

Mental health has turned into one of the biggest workplace challenges Australian organisations face today. Psychological injury claims keep climbing. Regulators pay closer attention to how businesses handle workplace mental health than they ever did before. If you run a business or undertaking, you need to know your legal obligations around psychosocial hazards. This isn't about ticking compliance boxes. It's about building workplaces where people actually want to work.
This article covers your duty of care obligations as a PCBU under Australian Work Health and Safety legislation, how to spot and manage psychosocial hazards, and what happens when you get it wrong.
Who Counts as a PCBU and What Does the Primary Duty of Care Mean?
The Work Health and Safety Act 2011 casts a wide net when defining a Person Conducting a Business or Undertaking. You fall into this category if you run a business as an employer, work for yourself, operate as a principal contractor, run a franchise, or have any level of influence or control over work carried out as part of your business. The definition deliberately captures everyone who can shape workplace health and safety.
Your primary duty of care requires you to ensure, so far as is reasonably practicable, the health and safety of your workers and anyone else affected by your business activities. The word "health" explicitly covers both physical and psychological health. Your obligations go well beyond preventing physical injuries. You must actively protect your workers' mental wellbeing.
The phrase "reasonably practicable" sits at the heart of your obligations. You weigh up how likely a hazard or risk is to occur, how serious the resulting harm could be, what you know (or should know) about the hazard and ways to eliminate or minimise it, whether suitable controls exist, and whether the cost of implementing controls stacks up against the level of risk. Safe Work Australia provides detailed guidance on how to apply this test.
What Are Psychosocial Hazards?
Psychosocial hazards cover aspects of work and work situations that can cause psychological or physical harm. The Model Code of Practice: Managing Psychosocial Hazards at Work identifies several categories you must consider.
Job demands cover the physical, mental and emotional effort your jobs require. Heavy workloads, impossible deadlines, emotional labour, exposure to traumatic content or events. When job demands consistently outstrip a worker's capacity to cope, psychological harm follows.
Low job control shows up when workers lack autonomy over how they do their work, get little input into decisions affecting them, or have insufficient flexibility in their arrangements. Research consistently shows that combining low control with high demands creates particularly harmful conditions.
Poor support includes inadequate supervision, insufficient resources to complete work, lack of access to training or development, and missing emotional support from colleagues and managers. Workers who feel unsupported face significantly higher risk of psychological harm.
Other psychosocial hazards include:
Lack of role clarity - workers uncertain about their responsibilities or receiving conflicting instructions
Poor organisational change management - inadequate consultation and communication during periods of change
Poor organisational justice - inconsistent, unfair or discriminatory management decisions and policy application
Inadequate reward and recognition - effort going unacknowledged
Poor workplace relationships - bullying and harassment
Remote or isolated work - limited access to support and communication
Poor physical environment - noise, lighting, temperature, workspace issues
Violence and aggression - from colleagues or members of the public
Traumatic events - exposure to distressing incidents or material
These hazards interact and combine. High demands paired with low support and poor relationships creates far greater risk than any single factor alone.
Your Legal Obligations
As a PCBU, you must take a systematic approach to managing psychosocial hazards. You can't wait for problems to surface before acting. The WHS Regulations set out what you need to do:
Eliminate psychosocial risks so far as is reasonably practicable
Minimise risks so far as is reasonably practicable where you can't eliminate them
Maintain safe systems of work that address psychosocial factors
Provide information, training, instruction and supervision to protect workers from psychosocial risks
Consult with workers and their representatives about psychosocial hazards and proposed control measures
Monitor the health of workers and workplace conditions to prevent illness or injury
Officers of a PCBU (directors, senior executives) have their own duty to exercise due diligence. They must acquire and keep up-to-date knowledge of psychosocial hazards, understand the nature of operations and associated risks, and verify that the PCBU has appropriate resources and processes in place.
The Model Code of Practice needs to be adopted by each state and territory before it has legal effect in that jurisdiction. Most jurisdictions have now done this. Check with your local WHS regulator to confirm the Code applies in your area.
