Creating a Work from Home Policy: Legal Tips for Employers

Hybrid work is now normal for many New Zealand businesses, but plenty of employers still treat working from home as an informal perk rather than something that needs clear rules. That is where problems start. Common mistakes include letting arrangements evolve without updating employment terms, overlooking health and safety duties for home workspaces, and collecting employee information without thinking through privacy obligations. Another frequent issue is assuming one short paragraph in an employment agreement will cover everything, when in practice managers and staff need much clearer guidance.

A well-drafted work from home policy helps set expectations before issues arise. It can explain when remote work is available, how performance is managed, what equipment is provided, how expenses are handled, and what happens if the arrangement stops working. It also helps reduce inconsistency, which matters if different team members are asking for flexibility and you want to avoid claims of unfair treatment.

This guide explains what creating a work from home policy means for New Zealand employers, the main legal issues to check before you sign off on one, and the mistakes that often cause trouble later.

Overview

A work from home policy is a practical document that supports your employment arrangements, but it needs to line up with New Zealand employment, health and safety, privacy and record-keeping obligations. The strongest policies are clear about eligibility, expectations, equipment, confidentiality and review rights, and they fit with each employee's agreement rather than contradicting it.

• Check whether your employment agreements already deal with place of work, hours, flexibility and variation rights.
• Set clear rules about who can work from home, how approval works, and when arrangements may be reviewed or withdrawn.
• Address health and safety responsibilities for home workspaces, incidents, breaks and reporting concerns.
• Explain what equipment is supplied, who owns it, how it is used and what happens when employment ends.
• Cover privacy, confidential information, document handling, cybersecurity and device security.
• Think through expenses, internet and phone use, reimbursement rules and any allowances.
• Train managers to apply the policy consistently and to document decisions.

What Creating a Work from Home Policy Means For New Zealand Businesses

Creating a work from home policy means setting business rules for remote work that are fair, workable and legally consistent with your employment documents. It is not just an internal memo. In practice, it becomes part of how you manage flexible work, performance, health and safety, confidentiality and workplace conduct.

For startups and SMEs, the issue often comes up in a real founder moment. A key employee asks to work remotely three days a week. A new hire expects hybrid work because the role was advertised that way. A manager approves an informal arrangement, then later wants everyone back in the office. Without a clear policy, each request can turn into a separate negotiation.

A policy helps you avoid making inconsistent promises. It also helps separate two things that employers sometimes blur together:

• the contractual terms in an employment agreement, and
• the operational rules that explain how remote work will function day to day.

Your employment agreement usually deals with the legal foundation, such as place of work, hours, duties and variation processes. Your policy then fills in practical detail, such as communication expectations, home workstation standards, approval procedures and equipment use.

Why a policy matters even when your team is small

Small businesses often assume they can manage flexibility case by case. Sometimes that works for a while. The problem is that informal arrangements can create confusion about what has been agreed and whether one employee is being treated differently from another for no good reason.

A written policy gives managers a consistent framework. It can also help if you need to explain why some roles can work remotely and others cannot. That matters before you hire your first worker, when you are setting expectations from day one, and later when your team grows and managers are making decisions across departments.

What a work from home policy usually covers

The best policies are practical. They answer the questions staff and managers actually ask after remote work starts.

Typical areas to cover include:

• which roles are eligible for remote or hybrid work
• whether working from home is standard, occasional or discretionary
• how employees request approval and who decides
• core working hours, availability and communication standards
• performance expectations and supervision
• workstation setup and health and safety checks
• security requirements for devices, passwords, networks and files
• rules for printing, storing and disposing of confidential information
• what equipment the business provides
• whether the business reimburses any costs
• how accidents, hazards and technical issues are reported
• when the arrangement can be reviewed, changed or ended

Not every business will need the same level of detail. A professional services firm handling sensitive client information will usually need stricter privacy and document controls than a business where remote work is mainly phone-based. The point is to tailor the policy to the risks of the role.

How the policy fits with flexible working requests

In New Zealand, employees may make flexible working requests, and employers need to handle those requests properly. A work from home policy does not remove that process. Instead, it helps you respond consistently.

