When you’re running a business, it’s easy to focus on the exciting stuff - winning clients, hiring great people, and building something that lasts.
But there’s one area you can’t afford to treat as an afterthought: workplace health and safety.
This guide is updated for 2026 so you can feel confident you’re working with current, practical expectations around keeping people safe at work (including in modern workplaces where work is mobile, hybrid, and increasingly digital). We’ll break down what you need to know as an employer in New Zealand, what “good” looks like in practice, and how to build strong safety foundations from day one.
What Does “Workplace Health And Safety” Actually Mean In NZ?
Workplace health and safety is about taking reasonable, practical steps to prevent harm in your business.
In New Zealand, the key law is the Health and Safety at Work Act 2015 (HSWA). It sets out duties for people who can influence work health and safety - including businesses, directors, managers, and workers.
HSWA isn’t just about hard hats and construction sites. It applies to:
- offices and retail stores
- hospo venues and kitchens
- warehouses and logistics
- home-based businesses
- remote workers and hybrid work arrangements
- events, pop-ups, and temporary sites
- businesses using contractors and gig workers
Health and safety also covers both:
- Safety (immediate risks like slips, trips, machinery, vehicles, burns, falls)
- Health (longer-term risks like fatigue, stress, repetitive strain, exposure to chemicals, psychosocial hazards)
The big idea is this: you don’t need a “perfect” workplace, but you do need a system for identifying risks and managing them before someone gets hurt.
Who Has Duties Under The Health And Safety At Work Act?
One reason health and safety can feel confusing is that multiple people can have duties at the same time.
PCBU: The Business With The Primary Duty Of Care
Under HSWA, the main duty-holder is usually the PCBU (Person Conducting a Business or Undertaking). In most cases, that’s your company, you as a sole trader, or your partnership.
As the PCBU, you must, so far as is reasonably practicable, ensure the health and safety of:
- workers (including employees, contractors, labour hire, apprentices, interns in some cases)
- workers whose activities you influence or direct
- people who could be put at risk by your work (customers, visitors, members of the public)
If you’re employing staff, this fits closely with having clear expectations and processes in place through an Employment Contract - health and safety obligations don’t sit in a vacuum, they’re part of how you run your workplace day-to-day.
Officers: Directors And People In Governance
If your business is a company, your directors (and sometimes others in senior governance roles) may be classed as officers under HSWA.
Officers have a due diligence duty - meaning they must take reasonable steps to ensure the business is meeting its health and safety obligations (for example, making sure the business has appropriate resources, systems, and reporting).
This doesn’t mean officers must personally manage every hazard. It does mean they can’t “set and forget” health and safety.
Workers: Employees And Contractors Also Have Duties
Workers must take reasonable care for their own health and safety and ensure their actions don’t adversely affect others.
They must also follow reasonable instructions and cooperate with policies and procedures.
If you engage contractors, it’s worth making sure responsibilities are crystal clear in a tailored Contractor Agreement, particularly where the contractor is working on-site, using your equipment, or interacting with your staff or customers.
Other People At The Workplace
Visitors and customers have obligations too - but as the PCBU, you still need to anticipate foreseeable risks and manage them.
For example, if your floor gets wet in rainy weather, it’s not enough to say “customers should watch where they’re going.” You should consider mats, signage, and cleaning schedules.
What Are Employers Required To Do In Practice?
HSWA uses a practical standard: what is reasonably practicable in the circumstances.
That usually involves balancing things like:
- how likely the hazard is to cause harm
- how severe the potential harm could be
- what you know (or should know) about the risk and how to control it
- what control measures are available and suitable
- the cost of controls (but cost alone won’t justify doing nothing where risk is significant)
So what does this look like when you’re actually running a business?
1) Identify Hazards And Assess Risks
You need a process to spot hazards - not just once, but ongoing.
Common ways to do this include:
- walk-through inspections (including after changes like a new layout, new equipment, or new shift patterns)
- incident and near-miss reporting
- worker feedback and toolbox talks
- manufacturer instructions for equipment and chemicals
- checking WorkSafe guidance relevant to your industry
Tip: hazards aren’t limited to “physical” risks. Increasingly, businesses are expected to think about fatigue, workload, bullying, and stress-related risks too.
