← Australian guidesPsychosocial

Psychosocial Hazard Report: Employer First Response Australia

28 September 2026·19 min read

Treat the report as information about work, not a diagnosis

A worker says that a supervisor's repeated last-minute changes leave the team working excessive hours. Another reports threats from customers. A third says they are being isolated after raising a safety concern. These reports may differ in seriousness and detail, but each gives the employer information about a possible work-related psychosocial hazard. The first response should make the situation safer, preserve a fair process and identify what needs to be controlled in the work system.

Safe Work Australia's model Code of Practice on managing psychosocial hazards explains the risk-management approach and warns that the model code has legal effect only where approved in a jurisdiction. SafeWork NSW's code has a specific section on responding to reports of psychosocial risk or incidents. WorkSafe Victoria's psychological-health compliance code addresses the same operational moment under Victoria's separate OHS framework.

The employer does not need to decide at once whether the worker has a medical condition or whether a named person is guilty of misconduct. Those are different questions that may need separate professional and employment processes. The immediate WHS question is what exposure or harm might be occurring, who may be affected, what can be made safer now and how the matter will be assessed fairly. A report may reveal a system problem even when it arrives through a grievance channel rather than a form labelled “hazard”.

This page focuses on the first hours and days after a report and the handover into risk management. It is not a substitute for emergency services, clinical support, employment-law advice, an independent investigation or a regulator notification assessment when those are needed.

First, check immediate safety and support

Listen to the worker without requiring them to repeat the account to several managers. Ask what is happening now, whether the exposure is continuing and whether anyone faces an immediate threat. If there is a risk of violence, self-harm or another emergency, use the emergency response appropriate to the situation. A manager should not treat a serious safety concern as a routine entry in a queue that will be read next week.

Ask what temporary change would help the worker stay safe while the organisation assesses the report. Depending on the situation, that might include separating people during a shift, changing a customer-facing arrangement, adding supervision, adjusting workload or arranging another contact person. A temporary step should be proportionate and should not quietly punish the person who reported the concern. Check its effect with the worker and anyone else affected. Avoid promising that the proposed change is risk-free before it has been assessed.

SafeWork NSW's code says a response should include communication with affected workers, likely timeframes and access to appropriate psychological support, subject to privacy and confidentiality considerations. Support can be offered without implying that counselling alone controls a hazardous workload or abusive work environment. Record the offer and the worker's response with appropriate access restrictions.

Do not demand a diagnosis as the price of reporting a hazard. A worker may be able to explain a work condition without having medical information. If the organisation needs information for adjustments, return to work or another lawful purpose, obtain appropriate advice and handle it separately. A safety report is not a licence to circulate health details through the management team.

Give the worker a clear process and a point of contact

Thank the worker for raising the concern and explain what will happen next. Name the person who will coordinate the response and provide a way to contact someone else if that person is implicated in the report. Tell the worker what can be shared, who may need to know to assess and control the risk, and when they can expect an update. Do not promise absolute secrecy when the organisation may need to speak to others or take action. Promise careful, limited handling instead, subject to the applicable law and process.

WorkSafe Victoria's report-management guidance explains why workers may be reluctant to report and how employers should respond. Queensland's psychosocial hazards code discusses accessible reporting and consultation. A report may come through a supervisor, health and safety representative, union representative, human resources contact or hazard system. The person receiving it should know how to get it to the correct decision maker without exposing it to unnecessary people.

Victoria's compliance code distinguishes a report about a work condition, such as high job demands, from a report about an incident, such as customer abuse or alleged harassment. Both can reveal a need to review controls. The distinction helps the employer route the response, but it does not require a medical diagnosis or establish that an allegation against a named person is proven. The same code describes alternative confidential reporting options where reporting to a supervisor is inappropriate. These are Victorian code examples, not one prescribed reporting channel for every Australian employer.

Set an initial review point even if the full assessment will take longer. “We will update you after we have spoken to the affected team” is more useful than “we will investigate”. The timeframe should reflect the seriousness and current exposure. Keep the worker informed if it changes. Silence can leave a worker uncertain whether the risk is being taken seriously.

