Psychosocial Hazards: The PCBU Duty You Can’t Delegate
Under Australian WHS law, psychosocial hazards now carry the same enforceable duty as physical ones. Yet many organisations still manage psychological risk through policies and perks rather than controls they can evidence. This guide shows PCBUs how to identify, control and document psychosocial risk to a standard a regulator would accept.
Last updated on August 3, 2026
Quick Answer
Psychosocial hazards are aspects of work design, work systems, management practices and workplace relationships that can cause psychological harm. Examples include high job demands, low job control, poor support, role ambiguity, exposure to traumatic content, and bullying or harassment.
Under the Work Health and Safety Act 2011, a PCBU must eliminate or minimise psychosocial risk so far as is reasonably practicable, using the same risk management cycle applied to physical hazards. Furthermore, the Model WHS Regulations require PCBUs to implement control measures and review them, while Safe Work Australia’s Code of Practice: Managing Psychosocial Hazards at Work sets out how to do it.
Why Psychosocial Hazards Now Sit at the Centre of WHS Compliance
The regulatory shift many organisations missed
For decades, WHS enforcement focused on what could break a body. Psychological harm sat in a separate column, managed through employee assistance programs and general goodwill.
That division no longer holds. Australian regulators now treat psychological harm as a safety outcome with a preventable cause. Consequently, the question has shifted from whether your people feel supported to whether your work is designed safely.
What the national claims data shows
Safe Work Australia’s Key Work Health and Safety Statistics Australia (2025 release) recorded 17,600 serious workers’ compensation claims for mental health conditions in 2023–24. Notably, that figure represents 12% of all serious claims — the highest proportion recorded — after a 161% rise across the preceding decade.
Cost tells the sharper story. In 2022–23, median time lost per mental health claim reached 35.7 working weeks against 7.4 weeks across all serious claims. Median compensation, meanwhile, hit $67,400 against $16,300. Psychological injury therefore consumes resources far out of proportion to its claim volume.
Where wellbeing programs stop and legal duty begins
A resilience workshop is not a control measure. Neither is a wellbeing app, a mental health first aid cohort, nor an annual engagement survey that nobody acts on.
Crucially, these initiatives all sit downstream of the hazard. They help workers cope with exposure rather than reducing it. Regulators look upstream instead — at rosters, workloads, reporting lines, escalation pathways, and the daily behaviour of supervisors.
Executive Summary
- What this blog covers: How Australian PCBUs identify, control, monitor and evidence psychosocial hazards under the WHS Act 2011 and the Model WHS Regulations.
- Who it’s for: WHS managers, people and culture leaders, compliance officers, executives, and officers carrying due diligence duties.
- Key regulatory context: Section 19 primary duty of care, section 27 officer due diligence, the psychosocial provisions of the Model WHS Regulations, and Safe Work Australia’s Code of Practice: Managing Psychosocial Hazards at Work.
- The central risk: Many organisations hold a documented wellbeing policy yet cannot demonstrate implemented, monitored controls when a regulator asks.
- Primary action required: Bring psychosocial hazards into your existing risk register and control cycle, then train leaders to run that cycle properly.
What Are Psychosocial Hazards? A Plain-Language Definition
The definition Australian regulators use
A psychosocial hazard is anything at work that can cause psychological harm. Specifically, it arises from work design, work systems, management practices, plant and equipment, or interactions between people at work.
Notably, the hazard sits in the work rather than in the person. Two workers may respond differently to the same crushing workload, yet the workload remains the hazard in both cases. Framing it any other way pushes the organisation toward screening individuals instead of fixing systems.
The recognised categories of psychosocial hazards
Safe Work Australia’s code identifies a defined set of hazards, and most organisations carry several at once. In practice, they cluster and compound rather than appearing in isolation.
- Job demands that stay consistently high, or unusually low across extended periods
- Low job control, where workers have little say over how or when work happens
- Poor support from supervisors or colleagues, including inadequate resourcing
- Lack of role clarity, with conflicting or shifting expectations
- Poorly managed organisational change and inadequate consultation
- Inadequate reward and recognition relative to effort
- Weak organisational justice, including inconsistent application of policy
- Traumatic events, or repeated exposure to distressing material
- Remote or isolated work
- Poor physical environment, including noise, heat and unsafe conditions
- Violence, aggression, bullying, harassment and sexual harassment
- Conflict or poor workplace relationships
Hazard versus risk — why the distinction matters
The hazard is the source. Risk describes the likelihood and severity of harm arising from exposure to that source.