2) Control Risks Using A Clear Hierarchy
Once you’ve identified a risk, you should consider controls in a sensible order (often called the “hierarchy of controls”):
- Eliminate the risk (best option where possible)
- Substitute with a safer alternative
- Isolate people from the risk
- Engineering controls (guards, ventilation, safety switches)
- Administrative controls (training, procedures, scheduling, supervision)
- PPE (last line of defence - not a substitute for safer systems)
In many small businesses, the “quick fix” is often an admin control (like a policy or training). That can be appropriate - but it’s important to check whether a stronger control is reasonably practicable.
It’s not enough to have a safety rule written down somewhere. Your team needs to understand what safe work looks like, and you need to support them to actually do it.
This might include:
- induction training for new staff
- task-specific training (e.g. coffee machine, slicers, forklifts, chemicals, ladder use)
- regular refreshers and supervision for high-risk tasks
- clear reporting lines (who to tell if something’s unsafe)
Where you’re dealing with behavioural expectations and workplace conduct (which often overlaps with psychosocial safety), it can help to set this out clearly in a Staff Handbook.
4) Maintain A Safe Workplace And Safe Systems
Depending on your industry, this could cover:
- equipment maintenance schedules and records
- safe storage and handling of hazardous substances
- ergonomic workstations (especially for office and remote workers)
- safe site access and visitor controls
- emergency plans (fire, evacuation, first aid, incident response)
If you’re operating from a leased space, your health and safety duties can intersect with what your landlord controls (like building access, lighting in common areas, or building systems). This is one reason it’s worth having a Commercial Lease Review so you understand who is responsible for what.
5) Monitor Health And Conditions Where Relevant
Some roles involve ongoing exposure risks (noise, dust, chemicals, repetitive strain, night shifts). Monitoring may include health checks, exposure monitoring, or wellbeing check-ins.
This is especially important where the harm might not be immediate - because “no one’s complained” doesn’t necessarily mean the risk isn’t there.
Managing Common Health And Safety Scenarios (Including Remote Work)
Health and safety isn’t one-size-fits-all. What you need will depend on your team, your workplace, and your risks.
Below are common scenarios we see for NZ employers and what you should think about.
Remote And Hybrid Work
If your team works from home (even part-time), you still have health and safety responsibilities. You may not control their home environment - but you can still take practical steps to reduce risks.
Consider:
- a remote work policy (covering workstation setup, reporting issues, working hours, breaks)
- self-assessment checklists for home workspaces
- ergonomic guidance (chair, desk height, screen positioning)
- psychosocial risks (is the team isolated, overworking, or struggling with boundaries?)
Also remember that remote work often involves more digital tools, which can create privacy and security risks alongside wellbeing issues. If you collect or store personal information (employee info, customer info, CCTV, device monitoring data), having a fit-for-purpose Privacy Policy can be part of a well-run compliance framework.
Stress, Bullying, And Other Psychosocial Risks
Workplace health and safety is not just about physical hazards. Psychosocial risks (like bullying, harassment, burnout, fatigue, and unreasonable workloads) can create real harm - and they can also create legal exposure for your business if not handled properly.
Practical steps include:
- clear behavioural expectations and reporting channels
- training for managers on performance management vs bullying
- reasonable rosters and break practices
- early intervention when issues are raised
Health and safety issues can also overlap with employment processes (for example, if a worker is unwell or struggling). If you’re unsure how to handle time off, it’s worth understanding how sick leave works in NZ - including questions like sick leave entitlements and what “reasonable” workplace support looks like.
Using Contractors, Labour Hire, Or Multiple Businesses On One Site
If you have contractors on-site (or you’re working alongside other businesses), you may have overlapping duties.
HSWA expects duty holders to consult, cooperate, and coordinate with each other - for example, agreeing on:
- site rules and inductions
- who provides PPE
- how hazards are reported
- who controls what parts of the workplace
- how incidents will be managed
Without this coordination, it’s easy for important safety tasks to fall through the cracks.
