There's a conversation that's long overdue in many Australian offices, warehouses, hospitals, and construction sites. It's not about whether mental health matters at work — most people agree it does. The real question is whether organisations are doing anything meaningful about it, or just hanging a poster in the break room and calling it done.
In 2026, the answer to that question has legal consequences.
Psychosocial risk management has moved firmly into the domain of workplace law. Australian regulators are no longer educating and encouraging — they're inspecting, issuing notices, and in some cases, prosecuting. The framework has arrived. What happens next is up to you.
What Is Psychosocial Risk — and Why Does It Matter So Much Now?
Psychosocial hazards are the aspects of work — and the way work is designed, managed, and carried out — that can harm a person's psychological or physical health. They're not abstract. They include things like consistently unreasonable workloads, poor role clarity, workplace bullying, lack of support from supervisors, low job control, organisational change handled badly, and exposure to traumatic events or aggression.
For years, these risks were treated as "soft" issues. A manager might say, "That's just the nature of this industry," or "Everyone finds the first six months tough." That framing is now not only unhelpful — it's potentially a legal liability.
Safe Work Australia has reported a 37% increase in mental health compensation claims between 2017–18 and 2021–22, with these claims now representing around 9% of all serious workers' compensation matters. The cost impact reinforces the urgency. Queensland data shows that the average statutory claim cost for a mental injury sits at approximately $23,600 — significantly higher than the $13,000 average for physical injuries — with longer claim durations driven by the complexity of psychological recovery.
This is not a fringe issue. It's one of the most significant workplace safety and financial risks Australian employers face.
The Regulatory Landscape: Where Australia Stands in 2026
Australia has been at the forefront of psychosocial risk regulation globally, and the frameworks have only tightened in the past two years.
From 1 December 2025, regulations relating to the management of psychosocial hazards came into effect in Victoria, meaning all Australian jurisdictions now have work health and safety regulations governing the management of psychological hazards in workplaces.
New South Wales strengthened its framework further through the WHS Regulation 2025, which commenced in August 2025 and now explicitly mandates applying the hierarchy of control measures to psychosocial risks. From 1 July 2026, NSW codes of practice carry greater legal weight, requiring PCBUs to follow them unless they can demonstrate an equivalent or higher standard of safety.
On the international stage, the ISO 45003 standard — published by the International Organization for Standardization — provides a globally recognised framework for managing psychosocial risks within occupational health and safety systems. Australian organisations that align their approach with ISO 45003 signal both regulatory commitment and professional maturity.
What this means in practice is that ignorance of psychosocial obligations is no longer a defensible position. Regulators across every state and territory are actively enforcing these requirements, and the enforcement trajectory is trending in one clear direction.
The Most Common Psychosocial Hazards in Australian Workplaces
Understanding what regulators and courts recognise as psychosocial hazards is the starting point for any risk management programme.
National claims data identifies the three primary causes of mental health claims as workplace harassment and bullying (33.2%), work pressure (24.2%), and exposure to violence and harassment (15.7%). These are the areas where employers carry the heaviest exposure and where targeted intervention has the clearest return.
Beyond these headline categories, Australian WHS frameworks recognise a broader range of psychosocial hazards — including poor organisational change management, role ambiguity, low decision-making latitude, remote or isolated work, and workplace conflict. Regulators in Queensland, New South Wales, and Victoria are increasingly focused on proactive risk management across all of these areas, not just incident response after harm has occurred.
One important and sometimes overlooked category is what workplace health researchers describe as low-level harmful behaviours — exclusion, dismissiveness, or patterns of disrespect that don't rise to the threshold of formal bullying but steadily erode psychological safety over time.
How to Conduct a Psychosocial Risk Assessment
A psychosocial risk assessment follows the same fundamental logic as a physical hazard assessment — identify, evaluate, control, and review. The difference is that the hazards are less visible and the measurement requires different tools.
Step 1 — Identify the Hazards
Start by gathering information from multiple sources. Surveys and anonymous reporting tools give employees a channel to surface issues they might not raise face-to-face. Exit interview data, workers' compensation claims history, absenteeism patterns, and productivity records all contain signals worth examining. Consultation with health and safety representatives is not just good practice — it's a legal requirement under Australian WHS legislation.
Don't underestimate what direct conversation reveals. A team that goes quiet in group meetings, or where people consistently work well beyond their hours without raising concerns, is telling you something.
Step 2 — Assess the Risk
Once hazards are identified, evaluate the likelihood and severity of harm. Consider how many workers are exposed, how frequently, and in what combination. A single high-demand period is manageable. Sustained high demand combined with low support and poor role clarity is a compounding risk profile that courts have found to constitute a foreseeable risk of psychological injury.
Step 3 — Implement Controls
Victoria's regulations take a notable position on controls: they explicitly constrain duty holders from relying too heavily on information, instruction, and training as control measures. Training can only be used as the sole control measure if the hazard cannot be eliminated or reduced through altering work design, systems of work, or the work environment.
