Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Working from home is now a normal part of how many Australian teams operate. Whether you’re leading a small business or scaling a growing company, a clear, practical work-from-home (WFH) policy helps you support flexibility while staying compliant with your legal obligations.
If you’re unsure where to start, you’re not alone. The good news is that with a solid framework, you can set expectations, manage risk and keep your people safe and productive-wherever they work. This guide walks you through what to include in a WFH policy, which Australian laws apply, and the documents we usually recommend employers have in place.
What Is A Work-From-Home Policy?
A work-from-home policy is an internal policy that explains how remote or hybrid work will operate in your business. It outlines who can work from home, how work will be performed and supervised, and what you’ll do to meet your legal responsibilities as an employer.
Typically, a WFH policy covers working hours, availability, equipment, workplace health and safety (WHS), confidentiality and privacy, communication, performance expectations and reporting processes. It should be clear, accessible and consistent with your broader workplace policies or staff handbook.
The aim is simple: clarity for your team and fewer operational and legal risks for your business.
Why Does A Work-From-Home Policy Matter?
Remote work introduces benefits-like flexibility and access to broader talent-alongside new risks. Without a shared set of rules and procedures, misunderstandings can arise about hours, responsiveness, safety responsibilities, use of equipment and data security.
A well-drafted WFH policy helps you:
- Meet your WHS duty of care when work is performed at home and reduce preventable injuries or incidents.
- Set clear expectations for availability, communication, output and performance.
- Protect confidential information and client data with practical, enforceable rules.
- Align flexible work with the Fair Work framework, modern awards and employment contracts.
- Manage requests consistently and fairly across the business.
Importantly, a WFH policy is also a cultural tool. It shows your team that you’re committed to safe, flexible and sustainable ways of working.
How Do I Build A Work-From-Home Policy In Australia?
Every workplace is different, but the following steps form a strong foundation you can tailor to your needs.
1) Assess Roles, Risks And Business Needs
Start by identifying which roles and tasks can be performed remotely without disrupting service quality, security or compliance. Consider client needs, supervision, data sensitivity, equipment requirements and whether any part of the role must remain on site.
Think through the practical risks and how you’ll control them. For example, if your team handles sensitive client information, you’ll want stronger rules around secure networks, device management and physical file storage at home.
2) Embed WHS (Work Health And Safety)
Your duty of care as an employer extends to home workspaces. You must take reasonable steps to provide a safe work environment and manage risks such as ergonomics, slips and trips, electrical safety, isolation and mental wellbeing.
- Use a WFH safety checklist and have staff complete a self-assessment of their workspace.
- Offer guidance on ergonomic set-up and approve equipment where appropriate.
- Have a simple process to report hazards, incidents and near misses from home.
- Schedule regular check-ins to address isolation, fatigue and workload concerns.
Framing these steps in your policy makes it easier to apply your duty of care consistently across the team.
3) Set Clear Working Hours And Communication Rules
Make expectations explicit to avoid confusion. Many employers include:
- Standard working hours, core availability windows and how to record time.
- Reasonable response timeframes for messages and emails.
- Rules for meetings, daily or weekly check-ins and collaboration tools.
- Procedures to request overtime, changes to hours or leave when WFH.
When people know the “rules of the road,” performance management becomes more transparent and fair.
4) Clarify Equipment, Expenses And Support
Spell out what you will provide and what employees are expected to supply or maintain. Cover device management, security software, approved accessories and how to request or replace equipment.
- Company devices and accessories (e.g. laptop, monitor, headset, chair).
- Personal device use and any BYOD (bring your own device) rules.
- Reimbursement policies for internet, phone or utilities (if any).
- Support channels for IT issues and reporting equipment faults.
Pair these settings with technical controls and guidelines in your Information Security Policy so technical and behavioural measures work together.
5) Protect Confidentiality, Privacy And Data
Remote work heightens data risk. Your policy should require secure handling, storage and transmission of information and reinforce confidentiality obligations, especially where others share the home environment.
In Australia, the Privacy Act and the Australian Privacy Principles (APPs) generally apply to businesses with annual turnover over $3 million, as well as certain smaller businesses (for example, if you provide health services or trade in personal information). Even if you fall outside the APPs, strong privacy practices are still essential for client trust and contract compliance.
- Require secure Wi-Fi, device encryption and up-to-date security patches.
- Limit printing and set rules for storing and disposing of physical documents.
- Implement access controls and multifactor authentication for key systems.
- Train staff on identifying and reporting suspected incidents quickly.
We recommend pairing your WFH policy with a clear Privacy Policy and a practical Data Breach Response Plan so your team knows exactly what to do if something goes wrong.
6) Explain Eligibility, Approvals And Reviews
Outline who is eligible for WFH, how to apply and who approves requests. Include how you’ll review arrangements (for example, after probation, when roles change or if performance issues arise). Make it clear that WFH is subject to business needs and compliance with the policy.
7) Keep It Current
Work patterns, technology and the law evolve. Commit to reviewing your WFH policy at least annually and seek feedback from managers and staff. Update related policies at the same time so everything stays aligned.
