A Policy in a Folder Doesn’t Cut It Anymore

Prepared for Paulette McCormack, Fresh HR Insights  |  21 September 2026

A Policy in a Folder Doesn’t Cut It Anymore

A client asked me last week whether the wellbeing policy sitting in her staff handbook was enough to keep her business compliant. I had to tell her, gently, that it probably isn’t anymore.

Here is the direct answer, because I know business owners are time poor. As of 1 July 2026, every state and territory in Australia now treats the management of psychosocial hazards, things like unmanageable workload, bullying, unclear roles and poor change management, as enforceable work health and safety law, not friendly guidance you can file away. NSW was the last jurisdiction to make that shift, turning its Code of Practice into a legal benchmark under section 26A of the Work Health and Safety Act. Victoria, Queensland, WA, SA, Tasmania, the ACT and the NT already had their own enforceable versions in place.

For a small business owner, that is a real change in what “compliant” actually looks like.

What changed, in plain terms

Before this year, a code of practice was a helpful reference, something you could dip into if you wanted guidance. Now, in NSW at least, an employer must either follow the approved code or prove, with evidence, that their own approach reaches an equivalent or higher standard. Regulators are no longer asking whether you have a wellbeing policy. They are asking whether you can show it actually changed anything.

SafeWork NSW has already appointed dedicated psychosocial safety inspectors. In the lead up to this change, it fielded more than 2,200 service requests and investigated around 190 notifiable incidents involving psychosocial hazards. Nationally, mental health related claims now make up around 12 percent of serious workers compensation claims, and that figure has been climbing by roughly 14 percent a year.

Those are not small numbers for a small team to carry.

A policy in a folder is not a control

This is the part I want every small business owner to hear clearly. Having a bullying and harassment policy, or offering access to an employee assistance program, is not the same as managing the risk. Regulators now expect what is called a hierarchy of controls, which means eliminating or redesigning the source of the pressure first, before falling back on training or support services as the whole answer.

In practice, that means asking harder questions. Is one person quietly carrying three roles worth of work because you haven’t replaced someone? Is a manager avoiding a difficult conversation that is now affecting the whole team? Is there an actual, genuine avenue for someone to raise a concern, and does anything visibly happen when they do?

An employee assistance program helps someone cope with a hazard. It does not remove the hazard. Regulators are drawing that distinction now, and honestly, so should we.

What a small business can realistically do

You do not need a corporate risk framework to take this seriously. A few honest, doable steps go a long way.

• Name the hazards that actually exist in your business, not a generic list copied from a template. Ask your team directly about workload, role clarity and how conflict gets handled, and really listen to the answers.
• Look at redesign before you look at wellness perks. A rostering fix, a clearer job description, or a manager stepping in earlier on a conflict will do more good than a one off morning tea.
• Make sure raising a concern genuinely feels safe, and that something happens afterwards. Silence after a complaint is its own risk.
• Write down what you find and what you change, then revisit it. Not for the regulator’s sake first, but because it’s the only way to know whether what you’re doing is actually working.

Where to start

If you’re not sure where your business currently stands, that uncertainty is worth resolving before an inspector, or worse, an incident, resolves it for you. Our HR Health Check is a 60 minute mini audit and risk snapshot built for exactly this, a clear, practical read on where your current policies and practices sit, and what to fix first. If you’d rather have this kind of thing looked after every month, our Small Business HR Support package covers ongoing HR guidance too. You can see both, along with everything else we offer, on our services page.

I have said this before and I will keep saying it. Good HR was never really about paperwork for its own sake. It’s about people feeling safe enough to do their best work.

That hasn’t changed. Only the law finally has.