Health And Safety Requirements In New Zealand For Businesses And Startups

If you’re running a small business or building a startup, health and safety can feel like one more “big business” obligation that you’re supposed to figure out on top of everything else.

The good news is that New Zealand’s health and safety requirements are very doable when you break them down into practical steps. You don’t need a 100-page manual on day one - you need a system that fits your team, your workplace, and your risks.

In this guide, we’ll walk you through what health and safety requirements generally look like in New Zealand, what you need to have in place as you grow, and common pitfalls that can create legal and operational headaches later.

What Do “Health And Safety Requirements” Mean For NZ Businesses?

When people talk about health and safety requirements, they’re usually referring to your legal duty to keep people safe at work - and to take reasonable steps to prevent harm.

In New Zealand, the main law to be aware of is the Health and Safety at Work Act 2015 (HSWA). This Act applies broadly, including to early-stage startups, home-based businesses, and companies with only one or two staff.

HSWA uses the concept of a PCBU (a “person conducting a business or undertaking”). In most cases, if you own or run a business, you’re a PCBU.

As a PCBU, you generally have a duty to ensure, so far as is reasonably practicable, the health and safety of:

• Workers (employees, contractors, labour hire, casuals, apprentices, and often volunteers depending on context)
• People influenced or directed by the business (for example, interns or trainees)
• Other people who could be put at risk by your work (customers, visitors, members of the public)

There isn’t one single checklist that works for every workplace. Health and safety standards in NZ are risk-based - meaning what’s “reasonably practicable” depends on your work environment, your hazards, and what a responsible business would do in your industry.

That said, most small businesses and startups can meet health and safety requirements by focusing on the fundamentals: identify risks, control them, train your team, document what you’re doing, and review it as you grow.

Who Is Responsible (And What About Directors And Founders)?

One of the most common misunderstandings we see is assuming health and safety is “an HR problem” or something you only worry about once you’ve hired a bigger team.

In practice, responsibility is shared - but it starts at the top.

The Business (PCBU) Has The Main Duty

Your business (as the PCBU) has the primary responsibility to ensure health and safety, so far as is reasonably practicable. That includes providing safe systems of work, maintaining a safe work environment, and ensuring people have the information, instruction, training, and supervision they need.

You also generally need to engage with workers and give them reasonable opportunities to participate in health and safety matters (for example, raising concerns, contributing to risk controls, and being involved in changes that may affect their safety).

Company Directors And Officers Have Due Diligence Duties

If you operate through a company, directors (and some other senior decision-makers) can be “officers” under HSWA. Officers have a duty to exercise due diligence to ensure the PCBU complies with its duties.

In plain terms, due diligence usually means directors should be able to show they’ve taken active steps to:

• keep up-to-date on health and safety matters
• understand the business’s hazards and risks
• ensure the business has appropriate resources and processes to eliminate or minimise risks
• ensure there are processes for incident reporting and responding (including escalation where required)
• verify that the business is actually doing what it says it’s doing

For startups, this is especially important because systems are often informal early on. As you grow (more people, more sites, more customers, more investors), it becomes much harder to “retrofit” health and safety after an incident.

If you’re setting up a company and want strong governance foundations alongside your operational policies, documents like a Company Constitution can be part of your broader structure - not a health and safety document itself, but a building block in how decisions and responsibilities are managed.

What Core Health And Safety Requirements Should Small Businesses Put In Place?

There’s no single perfect system. But there are a few building blocks that tend to apply across most industries - retail, hospitality, trades, logistics, professional services, and tech startups.

Think of these as the “minimum viable compliance” steps that also make your business easier to run.

1) Identify Hazards And Assess Risks

Start by listing hazards in your workplace and work activities. A “hazard” is anything that could cause harm.

Examples include:

• slips, trips, and falls (wet floors, cords, uneven surfaces)
• manual handling (lifting stock, moving equipment)
• machinery or tools
• chemicals (cleaning products, solvents)
• fatigue (long shifts, night work)
• stress and psychosocial risks (bullying, excessive workload, poor role clarity)
• driving and vehicle use (deliveries, site visits)

From there, assess the level of risk and decide what controls you’ll use to eliminate or minimise it.

