Managing psychosocial hazards is not a wellness initiative a business can opt into — it is an explicit legal duty. Every PCBU (person conducting a business or undertaking) in an adopting jurisdiction must manage psychosocial risk so far as is reasonably practicable — the same standing as physical hazards. Enforceable codes of practice now set the benchmark for what “reasonably practicable” looks like, and regulators are actively checking whether businesses meet it.
Key facts at a glance
- It’s an explicit duty, not guidance. Safe Work Australia amended the model WHS Regulations in 2022 to add specific psychosocial risk provisions.
- Queensland’s code has been enforceable since 1 April 2023 — the Managing the risk of psychosocial hazards at work Code of Practice 2022.
- NSW’s psychosocial hazards code became enforceable from 1 July 2026, under section 26A of the Work Health and Safety Act 2011 (NSW).
- Codes set the minimum standard. A regulator no longer needs to prove harm occurred — falling short of the code can be a breach on its own.
- Regulators are enforcing it. SafeWork NSW has added a dedicated psychosocial inspectorate, backed by $127.7 million in funding.
- The cost of getting it wrong is rising. Serious psychological injury claims hit a record 17,600 nationally in 2023–24, up 14.7% (Safe Work Australia).
A note on this topic: this article discusses workplace psychological injury and enforcement. If anything here raises something personal for you, support is available 24/7 from Lifeline on 13 11 14.
Who holds the legal duty to manage psychosocial hazards?
The primary duty sits with the PCBU — the business, not any individual. Officers carry a separate due diligence duty to actively verify psychosocial risk is being managed, not assume it. Workers must take reasonable care, but cannot be made solely responsible for risks created by how work is designed.
What does the law actually require you to do?
Every enforceable code translates the duty into the same underlying process — identify the hazards, assess the risk of harm, control it using the hierarchy of controls, and review whether the controls are working — carried out in consultation with workers throughout. That process is a legal floor, not a checklist to skim. What matters for compliance is not whether a business can describe the process in theory, but whether it can show a regulator it actually ran it, against specific hazards, with specific workers consulted.
Which codes of practice set the compliance benchmark?
The duty is national, but the enforceable instrument differs by jurisdiction.
| Jurisdiction / instrument | Status |
|---|---|
| Queensland — Managing the risk of psychosocial hazards at work Code of Practice 2022 | Enforceable since 1 April 2023 |
| NSW — Codes of practice, including Managing psychosocial hazards at work | Enforceable from 1 July 2026 under s26A WHS Act 2011 (NSW) |
| National — model WHS Regulations, psychosocial risk provisions | Added 2022; takes effect only once individually adopted by each state and territory regulator |
We covered the detail of the NSW shift when its codes of practice became enforceable on 1 July 2026 — worth reading if you operate across state lines, since one jurisdiction’s standard doesn’t automatically satisfy another.
What do regulators look for as evidence of compliance?
An inspector examining a psychosocial file isn’t looking for good intentions. They want a paper trail: a documented risk assessment naming actual hazards, records of worker consultation, controls mapped against the hierarchy rather than defaulting straight to training or an EAP poster, and review records showing the business checked whether controls worked. Rising incident or complaint trends with no updated controls are an easy target. What actually counts as a psychosocial hazard matters here too: a generic risk register that doesn’t reflect a workplace’s real pressures won’t hold up.
What does enforcement look like in 2026?
The enforcement posture has hardened. Queensland’s 2022 code has been an established benchmark for inspectors since April 2023. In NSW, the 1 July 2026 change to enforceable codes arrived alongside a dedicated psychosocial inspectorate, a Psychosocial Advisory Service and $127.7 million in funding — part of the wider 2026 enforcement wave we’ve tracked, including expanded civil penalty powers for registered organisations. The pattern is consistent: unannounced visits, on-the-spot requests for evidence, and escalation to notices or prosecution where that evidence doesn’t exist.
What happens if a business doesn’t comply?
Non-compliance carries two layers of consequence. The regulatory layer is improvement and prohibition notices and, for serious breaches, prosecution, with penalties scaling sharply by offence category. The human and financial layer is worse for most businesses: serious psychological injury claims reached a record 17,600 nationally in 2023–24, taking far longer to resolve and costing far more than an average physical injury claim (Safe Work Australia). Queensland has also extended scrutiny to what happens after an injury — its 2026–27 audit of how insurers and employers handle secondary psychological injury shows the post-incident period now sits inside the same duty.
Where does training fit into the duty?
Training doesn’t discharge the duty on its own — no code accepts a certificate as a substitute for fixing hazardous work design. But it is recognised evidence of a supporting control, particularly for moments a well-controlled workplace still can’t design away: an aggressive customer, a traumatic incident, a colleague in acute distress. Accredited Psychological First Aid (PUARCV001) is the nationally recognised unit for that response capability, delivered online and nationwide by FMS Training (RTO 45189), producing a Statement of Attainment — stronger documentation for a regulator’s file than a non-accredited certificate. Businesses building broader capability can compare psychosocial hazards training options against what codes expect, and staff who complete PFA can become accredited psychological first aiders.
Frequently asked questions
Is managing psychosocial hazards a legal requirement, or just best practice?
It’s a legal requirement. Every PCBU has a duty under the model WHS Regulations to manage psychosocial risk so far as reasonably practicable, and enforceable codes — in force in Queensland since 1 April 2023 and NSW since 1 July 2026 — set the standard regulators measure against.
Who is legally responsible for managing psychosocial hazards?
The PCBU (the business) holds the primary duty. Officers must exercise due diligence, and workers must take reasonable care and follow procedures — but workers cannot be made solely responsible for risks created by how work is designed.
What does the law require employers to actually do?
Run a documented risk-management process — identify, assess, control using the hierarchy of controls, and review — in consultation with workers throughout, and be able to show a regulator evidence that it happened.
Which codes of practice apply, and are they compulsory?
It depends on the jurisdiction. Queensland’s Managing the risk of psychosocial hazards at work Code of Practice 2022 has been enforceable since 1 April 2023; NSW’s since 1 July 2026 under section 26A of the Work Health and Safety Act 2011 (NSW). A business must follow the applicable code or prove its approach meets or exceeds it.
What evidence do regulators expect to see?
A documented risk assessment naming actual hazards, records of worker consultation, controls mapped against the hierarchy of controls, and review records showing controls were checked and adjusted over time.
What happens if a business doesn’t comply?
Regulators can issue improvement or prohibition notices and, for serious breaches, pursue prosecution. Separately, serious psychological injury claims reached a record 17,600 nationally in 2023–24, and typically take far longer to resolve and cost far more than other serious claims.
Does psychosocial hazards training satisfy the legal duty on its own?
No. Training and support are recognised as supporting controls, not a substitute for eliminating or reducing the hazard through better work design. Regulators expect higher-order controls first.
Where can employers get help meeting the duty?
Start with the applicable code of practice for your jurisdiction, document your risk-management process, and build response capability through recognised training such as accredited Psychological First Aid (PUARCV001), delivered online nationwide.
Sources: WorkSafe Queensland — Managing the risk of psychosocial hazards at work Code of Practice 2022 · Safe Work Australia — New model WHS Regulations and Code of Practice and Key WHS Statistics Australia 2025 · SafeWork NSW — 2026-27 Regulatory Statement and Code of Practice: Managing psychosocial hazards at work.
FMS Training is a Registered Training Organisation (RTO 45189) delivering nationally recognised training across Australia.