Practical Steps for Compliance: The Risk Management Process
Meeting your duty of care means putting a structured risk management approach in place. The Code of Practice lays out four steps.
Step 1: Identify Hazards
Run regular assessments to find psychosocial hazards in your workplace. You can:
Review incident reports and workers' compensation claims
Run worker surveys and focus groups
Analyse work design and organisational factors
Review absenteeism and turnover data
Conduct workplace inspections that look at psychosocial factors
Step 2: Assess Risks
Once you find hazards, assess the level of risk by looking at:
How severe the potential harm could be
How often workers get exposed to the hazard
Whether multiple hazards interact to increase risk
How many workers the hazard affects
Psychosocial hazards interact. High demands combined with low control and poor support creates far greater risk than any single factor alone.
Step 3: Control Risks
Apply the hierarchy of controls, starting with the most effective measures:
Elimination - Get rid of the hazard entirely. Redesign work to remove unrealistic deadlines.
Substitution - Replace hazardous work practices with less hazardous alternatives.
Engineering controls - Change the physical work environment or equipment.
Administrative controls - Put in policies, procedures, training and supervision.
Personal protective measures - Employee assistance programs and individual coping strategies. These work least well on their own.
You'll usually need to combine measures rather than rely on any single approach.
Step 4: Review and Improve
Check regularly whether your control measures work. That means:
Checking whether controls operate as intended
Gathering worker feedback
Tracking incident reports and absenteeism
Updating your approach when circumstances change or controls don't work
What Happens When You Get It Wrong
State and territory WHS regulators hold significant enforcement powers and use them more often now for psychosocial hazard breaches. Victoria operates under different legislation (the Occupational Health and Safety Act 2004) but still requires employers to manage psychosocial risks.
Regulators can:
Issue improvement notices requiring you to fix a contravention within a set timeframe
Issue prohibition notices stopping work where serious risk exists
Accept enforceable undertakings committing you to specific actions
Prosecute for breaches resulting in substantial fines and potential jail time
Maximum penalties under WHS legislation hit hard. Industrial manslaughter carries penalties up to $20.4 million for corporations and up to 20 years imprisonment for individuals. Category 1 offences involving reckless conduct or gross negligence carry fines up to $17 million for corporations and up to 5 years imprisonment for individuals. Category 2 offences (exposing someone to risk without recklessness) attract fines up to $2.3 million for corporations. Even Category 3 offences (simple failure to comply with a duty) can reach $680,000 for corporations. Penalties vary between states and territories, and they increase each year through indexation.
Beyond regulatory consequences, failing to manage psychosocial hazards leads to higher workers' compensation costs, increased absenteeism and turnover, reduced productivity and engagement, reputational damage, and difficulty attracting and retaining talent.
The Bottom Line
Managing psychosocial hazards forms a core part of your duty of care as a PCBU. The law demands you identify hazards, assess risks, put controls in place, and review whether they work. Regulators enforce these requirements actively.
But there's more to it than avoiding penalties. Organisations that genuinely look after psychological health create workplaces where people want to work, where they do their best work, and where they stick around. Getting psychosocial hazards right builds the foundation for a business that works well over the long term.
For detailed guidance, look at the Model Code of Practice: Managing Psychosocial Hazards at Work and guidance materials from your state or territory WHS regulator.
Further Resources:
SafeWork NSW - Code of Practice: Managing Psychosocial Hazards at Work
WorkSafe Queensland - Managing the Risk of Psychosocial Hazards at Work
This article provides general information about workplace health and safety requirements and should not be relied upon as legal advice. Requirements vary by jurisdiction and may have changed since publication. Consult relevant codes of practice, regulatory guidance, and qualified advisors for specific circumstances.
For more information on how to identify, assess, and control psychosocial hazards in your workplace, visit refresh.tech to see how we can help you meet your duty of care obligations.


Five workplace changes that should trigger a psychosocial risk review
Harrison Kennedy
March 2, 2026


The Open Door Policy That Nobody Walks Through
Harrison Kennedy
February 28, 2026


The most expensive decision your leadership team makes is ignoring the person paid to protect your people
Harrison Kennedy
February 27, 2026