Work health and safety: a complete WHS guide

Who is responsible for WHS in the workplace?

The short answer is everyone. WHS obligations apply to businesses and workers at every level of an organisation. However, the WHS Act defines distinct responsibilities for three categories of duty holder.

PCBUs (Persons Conducting a Business or Undertaking)

A PCBU is the primary duty holder under the WHS Act and is responsible for ensuring, so far as is reasonably practicable, the health and safety of workers and others affected by the conduct of the business. This includes:

• Providing and maintaining a safe work environment
• Ensuring safe systems of work
• Providing adequate facilities for the welfare of workers
• Providing information, training, instruction and supervision
• Monitoring the health of workers and conditions of the workplace
• Managing risks from plant, substances and structures
• Taking reasonable care for their own health and safety
• Taking care not to adversely affect the health and safety of others
• Following reasonable WHS instructions from the PCBU
• Cooperating with reasonable WHS policies and procedures
• Reporting hazards, incidents and unsafe conditions

Officers

Officers of a PCBU (directors, partners, senior managers with significant influence over the business) must exercise due diligence to ensure the PCBU meets its WHS obligations. Due diligence requires officers to proactively acquire and keep up to date with WHS knowledge, understand the operations and associated hazards, and ensure adequate resources and processes are in place.

Workers

Workers have their own WHS obligations under the Act. These include:

• Taking reasonable care for their own health and safety
• Taking care not to adversely affect the health and safety of others
• Following reasonable WHS instructions from the PCBU
• Cooperating with reasonable WHS policies and procedures
• Reporting hazards, incidents and unsafe conditions

→ Who is responsible for WHS in the workplace

WHS compliance in practice: the core obligations

Meeting WHS obligations is not a single action — it is an ongoing operational discipline. The following areas represent the core requirements that every PCBU must actively manage.

Hazard identification and risk management

Risk management is the foundation of WHS compliance. The process requires PCBUs to identify hazards in the workplace, assess the risks those hazards create, and implement controls to eliminate or minimise them. Where elimination is not reasonably practicable, controls are applied following the hierarchy of controls: substitution, isolation, engineering controls, administrative controls and personal protective equipment (PPE), in that order of preference.

Risk registers are the primary tool for documenting this process. An effective risk register captures identified hazards, associated risk ratings, assigned controls, responsible parties and review dates. For organisations managing multiple sites or projects, maintaining consistent risk registers across the business — while allowing for site-specific risks — is a core operational challenge.

→ How Ideagen's risk register and risk management tools work

Incident reporting and investigation

WHS legislation requires PCBUs to have systems in place to report, record and investigate workplace incidents, near misses and hazards. Timely incident reporting is not only a compliance requirement — it is the primary mechanism through which organisations identify systemic risks before they escalate.

Serious incidents (notifiable incidents) must be reported immediately to the relevant WHS regulator. These include deaths, serious injuries or illnesses, and dangerous incidents. A delay in reporting — or failure to report — constitutes a breach of the WHS Act.

→ How Ideagen manages incident reporting and investigation

→ Overcoming barriers to WHS reporting and observations

Safety inductions and training

A workplace induction program is the first level of WHS compliance that any worker must complete before commencing on a site. Inductions ensure workers are informed about the specific hazards, risks, policies and emergency procedures relevant to their workplace or site before they are exposed to them.

WHS obligations extend beyond the initial induction. Ongoing training is required to keep workers current with changes to procedures, new hazards, and evolving regulatory requirements. For organisations with large or mobile workforces — particularly in construction, mining and manufacturing — managing induction records across multiple sites is a significant compliance burden without a centralised system.

→ How Ideagen manages safety inductions

→ Safety learning management system for ongoing training

→ Why workplace inductions matter for WHS compliance

Inspections and audits

Regular workplace inspections are a legal requirement under WHS law. An employer is legally required to take practicable steps to ensure safety, which includes proactively assessing safety measures and identifying hazards before they cause harm. Inspections generate the documented evidence that an organisation's WHS system is functioning as intended.

