Health And Safety At Work Act In NZ: Small Business Compliance Checklist

If you run a small business, you’re probably juggling everything at once - customers, cashflow, staff, suppliers, and keeping operations moving day to day.

Health and safety can sometimes feel like “one more thing” to add to the list. But the Health and Safety at Work Act 2015 (HSWA) isn’t optional, and it applies to almost every New Zealand business (even very small ones).

The good news is you don’t need a complicated, corporate-level system to comply. What you do need is a practical approach that matches your risks, your size, and how your business actually runs.

Below, we’ll break down what the Health and Safety at Work Act in NZ requires, what “compliance” looks like for small businesses, and the steps you can take to build solid legal foundations from day one.

Note: This article is general information only and doesn’t take into account your specific circumstances. It isn’t legal advice.

What Is The Health And Safety At Work Act (And Does It Apply To You)?

The Health and Safety at Work Act is New Zealand’s primary workplace health and safety legislation. It sets out who has duties, what those duties are, and how work health and safety should be managed in practice.

In most cases, if you run a business (even a one-person operation), the HSWA applies to you.

PCBU: The Key Concept For Business Owners

Under the HSWA, the main duty holder is a PCBU, which stands for Person Conducting a Business or Undertaking.

That sounds formal, but practically it usually means:

• a company
• a sole trader
• a partnership
• any other entity running a business or undertaking

So if you run a café, tradie business, online fulfilment business, beauty service, office-based consultancy, or retail store - you’re likely a PCBU.

Workers, Officers, And “Other People”

The HSWA doesn’t just talk about “employees”. It covers:

• workers (including employees, contractors, subcontractors, labour hire workers, apprentices, and, in some cases, volunteers)
• officers (e.g. company directors and people who make high-level decisions)
• other persons (like customers, visitors, clients, and the general public who could be affected by your work)

This matters because your duties aren’t limited to what happens to your staff - they extend to anyone who may be put at risk by your work activities.

What Are Your Core Duties As A Small Business Under The HSWA?

The HSWA is built around a simple idea: if you create the work, you’re expected to manage the risks that come with it.

Your main duty as a PCBU is to ensure, so far as is reasonably practicable, the health and safety of:

• your workers while they’re at work, and
• others who could be affected by your work (e.g. customers, visitors, members of the public)

“Reasonably practicable” is a key phrase. It doesn’t mean you must eliminate every possible risk at any cost. It means you should do what a reasonable business would do in your circumstances, taking into account:

• how likely the risk is
• how serious the harm could be
• what you know (or should know) about the risk and ways to control it
• what controls are available and suitable
• cost, but only after weighing it against the level of risk (you can’t ignore serious risks just because it’s expensive)

What You’re Expected To Provide

While every workplace is different, HSWA compliance for small businesses commonly includes taking reasonable steps to provide:

• a safe work environment (e.g. safe premises, access ways, lighting, ventilation)
• safe plant and equipment (e.g. maintained machinery, fit-for-purpose tools, safe electrical equipment)
• safe systems of work (e.g. procedures for high-risk tasks, training, supervision)
• adequate facilities (e.g. first aid, toilets, drinking water, rest areas where appropriate)
• information, training, instruction, and supervision suited to the work and the worker
• monitoring of worker health and workplace conditions where relevant (e.g. exposure to noise, dust, chemicals, fatigue risks)

Officers Have Their Own Duty: Due Diligence

If you’re a director (or in a similar governance role), you’re likely an “officer” under the HSWA. Officers must exercise due diligence to ensure the PCBU complies.

In plain terms, you should be able to show you’re not ignoring health and safety - you’re actively checking systems exist, resourcing them appropriately, and verifying they’re working.

Workers Also Have Duties

Your workers must take reasonable care of their own health and safety and ensure their actions don’t harm others. They also need to follow reasonable instructions and policies.

This is one reason it’s worth having clear workplace rules in writing, such as a Workplace Policy that outlines expectations around safe work practices, reporting hazards, and incident escalation.

How To Build A Practical Health And Safety System (Without Overcomplicating It)

Small business compliance isn’t about having thick manuals nobody reads. It’s about having a system that actually works in your workplace.

If you’re starting from scratch (or your current system is a bit ad hoc), a simple framework is:

1) Identify Your Risks (Be Honest About What Could Go Wrong)

Start by listing your key activities and where harm could occur. For example:

• slips, trips and falls in a retail store or café
• manual handling injuries in warehousing or deliveries
• cuts/burns in food preparation
• vehicle risks for mobile businesses
• aggressive customer behaviour
• fatigue and stress in high-pressure environments
• remote or isolated work risks

Don’t forget less “visible” risks, like psychosocial hazards (stress, bullying, burnout). These can still be health and safety issues if they arise from the way work is designed or managed.

2) Put Controls In Place (Eliminate Or Minimise Risk)

Once you’ve identified risks, think about how you control them. Under the HSWA, the primary approach is to eliminate risks so far as is reasonably practicable, and if that’s not possible, to minimise risks so far as is reasonably practicable.

In practice, “minimise” can include steps like isolating people from the hazard (for example, barriers, restricted access, guards), along with things like PPE, training, supervision, signage, and rotating duties.

A good “small business” approach is to focus on your top 5–10 highest risks and control them well, rather than trying to document every minor possibility.