This is important. It means training alone is not enough. Work design changes — adjusting workloads, clarifying roles, improving supervision quality, restructuring change management processes — must be part of the control response.
Step 4 — Monitor and Review
Risk assessments are not one-off documents. They should be reviewed when work conditions change, when new hazards are identified, or following a psychological injury claim. Building in a regular review cycle — annually at minimum — keeps the assessment current and demonstrates ongoing due diligence.
The Manager's Role: Where Most Organisations Are Falling Short
A policy in a shared drive doesn't manage psychosocial risk. People do. And in most organisations, the person with the greatest day-to-day influence over whether psychosocial hazards are created or controlled is the line manager.
Consider what happens in a team where a manager consistently adds tasks to people's plates without removing others, where concerns are brushed off with "everyone's under pressure," and where one team member's difficult behaviour goes unaddressed because the manager finds confrontation uncomfortable. That environment doesn't produce a single dramatic incident — it produces a slow, grinding accumulation of risk that eventually surfaces as a sick leave spike, a resignation, or a workers' compensation claim.
Managers need skills, not just awareness. They need to know how to have early, supportive conversations when they notice someone struggling. They need to understand the difference between reasonable performance management and conduct that can constitute bullying. They need to be able to identify warning signs and know what to escalate.
The Managing Psychosocial Risks: A Guide for Australian Managers course from the Australian Compliance Institute is designed precisely for this gap. It gives managers practical, legislation-aligned guidance on identifying hazards, supporting their teams, documenting concerns appropriately, and meeting their obligations as duty holders under Australian WHS law. It's CPD-accredited and structured for self-paced completion — which matters when managers are already stretched.
Documentation and Evidence: What Regulators Actually Want to See
When a regulator or insurer examines how an organisation has managed psychosocial risk, they're looking for evidence of a systematic, proactive process — not a folder of policies written in 2019 and never opened since.
Practical documentation includes records of risk assessments, evidence of worker consultation, meeting notes where psychosocial hazards were discussed, records of controls implemented and reviewed, and training completion records for relevant staff. If a complaint or concern was raised and addressed, the process and outcome should be documented — even if the resolution was straightforward.
In September 2025, SafeWork NSW issued a prohibition notice to the University of Technology Sydney — a signal that enforcement is real, applies to large institutions as much as small businesses, and that regulators are prepared to use their strongest tools. Documented, defensible processes are the difference between a manageable regulatory engagement and a reputational crisis.
Building a Psychologically Safe Culture — Beyond Compliance
There's a version of psychosocial risk management that treats this entirely as a compliance exercise. Get the paperwork right, complete the training, document the process — done. That version technically satisfies the minimum, but it misses the point.
Australian workers in 2026 are looking for psychologically safe workplaces where they can speak up, raise concerns, and contribute without fear of negative consequences. When that environment exists, organisations don't just avoid harm — they unlock genuine performance. People raise problems early, when they're still solvable. They support each other through difficult periods. They stay.
The research behind psychological safety — as documented through bodies including Safe Work Australia and internationally through frameworks like ISO 45003 — consistently shows that culture-level change requires visible leadership commitment, not just policy. When senior leaders model the behaviours they expect — acknowledging when they're under pressure, taking leave, speaking honestly about mental health — it gives the rest of the organisation permission to do the same.
The Governance Institute of Australia and Australian Human Resources Institute (AHRI) both recognise psychosocial risk management as a core governance and people management responsibility, not merely a WHS obligation. Organisations that treat it that way get better outcomes across the board.
What Employees Can Do
Psychosocial risk management isn't solely a leadership responsibility — employees have a role too. Under Australian WHS legislation, workers have a duty to take reasonable care of their own psychological health and the health of others affected by their conduct.
That means raising concerns early rather than absorbing them silently until they become serious. It means using the channels available — health and safety representatives, EAP services, or manager conversations — before small problems become large ones. And it means being honest in surveys and consultations, even when it's uncomfortable, because that feedback is what allows organisations to identify and address hazards they may not be aware of.
Workers with a return-to-work plan following a psychological injury are significantly more likely to return to work — 94% compared to 81.7% for those without one. Early intervention, from both the organisation's side and the individual's, makes a measurable difference.
Where to Start If Your Organisation Is Behind
If honest reflection tells you that your organisation's psychosocial risk management is more aspiration than action, the starting point is simpler than it might seem.
Begin with a gap analysis against the Safe Work Australia Model Code of Practice: Managing Psychosocial Hazards at Work. Then build a risk assessment process that includes genuine worker consultation. Then address training — particularly for managers, who are the frontline of psychosocial risk management whether they know it or not.
The Australian Compliance Institute's full course library includes training aligned specifically with Australian legislative requirements across WHS, workplace conduct, and related compliance areas — all CPD-accredited and built for practical workplace application.
Getting started is not as resource-intensive as organisations fear. The cost of not starting, however, is becoming increasingly clear.
