Psychosocial Hazards and Small Business: Your WHS Obligations Explained

Right now, WHS regulators across Australia are ramping up enforcement on a category of workplace hazard that most small businesses have never documented - and many haven't even considered.

Psychosocial hazards. Bullying. Harassment. Unreasonable workloads. Poor organisational change management. Lack of role clarity. These aren't "soft" issues, and they're not just HR concerns. Under current WHS regulations, they're workplace hazards - and your duty to manage them is exactly the same as your duty to manage a fall risk, an unguarded machine, or a chemical exposure.

If that's news to you, you're not alone. But the regulators have moved on - and the enforcement is already happening.

What's actually changed?

Over the past few years, the regulatory landscape around psychosocial hazards in Australian workplaces has shifted significantly.

Safe Work Australia published the model Code of Practice on managing psychosocial hazards at work in 2022, and it has since been adopted across most harmonised jurisdictions. A model Code of Practice on sexual and gender-based harassment was published in 2023 and has been progressively adopted, with the Commonwealth commencing in March 2025. NSW strengthened its psychosocial provisions further with updated WHS Regulations in 2025, and SafeWork NSW is now required to report to the Minister every six months on the number and types of complaints and enforcement notices related to psychosocial matters - in both the public and private sectors.

Other state regulators have followed a similar trajectory. WorkSafe Victoria, Workplace Health and Safety Queensland, and SafeWork SA have all increased their focus on psychosocial hazards, issuing guidance, conducting inspections, and - critically - issuing improvement and prohibition notices where businesses aren't managing these risks.

In plain English: this is no longer guidance you can file away and ignore. Regulators are actively looking for evidence that businesses are identifying and controlling psychosocial hazards, and they're taking action where they find gaps.

What counts as a psychosocial hazard?

The term "psychosocial hazard" covers a broader range of workplace conditions than most people expect. Under the model Code of Practice, the following are recognised psychosocial hazards:

• Bullying and harassment (including sexual harassment)

• High or unreasonable job demands

• Low job control

• Poor support from supervisors or colleagues

• Poor organisational change management

• Lack of role clarity

• Conflict or poor workplace relationships

• Violence or aggression (including from clients or customers)

• Remote or isolated work

• Traumatic events or exposure to traumatic material

• Inadequate reward or recognition

If you're a small business owner reading that list and thinking "a few of those probably apply to us" - that's normal. Most workplaces have at least two or three psychosocial hazards present. The issue isn't having them; it's whether you've identified them, assessed the risks, and put controls in place.

"But we're a small business - this is for corporates with HR departments"

This is the most common objection, and it's understandable. When you hear "psychosocial hazard management," it sounds like something that requires a dedicated team and a six-figure budget.

It doesn't. What it requires is the same risk management approach you'd apply to any other WHS hazard: identify it, assess it, control it so far as is reasonably practicable, and review your controls. The scale of what's "reasonably practicable" takes your business size and resources into account - but the duty itself applies regardless.

A sole trader with two workers has the same type of obligation as a company with 200 employees. The controls might look different - a large employer might implement a formal grievance resolution process and appoint trained contact officers, while a small business might simply have a clear policy, an open-door approach, and a documented procedure for raising and resolving concerns. Both are valid, as long as they're reasonably practicable for the business and they're actually being followed.

The point isn't bureaucracy. It's that you've turned your mind to the risk and done something about it.

The penalties are real

This matters not just because it's the right thing to do, but because the consequences of getting it wrong are serious.

Under WHS legislation, a Category 1 offence - reckless conduct that exposes someone to a risk of death or serious injury or illness - can attract multi-million-dollar fines for corporations and very substantial fines and even imprisonment for individual officers. Even a Category 2 offence, which applies where a duty holder fails to comply with a health and safety duty and that failure exposes someone to a risk of death, serious injury, or illness, can result in significant fines, often in the hundreds of thousands of dollars or more, depending on the jurisdiction.

And psychosocial hazards can absolutely give rise to these offences. A worker who develops a serious psychological injury because of sustained workplace bullying that the business knew about and failed to manage is not a hypothetical scenario - it's the kind of case regulators are now actively pursuing.

Workers' compensation claims for psychological injury are also rising sharply across Australia, and these claims tend to be longer and more costly than physical injury claims. Managing psychosocial hazards isn't just about avoiding fines - it's about avoiding the human and financial cost of preventable harm.

What the common objection gets wrong

The most dangerous misconception about psychosocial hazards is that they're subjective and therefore unmanageable. "You can't control how people feel," the thinking goes.

That misses the point. You're not being asked to control feelings. You're being asked to manage the work conditions that are known to cause harm - things like excessive workload, unclear expectations, poor communication during change, and tolerance of bullying behaviour. These are organisational factors, not personality problems. And they're factors you can identify, assess, and control, just like any physical hazard.

The Code of Practice applies the same hierarchy of controls - eliminate, then minimise. For psychosocial hazards, the most effective controls are usually at the work-design level: changing how work is organised, managed, or supervised. Policies and training have a role, but they work best when the underlying work conditions have been addressed first.

Four things you actually need to do

1. Identify the psychosocial hazards in your workplace. Use the list above as a starting point. Talk to your workers. Look at your injury and absence data. Be honest about what's present.
   

2. Assess the risks and implement reasonably practicable controls. Don't just write a policy and leave it at that. Consider what's actually driving the risk and what practical changes you can make - to workload, supervision, communication, or work design - to reduce it.
   

3. Document a policy and procedure that describes how you manage psychosocial hazards. This is your evidence that you've identified the risk and taken action. If a regulator visits or an incident occurs, they'll ask for documentation. If you don't have it, you're on the back foot.
   

4. Consult with your workers and keep records. WHS law requires you to consult with workers on matters affecting their health and safety, and psychosocial hazards are squarely within that scope. Even a short toolbox talk or team meeting can form part of your consultation, provided you share relevant information, give workers a chance to raise concerns, take their views into account, and keep a record of what was discussed.
   

If your WHS Manual or Management System doesn't include a procedure for managing psychosocial hazards, it's incomplete - and it's not aligned to where the regulations are now. A proper WHS Management System should include a psychosocial hazard procedure that covers identification, risk assessment, control measures, consultation, and review.

This isn't an add-on or a nice-to-have. It's a core part of your WHS obligations, and it belongs in your system alongside your procedures for manual handling, chemical safety, emergency management, and everything else.

Free resource: Sexual Harassment Prevention Plan

Sexual harassment is one of the most common - and most under-documented - psychosocial hazards in Australian workplaces. We've made our Sexual Harassment Prevention Plan available as a free download. It gives you a ready-to-use policy document you can adapt for your business.

Download It Free Here

Need a WHS system that's actually up to date?

Our WHS Management Systems are built by WHS specialists and include psychosocial hazard procedures as standard - along with everything else you need to meet your WHS obligations. Trusted by 12,000+ Australian businesses since 2008, with 59 five-star Google reviews.

Get A WHS Management System Today