What Laws Apply To Work-From-Home Arrangements?
Several areas of Australian law can affect how you design and manage remote work. Your policy should align with the following (and your employment contracts and awards or enterprise agreements):
Work Health And Safety (WHS)
Under state and territory WHS laws, employers must provide a safe work environment so far as is reasonably practicable. This duty covers home workspaces. Embed risk management in your policy and everyday practices, and make it easy for workers to raise issues promptly.
Fair Work Framework
The Fair Work Act and the National Employment Standards (NES) continue to apply to remote staff. This includes rules about hours of work, breaks, overtime, leave and the right to request flexible work in certain circumstances. Relevant modern awards or enterprise agreements may include additional requirements around rostering, allowances, supervision and higher duties-make sure your WFH settings are consistent with those instruments.
Employment Contracts
Your WFH policy should operate alongside your employment agreements. In some cases, you may choose to issue a variation or include a clause that refers to remote work, hours and equipment. If you need to update contracts, ensure your Employment Contract reflects the arrangement and any award coverage.
Privacy And Cyber Security
Where the Privacy Act applies, you must comply with the APPs, including secure handling of personal information and reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification or disclosure. Contractual and sector-specific obligations may also require certain security measures. In practice, this means combining policy, training and technical controls to reduce risk.
Confidentiality And Intellectual Property
Protect confidential information and IP with clear obligations in your contracts and policies. This is especially important when staff access systems remotely or work in shared spaces. An NDA can be useful for third parties, contractors and suppliers who interact with your systems or data.
What Documents And Policies Should Employers Have?
Getting the right documents in place makes remote work smoother and reduces your risk. Not every business needs everything below, but most employers benefit from several of these core documents:
- Work-From-Home Policy: Sets out eligibility, hours, communication, supervision, safety, equipment, expenses, privacy and performance expectations.
- WHS Policy And WFH Checklist: Confirms roles and responsibilities for safety, with a simple self-assessment form covering ergonomics, electrical safety and incident reporting.
- Privacy And Security Suite: A clear Privacy Policy, an Information Security Policy and a practical Data Breach Response Plan to manage cyber risks.
- Employment Agreements: Your employee contracts should align with your WFH settings and any applicable award or enterprise agreement. If needed, issue a letter of variation to confirm changes to work location or hours. You can standardise expectations through a broader Workplace Policy framework.
- Staff Handbook: A central, plain-English resource for your policies (including WFH) helps everyone stay on the same page. Many employers package WFH, leave, conduct and IT rules together using a Staff Handbook.
- Non-Disclosure Agreement (NDA): Useful when sharing confidential information with contractors or third parties who access your systems or data while working remotely.
These documents work best when they’re consistent with one another and tailored to your operational realities. If you’re unsure what your business needs, it’s worth speaking with a lawyer to map the right mix for your team and risk profile.
Special Scenarios: Interstate And Overseas Work
Flexible work sometimes extends beyond state borders-and even across countries. Before approving these arrangements, consider the additional risks.
Working From Another Australian State Or Territory
- Different state rules: WHS regulators, long service leave and certain state-based obligations can vary. Confirm which laws apply and ensure your policy and payroll settings reflect the worker’s location.
- Insurance and incidents: Check workers compensation cover and incident reporting obligations in the relevant state or territory.
- Equipment and supervision: Confirm how you’ll inspect workspaces (e.g. via virtual checks), provide equipment and supervise performance.
Working From Overseas
Overseas remote work can be complex. Common risk areas include:
- Tax, payroll and social security: You may trigger local payroll withholding, social security contributions or corporate tax exposure (including potential “permanent establishment” risks) in the host country.
- Employment law and privacy: Local labour, privacy and data transfer laws may apply, which can change your obligations.
- Insurance and safety: Confirm whether your insurance covers overseas work and how you will meet health and safety obligations abroad.
We strongly recommend getting tailored legal advice-often in both jurisdictions-before approving an overseas arrangement. Sprintlaw provides legal guidance, and you should also obtain independent tax advice from a qualified accountant, as we don’t provide tax advice.
Key Takeaways
- A clear, practical WFH policy helps you support flexible work while meeting legal obligations and managing risk across WHS, employment, privacy and security.
- Your WHS duty of care extends to home workspaces-build in checklists, incident reporting and regular check-ins to manage safety and wellbeing.
- Align your policy with the Fair Work framework, modern awards or enterprise agreements, and ensure your Employment Contract and workplace policies are consistent.
- Protect data and confidentiality with a Privacy Policy, security controls and clear processes for reporting and responding to incidents.
- Have the right documents in place-WFH policy, WHS checklist, privacy and security policies, NDAs and a staff handbook-to keep expectations consistent and enforceable.
- For interstate or overseas arrangements, check state variations, insurance and potential foreign law and tax impacts early. Seek legal and tax advice before approving overseas WFH.
If you’d like a consultation on work-from-home policies in Australia or broader workplace compliance, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