Workplace Surveillance And Safety Monitoring
Some businesses use CCTV, vehicle trackers, or device monitoring for safety and security reasons.
Even if your intention is legitimate, you need to be careful about privacy obligations and employee expectations. You generally want clear internal rules about what you monitor, why you monitor it, and how long you keep the information.
For example, cameras can raise questions about whether workplace cameras are being used appropriately and transparently, especially in areas where workers have higher expectations of privacy.
What Documents And Systems Should Employers Have In Place?
There’s no single “magic document” that makes you compliant. What matters is whether you have workable systems that reflect how your business actually operates.
That said, having the right documentation makes it much easier to:
- train your team consistently
- prove what you did if WorkSafe investigates
- reduce misunderstandings and prevent repeat incidents
Depending on your workplace, useful documents and systems often include:
- Health and safety policy (your overall commitment and approach)
- hazard and risk register (what risks you’ve identified and how you control them)
- incident and near-miss reporting procedure (plus investigation process)
- emergency plan (evacuation, first aid, emergency contacts)
- training and induction records
- safe work procedures for higher-risk tasks
- contractor management process (induction, approvals, site rules)
- wellbeing / psychosocial risk approach (bullying, fatigue, workload management)
It can be tempting to download a generic template and call it done - but health and safety documents work best when they’re tailored to your industry, your site, and your team.
As your business grows, your governance documents can also help make responsibility clearer (particularly in companies). For example, a Company Constitution can set clearer internal rules for decision-making, which can support better oversight - including around resourcing and accountability for safety systems.
What Happens If Something Goes Wrong?
No employer wants an incident. But even in well-run businesses, things can happen - and what you do next matters.
Notifiable Events And WorkSafe
Some events must be notified to WorkSafe (for example, certain serious injuries, illnesses, or dangerous incidents).
If something serious happens, you may also have duties to:
- preserve the site (so it’s not disturbed until permitted)
- provide support to the worker(s) affected
- record and investigate what happened
- review your controls to prevent a repeat incident
If you’re ever unsure whether an event is notifiable or what your next steps should be, it’s worth getting legal guidance early - quick decisions in the first 24–72 hours can have a big impact later.
Fines, Liability, And Business Disruption
Health and safety non-compliance can lead to significant consequences, including:
- WorkSafe investigations
- improvement notices or prohibition notices
- fines and prosecutions for breaches of HSWA
- insurance implications
- lost productivity and reputational damage
- increased turnover (people don’t stay where they don’t feel safe)
Even where the legal outcome is manageable, the operational disruption can be huge - which is why building strong systems early is one of the best “risk management investments” you can make.
Health And Safety Intersects With Employment Law
Sometimes a safety issue turns into an employment issue (and vice versa). Common examples include:
- a worker refuses to do unsafe work
- a worker repeatedly breaches safety procedures
- there’s an incident involving misconduct, fatigue, or substance use
- you need to stand a worker down while investigating safety concerns
These situations can be sensitive, and getting the process wrong can create risk on both fronts (health and safety obligations and fair employment process). If you need to formalise expectations and consequences, your employment documents should line up with your real safety practices - not contradict them.
Key Takeaways
- Workplace health and safety in New Zealand is governed primarily by the Health and Safety at Work Act 2015, and it applies to almost every business - not just “high-risk” industries.
- As an employer, you’re usually the PCBU and you must take reasonably practicable steps to keep workers and others safe, including in remote and hybrid work environments.
- Good compliance is practical: identify hazards, control risks, train and supervise your team, maintain safe systems, and keep improving based on what you learn.
- Health and safety includes psychosocial risks like bullying, fatigue, and stress, so it’s worth addressing wellbeing and behaviour expectations as part of your safety approach.
- Clear documentation helps you run a safer workplace and demonstrate compliance - but it should be tailored to how your business actually operates, not copied from generic templates.
- If an incident happens, your response matters: you may have notifiable event duties, and early legal support can help you manage risk while doing the right thing by your team.
If you’d like help setting up workplace health and safety foundations, reviewing your employment documents, or getting clarity on your legal obligations as an employer, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.