For example, your policy might explain:

• what information an employee should provide when seeking remote work
• how long the arrangement will last before review
• whether there is a trial period
• what business factors will be considered, such as customer coverage, supervision needs or information security

This is where employers often get caught. A manager says yes informally, the arrangement continues for months, and everyone starts acting as though it is permanent. Later, when business needs change, the employer may find it harder to shift the arrangement than expected.

Legal Issues To Check Before You Sign

Before you sign off on a work from home policy, make sure it matches your employment documents and your actual business practices. The main legal risk is not the policy itself. The main risk is creating a policy that says one thing, employment agreements that say another, and managers who follow neither.

1. Employment agreement consistency

Start with the employment agreement. If it says the employee's place of work is your office, a broad work from home policy may not automatically change that. If you want remote work to be an available option, check whether you need a contract review, update existing agreements or issue a variation for some employees.

Look closely at clauses dealing with:

• place of work
• hours and availability
• duties and supervision
• variation processes
• equipment return obligations
• confidentiality and intellectual property

Before you sign a new employment agreement, decide whether remote work is:

• a permanent feature of the role
• a temporary arrangement
• something the employer may approve at its discretion

That distinction matters. If your recruitment process strongly suggests a role is fully remote, but the agreement and policy leave that uncertain, disputes can arise quickly.

2. Good faith and fair process

New Zealand employment law requires employers and employees to deal with each other in good faith. In practice, that means decisions about remote work should not be arbitrary, misleading or handled without proper communication.

If you want a policy that allows you to review or withdraw work from home arrangements, say so clearly. Even then, you should usually follow a fair process before making a significant change for an employee. A policy should support sensible management decisions, not be used as a shortcut around consultation where consultation is needed.

3. Health and safety duties

Health and safety obligations do not disappear because work is done at home. If your business allows employees to work remotely, you still need to take reasonably practicable steps to manage risks arising from that work.

That does not mean inspecting every home in person. It does mean thinking through the actual risks of the role and setting sensible controls. Depending on the work, your policy may need to cover:

• ergonomic setup, such as chairs, desks and screen height
• electrical safety for work equipment
• trip hazards and workspace layout
• breaks and fatigue management
• mental health and isolation concerns
• incident reporting and who to contact
• what work can and cannot be done at home

A home office self-assessment checklist can be useful, but it should not become a box-ticking exercise. Managers should know when to escalate an issue, especially if an employee reports pain, stress or an unsafe setup.

4. Privacy and confidential information

Remote work often increases privacy risk. Staff may take calls in shared spaces, use home Wi-Fi, print papers at home or leave devices where family members can see information. If your business holds personal information about customers, staff or suppliers, your policy should address how that information is protected outside the office through clear privacy notice and data protection measures.

Consider including rules on:

• using only approved devices and software
• passwords, screen locks and multi-factor authentication
• secure storage of hard copy files
• limits on printing at home
• how documents are disposed of
• not discussing confidential matters in public or shared spaces
• reporting lost devices or suspected privacy incidents promptly

If you monitor employee activity on devices or systems, be careful about transparency. Staff should understand what monitoring occurs, why it occurs and how information is used. Hidden or poorly explained monitoring can create legal and employee relations issues.

5. Equipment, expenses and ownership

Arguments about equipment usually appear after a laptop breaks, a worker leaves, or someone expects reimbursement that was never clearly approved. A good policy states what the business provides and what the employee must supply.

Set out:

• what equipment is issued
• who owns the equipment
• whether personal devices can be used
• maintenance and support arrangements
• who pays for repairs caused by misuse, if anyone
• when equipment must be returned
• whether any expenses will be reimbursed and how approval works

Be careful with deductions from pay if equipment is lost or damaged. Those issues usually need proper written terms and should be handled carefully.

6. Working time, availability and performance management

A work from home policy should not leave managers guessing about when employees are working. If the role has set hours, say that clearly. If the arrangement is flexible, explain any core hours, response time expectations and meeting attendance requirements.

This is also the right place to state how performance will be measured. Focus on outputs, deadlines, communication and role requirements rather than trying to control every minute of the day. Overly intrusive rules can create resentment and may be hard to apply consistently.

7. Discrimination and consistency risks

Remote work requests can raise discrimination and disadvantage issues if they are handled inconsistently or without proper reasons. Some employees may seek work from home arrangements because of disability, caring responsibilities or other personal circumstances.