This distinction drives your entire control strategy. Rather than asking how to make workers more resilient, you ask how to reduce exposure — through workload design, rostering, resourcing, escalation pathways and supervisor capability. Resilience still matters, but it belongs at the bottom of the hierarchy, never the top.
Why Psychosocial Risk Goes Unmanaged in Australian Workplaces
Design problems get treated as people problems
When a team burns out, the instinct is to look at the team. Managers ask who is struggling, who needs support, and who might not be coping with the pace.
However, the recurring pattern usually points elsewhere. A role that has broken three consecutive occupants is a design fault rather than a run of individual fragility. Similarly, a team with double the organisation’s turnover rate is describing its work, not its people.
The measurement gap
Most organisations measure physical safety with precision and psychological safety with a survey. Incident registers capture lacerations and near misses, while chronic overload leaves no trace until someone lodges a claim.
As a result, the risk stays invisible to governance. Boards receive lost-time injury frequency rates but rarely see workload trends, turnover by manager, or the ageing of unresolved grievances.
Common failure patterns worth checking
Certain patterns repeat across sectors and organisation sizes. Reviewing them against your own operations offers a fast diagnostic.
- A wellbeing policy exists, yet no psychosocial hazard appears anywhere in the risk register
- Consultation happens after decisions are announced rather than before they are made
- Bullying reports route to HR as conduct matters and never reach the WHS system
- Control measures are named in documents but carry no owner and no review date
- Supervisors receive no training in recognising or escalating psychological risk
- Exit interview themes never reach the people who design the work
- Survey results are collected annually, then reported without any visible action
Each pattern shares one feature: the organisation holds information it never converts into control. Consequently, the paperwork looks healthy while exposure continues unchanged.
Psychosocial Hazards Under the WHS Act 2011
The primary duty of care
Section 19 of the Work Health and Safety Act 2011 requires a PCBU to ensure, so far as is reasonably practicable, the health and safety of workers. Health under the Act expressly includes psychological health.
Therefore the duty itself is not new — only its application has sharpened. The same obligation that governs guarding on a machine also governs the design of a workload. Reading section 19 as a physical-safety provision has always been a misreading.
What the psychosocial regulations require
The Model WHS Regulations now place explicit obligations on PCBUs regarding psychosocial risk. They define psychosocial hazards, then require PCBUs to eliminate or minimise the resulting risks so far as is reasonably practicable.
Importantly, the regulations direct PCBUs to consider the duration, frequency and severity of exposure, alongside how hazards interact with one another. Adoption timelines and numbering differ across jurisdictions, so check the regulations and codes applying in your own state or territory.
Officer due diligence under section 27
Officers carry a personal duty that sits alongside the organisation’s. Section 27 requires them to acquire knowledge of WHS matters, understand the organisation’s hazards and risks, and ensure appropriate resources and processes exist.
For psychosocial risk specifically, due diligence means asking for evidence rather than accepting assurance. An officer who treats “we have a wellbeing program” as a sufficient answer has not discharged the duty.
How Australian regulators assess psychosocial risk
SafeWork NSW, WorkSafe Victoria, WorkSafe Queensland and Comcare have each published psychosocial guidance and run targeted inspection activity. Inspectors typically look for a documented trail rather than a stated intention.
- Evidence that hazards were identified through genuine consultation with workers and HSRs
- A risk assessment recording duration, frequency and severity of exposure
- Control measures ranked using the hierarchy, with elimination considered first
- Named owners and scheduled review dates attached to every control
- Monitoring records showing whether exposure actually fell after each change
- Training records demonstrating that leaders understand their role in the system
Ultimately, the regulator tests the system rather than the sentiment. Good intentions documented after an incident carry very little weight.
Leadership Behaviour Is a Psychosocial Control Measure
What frontline supervisors actually control
Frontline leaders set the daily conditions that determine exposure. They allocate work, approve leave, decide what gets escalated, and model whether raising a problem feels safe.
Consequently, supervisor capability functions as a control measure in its own right. Where that capability is missing, no policy compensates for it.
- Workload allocation and realistic deadline setting across the team
- Rostering that protects genuine recovery time between shifts
- Clarity about priorities when competing demands collide
- Early, private check-ins when performance or attendance shifts
Building manager capability that holds under pressure
Capability requires more than awareness. Managers need scripts, thresholds, and an escalation path they actually trust.
- Practise the difficult conversation before it is needed, using realistic scenarios
- Define precisely what triggers escalation, and to whom it goes
- Clarify the boundary between manager support and clinical support
- Close the loop with the worker afterwards, so reporting feels worthwhile
Reporting culture and psychological safety
Workers report early when they believe reporting changes something. Where past reports vanished without response, silence becomes the rational choice.
