Health And Safety Compliance Requirements In New Zealand

When you're running a small business, health and safety can feel like "one more thing" on an already long list.

But staying on top of health and safety compliance isn't just paperwork - it's about setting up your business so your people can do their jobs safely, and so you're not exposed to avoidable legal and financial risk.

In New Zealand, health and safety obligations apply to almost every business, whether you've got one employee, a team of contractors, a shared workspace, or a busy shop floor. The good news is you don't need a massive corporate system to get this right - you just need a clear, practical approach that fits your business.

Below, we'll walk through what health and safety compliance means in NZ, who is responsible, and what small businesses should put in place from day one.

What Does "Health And Safety Compliance" Mean In New Zealand?

Health and safety compliance means your business is meeting the legal duties that apply to keeping people safe at work.

The main law is the Health and Safety at Work Act 2015 (HSWA). It sets out a framework where businesses must take reasonably practicable steps to prevent harm and manage risks in the workplace.

In plain English, compliance usually means you:

• Identify what could hurt someone at work (hazards and risks);
• Put controls in place to eliminate or minimise those risks;
• Train and supervise your workers (and contractors) so they can work safely;
• Consult with workers about health and safety matters;
• Keep appropriate records and respond properly if something goes wrong.

It's worth remembering that compliance is not always about having a perfect folder of documents. Regulators typically look at what you actually do in practice - and whether you're taking active, ongoing steps to keep people safe.

If you're ever unsure what "reasonably practicable" means for your particular business, it's a good idea to get tailored advice early, because the right approach can look different depending on your industry, your site, and your people.

Who Is Responsible For Health And Safety Compliance?

One of the biggest misconceptions we see is that health and safety is "the employee's responsibility" or "the site manager's problem". In NZ, legal duties usually sit at the top - with the business.

PCBUs (Most Small Businesses Fall Into This Category)

Under HSWA, the main duty holder is the PCBU - a "Person Conducting a Business or Undertaking". That sounds technical, but for small businesses it usually means:

• your company;
• you as a sole trader; or
• your partnership (depending on your business structure).

A PCBU has a primary duty to ensure, so far as is reasonably practicable, the health and safety of:

• workers engaged by the business (employees, contractors, labour hire, apprentices);
• workers whose work is influenced or directed by the business; and
• other people who may be put at risk by the work (customers, visitors, delivery drivers, members of the public).

This overlaps with broader employer obligations, and it's why taking a proactive approach to safety is part of your overall duty of care as a business owner.

Officers (Directors And Senior Decision-Makers)

If you operate through a company, directors and some senior leaders can be "officers" under HSWA. Officers have an additional duty to exercise due diligence to ensure the PCBU is complying.

That doesn't mean you have to be a safety expert. It does mean you should be able to show you're actively checking that:

• risks are being identified and managed;
• resources are being put into health and safety (time, budget, training); and
• incidents are being investigated and addressed.

Workers (Including Contractors)

Workers also have responsibilities, like taking reasonable care for their own health and safety and following reasonable instructions.

However, the existence of worker duties doesn't remove your obligations as the business. A common compliance gap is engaging contractors informally and assuming they "handle their own safety". If you use contractors regularly, it's worth making sure you've got your engagement structure and responsibilities clear, including using a properly drafted Contractors Agreement where appropriate.

What Does Health And Safety Compliance Look Like In Practice For Small Businesses?

Health and safety compliance is easiest when you treat it like an operating system - not a one-off task.

Here's a practical way to think about it: your goal is to build a routine where risks are identified, controlled, reviewed, and improved over time.

1. Identify Your Hazards And Assess Your Risks

Start by mapping out what happens in your business day-to-day. Then look for what could realistically cause harm.

Depending on your business, this might include:

• slips, trips and falls (retail, hospitality, offices, warehouses);
• manual handling injuries (stock, deliveries, repetitive tasks);
• machinery and tools (trades, manufacturing, workshops);
• chemical exposure (cleaning products, hair/beauty services);
• working alone or after hours;
• aggressive customers or public-facing risks;
• stress and fatigue (especially in high-pressure or seasonal businesses).