Your policy should give managers a structure for assessing requests based on business needs and role requirements, while still considering individual circumstances fairly. Blanket responses can create unnecessary risk, especially if there has been little thought about whether the role can be performed effectively in a different way.

Common Mistakes With Creating a Work from Home Policy

Most work from home disputes come from vagueness, inconsistency or outdated documents. A short, practical policy is usually better than a long policy that no one follows, but it still needs to cover the issues that commonly cause conflict.

Treating the policy as a substitute for the employment agreement

A policy does not automatically fix a poorly drafted agreement. If an employee's contractual place of work, hours or flexibility rights are unclear, your policy may not solve the problem. Before you sign, check whether some employees need contractual changes rather than a general policy update.

Using broad discretion without explaining it

Many employers want wording that says remote work can be changed or withdrawn at any time. That sounds flexible, but if the arrangement has become an established part of the role, relying on broad discretion alone may not be enough. Clear review and termination rights help, but fair communication and process still matter.

Ignoring health and safety because the work is done at home

This is one of the biggest mistakes. Employers sometimes assume that once an employee leaves the office, the home setup is entirely the employee's problem. That is not a safe assumption. Your business should identify likely risks, set expectations and create a process for reporting and addressing concerns.

Forgetting privacy in real-world situations

Privacy breaches often happen in ordinary moments, not dramatic ones. A staff member leaves a printed file on the kitchen table. Someone takes a client call in a shared café. A laptop is used by a family member. Policies need to reflect these real scenarios, especially if your team works with sensitive customer or employee information.

Being unclear about expenses

If the policy is silent on internet, phone or utility costs, staff may assume they are entitled to reimbursement. If your business offers an allowance, state how it works. If it does not, say that too. Clarity reduces frustration and avoids inconsistent promises from individual managers.

Applying the policy unevenly

This is where founders often get caught. One manager allows remote work freely. Another refuses it for similar roles. One employee is allowed to work from overseas for a month, another is told no without explanation. Inconsistent treatment can damage morale and create legal risk if decisions appear unfair or tied to protected personal circumstances.

Train managers on the policy and document the reasons for key decisions. A policy only works if the people applying it understand what it says.

Writing a policy that does not match how the business actually operates

Some policies look polished but do not reflect reality. They require formal approvals no one uses, impose office-based supervision rules that do not fit remote teams, or promise equipment support the business cannot provide. Staff quickly stop taking those policies seriously.

Make sure your policy matches your systems, staffing and culture. If you cannot support a requirement consistently, revise it before you sign rather than hoping it will sort itself out later.

FAQs

Do I need every employee to sign a work from home policy?

Not always, but employees should receive the policy and be clearly told it applies to them. If remote work changes contractual terms, you may also need an agreement variation or updated employment agreement.

Can I withdraw a work from home arrangement later?

Often yes, but it depends on what has been agreed and how established the arrangement has become. A clear review clause in the policy helps, but significant changes should still be handled fairly and consistently.

Am I responsible for health and safety in an employee's home office?

You still have health and safety duties for work carried out at home. What is reasonable will depend on the role and the risks, but a policy should address workstation safety, reporting and practical controls.

Should the policy cover use of personal devices?

Yes, if personal devices are allowed. The policy should set security standards, software requirements, access controls and what happens to business data when employment ends or the device is replaced.

Can I monitor employees who work from home?

You may be able to monitor business systems and devices in some circumstances, but monitoring should be lawful, proportionate and clearly explained. Staff should understand what is monitored and why.

Key Takeaways

• Creating a work from home policy is about setting clear, lawful rules for remote work that match your employment agreements and your day-to-day operations.
• Your policy should cover eligibility, approval, hours, communication, equipment, expenses, confidentiality, cybersecurity, health and safety, and review rights.
• Before you sign, check whether any existing employment agreements need updating so the policy does not conflict with contractual terms.
• Health and safety duties still apply when staff work from home, so your policy should deal with workstation risks, incident reporting and practical controls.
• Privacy and confidential information need special attention in remote settings, especially where staff handle customer, supplier or employee data.
• Consistent manager training and decision-making are essential, because uneven treatment of remote work requests can create legal and employee relations problems.

If you want help with employment agreement updates, flexible work arrangements, privacy obligations, and health and safety clauses, you can reach us on 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.