Across Australia, a quiet but significant shift has occurred in work health and safety law. Psychosocial hazards are no longer a “nice to manage” issue—they are a legal obligation. 

At its core, the law is simple: Businesses must identify reasonably foreseeable psychosocial hazards, assess the risks, and eliminate or minimise them so far as is reasonably practicable. 

This is not optional. Codes of Practice are admissible in court and are often used to determine what is “reasonably practicable” in managing risk. 

The required process mirrors all WHS risk management: 

🔍Identify hazards 

📊Assess risks 

🛠️Control risks 

🔁Review controls 

And critically, every step must be supported by consultation with workers. You cannot properly identify or assess psychosocial risks without consulting your workers, because workers are often the only people who truly understand where stressors exist, how work is actually performed (not how it’s designed), and which risks are hidden or emerging. 

 

14 Hazards you’re expected to consider 

The Codes of Practice for your state list typical hazards to look for. 

 

Work design and organisational factors 

– High or low job demands 

– Low job control 

– Poor support 

– Lack of role clarity 

– Poor organisational change management 

– Inadequate reward and recognition 

– Poor organisational justice 

 

Work environment and context 

– Remote or isolated work 

– Poor physical environment 

– Traumatic events or material 

 

Behavioural and relational risks 

– Violence and aggression 

– Bullying 

– Harassment (including sexual harassment) 

– Conflict or poor workplace relationships 

 

These hazards arise from how work is designed, managed, and experienced—not just what work is done. But the challenge is being able to relate these to your business. 

 

🔒 Confidentiality: The Missing Piece 

Here’s where things get difficult. Psychosocial hazards are deeply personal and often sensitive. Workers may be reluctant to speak up, particularly where there are power imbalances, job security concerns, or stigma. 

That’s why anonymous or confidential consultation methods, such as surveys, are critical. 

 

Most Businesses Struggle to Do This Well 

Even well-intentioned organisations often rely on informal feedback, generic surveys, or incomplete data, missing key psychosocial hazards and underestimating legal exposure. The Codes of Practice suggest that medium-to-large or higher-risk organisations should use structured and validated assessment processes. 

Psychosocial risk management is enforceable law. Every business must understand hazards, consult workers, ensure confidentiality, and conduct a proper risk assessment. 

Doing this well is not easy. And in many cases, the difference between compliance and exposure comes down to how robust—and how honest—your assessment process really is. 

🎯 So the real question becomes: are you simply ticking the box, or are you truly understanding the experience of your people? 

Because in this space, the strength of your approach determines more than compliance. It shapes your culture, your leadership credibility, and ultimately, your ability to create a workplace that enables people to perform at their best consistently, and sustainably.