Mental health has turned into one of the biggest workplace challenges Australian organisations face today. Psychological injury claims keep climbing. Regulators pay closer attention to how businesses handle workplace mental health than they ever did before. If you run a business or undertaking, you need to know your legal obligations around psychosocial hazards. This isn't about ticking compliance boxes. It's about building workplaces where people actually want to work.
This article covers your duty of care obligations as a PCBU under Australian Work Health and Safety legislation, how to spot and manage psychosocial hazards, and what happens when you get it wrong.
Who Counts as a PCBU and What Does the Primary Duty of Care Mean?
The Work Health and Safety Act 2011 casts a wide net when defining a Person Conducting a Business or Undertaking. You fall into this category if you run a business as an employer, work for yourself, operate as a principal contractor, run a franchise, or have any level of influence or control over work carried out as part of your business. The definition deliberately captures everyone who can shape workplace health and safety.
Your primary duty of care requires you to ensure, so far as is reasonably practicable, the health and safety of your workers and anyone else affected by your business activities. The word "health" explicitly covers both physical and psychological health. Your obligations go well beyond preventing physical injuries. You must actively protect your workers' mental wellbeing.
The phrase "reasonably practicable" sits at the heart of your obligations. You weigh up how likely a hazard or risk is to occur, how serious the resulting harm could be, what you know (or should know) about the hazard and ways to eliminate or minimise it, whether suitable controls exist, and whether the cost of implementing controls stacks up against the level of risk.
What Are Psychosocial Hazards?
Psychosocial hazards cover aspects of work and work situations that can cause psychological or physical harm. The Model Code of Practice: Managing Psychosocial Hazards at Work identifies several categories you must consider.
Job demands cover the physical, mental and emotional effort your jobs require. Heavy workloads, impossible deadlines, emotional labour, exposure to traumatic content or events. When job demands consistently outstrip a worker's capacity to cope, psychological harm follows.
Low job control shows up when workers lack autonomy over how they do their work, get little input into decisions affecting them, or have insufficient flexibility in their arrangements. Research consistently shows that combining low control with high demands creates particularly harmful conditions.
Poor support includes inadequate supervision, insufficient resources to complete work, lack of access to training or development, and missing emotional support from colleagues and managers.
Other psychosocial hazards include:
Lack of role clarity - workers uncertain about their responsibilities or receiving conflicting instructions
Poor organisational change management - inadequate consultation and communication during periods of change
Poor organisational justice - inconsistent, unfair or discriminatory management decisions
Inadequate reward and recognition - effort going unacknowledged
Poor workplace relationships - bullying and harassment
Remote or isolated work - limited access to support and communication
Poor physical environment - noise, lighting, temperature, workspace issues
Violence and aggression - from colleagues or members of the public
Traumatic events - exposure to distressing incidents or material
These hazards interact and combine. High demands paired with low support and poor relationships creates far greater risk than any single factor alone.
Your Legal Obligations
As a PCBU, you must take a systematic approach to managing psychosocial hazards. The WHS Regulations set out what you need to do:
Eliminate psychosocial risks so far as is reasonably practicable
Minimise risks so far as is reasonably practicable where you can't eliminate them
Maintain safe systems of work that address psychosocial factors
Provide information, training, instruction and supervision
Consult with workers and their representatives about psychosocial hazards
Monitor the health of workers and workplace conditions
Officers of a PCBU (directors, senior executives) have their own duty to exercise due diligence. They must acquire and keep up-to-date knowledge of psychosocial hazards, understand the nature of operations and associated risks, and verify that the PCBU has appropriate resources and processes in place.
Practical Steps for Compliance: The Risk Management Process
Meeting your duty of care means putting a structured risk management approach in place. The Code of Practice lays out four steps.
Step 1: Identify Hazards
Run regular assessments to find psychosocial hazards. Review incident reports and workers' compensation claims, run worker surveys and focus groups, analyse work design and organisational factors, review absenteeism and turnover data, and conduct workplace inspections that look at psychosocial factors.
Step 2: Assess Risks
Assess the level of risk by looking at how severe the potential harm could be, how often workers get exposed to the hazard, whether multiple hazards interact to increase risk, and how many workers the hazard affects.
Step 3: Control Risks
Apply the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, and personal protective measures. You'll usually need to combine measures rather than rely on any single approach.
Step 4: Review and Improve
Check regularly whether your control measures work. Gather worker feedback, track incident reports and absenteeism, and update your approach when circumstances change.
What Happens When You Get It Wrong
State and territory WHS regulators hold significant enforcement powers and use them more often now for psychosocial hazard breaches. Regulators can issue improvement notices, prohibition notices, accept enforceable undertakings, or prosecute for breaches.
Maximum penalties under WHS legislation hit hard. Industrial manslaughter carries penalties up to $20.4 million for corporations and up to 20 years imprisonment for individuals. Category 1 offences carry fines up to $17 million for corporations. Even Category 3 offences can reach $680,000 for corporations.
Beyond regulatory consequences, failing to manage psychosocial hazards leads to higher workers' compensation costs, increased absenteeism and turnover, reduced productivity, reputational damage, and difficulty attracting talent.
The Bottom Line
Managing psychosocial hazards forms a core part of your duty of care as a PCBU. The law demands you identify hazards, assess risks, put controls in place, and review whether they work. Organisations that genuinely look after psychological health create workplaces where people want to work, where they do their best work, and where they stick around.
For detailed guidance, look at the Model Code of Practice: Managing Psychosocial Hazards at Work and guidance materials from your state or territory WHS regulator.
Further Resources:
This article provides general information about workplace health and safety requirements and should not be relied upon as legal advice.
For more information on how to identify, assess, and control psychosocial hazards in your workplace, visit refresh.tech.
Related reading
When the investigation becomes the hazard: what one IRC decision means for how organisations manage workplace investigations
Luke Giuseppin
April 8, 2026
One psychosocial complaint can trigger an organisation-wide review. A recent NSW decision confirms it.
Luke Giuseppin
April 1, 2026
The healthcare Code of Practice just landed in NSW. Here's what it means for psychosocial risk in aged care, disability, and health.
Harrison Kennedy
March 31, 2026