Workplace Health and Safety Policy (Model WHS)

What Is a Workplace Health and Safety Policy (Model WHS)?

A Workplace Health and Safety (WHS) Policy is a formal document that outlines how a business intends to manage health and safety risks. It acts as the foundation of your safety management system. In the Australian context, this document is not merely administrative paperwork. It serves as a practical mechanism to discharge the "Primary Duty of Care" required by the Model Work Health and Safety Act.

While the Act does not explicitly state that every business must have a written policy for every scenario, it requires a Person Conducting a Business or Undertaking (PCBU) to ensure, so far as is reasonably practicable, the health and safety of workers. A written policy demonstrates this commitment. It clarifies who is responsible for what, how risks are managed, and how the business consults with its workers.

For Australian tradespeople and small business owners, the policy is a living document. It reflects your commitment to providing a safe environment and complying with the Work Health and Safety Regulation 2011. It also aligns with the Australian Standard AS/NZS ISO 45001:2018, which sets the benchmark for Occupational Health and Safety Management Systems. Even if you are a sole trader, having this policy shows clients and insurers that you take your obligations seriously.

This document is often referred to as a "Model WHS Policy" because it is designed to be adapted. Most Australian states have adopted the model WHS laws, including NSW, QLD, WA, SA, TAS, the ACT, and the NT. However, Victoria operates under the Occupational Health and Safety Act 2004. A robust Model WHS Policy allows you to select the relevant jurisdiction to ensure legal accuracy.

When to Use This Document

You should implement a Workplace Health and Safety Policy as soon as you start operating a business. There are no employee count or turnover thresholds that exempt a business from WHS obligations. If you are a PCBU, you owe a duty of safety to yourself, your workers, and others who may be affected by your work.

There are specific scenarios where this document becomes essential:

Tenders and Contracts In the trades and construction sectors, clients often require a WHS Policy before you can even quote on a job. Large companies and government bodies view this policy as a compliance tick box. If you are working on a construction site, the WHS Policy is often a required appendix to the Project specific Safety Management Plan.

Onboarding New Workers When you hire a new employee or contractor, the policy is a key induction tool. It sets the rules and expectations from day one. It helps you fulfill your legal obligation to provide information, training, and supervision.

High-Risk Activities If your work involves specific hazards like hazardous chemicals, noise, or working at heights, the policy acts as an umbrella document. While you may need specific Safe Work Method Statements for individual tasks, the policy confirms that you acknowledge the existence of these regulatory controls.

Management Changes If you restructure your business or bring in new managers, updating the policy helps clarify new roles. It is particularly relevant for company officers. Under the Corporations Act 2001 (Section 588G), officers must exercise "due diligence" to ensure the PCBU complies with WHS obligations. A signed, updated policy is evidence of this due diligence.

Key Sections and Required Elements

A generic policy often fails because it does not address the specific needs of the workplace. To be effective and legally sound, your Model WHS Policy must contain specific elements.

Statement of Commitment

This section sits at the top of the document. It must be signed and dated by the highest level of management, such as a Director or the Owner. This signature is crucial. It demonstrates leadership and fulfills the "Due Diligence" requirements of officers. The statement should declare that management is committed to providing a safe workplace, consulting with workers, and continuously improving safety performance.

Responsibilities

You must clearly define who does what. The policy should outline duties for three main groups:

• Management (PCBU): The commitment to provide resources, training, and equipment to eliminate risks.
• Officers: The requirement to actively monitor safety compliance and ensure resources are available.
• Workers: The duty to take reasonable care, follow instructions, wear personal protective equipment (PPE), and report hazards immediately.

These definitions directly support the legal duties found in Section 19, 27, and 28 of the Work Health and Safety Act 2011.

Consultation and Communication

The law requires you to consult with workers on matters that affect their health and safety. The policy must explicitly reference this duty. It should detail the methods you will use for consultation. This might include regular toolbox talks, safety committees, or informal chats. A policy that lacks a mechanism for consultation may be deemed non-compliant with the WHS Act.

Incident and Hazard Reporting

You need a clear procedure for what happens when things go wrong. This section must explain the step-by-step process for workers to report injuries, near misses, or hazards. It must also reference the requirement to notify the regulator in cases of serious incidents, such as death or serious injury. This ensures compliance with the Work Health and Safety Regulation 2011.

Risk Management

This section explains how the business identifies, assesses, and controls risks. It should mention that you will follow the hierarchy of control (elimination, substitution, engineering, administrative, PPE). For office-based startups, this might cover ergonomics and psychosocial hazards. For tradies, it covers physical risks associated with tools and sites.

How to Write a Workplace Health and Safety Policy (Model WHS) (Step by Step)

Creating a policy that works for your business requires more than filling in the blanks. You need to tailor it to your specific operations.

Step 1: Select Your Jurisdiction Determine which state or territory laws apply to your business. If you operate in Victoria, you must reference the OHS Act 2004. If you operate in NSW, QLD, or other adopting jurisdictions, reference the WHS Act. If you work across borders, choose the primary location where your business is registered. Ensure the document includes a disclaimer stating it is a general guide only and does not constitute legal advice.

Step 2: Define Your Scope Be specific about what your business does. A policy written for a white-collar consultancy will fail a roofing business. Avoid generic "cookie-cutter" content. If you are a tradie, mention the specific risks of your trade, such as working with electricity or heavy machinery. If you are a startup, address psychosocial hazards like fatigue and harassment, which are increasingly prioritized by regulators.