Audits go further — they assess whether the overall WHS management system meets internal standards and external regulatory requirements, including ISO 45001. For organisations with ISO 45001 certification or certification in progress, documented audit records are a non-negotiable component of the management system.

→ How Ideagen manages health and safety inspections and audits

→ A guide to health and safety inspections in the workplace

Safe Work Method Statements (SWMS)

A Safe Work Method Statement (SWMS) is a safety planning document that must be developed for high-risk construction work. It outlines the specific steps for completing a task safely, the hazards and risks associated with the work, the control measures in place, and the roles and responsibilities of workers involved.

SWMS are a legal requirement under WHS regulations for high-risk construction work and must be site-specific, kept on site and reviewed if conditions change. They differ from a Job Safety Analysis (JSA) — which focuses on hazard identification — and a Site Safety and Health Plan (SSHP), which governs safety management across a whole site.

→ SWMS explained: requirements, structure and common questions

Toolbox talks

Toolbox talks are short, focused safety briefings conducted at the worksite — typically before a shift or the commencement of a specific task. They are one of the most practical tools available for reinforcing WHS awareness, addressing site-specific hazards and maintaining a culture of safety communication between supervisors and workers.

While not always a prescriptive legal requirement, toolbox talks support PCBUs in meeting their obligation to provide information, instruction and supervision to workers — and they generate a documented record of that communication.

→ How to plan and deliver effective toolbox talks

Return to work and injury management

When a worker is injured in the workplace, the PCBU's obligations do not end at the point of injury. Return to work (RTW) is an active process of supporting an injured worker back into the workplace in a safe and sustainable way. It involves coordinating with the worker, treating practitioners, insurers and the workplace to develop a graduated return plan that matches the worker's capacity.

RTW obligations are governed by both WHS legislation and state-based workers' compensation frameworks. Failure to actively manage the RTW process — including maintaining suitable duties for an injured worker where reasonably practicable — can expose the PCBU to workers' compensation liability.

→ How Ideagen manages the end-to-end return to work process

Psychological health and safety: the expanding WHS obligation

Psychosocial hazards are aspects of work design, the work environment, workplace relationships and management practices that have the potential to cause psychological harm. They are now a legally recognised category of WHS risk, not a soft HR concern.

In 2023, the model WHS regulations were amended to require PCBUs to specifically identify and manage psychosocial hazards and risks — applying the same risk management process used for physical hazards. Under WHS laws, PCBUs must eliminate or minimise psychosocial risks so far as is reasonably practicable (Safe Work Australia).

The model code of practice identifies 14 psychosocial risk factors, including:

• Excessive workloads and time pressure
• Lack of role clarity
• Poor workplace relationships, including bullying, harassment and violence
• Job insecurity and frequent organisational change
• Inadequate recognition or reward
• Exposure to traumatic events or material

Managing psychosocial risk follows the same process as physical risk management: identify hazards, assess risks, implement controls, review and improve. The practical difference is that psychosocial hazards are often less visible and require diagnostic tools — such as workplace psychological risk surveys — to identify accurately.

→ How Ideagen supports psychological health and safety management

→ What is ISO 45003 and how does it apply to psychosocial risk?

→ Using Ideagen to manage psychological health and safety in practice

ISO 45001 and WHS management systems

ISO 45001 is the international standard for occupational health and safety management systems. It provides a framework for organisations to proactively improve WHS performance, prevent work-related injury and ill health, and demonstrate compliance with applicable legal requirements.

In Australia and New Zealand, ISO 45001 replaced the AS/NZS 4801 standard as the benchmark for WHS management systems. Certification to ISO 45001 is increasingly required by clients, head contractors and government procurement processes — particularly in construction, mining and infrastructure.