If the report is anonymous, the employer may have limited ability to ask questions or provide an individual update. It can still assess the work conditions described. Do not dismiss a potentially serious risk solely because the person chose not to identify themselves. Look for patterns in workload, incident data, turnover, consultation feedback and similar reports, while avoiding a hunt for the reporter.

Separate the hazard from the conduct allegation

Some reports describe behaviours such as bullying, harassment, aggression or threats. Others describe work design such as high demands, low role clarity, poor support or exposure to traumatic events. A report may contain both. The WHS response should identify and control risks arising from the work. A separate fair employment or conduct process may be needed to determine what happened between named people and what action is appropriate.

The two tracks must coordinate without being collapsed into one. An employer can take interim safety steps while an allegation remains unproven. It should also avoid treating an untested allegation as a final finding. Seek specialist advice where the facts are disputed, multiple workers are involved, a senior manager is named or another legal process may apply. Keep an explicit decision on who leads each process, what information can be shared and how conflicts of interest will be managed.

SafeWork NSW's code describes a fair, timely and balanced investigation for serious psychosocial incidents, proportionate to the risk and business context. It also distinguishes a more comprehensive incident investigation from ordinary hazard identification and risk assessment. Not every report needs the same investigative procedure, but every credible hazard report needs a considered safety response.

Do not let the use of an HR process defer obvious controls. If a customer repeatedly threatens staff, the business can improve staffing, escalation and access arrangements while it examines individual incidents. If workload is causing harmful pressure, it can review rosters and deadlines without first deciding whether a particular manager committed misconduct. A fair process and proactive risk control can occur together.

Record the report with a restricted, useful account

Document the date, how the concern was received, the work activity or condition reported, location or team, possible exposure, people who may be affected, immediate steps, decision owner and next review date. Keep the worker's own words where they matter, and distinguish those words from conclusions the employer has verified. Do not turn a preliminary report into a label such as “false complaint” or “confirmed bullying”.

Limit access to people who need the information to respond. A broad safety dashboard might show that a psychosocial risk is being assessed without displaying sensitive identities or allegations. The detailed account may need a separate restricted file. The applicable privacy, employment and records rules require specialist review for the organisation. This guide does not prescribe a national retention period or promise that every psychosocial report can be stored in the same way.

Record decisions as well as documents. If the organisation decides a temporary staffing change is sufficient for the first shift, note why, who approved it and when it will be checked. If it decides an external investigator is needed, note the conflict or seriousness that led to that choice. A good record helps the next decision maker see the risk logic without exposing unnecessary personal detail.

Where several workers are affected, keep individual information separate from the team-level hazard assessment. A team may have a shared excessive-demand hazard even when workers describe different effects. The organisation needs both the confidential individual response and a risk-control decision about the work system.

Identify the work-related hazard and who is exposed

Ask what aspect of work could cause harm. Examples include high job demands, poor role clarity, inadequate support, low control over work, exposure to aggression, harassment or traumatic events. Safe Work Australia's model code describes psychosocial hazards and the process for identifying, assessing, controlling and reviewing them. The point is not to force a worker's experience into a single category. Hazards can interact.

Look beyond the individual report. Is the problem confined to one shift or repeated across a team? Did a new system, staffing change or target create it? Are contractors, agency workers or remote staff exposed too? Has the organisation received earlier warnings through absence data, exit interviews, customer incidents or worker consultation? Use such information carefully. It can indicate a pattern, but a numerical trend should not be used to discredit one person whose report falls outside it.

Consult affected workers and any health and safety representatives as required by the local law. SafeWork NSW's consultation guidance advises employers to ask workers how they would be comfortable with concerns being addressed and to decide how gathered information will remain private and secure. Consultation is not a vote on whether a worker is telling the truth. It is a way to understand the work and select controls that will function.

Keep questions neutral. “When do deadlines change and who has authority to reset them?” is more useful than “Why can you not handle the pressure?” Ask what support exists during peak periods and what happens when it is unavailable. The design of the work is the unit of analysis. Clinical details may matter in a separate support process but are not required to see that a roster has left one person alone with predictable aggression.

