Psychosocial Hazard Risk Management Policy

What Is a Psychosocial Hazard Risk Management Policy?

A Psychosocial Hazard Risk Management Policy is a formal document that outlines how a business identifies, assesses, and controls risks to worker psychological health. Unlike physical safety, which focuses on visible dangers like heights or machinery, this policy addresses the less visible but equally harmful aspects of work design and management.

In Australia, psychosocial hazards include anything at work that causes stress, burnout, or psychological injury. Common examples are excessive job demands, bullying, harassment, fatigue, poor support, and exposure to traumatic events. The policy acts as the rulebook for handling these issues. It demonstrates that the Person Conducting a Business or Undertaking (PCBU) is taking proactive steps to meet their legal duty of care.

Under Australian law, a PCBU must manage psychosocial risks just as they manage physical risks. This policy is the central part of that framework. It sets the standard for behaviour, explains the reporting process, and details the control measures the business will put in place to keep the workplace safe.

When to Use This Document

Every Australian business needs this document, regardless of size or industry. There is no minimum employee count or turnover threshold for Work Health and Safety (WHS) duties. Whether you run a large corporate office in Sydney, a café in Brisbane, or are a sole trader with one apprentice in regional Victoria, you are a PCBU and have a legal obligation to manage psychosocial risks.

You should implement this policy in the following situations:

• Starting a new business: Establishing safe work practices from day one prevents bad habits from forming.
• Expanding your workforce: As team sizes grow, communication issues and interpersonal conflicts can arise. A policy provides a clear structure for managing these dynamics.
• Changing work arrangements: Moving to remote work, changing roster patterns, or introducing new technology are key triggers for psychosocial risks. The policy should be reviewed or created to address these specific changes.
• After an incident: If a worker makes a complaint about bullying, stress, or psychological injury, this policy provides the roadmap for investigation and resolution.
• Responding to new regulations: States like NSW and Victoria have recently tightened regulations regarding psychological health. Implementing this document ensures you are compliant with current laws.

Businesses often use this policy alongside a general WHS Policy. While the general policy covers all safety responsibilities, the Psychosocial Hazard Risk Management Policy goes into specific detail about mental health risks.

Key Sections and Required Elements

A robust policy does more than state "we are against bullying." It provides a practical system for risk management. Based on the Managing psychosocial hazards at work Code of Practice and industry standards like ISO 45003, your document should contain the following key sections.

Purpose and Scope

This section defines what the business is trying to achieve. It must explicitly reference the Work Health and Safety Act 2011 (or the Occupational Health and Safety Act 2004 for Victorian businesses). It should state clearly that psychosocial hazards are treated with the same seriousness as physical hazards.

The scope must clarify who is covered. This is crucial in Australia’s modern workforce. The policy should apply to employees, contractors, volunteers, work experience students, and labour hire workers. It should also define what a psychosocial hazard is, giving local examples relevant to your industry. For a construction site, this might include fatigue from long rosters or exposure to aggressive behaviour from the public. For an office, it might include unreasonable deadlines or isolated work.

Risk Identification and Assessment

This section outlines how you find problems before they cause injury. It should not rely on worker complaints alone. Best practice involves proactive identification. This includes:

• Consultation: You must outline how you talk to workers. This includes consulting Health and Safety Representatives (HSRs) if they exist.
• Data sources: The policy should reference using absenteeism rates, incident reports, and staff surveys to identify trends.
• Context-specific assessment: The document should acknowledge that risks differ. A assessment for a tradesperson working alone requires a different approach than a team in a call centre.

Control Measures

This is the most operational part of the policy. It must detail how the business will control risks using the "Hierarchy of Controls". Too many businesses stop at "supportive culture" or providing an Employee Assistance Program (EAP). However, under the Code of Practice, these are administrative controls and are less effective than changing the work design.

Your policy should commit to the hierarchy:

1. Elimination: Can the job be designed to remove the hazard entirely?
2. Substitution: Replacing the hazard with something safer (e.g., automating a distressing task).
3. Isolation: Physically separating workers from the hazard (e.g., security screens for staff facing aggressive clients).
4. Engineering Controls: Changing the physical environment (e.g., improving lighting or noise control).
5. Administrative Controls: Procedures, rosters, and training.
6. PPE: Personal support and resources.

The policy must explicitly mention control measures for bullying and harassment, as these are now explicitly listed as psychosocial hazards in regulations across Queensland, Western Australia, and the Commonwealth jurisdiction.