The standard follows a Plan-Do-Check-Act (PDCA) framework and requires organisations to demonstrate systematic hazard identification, risk management, legal compliance, incident investigation, audit and continual improvement. A digital WHS management system that maps to ISO 45001 requirements significantly reduces the administrative burden of maintaining certification.

→ How Ideagen supports ISO 45001, 9001, 14001 and 31000 compliance

WHS obligations by industry

WHS obligations apply universally, but the nature of the hazards, the scale of the risk and the specific regulatory requirements differ significantly by industry. The following industries face distinct WHS challenges.

Construction

Construction is one of the highest-risk industries for WHS incidents in Australia. SWMS requirements, high-risk work licences, contractor management, site access controls and working at heights are among the defining compliance obligations. Safe Work Australia reported 194 workplace fatalities in 2020, with construction consistently among the highest-risk sectors.

→ Work health and safety software for construction

Mining

Mining and quarrying operations combine remote locations, heavy machinery, hazardous materials and large contractor workforces — creating some of the most complex WHS compliance environments in any sector. Site-specific inductions, plant and equipment registers, permit-to-work systems and emergency response planning are core requirements.

→ Work health and safety software for mining

Manufacturing

Manufacturing environments involve machinery guarding, hazardous substances, repetitive motion risks and shift-based workforces. ISO 45001 certification is increasingly standard in manufacturing procurement chains, and the ability to demonstrate documented risk management and incident performance is a commercial as well as legal requirement.

→ Work health and safety software for manufacturing

Government

Government organisations manage diverse workforces across office, field and community-facing environments, often with complex reporting structures and public accountability obligations. WHS compliance in government must account for everything from office ergonomics and violence prevention to field-based infrastructure and emergency services operations.

→ Work health and safety software for government organisations

Transport and logistics

Driver fatigue, vehicle maintenance, load security and road risk are the defining WHS challenges in transport and logistics. Chain of responsibility (CoR) legislation adds a further layer of obligation, making documented safety systems and real-time incident reporting essential.

→ Work health and safety software for transport and logistics

Environmental and multi-disciplinary

Organisations with combined environmental, health and safety obligations — managing aspects and impacts assessments alongside WHS risk — need a system that handles both without duplication. Integrated HSEQ platforms allow environmental incidents, compliance obligations and WHS data to be managed from a single source.

→ Environmental and work health and safety management software

Continuous improvement: why WHS is never finished

WHS compliance is not a project with a completion date — it is a management discipline that requires ongoing attention. The Plan-Do-Check-Act (PDCA) cycle is the standard framework for continuous WHS improvement: assessing current performance against benchmarks, implementing changes, auditing the results and feeding insights back into the system.

The quality of WHS data is directly linked to workforce engagement. Organisations that make it easy for workers to report hazards, observations and near misses in real time — through mobile tools accessible from any site — generate the data required to identify systemic risks before they produce incidents. Organisations that rely on paper-based or fragmented systems consistently undercount incidents and hazards, creating a false picture of their risk profile.

→ How to continuously improve your WHS practices

→ Why WHS data quality depends on workforce engagement

Managing WHS obligations at scale with work health and safety software

For organisations managing more than a handful of workers across more than one site, manual or paper-based WHS processes create compounding compliance risk. The more complex the operation, the more difficult it becomes to maintain consistent records, ensure inductions are current, track incident trends, and demonstrate compliance to regulators, clients or certification bodies.

A WHS management system centralises all of this. Incident reports, risk registers, induction records, audit findings, SWMS documentation, contractor credentials and return to work cases are managed in one platform — accessible to field workers via mobile and to managers via dashboards that give a real-time view of the organisation's safety performance.

The return on investment is not purely administrative. Organisations in high-risk industries that invest in structured WHS systems see measurable reductions in incident frequency, lower workers' compensation costs, faster return-to-work outcomes and stronger positions in procurement and tender processes that require demonstrated WHS capability.

→ What is the ROI of safety management software?

→ Explore the Ideagen work health and safety platform