Many small businesses use a hazard register, checklists, and regular "walk-through" inspections to keep this manageable.

2. Put Controls In Place (Eliminate Or Minimise Risks)

Once you know the risks, you need controls that actually reduce them. The general approach is:

• Eliminate the risk if you can (remove the hazard entirely);
• Minimise the risk if elimination isn't reasonably practicable (systems, training, PPE, barriers, maintenance).

For example, if staff are lifting heavy stock, compliance might involve:

• changing how stock is delivered or stored;
• using trolleys or lifting aids;
• training workers on safe lifting techniques; and
• rostered breaks and supervision.

The "right" control depends on your workplace and what's reasonable for your business. The important thing is to be able to show you've thought about the risk and taken sensible steps to manage it.

3. Train, Supervise, And Set Clear Expectations

A lot of health and safety compliance issues don't come from "no policies" - they come from unclear expectations and inconsistent training.

As a small business, your training system might be simple, such as:

• a structured induction for every new worker;
• task-specific training (especially for higher-risk tasks);
• refreshers when a process changes; and
• clear reporting lines (who to tell if something's unsafe).

This is also where strong employment documentation helps. Your Employment Contract should reflect how your workplace operates (including expectations around policies, conduct, and safety procedures), rather than being a generic template that doesn't fit your business.

4. Consult With Workers (Don't Skip This)

HSWA places real importance on worker engagement and participation. Practically, that can look like:

• regular toolbox talks or team check-ins;
• asking workers what risks they're seeing on the job;
• encouraging near-miss reporting (without blame); and
• involving workers when you introduce new equipment, systems, or rosters.

This step often improves compliance and performance at the same time - because your workers are usually the first to spot hazards in real-world conditions.

What Policies And Documents Should Small Businesses Have?

Good documentation won't automatically make you compliant, but it does make compliance far easier to implement and prove (especially if there's a complaint, a serious incident, or an investigation).

The policies you need will depend on your workplace, but here are some common documents small businesses consider as part of health and safety compliance.

Core Workplace Policies

• Health and Safety Policy (your overall commitment and approach)
• Incident and Hazard Reporting Procedure (how workers report issues, who handles them, timeframes)
• Bullying, Harassment, and Violence Prevention (particularly for customer-facing businesses)
• Working Alone / After Hours Procedure (if relevant)
• Drug and Alcohol Policy (especially in higher-risk environments)

Many small businesses bundle these into a broader Workplace Policy set, so expectations are in one place and easier to enforce consistently.

Privacy And Monitoring (Cameras, Tracking, And Device Use)

Health and safety can overlap with privacy in practical ways - for example, if you use CCTV to deter theft and improve workplace security, or if you track vehicles for lone-worker safety.

That's where businesses can get caught out: you may be allowed to use cameras, but you still need to do it appropriately, lawfully, and transparently. If you're thinking about CCTV, it's worth checking the rules around cameras in the workplace, and getting advice if you're unsure how to set it up in a way that's fair and privacy-compliant.

Similarly, if you have broader employee information-handling practices (devices, security, monitoring, access), having an Employee Privacy Handbook can help you set boundaries clearly and reduce the risk of privacy complaints while still protecting your workplace.

Drug Testing (If You're Considering It)

Some industries use drug testing as part of a safety programme, but it's a sensitive area that needs to be handled carefully. If it's relevant to your workplace, you'll typically want clear policy settings, a fair process, and (where required) proper consent steps. Depending on your approach, a Drug Test Consent Form can be part of ensuring the process is properly documented.

As always, drug and alcohol management should be proportionate to the safety risk and implemented fairly - and because the legal requirements can be fact-specific, it's worth getting advice before rolling out testing to avoid creating employment risk while trying to improve safety.

How Do Incident Reporting And WorkSafe Obligations Work?

Even with the best systems, incidents can happen. Health and safety compliance includes being ready for that - and responding properly.

