WHS Compliance for Small Business: A Complete Guide

Work health and safety (WHS) compliance is not optional — it's a legal obligation for every Australian business that engages workers, regardless of size. From a two-person tradie business to a 50-person healthcare practice, the framework is the same: identify hazards, control risks, and keep workers safe.

This guide covers the WHS compliance obligations that apply to all small businesses in Australia.

The WHS Legislative Framework

Australia's WHS framework is based on the model Work Health and Safety Act developed by Safe Work Australia. Most states and territories have adopted this model legislation:

• NSW: Work Health and Safety Act 2011
• VIC: Occupational Health and Safety Act 2004 (similar but has some differences)
• QLD: Work Health and Safety Act 2011
• SA: Work Health and Safety Act 2012
• WA: Work Health and Safety Act 2020 (adopted model framework from 2022)
• TAS: Work Health and Safety Act 2012
• ACT: Work Health and Safety Act 2011
• NT: Work Health and Safety (National Uniform Legislation) Act 2011

The model legislation is broadly consistent across jurisdictions. Victoria has some differences — most notably, it uses "employer" and "employee" rather than "PCBU" and "worker" as the primary categories, and the duty framework is slightly different. If you operate in Victoria, check the specific OHS Act provisions.

Who Is a PCBU?

Under the model WHS Act, the primary duty holder is the Person Conducting a Business or Undertaking (PCBU). This includes:

• Companies (employers)
• Sole traders and partnerships
• Non-profit organisations
• Government agencies
• Franchisees

If you run a business that engages workers, you are a PCBU — and you have duties under the WHS Act.

The Primary Duty of Care

A PCBU must ensure, so far as is reasonably practicable, the health and safety of:

• Workers engaged by the PCBU (employees, contractors, subcontractors, apprentices, trainees, labour hire workers)
• Workers whose work is influenced or directed by the PCBU
• Other persons at or near the workplace (visitors, customers, members of the public)

"So far as is reasonably practicable" means you must eliminate or minimise risks to the extent that a reasonable business in your position would do. You weigh up the likelihood and severity of harm against the cost and practicability of eliminating or minimising the risk.

This standard is demanding. "We didn't know" or "it would cost too much" are not automatic defences — particularly for well-known, foreseeable risks.

Specific Duties Under the Primary Duty

The WHS Act specifies that the primary duty includes:

Providing and Maintaining a Safe Physical Environment

Your workplace must be safe — adequate ventilation, lighting, and space; no physical hazards that create unreasonable risk; safe access and egress.

Providing and Maintaining Safe Plant and Structures

All equipment, machinery, and plant must be safe. This includes maintenance, inspection, and — for specific categories of plant — registration requirements.

Providing and Maintaining Safe Substances

Any hazardous chemicals or substances used in the workplace must be safely used, handled, and stored. Safety data sheets (SDS) must be accessible.

Providing Safe Systems of Work

You must establish and maintain safe systems of work — the procedures and processes that govern how work is done safely.

Providing Adequate Facilities and Welfare

Workers must have access to adequate facilities: toilets, drinking water, eating areas, and first aid.

Providing Appropriate Information, Training, Instruction, and Supervision

Workers must have the information, training, and supervision needed to do their work safely. This includes:

• Site inductions for new starters
• Hazard-specific training (e.g., manual handling, chemical safety, WHS for a specific role)
• Adequate supervision for workers who are new or inexperienced

Monitoring Health and Safety of Workers

For workers exposed to specific hazards (e.g., silica dust, hazardous chemicals), health monitoring may be required.

Worker Consultation

You must consult with workers about WHS matters — including identifying hazards, assessing risks, and developing controls. This doesn't require a formal health and safety committee for most small businesses, but it does require genuine engagement (toolbox talks, pre-start meetings, walk-and-talk safety discussions).

The Hierarchy of Controls

When controlling risks, the WHS framework requires you to apply the hierarchy of controls in order:

1. Elimination — remove the hazard entirely (most effective)
2. Substitution — replace with a less hazardous alternative
3. Isolation — separate people from the hazard
4. Engineering controls — physical controls (guarding, ventilation, barriers)
5. Administrative controls — procedures, training, work scheduling
6. PPE — personal protective equipment (least effective alone)

A common mistake is jumping straight to PPE (safety boots, gloves, hi-vis) without considering whether higher-order controls are practicable. PPE is important, but it's the last line of defence.

Incident Reporting Obligations

Under the WHS Act, you must:

Immediately notify the WHS regulator of notifiable incidents:

• Death of a person at or caused by your workplace
• Serious injury or illness (amputation, fracture, loss of consciousness, hospitalisation, etc.)
• Dangerous incident (collapse of structure, uncontrolled substance release, explosion, etc.)

Preserve the site of a notifiable incident until the inspector has attended or cleared the scene.

Maintain records of all incidents (injuries, illnesses, near misses) in a register — typically required for at least 5 years.

Failure to notify a notifiable incident is a serious offence with substantial penalties.

Psychosocial Hazards

New regulations across most Australian states now explicitly require management of psychosocial hazards — see our dedicated psychosocial hazards guide for detailed guidance. These are aspects of work that can harm psychological health and wellbeing. These include:

• High job demands and work overload
• Low job control
• Bullying, harassment, and aggression
• Poor supervisory support
• Traumatic events or material exposure to trauma
• Fatigue from excessive hours or shift work

Identifying and controlling psychosocial hazards is now a mandatory part of WHS compliance — not just a "nice to have" aspect of culture.

Building Your WHS System

For a small business, a practical WHS system includes:

1. Hazard register — a list of significant hazards in your workplace, with associated risks and controls
2. Safe work procedures — written procedures for hazardous tasks
3. Emergency procedures — what to do in a fire, medical emergency, or other crisis
4. Induction record — documentation that new workers have been inducted
5. Incident register — a record of all incidents and near misses
6. Plant and equipment register — a list of plant and equipment, maintenance records
7. Training records — evidence of WHS training completed by workers

You don't need a 200-page WHS management system. A simple, practical set of documents that actually reflects how you manage WHS in your business is more valuable than a complex system that sits on a shelf.

Enforcement and Penalties

WHS enforcement is conducted by state regulators. Penalties under the model Act:

• Category 1 (reckless conduct): up to $3.645 million (corporation), up to $364,500 or 5 years imprisonment (individual)
• Category 2 (failure to comply, exposing persons to risk): up to $1.82 million (corporation), up to $182,000 (individual)
• Category 3 (failure to comply with a duty): up to $364,500 (corporation), up to $36,450 (individual)

Beyond financial penalties, WHS incidents can result in business disruption (site shut-down), workers compensation liability, reputational damage, and — in serious cases — the permanent human cost of a preventable death or injury.

How Reguladar Helps

WHS compliance sits alongside employment, tax, privacy, and licensing obligations in the complex small business compliance picture for Australian small businesses. Reguladar gives you a single dashboard tracking all your obligations across every domain — so WHS requirements don't get lost among everything else.

Start your free compliance check at Reguladar →