Most SMEs Are Not Compliant. Here’s What That Actually Means.
Work Health & Safety Laws – In Force Across All Australian Jurisdictions from December 2025
The Gap Between Knowing and Doing
As of 1 December 2025, every Australian jurisdiction – NSW, VIC, QLD, WA, SA, ACT, NT and the Commonwealth – has active work health and safety regulations requiring employers to identify, assess, and control psychosocial hazards in the workplace. This is no longer aspirational guidance. It is law.
The obligations apply to every business, regardless of size. There is no small business exemption. And in practice, the businesses least likely to have any system in place are SMEs that have been operating on the assumption that psychosocial safety is something large organisations worry about.
Australian workplace mental health compensation claims reached 17,600 in 2023-24 – a 161% increase over 10 years. Psychological injury claims now make up 12% of all serious workers’ compensation claims but account for 38% of the total cost. The average claim cost has risen from $146,000 in 2019-20 to $288,542 in 2024-25.
What a Psychosocial Hazard Actually Is
A psychosocial hazard is any factor in the design or management of work, the work environment, or workplace interactions that may cause psychological harm. Under the model WHS laws adopted across Australia, regulators have identified 17 defined psychosocial hazards. These are not abstract concepts. They are the operational realities of most SMEs that do not have functioning people systems:
- High job demands combined with low control or inadequate resources
- Low role clarity – employees who are unclear on what is expected of them
- Poor support from managers or colleagues
- Workplace conflict, bullying or harassment
- Inconsistent or unfair management practices
- Poor change management – restructures or role changes handled without adequate communication
- Sustained underperformance tolerated by management, creating unfairness that harms high performers
That final point is directly connected to the performance management context SMEs already understand. Tolerating sustained underperformance does not just damage culture. It is now a documented psychosocial hazard that creates legal exposure under WHS law – separate from and in addition to any Fair Work Act exposure.
The Cost Data Every SME Owner Needs to See
Mental health compensation claims crossed the $1 billion threshold in 2024-25 – five years ahead of projections that were made in 2021. The most common causes of these claims are instructive:
- Harassment and workplace bullying:2% of mental stress claims
- Work pressure:2% of mental stress claims
- Exposure to violence or harassment:7% of mental stress claims
The median time lost for a psychological injury claim is 35.7 working weeks – nearly five times the median for physical injury claims. A business that faces one psychological injury claim is looking at a median of nine months with an employee off work, plus the cost of the claim itself, plus replacement staffing costs, plus the impact on team morale.
Prevention is not optional. A comprehensive workplace mental health program costs approximately $50 to $150 per employee per year. The average direct compensation cost of a mental health claim is $67,400 – before indirect costs including productivity loss, recruitment, and retraining are factored in.
What Compliance Actually Requires
This is where most SMEs have the largest gap. The new regulations are explicit that an EAP (Employee Assistance Program) brochure on a noticeboard, or a training day about mental health awareness, does not constitute compliance. NSW’s WHS Regulation 2025 and equivalent regulations in other jurisdictions require employers to apply the hierarchy of controls to psychosocial risks – the same framework applied to physical safety risks.
This means employers must first attempt to eliminate the psychosocial risk. Where elimination is not reasonably practicable, they must minimise it through higher-order controls. The regulations are explicit: information, instruction or training cannot be the exclusive or predominant control measure. Training is a supplement to structural change, not a substitute for it.
In practical terms, a legally compliant psychosocial risk management system for an SME requires:
A documented psychosocial risk assessment. This is a structured process to identify which of the 17 defined hazards exist in your workplace, assess their likelihood and severity, and determine what controls are in place or required. Incident reports alone are not sufficient. A proper assessment requires consultation with workers.
Structural controls. These are changes to how work is designed, organised, and managed. Clear role expectations, reasonable workloads, consistent management practices, and functional performance processes are structural controls. They are also, not coincidentally, the foundations of a well-run business.
Documented consultation with employees. Regulators expect evidence that workers were involved in identifying hazards and developing controls. This is particularly relevant for Health and Safety Representatives where they exist.
A review process. Control measures must be reviewed when there is a change in the workplace, a new incident, a complaint, or at regular intervals. This is an ongoing obligation, not a one-time exercise.
The Connection to Your Existing People Systems
The most important practical insight for SME founders is this: the structural controls required by psychosocial safety law are the same systems that already make businesses operate well. Clear job descriptions, documented performance expectations, consistent management behaviour, early intervention on underperformance, and functional feedback processes are not compliance overhead. They are the infrastructure of a business that scales.
The businesses most exposed to psychosocial risk claims are precisely the ones that have been operating without these foundations – where role clarity is low, management is inconsistent, underperformance is tolerated, and people decisions are made by instinct. The legislation has not created new obligations so much as it has made the cost of existing people systems failures legible and enforceable.
If your business does not have a psychosocial risk assessment, does not have documented management expectations, and does not have a process for identifying and responding to workplace hazards of this kind – it is non-compliant. SafeWork regulators in every jurisdiction are increasing enforcement activity in this area. The question is whether you build the system before an incident, or after one.
Sources
Safe Work Australia, Key Work Health and Safety Statistics Australia 2025.
Safe Work Australia, Model Code of Practice: Managing Psychosocial Hazards at Work.
Work Health and Safety Regulation 2025 (NSW).
Occupational Health and Safety (Psychological Health) Regulations 2025 (Vic), effective 1 December 2025.
InCheq: “Australia’s $1 Billion Reality Check Arrives Five Years Early,” December 2025.
AusRehab: “The Hidden Cost of Psychosocial Hazards at Work,” July 2025.
MinterEllison: “Victoria’s New Psychosocial Health Regulations Start December 2025.”
Risk Training Professionals: “How Each Australian State Regulates Psychosocial Health and Safety,” December 2025.