generic statements that don’t match your processes. Include:
- Your safety commitment and objectives.
- Clear responsibilities for officers, managers, workers and contractors.
- How you identify, assess and control risks (and review controls).
- Training, induction and competency requirements.
- Incident reporting, investigation and corrective action.
- Consultation, issue resolution and escalation pathways.
- Monitoring, audits and scheduled reviews.
Back the policy with simple procedures and checklists so teams know exactly what to do. Keep everything accessible (digital and/or printed) and version-controlled.
3) Integrate Safety Into Contracts And Policies
To make safety requirements stick, embed them into your everyday documents. For employees, ensure your Employment Contract and Workplace Policy suite require compliance with WHS procedures, reporting obligations and fitness for work rules. For contractors, use a clear Contractor Agreement that sets safety expectations and evidence requirements (e.g. licences, insurances, site inductions).
This alignment means your safety standards are part of your legal relationships-not optional extras.
4) Communicate And Train (And Keep It Ongoing)
Roll out the policy with a short launch session, toolbox talks and a simple FAQ. Make safety updates a regular rhythm-monthly or quarterly. Use plain language, visuals and real examples from your workplace.
Training should cover general WHS induction and role-specific competencies. Document attendance and outcomes. Clear, consistent communication supports compliance and helps you meet your obligations under workplace communication expectations and internal policies.
5) Set Up Incident And Hazard Reporting
Provide easy ways to report hazards, near misses and incidents (QR code forms, email addresses, or an app). Spell out timelines and who investigates what. Teach supervisors how to conduct simple root cause analyses and implement corrective actions.
Remember, certain incidents are notifiable to your state or territory WHS regulator. Your procedure should say when and how to notify, and who is responsible.
6) Monitor, Measure And Review
What gets measured gets managed. Choose a handful of sensible indicators, such as:
- Number of hazards reported and closed out.
- Training completed vs scheduled.
- Corrective actions implemented on time.
- Trends from incident investigations.
Schedule formal reviews (at least annually, or after a major change/incident). Involve management and HSRs. Update your policy and procedures when you learn something new.
7) Manage Records, Privacy And Security
WHS records can include personal and health information (e.g. incident details, medical certificates, fit notes). Store them securely, limit access, and set retention periods. Publish and follow a Privacy Policy and consider an Information Security Policy if you handle sensitive data or run distributed teams. If you use software to manage WHS, check where data is stored and who can access it.
8) Address Contractors, Visitors And Third Parties
If you engage contractors or allow visitors on site, extend your WHS policy to them. Require evidence of competency and insurances during onboarding, provide site inductions, and specify who supervises their work. Your Contractor Agreement should reflect these controls so there’s no confusion about standards or liability.
What Laws Apply To WHS In Australia?
Australia’s WHS framework is largely harmonised across states and territories, with some variations. In general, you should be aware of:
- WHS Acts and Regulations in your state/territory (e.g. NSW, QLD, VIC) which set out primary duties, consultation, risk management and notification duties.
- Codes of Practice that provide practical guidance (not law on their own, but courts and regulators consider them).
- Common law duties of care (evolving through court decisions).
- Industry-specific rules (e.g. construction, mining, healthcare) and applicable Australian Standards.
The core idea across jurisdictions is the same: do what is reasonably practicable to eliminate or minimise risks. Your WHS policy and procedures are how you demonstrate that you identify risks and put proportionate controls in place.
WHS also intersects with other legal areas. For example, safety expectations should appear in contracts, and policies must respect privacy and workplace rights. Keeping your WHS system aligned with your broader policy suite (e.g. fatigue management, bullying and harassment, drugs and alcohol, mobile phone use) helps avoid gaps.
What Workplace Policies And Documents Should Support Your WHS Policy?
A WHS policy doesn’t stand alone. It sits in a “family” of documents that make safety clear and enforceable. Consider the following:
- Workplace Policy Suite: House the WHS policy alongside related procedures (e.g. hazard reporting, PPE, incident investigation, emergency response, fatigue, bullying and harassment). Having a central, accessible Workplace Policy set makes it easier to train staff and keep everything consistent.
- Employment Contract: Make safety a contractual obligation so expectations are explicit from day one. Your Employment Contract can reference compliance with WHS policies, reporting duties and disciplinary consequences for serious breaches.
- Contractor Agreement: For external workers, your Contractor Agreement should require adherence to site safety rules, inductions and evidence of competency and insurances.
- Privacy And Data Security: Safety records often include personal information, so a clear Privacy Policy and an Information Security Policy help you manage data lawfully and securely.
- Whistleblower Pathway: If you’re a company that meets the criteria for whistleblower protections, ensure you have a compliant Whistleblower Policy and safe reporting channels.
- Operational Procedures: Short, practical SOPs for high-risk tasks (lockout/tagout, confined spaces, hot works, manual handling) make your policy actionable.
- Training And Induction Records: Keep evidence of what was delivered, when, and to whom-this is invaluable for continuous improvement and compliance.
Depending on your industry, you may also need permits, licences, or competency frameworks. Align these with your WHS procedures so workers know which authorisations are required before a task starts.
Practical Tips To Make Your WHS Policy Work Day-To-Day
Policy documents don’t keep people safe-behaviours do. These practical tips will help your WHS system stick.
- Keep it short and specific: Aim for a clear two-to-four page policy, then link to simple procedures and checklists. People are far more likely to follow concise guidance.
- Use real examples from your workplace: Photos, diagrams and specific “how we do it here” steps make safety concrete.
- Empower supervisors: Provide quick investigation templates, coaching tips and escalation paths so issues are resolved early.
- Celebrate reporting: Thank people for raising hazards or near misses. The more you learn, the safer you get.
- Close the loop: Always communicate “what we changed” after an incident or audit. This builds trust and momentum.
- Design for turnover: Make induction modular and on-demand so new hires can get up to speed fast-and track completion.
- Review when things change: New equipment, new locations, new hours or new clients should trigger a quick risk review and policy update.
Common Pitfalls (And How To Avoid Them)
We regularly see a few issues derail otherwise good intentions. Here’s how to avoid them:
- Copy‑paste policies: Generic policies often don’t match your risks. Tailor the policy and procedures to the work you actually do.
- One‑off training: Induction is not enough. Schedule refreshers and toolbox talks so knowledge stays current.
- Poor documentation: If it isn’t recorded, it’s hard to prove you did it. Keep simple, consistent records for training, inspections, incidents and corrective actions.
- Contractor gaps: Contractors are often involved in serious incidents. Set the same standards, verify competencies and include clear safety clauses in contracts.
- Data risks: Safety files can contain sensitive health information. Limit access and align with your privacy and security practices.
Key Takeaways
- A WHS policy is the backbone of your safety system-make it clear, practical and tailored to your operations.
- Consultation, risk assessment, training, incident reporting and regular reviews are the core pillars of effective implementation.
- Roles and responsibilities must be explicit, from officers through to workers and contractors, so safety is everyone’s job.
- Embed safety obligations into your Employment Contract, Workplace Policy suite and Contractor Agreement to make requirements enforceable.
- Protect personal information in WHS records with a robust Privacy Policy and Information Security Policy.
- Avoid common pitfalls-keep documents short and specific, train continuously, document diligently, and align contractors with your standards.
If you’d like a consultation on building or improving your WHS policy and related documents for your workplace, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.