2) Put Controls In Place (And Make Them Practical)

Controls can include:

• Elimination: removing the hazard entirely (e.g. stopping a dangerous process)
• Substitution: using a safer alternative (e.g. less hazardous chemicals)
• Engineering controls: physical changes (guards on machinery, ventilation)
• Administrative controls: processes and training (procedures, checklists, rosters)
• PPE: personal protective equipment (gloves, eyewear, hearing protection)

A common mistake is relying only on policies and PPE when the bigger issue is poor layout, missing maintenance, or unrealistic scheduling. If you can eliminate or reduce the hazard earlier in the chain, do that first.

3) Train People And Supervise Appropriately

Training doesn’t have to be complicated - but it should be real.

For most small businesses, it’s sensible to have:

• a simple induction for new staff and contractors
• task-specific training for higher-risk tasks (tools, machinery, chemicals, vehicles)
• refresher training when processes change
• clear supervision arrangements (especially for new or junior team members)

Many businesses overlook contractors. If you engage contractors (for example, IT contractors in-office, cleaners, couriers, tradies, or labour hire), you still need to think about how they’ll work safely at your site and how responsibilities are shared.

It can also help to set expectations clearly in your legal paperwork - for example, using a fit-for-purpose Contractor Agreement to cover work scope, processes, and practical safety responsibilities (while keeping in mind you can’t “contract out” of your HSWA duties).

4) Have A Reporting Process For Incidents, Near Misses, And Hazards

If your team doesn’t report hazards and near misses, you’ll only find out about problems after someone is injured (or after a customer complaint, WorkSafe visit, or insurance issue).

At a minimum, have a clear way for people to report:

• injuries and illness
• near misses
• hazards that need fixing
• concerns about unsafe work

Keep records of what happened and what you did in response. Even a simple log can make a big difference.

It’s also important to understand when you must notify WorkSafe. Under HSWA, PCBUs have specific notification duties for notifiable events (notifiable injuries or illnesses, notifiable incidents, and notifiable work-related deaths). If something serious happens, you may need to notify WorkSafe as soon as possible, and you may also need to preserve the incident site until advised otherwise (subject to limited exceptions like making the area safe or helping an injured person).

5) Document The System You’re Actually Using

Health and safety documentation doesn’t need to be over-engineered. But you should be able to show what you’ve decided, what you’ve trained people on, and what controls are in place.

This is often where startups get stuck: you move fast, things change weekly, and documentation feels like it slows you down.

A practical approach is to document the repeatable parts:

• hazard register and key controls
• induction checklist
• incident/near-miss reporting form
• emergency plan (fire, earthquake, first aid)
• contractor/site visitor procedures (if relevant)

Health And Safety Requirements For Different Work Setups (Office, Remote, Retail, Trades)

Health and safety requirements across New Zealand are based on the same legal framework, but what you actually need to do will change depending on how and where work happens.

If You Run An Office Or Studio

Office-based risks might look “low risk” - but they still matter. Think ergonomics, emergency preparedness, mental wellbeing, and maintaining a safe environment for staff and visitors.

Common controls include ergonomic workstation guidance, clear emergency procedures, first aid arrangements, and policies on psychosocial safety (like respectful behaviour and escalation pathways).

If You Have Remote Or Hybrid Staff

If your employees work from home (or from client sites), you still have duties under HSWA. You may not control their entire home environment, but you can still take reasonable steps such as:

• providing guidance on safe workstations and breaks
• making it easy for people to raise health and safety issues
• setting reasonable workload expectations to reduce fatigue and stress
• ensuring appropriate support and communication

Remote work can also raise practical questions about how you handle personal information (for example, if staff are using personal devices or working across shared spaces). If you collect or store personal information, having a fit-for-purpose Privacy Policy can help support your broader internal compliance and governance.

If You Operate A Shop, Café, Or Customer-Facing Space

Customer-facing businesses usually have a wider “bubble” of people affected by work, including customers and delivery drivers.

Common risks include slips/trips, hot surfaces, sharp tools, crowding, security risks, and manual handling. You’ll also want practical processes for:

• cleaning and maintenance schedules
• safe storage of stock and chemicals
• incident reporting (including customer incidents)
• training staff for busy periods (when mistakes are more likely)

If You’re In Trades, Construction, Or On-Site Services

Higher-risk industries generally require more formal systems because hazards are more severe and more regulated in practice. You may need stronger site-specific procedures, pre-start checklists, PPE systems, and clearer contractor management.