3) Document The Essentials (So You Can Prove What You Do)

Even if your system is simple, you should be able to show your approach is deliberate and consistent. Common documents include:

• a hazard/risk register (even a spreadsheet is fine)
• induction and training records
• equipment maintenance checks
• incident and near-miss reports
• emergency procedures (fire, earthquake, serious injury)

Many small businesses roll these into a single practical handbook that people actually use. This is where a Staff Handbook can be a helpful “home base” for policies, reporting processes, and behavioural expectations (including health and safety responsibilities).

4) Train People Properly (Induction Matters More Than You Think)

One of the biggest risk points for small businesses is assuming people “already know” what to do - especially when you hire someone experienced.

At a minimum, your induction should cover:

• how to report hazards and near-misses
• first aid and emergency procedures
• site-specific risks (not just general industry risks)
• any required PPE and how to use it
• who supervises and who to contact if something goes wrong

If you employ staff, it’s also worth ensuring your Employment Contract aligns with your expectations (for example, setting out duties, training requirements, and the obligation to comply with workplace policies).

5) Keep Reviewing (Because Your Business Won’t Stay The Same)

Health and safety is not “set and forget”. Your risks change as your business changes - new staff, new equipment, new location, new services, new hours, new suppliers.

A practical rhythm could be:

• quick monthly check-ins on hazards/incidents
• a more detailed review every 6–12 months
• a review whenever there’s a significant change (new premises, new plant, new high-risk task)

Working With Staff, Contractors, And Other Businesses (Where Small Businesses Often Get Caught Out)

Many HSWA issues arise where responsibilities overlap - especially when you have contractors on site, use labour hire, or share a workplace with another business.

Contractors And Subcontractors Still Create HSWA Duties For You

Even if someone is “not an employee”, they can still be a “worker” under the HSWA.

That means you may still need to:

• make sure they don’t face unmanaged risks while working for you
• provide site-specific safety information
• coordinate with them if their work creates risks for others

It also means your paperwork matters. A good Contractors Agreement can help set expectations on safety responsibilities, reporting requirements, and who provides what (tools, PPE, training, supervision).

Realistically, though, documents aren’t enough on their own - you’ll also want to ensure contractors are inducted and that safety is actually followed in practice.

Overlapping Duties: You May Need To Consult, Cooperate, And Coordinate

Under the HSWA, where multiple PCBUs have duties in relation to the same work (for example, a landlord and tenant in a commercial site, or a principal and subcontractor on a job), those PCBUs must, so far as is reasonably practicable:

• consult with each other
• cooperate with each other
• coordinate activities

In a small business context, this can be as simple as:

• confirming who is responsible for which safety controls
• sharing hazard information (e.g. asbestos registers, access restrictions, shutdown periods)
• aligning procedures for emergencies and incident reporting

Remote Work, Devices, And Privacy

If your team works from home (full-time or hybrid), you still have health and safety responsibilities, so far as is reasonably practicable. For example, you may need to take reasonable steps to ensure the work setup is safe and risks like fatigue are managed.

Often, you’ll also be dealing with personal information (employee contact details, medical certificates, incident reports). If you’re collecting and storing that kind of information, an Employee Privacy Handbook and a public-facing Privacy Policy can help keep your practices consistent with the Privacy Act 2020 (and build trust with your team and customers).

What Happens If Something Goes Wrong? Notifications, Investigations, And Enforcement

Even with good systems, incidents can happen. What matters is how you respond.

Notifiable Events: When You May Need To Notify WorkSafe

The HSWA includes obligations to notify WorkSafe of certain serious events (often called “notifiable events”). These can include:

• a death
• certain serious injuries or illnesses
• a notifiable incident (an unplanned event that exposes someone to serious risk, even if nobody is injured)

If you think an event may be notifiable, you should act quickly. There can also be requirements around preserving the site (with limited exceptions, such as helping an injured person or making the area safe).

Because “notifiable” can be a legal judgement call depending on what happened, it’s usually worth getting advice early, particularly if WorkSafe may become involved.

Investigations And Records

From a practical standpoint, you should aim to:

• make the area safe immediately
• ensure the injured person gets appropriate help
• document what happened (photos, statements, timeline)
• record any contributing factors (equipment, training, supervision, fatigue, workload)
• identify and implement corrective actions

This isn’t just about compliance - it’s also about preventing the incident from happening again, and showing you take your duties seriously.

Penalties And Personal Risk

One reason small businesses take the Health and Safety at Work Act in NZ seriously is that the consequences of non-compliance can be significant. Depending on what happened and the nature of the breach, HSWA penalties can include:

• fines for the business (PCBU)
• fines for individuals (including officers)
• in the most serious cases, potential imprisonment for individuals

This is also where “doing the basics well” makes a real difference. If you can show you identified risks, took practical steps to manage them, trained your team, and kept reviewing your system, you’re in a much stronger position if something does go wrong.

Key Takeaways

• The Health and Safety at Work Act applies to most small businesses in New Zealand, including sole traders and companies.
• As a PCBU, you must ensure health and safety so far as is reasonably practicable, including for workers and other people affected by your work.
• HSWA compliance doesn’t need to be complicated - focus on your highest risks, put sensible controls in place, train your team, and document what you do.
• Contractors, labour hire workers, and shared worksites can create overlapping duties, so it’s important to coordinate responsibilities clearly.
• Have clear written policies and agreements in place so expectations are consistent, enforceable, and easy to follow day to day.
• If a serious incident occurs, you may have notification and site preservation obligations, so acting quickly (and getting advice early) matters.

If you’d like help getting your health and safety documents and workplace policies set up properly, or you’re not sure what the HSWA requires for your particular business, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.