Step 3: Establish Consultation Procedures Decide how you will talk to your team about safety. Will you have weekly toolbox talks? Monthly meetings? Write this into the policy. This shows you are not just paying lip service to the law but have a practical plan to engage with your workers.

Step 4: Assign Roles List the names and positions of the people responsible for safety. Instead of just saying "Manager," put the actual name of the Site Supervisor or Business Owner. This makes the document actionable.

Step 5: Review and Sign The policy must be signed by a senior officer. It also needs a review date. Best practice dictates that you review the policy annually or when significant changes occur in the workplace. A policy without a review date is often dismissed by auditors and courts as irrelevant.

Step 6: Distribute and Display A policy that sits in a drawer is useless. You must make it accessible to all workers. This includes non-English speakers, so ensure the language is plain and simple. Display it on a site noticeboard, include it in your induction manual, or upload it to your company intranet.

Common Mistakes to Avoid

Many Australian businesses make errors when creating their safety documentation. These mistakes can create legal liability and leave workers unprotected.

Using Generic Templates Downloading a template from a regulator and failing to tailor it is a frequent error. A generic policy might mention "safe computer use" for a business that works in demolition. This creates a legal gap. The policy fails to address the "reasonably practicable" risks of the specific industry. You must customise the content to reflect the actual hazards your workers face.

Ignoring Psychosocial Hazards Startups and tech companies often focus entirely on physical safety. However, Australian regulators are increasingly focused on psychosocial risks. Your policy should address bullying, harassment, fatigue, and mental health. Ignoring these areas is a significant oversight in modern workplace health and safety.

Forgetting the Review Date Policies that are undated or not reviewed regularly look bad to inspectors. If an incident occurs, the first thing an investigator will look at is your safety policy. If it is three years out of date, it suggests you have not been maintaining your safety systems.

Confusing Policy with Procedure Do not mix up your "Policy" with your "Procedures." The policy is the high-level statement of intent. It says what you will do. The procedures are the step-by-step instructions on how to do it. While they are often bundled together, the policy should remain distinct. It sets the rules, while the procedures provide the specific instructions for tasks like locking out machinery or handling chemicals.

Excluding Sole Traders Sole traders often think they do not need a policy because they do not have employees. This is incorrect. As a PCBU, you owe a duty of safety to yourself and others. A policy helps you systematically manage your own risks and is essential if you decide to hire subcontractors in the future.

Legal Considerations (AU)

Understanding the legal framework behind your policy is critical for compliance.

Primary Duty of Care (Section 19) The Model Work Health and Safety Act imposes a primary duty on the PCBU. You must ensure, so far as is reasonably practicable, the health and safety of workers. This includes providing and maintaining a work environment without risks to health. Your policy is the strategic document that outlines how you meet this broad obligation.

Due Diligence (Section 27) Officers of a company (directors and secretaries) have a specific duty to exercise due diligence. They must acquire and keep up-to-date knowledge of WHS matters and understand the nature of the operations. If an inspector visits, they will ask to see the policy. If the officers cannot explain it or if it is unsigned, they may be found personally liable for failing to exercise due diligence.

Consultation (Section 46-49) The WHS Act mandates consultation. You must consult workers who are likely to be directly affected by a matter relating to work health or safety. If you create a policy without asking your workers for input, you are breaching this section. Workers often spot hazards that management misses. Their input makes the policy stronger and legally robust.

Victorian Variations If you operate in Victoria, you are subject to the Occupational Health and Safety Act 2004. The terminology is different. Victoria refers to "Employers" rather than PCBU. The duties are similar, but the specific requirements for consultation and issue resolution may vary. Ensure your Model WHS Policy has a clause that allows you to select the Victorian jurisdiction to adapt the language correctly.

Notifiable Incidents Under the Work Health and Safety Regulation 2011, you must notify the regulator immediately after becoming aware of a notifiable incident. This includes the death of a person, a serious injury or illness, or a dangerous incident. Your policy must reference this requirement so that workers know to report these incidents to management immediately, allowing the business to meet the strict notification timeframes.

Evidence in Court In the event of a prosecution, your WHS Policy becomes evidence. It can be your best defence or your worst enemy. A comprehensive, signed, and implemented policy shows the court that you took reasonable steps to ensure safety. A missing or generic policy suggests negligence. Courts look favourably on businesses that follow the "Plan, Do, Check, Act" methodology advocated by ISO 45001.

Frequently Asked Questions (preview)

Do I need a WHS Policy if I am a sole trader with no employees? Yes. While you may not have workers to consult with, you are still a Person Conducting a Business or Undertaking (PCBU). You owe a duty of safety to others who might be affected by your work, such as clients or the public. Having a policy helps you identify and manage these risks. It is also a requirement for many insurance policies and tender processes.

How often should I update my policy? You should review your policy at least once every 12 months. You must also review it immediately if there is a change in your business operations, such as buying new equipment, changing premises, or if an incident occurs that highlights a failing in the current safety system.

Is a digital copy of the policy acceptable? Yes, a digital copy is acceptable, provided it is accessible to all workers. If you have workers on-site without regular internet access, you must provide hard copies. The key is that workers must be able to read and understand the policy.

Can I just copy a policy from a competitor? You should not. While you can look at other policies for structure, you must tailor the content to your specific business risks. Copying a policy from a competitor leaves you vulnerable if the content does not match your actual workplace operations. It also raises intellectual property issues.