Moreover, under-reporting quietly distorts your entire risk picture. An organisation with very few complaints may have healthy work or a broken reporting culture, and only the response data distinguishes between the two.
Work-as-Imagined Versus Work-as-Done
The gap between the documented system and daily reality
Work-as-imagined is the work described in your procedures, position descriptions and policies. Work-as-done is what people actually do to get the job finished.
Every organisation carries a gap between the two. The size of that gap, however, is a reliable predictor of psychosocial risk.
Workers close the gap through informal workarounds — skipping breaks, absorbing unallocated tasks, answering messages long after hours. These adaptations keep output stable while hiding exposure that accumulates underneath.
Comparing the two views side by side
| Dimension | Work-as-Imagined | Work-as-Done | Psychosocial Risk Signal |
|---|---|---|---|
| Workload | Allocated to fit a standard working week | Absorbed through unrecorded overtime | Sustained high job demands |
| Escalation | Documented reporting pathway | Quiet word with a trusted peer | Poor support and weak organisational justice |
| Role clarity | Position description reviewed annually | Duties added informally after restructure | Role conflict and ambiguity |
| Breaks | Scheduled and protected | Skipped throughout peak periods | Inadequate recovery time |
| Consultation | Committee meets on a set cycle | Decisions announced, then explained | Poorly managed organisational change |
| Support | Supervisor available for coaching | Supervisor spans six teams across sites | Low support and low job control |
Closing the gap in practice
You close the gap by asking the people doing the work, then acting visibly on what they tell you. Observation, short pulse checks and honest team debriefs surface adaptations that annual surveys reliably miss.
Notably, the goal is not to eliminate adaptation altogether. Instead, you make it visible, so the system can be redesigned around what the work genuinely requires.
The eCompliance Central Psychosocial Risk Control Framework
Compliance fails at the point of implementation, not intention. Accordingly, this seven-step framework turns the WHS risk management cycle into a sequence your organisation can run, evidence and repeat.
A 7-Step Framework for Control
Map the Work
Document how work actually happens in each team, including peak periods and informal adaptations. Observation and frontline conversation matter far more than the procedure manual here.
Consult Before Assessing
Bring workers and HSRs into hazard identification at the start, not for sign-off at the end. Genuine consultation surfaces exposure that no survey instrument captures.
Register Every Hazard
Add each identified psychosocial hazard to the same risk register that holds your physical hazards. Separate systems reliably create separate blind spots.
Assess Exposure Properly
Record duration, frequency and severity for every hazard, plus how those hazards interact. Two moderate exposures combined often produce severe harm.
Control at the Source
Apply the hierarchy of control: redesign the work first, reduce exposure second, support the individual third. Resilience training belongs last, never first.
Equip Every Leader
Train supervisors to recognise early signals, hold the conversation and escalate correctly. Scenario-based practice builds capability that awareness sessions never deliver.
Monitor, Review, Evidence
Assign an owner and a review date to every control, then track whether exposure actually fell. Evidence of review is what a regulator asks for first.
Making the framework hold over time
Frameworks decay whenever ownership blurs. Therefore, name a single accountable officer for the cycle, schedule reviews inside the governance calendar, and report psychosocial indicators to the board alongside physical safety metrics.
Above all, treat evidence as a by-product of doing the work properly. Organisations that run the cycle honestly rarely struggle to prove it afterwards.
What Happens When Psychosocial Risk Goes Unmanaged
The operational cost arrives before the legal one
Harm rarely announces itself. Instead, it appears first as turnover in one team, then as extended absences, then as a claim nobody saw building.
By that point, remediation costs multiply. Recruitment, backfill, investigation and premium impact all land together, while institutional knowledge walks out the door with the worker.
How unmanaged psychosocial risk typically escalates:
- Exposure accumulates quietly while output holds steady, so nothing triggers a review
- Early signals surface as turnover, presenteeism and informal complaints that no system captures
- A claim, investigation or regulator notice forces disclosure, and the absence of records becomes the finding
The regulatory and reputational cost
Where a notifiable incident or serious claim triggers investigation, inspectors examine what the organisation knew and when it knew it. Records created after the event carry limited weight.
Meanwhile, officers face personal exposure under section 27. Due diligence cannot be delegated to a wellbeing coordinator, nor outsourced to an employee assistance provider.
Compliance Intelligence: Key Insights
Key Takeaways
- Add every identified psychosocial hazard to your existing WHS risk register this quarter.
