WHS Policies: What Australian Businesses Are Legally Required to Have (And What It Costs If You Don't)

Early education and child care: added reporting duties

Early education and child care providers face similar physical demands to allied health, with the added complexity of a duty of care to children. Lifting children, bending over cots and change tables, and constant close supervision all create manual handling risk that a service’s WHS policies must address directly.

Services that receive Community Child Care Fund restricted grants carry an additional duty. They must report WHS incidents to both their state regulator and the Department of Education, on top of the standard notifiable incident obligations that apply to every business. This dual reporting duty makes clear, well understood WHS policies essential rather than optional paperwork sitting in a folder.

Not-for-profits and volunteers: who is covered

Many not-for-profits assume formal WHS policies only apply once an organisation is large enough to employ significant staff. That assumption is wrong, and it is one of the most common gaps SBAAS sees in the sector.

Under the model WHS Act, a volunteer is treated as a worker if they carry out work for a PCBU. The moment a not-for-profit engages even one paid worker, it becomes a PCBU and owes the same duty of care to its volunteers as it does to that employee. Only a genuine volunteer association, one with no paid workers at all, sits outside these obligations.

This means WHS policies at a not-for-profit need to name volunteers explicitly. They should cover activities such as driving clients, handling cash, or working alone in the community, and set out how incidents involving volunteers get reported. Public liability and volunteer insurance arrangements should be checked against the same list of activities.

Service trades: the added layer of Safe Work Method Statements

Trades and construction-adjacent businesses carry every core obligation covered by their WHS policies, plus a further layer tied to specific tasks. Any high-risk construction work, defined across 18 to 19 categories depending on the state, requires a Safe Work Method Statement, known as a SWMS, before work begins.

Falls from height above two metres, work near live electrical parts, demolition, asbestos disturbance, and work near traffic corridors are common triggers for a SWMS in the trades. A SWMS sits underneath a business’s broader WHS policies. It documents the specific hazards, controls and sequencing for that task, and it must be reviewed if site conditions change.

Missing a required SWMS is treated seriously by every regulator. It can trigger a stop-work order on top of the direct penalty, and principal contractors increasingly will not allow subcontractors on site without one on hand.

Professional services: the new psychosocial frontier

Office-based professional services firms sometimes assume WHS policies matter less without physical hazards like machinery or working at heights. Psychosocial risk has closed that gap. Excessive workload, poor role clarity, remote work isolation and high-pressure client deadlines are all now recognised hazards that WHS policies must cover.

New South Wales has extended this further, making the psychosocial impact of AI tools and digital work allocation systems an explicit WHS duty. Businesses that use software to allocate work, monitor performance or set deadlines now need to consider how those systems affect worker stress, and reflect that assessment in their WHS policies.

Consultation is a duty, not a courtesy

Every business with WHS policies must also consult genuinely with workers on decisions that affect their health and safety. This includes identifying hazards, choosing controls, and proposing changes to how work is done.

Consultation has to be timely and real, not a notice pinned to a wall after a decision has already been made. Businesses with health and safety representatives must consult through them where they exist. Smaller teams can meet this duty through regular toolbox talks, team meetings or structured one-on-one conversations, provided the process is documented somewhere it can be shown later.

What non-compliance actually costs

The penalties behind Australia’s WHS policies escalate with the seriousness of the conduct. Category 3 offences, a straightforward failure to comply with a duty, still carry maximum fines that can reach $700,000 or more for a body corporate. Category 2 offences, where a breach exposed someone to a risk of death or serious injury, carry fines running into the millions of dollars.

Category 1 offences involve gross negligence or recklessness and carry both corporate fines and personal imprisonment for individuals. Industrial manslaughter sits above all three categories, with maximum penalties now reaching into the tens of millions of dollars for a corporation and up to 25 years’ imprisonment for an individual, depending on the jurisdiction.

Penalty amounts are indexed annually, meaning they increase every year regardless of any single incident. Officers of a business, not just the business itself, can face personal liability if they fail to exercise due diligence over WHS policies and their implementation. That due diligence duty cannot be delegated away.

Building a compliant framework without starting from zero

Most businesses do not need to write a WHS system from a blank page. The practical approach is to audit what already exists, close the gaps against the core list above, and build sector-specific additions on top.

• Start with the core five: policy statement, risk management, psychosocial hazards, emergency procedures and consultation.
• Add the sector layer that applies: NDIS Practice Standards, child care reporting duties, volunteer coverage, SWMS, or digital work system assessments.
• Sign every document at the top, date it, and set an annual review, or sooner if work, equipment or staffing changes.
• Keep records of consultation, training and incident reports. A policy without evidence behind it is difficult to defend.

A simple, honest self-assessment is the fastest way to find out where the real gaps sit. That is exactly what the accompanying WHS Policy Readiness Checklist has been built to do.

Frequently Asked Questions

Do sole traders need WHS policies?

Yes, in most cases. A sole trader who engages any worker, contractor or volunteer is generally a PCBU and owes the same primary duty of care as a larger business, though the paperwork can be proportionate to the size of the operation.

How often should WHS policies be reviewed?

At minimum, annually, and immediately after any significant change to work, equipment, premises or staffing. A stale WHS policy that no longer reflects real practice can count against a business during an investigation.

Are volunteers covered by WHS policies?

Yes, if the organisation employs at least one paid worker. Volunteers are treated as workers under the model WHS Act, and the same duty of care applies to them as to paid staff.

What is the difference between a WHS policy and a SWMS?

A WHS policy sets the overarching framework for how a business manages health and safety. A Safe Work Method Statement is a task-specific document required for defined high-risk construction work, sitting underneath that broader framework.

Is a generic downloaded template enough on its own?

A template is a useful starting point, but it needs to be adapted to the actual hazards, sites and workforce of the business, signed by a senior person, and reviewed on a set schedule to hold up under scrutiny.

Getting WHS policies right does not need to be complicated, but it does need to be done properly and kept current. If your business needs its WHS policies reviewed, built from scratch, or brought in line with sector-specific standards, the SBAAS team can help. Learn more about how SBAAS works alongside allied health, trades, professional services and not-for-profit clients at sbaas.com.au/about-us.