Notifiable Events

Under HSWA, certain workplace events are "notifiable" (meaning WorkSafe must be notified). This can include a death, a notifiable injury or illness, or a notifiable incident (a serious near-miss). Whether an event is notifiable depends on the circumstances and the legal definitions, so it's important to check WorkSafe guidance (or get advice) if you're unsure.

For small businesses, the key is having an internal process so your team knows:

• what may count as a serious or notifiable event in your workplace context;
• who needs to be told immediately;
• how to preserve the site (where required); and
• how to record what happened accurately.

If you don't have a process, people often "deal with it informally" in the moment - and that can lead to missed notifications, poor recordkeeping, and bigger problems later.

Investigations And Corrective Actions

After an incident or near-miss, you should look at:

• what happened (facts only, not assumptions);
• what caused it (systems, training, environment, supervision); and
• what you'll change to reduce the chance of it happening again.

These corrective actions are often where a business can show genuine compliance: you're not just reacting - you're improving your systems.

What If A Worker Can't Work Because Of A Safety Issue?

Sometimes a health and safety issue leads to temporary closure, reduced operations, or a worker being unable to safely perform their duties.

This can quickly become both a safety issue and an employment law issue (for example, pay obligations, alternative duties, and process). If you're facing a situation where staff can't work due to a disruption, it may also be relevant to understand what employee stand down means in NZ and how to approach it carefully.

This is a good example of why it's worth getting advice early - because doing the "safety" part right doesn't automatically mean the employment side is covered too.

Common Health And Safety Compliance Mistakes Small Businesses Make

Most small businesses aren't trying to cut corners - they're just busy, growing fast, and learning as they go.

Here are some of the most common compliance gaps we see, and how you can avoid them.

1. Relying On Generic Templates That Don't Match The Workplace

A copied policy that doesn't reflect your actual work practices is hard to follow and even harder to enforce. If something goes wrong, it can also highlight that your business wasn't genuinely managing risks.

Your documents should fit your industry, your hazards, and your day-to-day operations - and be reviewed when things change (new equipment, new site, new services, new team members).

2. Treating Contractors Like They're "Outside" Your Safety System

If contractors work in your workplace, use your equipment, interact with your staff, or affect your customers, they're part of your safety picture.

You don't need to control everything they do - but you do need to make sure responsibilities are clear and risks are managed at the points where your business influences the work.

3. Not Training New Staff Properly (Especially During Busy Periods)

When you're short-staffed, it's tempting to throw someone into the deep end and "explain as we go". That's often when injuries happen.

A simple induction checklist and role-specific training plan can significantly reduce risk, and it also helps new workers feel confident and supported.

4. Focusing Only On Physical Safety And Ignoring Psychosocial Risks

Stress, fatigue, burnout, bullying, and customer aggression can all create real health and safety risks - and they can escalate into absenteeism, high turnover, and employment disputes.

Even small changes can help, like clearer rosters, escalation procedures for aggressive customers, and a culture where workers can raise issues early.

5. Forgetting That "Compliance" Is Ongoing

Health and safety compliance isn't something you do once and tick off. It's an ongoing process of:

• reviewing hazards;
• checking whether controls are working;
• updating training; and
• responding to changes in your business.

Think of it like accounting: you don't do it once at the start of the year and hope for the best - you build a system and keep it running.

Key Takeaways

• Health and safety compliance in New Zealand is mainly governed by the Health and Safety at Work Act 2015, and it applies to most small businesses from day one.
• As a PCBU, your business has a primary duty to keep workers and others safe, so far as is reasonably practicable - and company directors may have additional due diligence obligations.
• Practical compliance usually means identifying hazards, putting controls in place, training and supervising workers, and consulting with your team regularly.
• Policies and clear documentation support compliance, but they need to match how your business actually operates (templates that don't fit can create risk).
• Incidents and near-misses should be reported, recorded, investigated, and used to improve your safety systems - and some events may need to be notified to WorkSafe.
• Health and safety often overlaps with employment and privacy issues (like drug testing, CCTV, or operational shutdowns), so it's worth getting advice early to avoid creating new legal problems while solving safety ones.

If you'd like help getting your health and safety compliance right - including workplace policies, employment agreements, and contractor documentation - you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.