- Record duration, frequency and severity for each exposure, plus how the hazards interact.
- Redesign the work before offering resilience training, following the hierarchy of control.
- Train supervisors using realistic scenarios rather than awareness slides.
- Assign a named owner and a scheduled review date to every control measure.
- Report psychosocial indicators to your board alongside lost-time injury data.
- Consult workers and HSRs before decisions, then show them exactly what changed.
- Check the regulations, codes and adoption timelines applying in your state or territory.
How to Choose a Psychosocial Safety Training Provider
Training is one control among several, yet it carries disproportionate weight during an investigation. Choosing badly leaves you holding completion records and no actual capability.
Five questions to ask before you buy
- How long has the provider designed workplace training? Depth of instructional design experience separates behaviour change from box-ticking.
- Does the training reflect our policies, roles and real scenarios? Generic modules produce generic recall, and generic recall fails under pressure.
- What happens when Australian legislation changes? Ask specifically who updates the content, how quickly, and at what cost.
- Do we own the content, or does access end with the subscription? Ownership protects your evidence trail well beyond the contract term.
- Can we test application rather than completion? Scenario assessments and simulations demonstrate capability to a regulator.
eCompliance Central builds SCORM-ready modules around your policies, your people and your operational realities, drawing on more than 35 years of learning design experience. Our Psychosocial Safety and Wellbeing in the Workplace course maps directly to the WHS Act 2011, the Model WHS Regulations and the Safe Work Australia code of practice.
Frequently Asked Questions
What are psychosocial hazards in the workplace?
Psychosocial hazards are aspects of work that can cause psychological harm. They arise from work design, work systems, management practices, plant and equipment, or interactions between people. Safe Work Australia recognises hazards including high job demands, low job control, poor support, lack of role clarity, weak organisational justice, exposure to traumatic content, remote or isolated work, and bullying, harassment or violence. Critically, the hazard sits in the work itself rather than in the worker exposed to it.
Is a PCBU legally required to manage psychosocial risk in Australia?
Yes. Section 19 of the Work Health and Safety Act 2011 requires a PCBU to ensure the health and safety of workers so far as is reasonably practicable, and health expressly includes psychological health. Furthermore, the Model WHS Regulations add specific psychosocial obligations, requiring PCBUs to eliminate or minimise psychosocial risk and to review their control measures. Adoption timelines and regulation numbering differ across states and territories. Check the instruments applying in your own jurisdiction before finalising your approach.
What is the difference between psychosocial safety and psychological safety?
Psychosocial safety is a WHS concept covering the full range of work-related hazards capable of causing psychological harm, and it carries enforceable legal duties. Psychological safety, by contrast, describes a team climate where people feel able to speak up without fear of humiliation or reprisal. The two connect closely, because psychological safety improves early reporting and therefore improves your risk data. However, it remains one contributing factor rather than a substitute for hazard identification and control.
How often should psychosocial risk controls be reviewed?
Review each control on a scheduled cycle, and again whenever circumstances change. Common triggers include restructures, changes to rosters or workload, a new complaint or incident, a request from workers or HSRs, and any sign that a control is not working as intended. Assign a named owner and a review date to every control so reviews actually happen. Notably, records of what changed after each review carry more weight with an inspector than the original assessment did.
Does psychosocial risk management apply to small organisations?
Yes. The primary duty of care applies to every PCBU regardless of size, and no small-business exemption exists for psychosocial risk. What changes is scale rather than obligation. A smaller organisation can meet the duty with a short risk register, documented team conversations, and clear escalation pathways. Regulators assess whether the control measures suit the hazards, the work, and the resources reasonably available to that organisation.
What records do we need if a regulator investigates psychosocial risk?
Inspectors typically ask for evidence that hazards were identified through consultation, a risk assessment recording duration, frequency and severity of exposure, control measures ranked using the hierarchy of control, named owners and review dates, monitoring records showing whether exposure fell, and training records for leaders. Documentation created after an incident carries limited weight. Contemporaneous records of the risk management cycle are what demonstrate the duty was discharged. Therefore, build the evidence trail while you run the cycle, never afterwards.
Turn Your Psychosocial Duty Into Demonstrable Control
Policies alone will not satisfy a regulator, and awareness sessions will not change how supervisors behave on a difficult Tuesday. Our customised, SCORM-ready modules build the capability your controls depend on — mapped to your policies, your risks and your workforce.
Explore Custom Compliance Solutions
Looking for a broader overview?
Read our definitive Australian Workplace Compliance Guide.