Assess urgency and choose controls that change the work

Risk depends on the nature, frequency and duration of exposure and the severity of possible harm. A single credible threat of violence may require immediate action. A less dramatic but persistent workload problem may also create serious risk over time. Do not use a simple colour score to obscure those differences. Describe what could happen, who is exposed, when and how current controls fail.

Choose controls that address the source where reasonably practicable. For workload, that may mean resourcing, staffing, task priorities, deadlines or escalation routes. For aggression, it may mean access design, staffing, de-escalation support, customer restrictions and emergency response. For poor role clarity, it may mean clarifying decision rights and handovers. For repeated traumatic exposure, it may mean redesigning allocation, recovery time and support. The appropriate solution depends on the work and requires consultation.

Training and support can be part of the response, but they should not be the entire answer if the organisation can change the hazard. A workshop on resilience does not reduce a queue that one worker cannot safely manage. An employee assistance referral does not stop threats at a counter. The model code directs duty holders to eliminate or minimise risks so far as reasonably practicable. Document why the selected control addresses the identified work condition.

Test temporary controls with the affected worker without placing all responsibility on that person. A changed shift may provide relief but could also reduce hours or separate the worker from support. A new supervisor may help if they have authority to change the workload, but not if the deadline and staffing remain unchanged. Record feedback and adjust. The business retains responsibility for deciding and implementing appropriate controls.

Decide when a formal investigation is needed

If the report concerns a serious incident, disputed conduct, threats, multiple workers or a potentially significant failure of controls, an investigation may be needed. SafeWork NSW's code says a serious psychosocial incident response should be fair, timely and balanced, with a scope proportionate to risk, potential harm and the number of people affected. A small employer may need independent expertise where internal relationships make impartiality difficult. A large employer may need coordination between WHS, HR and legal teams.

Define the question the investigation will answer. “What happened and why did existing controls fail?” is different from “Did this employee breach a conduct policy?” Both may be relevant, but they need fair procedures and suitable decision makers. Decide what evidence is available, who will be interviewed, how information will be secured and how those named in allegations can respond. Do not use a WHS hazard form as a shortcut around fair treatment.

The investigation should feed risk control, not only a finding about individuals. If a complaint is not substantiated as misconduct, the team may still have unclear responsibilities or unreasonable work demands. Conversely, a substantiated conduct issue may require both individual action and system improvements. Close each track explicitly so neither disappears into the other.

Seek legal or specialist advice where there is a potential criminal matter, serious discrimination or harassment, a regulator notification question, a severe injury, or a conflict involving senior leadership. This guide cannot decide those legal outcomes for a particular workplace. It can help ensure the first safety response is not lost while specialist processes are arranged.

Communicate without exposing private details

The reporting worker needs to know that the employer received the concern, what immediate safety steps have been taken, what happens next and when they will hear more. Other affected workers may need to know about changed work rules or support arrangements. A person named in an allegation may need a fair opportunity to respond. These information needs are different. Give each person what they need for safety and fairness without broadcasting confidential details.

Do not promise an outcome before assessment. “We have separated the work areas and will review the controls on Friday” is clearer than “We will make sure this never happens again”. Explain any limitation on what can be shared about another person's employment matter. Ask whether the worker feels able to use the interim arrangements and whether retaliation or further exposure has occurred.

Queensland's psychosocial code addresses reporting barriers and concern about consequences. A reporting channel that exists on paper may still fail if workers believe they will lose shifts or be identified unnecessarily. Monitor for adverse treatment after a report. Escalate concerns through an independent route if the normal manager is involved.

Provide a closing update when decisions are made. It may describe risk controls, review dates and how to raise new concerns, while withholding private details about individuals. The worker should not be left to infer that a silent file closure means the risk was judged unimportant.

Review whether the controls actually changed exposure

A psychosocial hazard response should not end when a policy is issued. Check whether workload, support, behaviour or exposure has changed. Speak to affected workers, examine relevant operational information and observe how the new arrangement works. Set a review date related to the risk, and review sooner if another report or incident occurs. Safe Work Australia's model code includes review of controls as part of the risk-management cycle.