Reporting and Support

Workers need to know exactly what to do if they feel unsafe. This section must provide a clear, step-by-step reporting process. It should include:

• A non-retaliation clause: A guarantee that the business will not take adverse action against a worker for raising a genuine safety concern. This is a requirement under the Fair Work Act 2009.
• Internal contacts: Who to talk to first (e.g., a supervisor, HSR, or HR manager).
• External support: Contact details for services like Beyond Blue, Lifeline, and the Black Dog Institute.
• Emergency procedures: A clear statement that immediate threats to life should be reported to 000.

Policy Review

A policy is a living document, not a static file saved to a server. This section should set a mandatory review date, usually annually, or define triggers for immediate review. Triggers include a change in work methods, a notifiable incident, or the results of a health monitoring survey. This ensures the document stays relevant as the business evolves.

How to Write a Psychosocial Hazard Risk Management Policy (Step by Step)

Writing this document requires a tailored approach. Copying and pasting a generic template often leads to gaps in compliance. Follow these steps to create a policy that works for your specific business context.

Step 1: Identify Your Legal Framework

Determine which WHS laws apply to you. Most states follow the Work Health and Safety Act 2011 (NSW, QLD, SA, TAS, ACT, NT). However, if you operate in Victoria, you must follow the Occupational Health and Safety Act 2004. Victoria also has the OHS Amendment (Psychological Health) Act 2021, which explicitly references "psychological hazards."

Read the relevant regulations. For example, NSW WHS Regulation 2017 has specific clauses regarding control measures for psychosocial risks. Your policy must reflect these specific duties to be legally sound.

Step 2: Consult with Your Team

You cannot write this policy in isolation. WHS laws require consultation. Before you draft the document, talk to your workers. Ask them what stresses them out. Is it the tight deadlines? Is it the lack of parking? Is it dealing with difficult customers?

If you have Health and Safety Representatives (HSRs), involve them early. They can provide insight into hazards you might miss. This consultation process also helps with worker buy-in. They are more likely to follow a policy they helped create.

Step 3: Define the Hazards Relevant to Your Work

List the specific hazards your workers face. A "one size fits all" list is rarely effective.

• For Tradies: Focus on fatigue from long hours, working in isolation, exposure to traumatic events, and time pressure.
• For Office Workers: Focus on high workload, low job control, poor support, and remote or isolated work.
• For Healthcare Workers: Focus on exposure to traumatic events, workplace violence, and emotional demands.

Use the definitions provided in the Safe Work Australia Model Code of Practice to ensure your language is accurate.

Step 4: Determine Your Control Measures

Go through your list of hazards and apply the hierarchy of controls. Do not just list "provide EAP" for every issue.

• Example: If your team identifies fatigue as a hazard.
  • Eliminate: Can the job be done during the day instead of night shifts?
  • Substitute: Can we share the night shift between two people?
  • Administrative: Set maximum shift lengths and ensure adequate break times.

Document these specific measures in the policy. This shows regulators you have thought deeply about the risks.

Step 5: Draft the Reporting Procedure

Make it simple. A complex flowchart discourages reporting. Write a clear narrative: "If you experience bullying, speak to your supervisor. If your supervisor is the issue, speak to the business owner."

Include the Grievance Policy link if you have one, but ensure the reporting process for psychosocial hazards is distinct. Safety issues have different legal requirements than standard employment grievances. Ensure workers know they can report psychosocial hazards as a safety matter, not just a complaint about a colleague.

Step 6: Address Privacy and Data

You will likely collect sensitive information about workers' mental health during this process. You must reference the Privacy Act 1988 (Cth) in your policy. State clearly how you will store this data, who will see it, and how long you will keep it. This builds trust and ensures you comply with Australian Privacy Principles regarding health information.

Step 7: Review and Approve

Once the draft is ready, take it back to the workers. Do they understand it? Is the language plain? Get their sign-off. Then, have the most senior person in the business sign and date the document. This shows leadership commitment, a key requirement of the Comcare "Pledge, Plan, Act, Review" framework.

Common Mistakes to Avoid

When creating this document, Australian businesses often fall into predictable traps. Avoiding these will make your policy more robust and legally defensible.

Only focusing on "bad behaviour"

The most common mistake is treating psychosocial hazards solely as bullying and harassment. While these are critical issues, they are not the whole picture. A policy that ignores work design factors like high workload, poor environmental conditions, or lack of role clarity is incomplete. The law requires you to manage all psychosocial risks, not just interpersonal conflict.

