Digging Deeper

What is a psychosocial hazard

A psychosocial hazard is anything at work that may cause psychological harm. It can come from how work is designed and managed, from the work environment, or from how people behave.

Safe Work Australia lists the common ones. They are practical, not abstract:

• High or low job demands, and low control over how work is done.
• Poor support, low role clarity, and badly managed change.
• Low reward and recognition, and poor organisational justice.
• Exposure to traumatic events, and remote or isolated work.
• Violence and aggression, bullying, and harassment, including sexual harassment.
• Conflict or poor workplace relationships, and a poor physical environment.

These hazards often combine. High workload is manageable until support disappears and breaks vanish. That is when risk climbs. The point of a psychosocial safety policy is to see these hazards clearly and manage them before they cause harm.

The examples land differently by sector. A community organisation faces aggression from distressed clients and exposure to trauma. An allied health practice manages heavy caseloads and lone work. A trades business deals with fatigue and isolated sites. A professional services firm wrestles with sustained overwork and unclear roles. The hazards differ. The duty does not.

What the law actually requires

The duty is real and current. Work health and safety law defines health to include psychological health. So the general duty to provide a safe workplace has always covered the mind, not only the body.

In 2022, the model WHS Regulations were amended to clarify this. They now require employers to identify psychosocial hazards and manage the risks. Most Australian jurisdictions have adopted these regulations. Victoria runs its own scheme, with psychological health regulations that commenced in December 2025.

A Code of Practice supports the regulations. It matters more than it sounds. Courts can treat a Code as evidence of what is reasonably practicable, and inspectors can refer to it when issuing notices. Following it is the clearest way to show you met your duty.

The stakes are not theoretical. One Victorian employer was fined nearly $380,000 for failing to identify, assess, and address psychosocial risks. Regulators are now actively enforcing this area. A sound psychosocial safety policy, backed by evidence, is your best protection.

Why a policy alone will not satisfy a regulator

This is the heart of it. A psychosocial safety policy sets out your commitment and your rules. On its own, it proves intention, not action.

A regulator wants to see that you actually managed the risk. That means four things, documented. You identified the hazards in your specific workplace. You assessed the risk. You applied controls, working down the hierarchy from eliminating the hazard to reducing it. And you reviewed the result.

The controls matter most. Newer regulations require you to work through the hierarchy of controls, not just add a poster and an employee assistance line. Redesigning workloads, fixing rosters, and changing how complaints are handled carry far more weight than awareness alone.

This is where the risk register earns its place. It is the simplest way to record the entire process in a single document. When a regulator asks what you did, you hand them the register. That is the difference between a psychosocial safety policy that satisfies and one that does not.

How to do a psychosocial risk assessment

The process is a straightforward four-step process. Any small organisation can follow it.

1. Identify the hazards. Talk to your team, review incidents and complaints, and consider the common hazards for your work.
2. Assess the risk. Consider how likely harm is, how serious it could be, and how hazards combine.
3. Control the risk. Work down the hierarchy. Eliminate the hazard where you can, then reduce it through better work design, systems, and support.
4. Check that controls are working, and update after any change or incident.

Consultation is not optional. The law requires you to consult your workers and health and safety representatives, where you have them. Your team knows where the real pressure sits, so they are your best source of hazards. A psychosocial risk assessment done with your people beats one done to them.

Record each step as you go. The risk register template turns this process into a single, clear document, which is exactly what a psychosocial safety policy needs to stand behind it.