For a workload report, do not count only how many workers attended time-management training. Check the queue, staffing, overtime, task interruptions and authority to reprioritise. For customer aggression, check the incident pattern and whether workers can summon help. For role conflict, ask whether the two managers now give consistent instructions. The measure should connect to the original hazard.

If the worker says the temporary arrangement made things worse, treat that as new information. Review the control rather than defending the first decision. The same applies if the risk shifts to another worker or contractor. A good response does not simply move an unreasonable demand from one person to another.

Record the review, remaining risk, further actions and owner. Where the matter remains open, explain what will happen next. Where it can close, tell relevant people how to report a recurrence. Keep the restricted individual record and the broader work-system action linked without exposing more personal information than necessary.

Use local law and specialist processes together

The national model code is practical guidance and states that it has legal effect as a code only where approved locally. NSW's approved code gives detailed reporting and incident-response advice. Queensland has its own psychosocial hazards code. Victoria's psychological-health compliance code sits with its separate OHS framework and current psychological-health regulations. A final publication review must check each jurisdictional statement against the latest local law.

WHS, employment, privacy and clinical support may each create separate questions. Do not use a safety guide to determine a worker's legal claim, diagnosis, entitlement or a named person's liability. Bring in appropriately qualified advice when those issues arise. Meanwhile, the employer can still listen, check immediate safety, consult, assess work conditions and control reasonably practicable risks.

Not every report is a notifiable incident. A potential regulator notification duty needs an assessment under the applicable local law and facts. This page intentionally avoids a national yes-or-no test for psychological injuries or a universal reporting deadline. The responsible person should seek current regulator and specialist advice promptly where serious harm or a possible notification event is involved.

Keep Complys product claims narrow and verifiable

Complys has an Australian WHS compliance software page that discusses risk assessments and incident records. It is a relevant commercial destination for organisations reviewing how they document safety work. The checked public product copy does not establish a dedicated confidential psychosocial reporting channel, restricted case-management permissions, clinical support service, fair-investigation workflow or automatic legal notification decision. This guide makes none of those promises.

A digital system may help record a hazard, owner, interim control and review date if its actual permissions and workflow fit the sensitivity of the report. Product-owner demonstration is required before describing that as a Complys feature. If access controls or confidentiality cannot be shown, the employer should use another appropriate restricted process for personal details. A generic incident dashboard may be suitable for an anonymous trend but unsuitable for a named allegation.

If your organisation needs to bring general WHS assessments and records together, review the Complys Australian WHS software page and ask exactly how sensitive reports are protected in the current product. Keep the decision on immediate safety, consultation, investigation and risk control with competent people. Software can support a process but does not make that process fair or legally sufficient.

A practical first-response handoff

Before the initial responder passes the matter to another team, confirm that someone has checked immediate safety, spoken to the worker, offered appropriate support, recorded the account carefully, limited access, identified a decision owner and set a next contact date. Confirm whether an interim control is needed today. Note the work-related hazard that requires assessment even if a separate conduct allegation must be investigated.

The receiving owner should be able to see the open decisions without needing the worker to start again. Is the exposure continuing? Who else may be affected? What local regulator guidance applies? What consultation can occur without breaching privacy? Which control can be implemented now, and how will its effectiveness be checked? What specialist process is required? These questions turn a report into a responsible safety response.

A worker who raises a concern has given the organisation information it can use to prevent harm. The quality of the response is measured by whether the organisation listens, controls the work-related risk, treats people fairly and checks the result. An acknowledgement email or closed ticket alone cannot show that. The organisation must check its local WHS and privacy duties and use appropriate specialist support for the actual report.

Keep your WHS records and evidence in one place

Complys helps Australian businesses keep hazard records, actions and compliance evidence together, with reminders. Free for 90 days.

Start your free 90-day trial

Related Australian guides

Psychosocial Hazard Report: Employer First Response Australia | Complys Australia