Relying solely on administrative controls

Many companies implement "Respectful Workplace" training and consider the job done. Training is an administrative control. It is the least effective type of control in the hierarchy. If your work design demands 14-hour shifts with no breaks, training will not prevent the psychological injury. Your policy must prioritize higher-order controls like redesigning rosters or resourcing the job properly.

Failing to consider contractors

Under WHS laws, your duty extends to everyone in your workplace. A policy that only mentions "employees" misses the mark. If you engage labour hire firms, subcontractors, or volunteers, the policy must explicitly include them. It should also outline how you will communicate your safety policies to these third parties.

Making the policy too static

A policy that sits in a drawer until there is a lawsuit is useless. Industry practice in Australia involves treating the policy as a framework for regular "Toolbox Talks" or weekly stand-ups. Do not treat it as a finished product. It should be a dynamic document that you actually use.

Ignoring the director's duty

For incorporated businesses, directors have a duty under the Corporations Act 2001 (Sections 180-184) to exercise due care and diligence. A vague policy exposes directors to personal liability. The policy must show that the Board or Directors have actively engaged with the risk management process, not just delegated it to HR.

Legal Considerations (AU)

Creating a Psychosocial Hazard Risk Management Policy is not just good HR practice; it is a legal imperative in Australia. Failure to have a system in place can lead to significant fines, prosecution, and civil penalties.

Work Health and Safety Legislation

The primary legal obligation comes from the WHS Act. In NSW, QLD, SA, TAS, ACT, and NT, the Work Health and Safety Act 2011 applies. In Victoria, the Occupational Health and Safety Act 2004 applies.

• PCBU Duties: The PCBU must ensure, so far as is reasonably practicable, the health and safety of workers. Health is defined as both physical and psychological.
• Due Diligence: Officers (Directors and Senior Managers) must exercise due diligence to ensure the business complies. This includes acquiring knowledge of hazards and ensuring appropriate resources are available.
• Regulations: Specific regulations, such as the WHS Regulation 2017 (NSW), explicitly require PCBUs to implement control measures if a worker is likely to be exposed to psychosocial risks.

The Role of Codes of Practice

The Managing psychosocial hazards at work Code of Practice provides practical guidance on how to comply. While not law itself, courts can use this Code as evidence of what is reasonably practicable. If an incident occurs and you have not followed the Code, it is very difficult to defend your actions. Your policy should align with the four-step risk management process outlined in the Code: Identify, Assess, Control, Review.

Anti-Discrimination Law

Your policy must align with the Disability Discrimination Act 1992 (Cth). Mental health conditions can be considered a disability. Your duty to manage psychosocial risks exists alongside your duty not to discriminate. Your policy should acknowledge that managing a risk (e.g., moving a worker away from a stressful trigger) is different from discrimination. It should focus on the work environment causing the stress, not the worker's vulnerability.

Fair Work Act 2009

The Fair Work Act protects workers who exercise a workplace right, such as raising a safety concern. Your policy must include a strong non-retaliation clause. Adverse action taken against a worker for reporting a psychosocial hazard is a serious breach of federal law.

Privacy Act 1988

Because this policy involves handling health information, you must comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You need a lawful basis to collect and use this information. Storing incident reports about mental health on an insecure drive or sharing them without consent can lead to privacy breaches.

Frequently Asked Questions (preview)

Is this document required by law for small businesses? Yes. WHS laws apply to all businesses. There is no size threshold. A sole trader with an apprentice must manage psychosocial risks just as a large corporation does.

What is the difference between a Psychosocial Hazard Policy and a Bullying Policy? A Bullying Policy is specific to interpersonal conflict. A Psychosocial Hazard Policy is broader and covers systemic issues like work design, fatigue, and environmental stressors, as well as bullying.

Do I need a lawyer to write this policy? Not necessarily. You can draft the policy yourself using guidelines from Safe Work Australia and Comcare. However, for complex industries or large organisations, seeking legal advice ensures you are fully compliant with state-specific regulations.

How often do I need to update the policy? You should review it at least annually. You must also review it immediately if there is a change in work practices, an incident occurs, or if new regulations are introduced.

Can workers be disciplined for not following the policy? Yes. WHS laws require workers to take reasonable care for their own health and safety and not adversely affect others. Workers who engage in aggressive behaviour, bullying, or ignore safety procedures can face disciplinary action. The policy should clearly outline these responsibilities.