If you’re supplying services to other businesses, you’ll often be asked for evidence of your health and safety practices as part of onboarding or procurement. Having clear contracts in place can support this relationship management too, and a tailored Service Agreement can help set expectations around scope, site access, safety processes, and responsibility boundaries.

How Do You Manage Health And Safety When Hiring Staff Or Contractors?

As soon as you bring other people into your business (even casually), your health and safety obligations tend to become more visible - and the risks of “informal” arrangements go up.

Employees: Set Expectations Clearly From Day One

Health and safety isn’t just about equipment and policies. It’s also about role clarity and accountability.

A well-drafted Employment Contract can help you set expectations around:

• hours and fatigue management
• following policies and procedures
• reporting hazards and incidents
• training requirements and supervision

This doesn’t replace your HSWA obligations - but it supports them by making the working relationship clear and reducing misunderstandings.

Contractors: You Can’t “Outsource” Your Safety Duties

Startups often rely heavily on contractors, especially early on. Under HSWA, you still need to ensure (so far as reasonably practicable) that contractor work doesn’t create risks to your workers or others.

You also need to coordinate with other PCBUs where duties overlap (for example, if you work at a client’s site or share a workspace).

Practically, this means you should:

• check contractor competence for the work they’re doing
• give site-specific safety information (where relevant)
• agree on how hazards and incidents will be reported
• make sure responsibilities aren’t unclear (unclear roles lead to gaps)

Policies And Handbooks Can Make Compliance Easier

When your team grows beyond a few people, consistent policies matter. That’s where a Staff Handbook and workplace policies can help you roll out clear expectations and processes without reinventing the wheel for every new hire.

If you’re unsure what should be in a policy (or what is “nice to have” versus genuinely necessary), it’s worth getting tailored advice - especially because your industry and work environment will change what is appropriate.

What Happens If You Don’t Meet Health And Safety Requirements?

It’s tempting to treat health and safety as a “later” problem, particularly if cashflow is tight and you’re focused on sales, product, and hiring.

But ignoring health and safety requirements can create risks that are expensive and disruptive, such as:

• injuries and downtime (lost productivity, staff shortages, operational delays)
• employee claims and disputes (especially if the business ignored known risks)
• WorkSafe investigations and enforcement action (which can be time-consuming even if you’re trying to cooperate)
• fines and penalties in serious cases
• reputational damage (particularly for consumer-facing brands and venture-backed startups)
• contractual consequences (some commercial clients can terminate or suspend work if you can’t meet health and safety expectations)

Also, health and safety issues often overlap with other legal areas. For example:

• If you introduce workplace cameras or monitoring as a “safety” measure, you’ll want to consider privacy implications.
• If you’re recording calls for training or safety reasons (for example, in a customer service team), you’ll want to consider consent and notice obligations.
• If a workplace injury becomes an employment issue, you’ll need a fair process and good documentation.

The practical takeaway is simple: even basic health and safety systems reduce the chance you’ll end up dealing with multiple legal problems at once.

Key Takeaways

• Health and safety requirements in New Zealand largely come from the Health and Safety at Work Act 2015, and they apply to most small businesses and startups from day one.
• As a PCBU, you generally must take reasonably practicable steps to keep workers and other people safe, including customers and visitors where relevant.
• Health and safety responsibilities start at the top: directors and founders can have “officer” due diligence duties, so it should be part of how you run the business - not just an operational detail.
• Most businesses can meet health and safety requirements by focusing on practical fundamentals: identify hazards, put controls in place, train people, and keep simple records.
• You generally need worker engagement and participation processes that fit your size and risk profile, so people can raise issues and contribute to safer ways of working.
• Make sure you understand your duties around notifiable events and WorkSafe notification, and have a plan for what to do if a serious incident occurs.
• Your approach should match your work setup (office, remote, customer-facing, or high-risk on-site work), because health and safety standards in NZ are risk-based.
• When hiring staff or contractors, make health and safety expectations clear and coordinate responsibilities, supported by the right documentation and processes.
• If you’re unsure what’s “reasonably practicable” for your business, getting tailored advice early can save you major cost and disruption later.

If you’d like help getting your legal foundations right as you grow - including contracts, policies, and practical compliance - you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.