Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you run a small business, it’s easy to think “first aid” just means keeping a dusty kit in the cupboard and hoping you never need it.
But under New Zealand’s health and safety laws, first aid is part of your wider duty to keep people safe at work - and what’s “enough” first aid depends on your workplace risks, where you operate, and how your team works day to day.
This guide explains the workplace first aid requirements NZ employers need to understand under the Health and Safety at Work Act 2015 (HSWA) and related regulations, along with practical steps you can take to stay compliant (and genuinely ready) from day one.
What Does The Health And Safety At Work Act Require For First Aid?
The HSWA doesn’t set a one-size-fits-all “you must have X kits and Y first aiders” rule for every business. Instead, it sets a primary duty of care that requires you (as a PCBU - “person conducting a business or undertaking”) to ensure, so far as is reasonably practicable, the health and safety of workers and others who could be affected by your work.
In plain terms: you need to make sure first aid is available and appropriate for the risks in your workplace.
From a compliance perspective, first aid sits within your broader duty of care as an employer/PCBU. It’s also closely linked to your wider health and safety systems - because “we’ll call an ambulance” is not a first aid plan on its own.
It’s also worth noting that the HSWA is supported by regulations (including the Health and Safety at Work (General Risk and Workplace Management) Regulations 2016), which set more specific duties around providing first aid, first aid facilities, and ensuring an adequate number of workers are trained (or that other suitable arrangements are in place).
So What Counts As “First Aid Requirements” Under HSWA?
Practically, most workplaces will be expected to have:
- Access to first aid facilities (usually a suitable first aid kit, but sometimes more depending on the work)
- Access to trained first aiders (or alternative arrangements where training isn’t reasonably practicable)
- Clear procedures for what to do if someone is injured or becomes unwell
- Access to emergency support (e.g. phone coverage, emergency contact info, and an ability to summon help)
WorkSafe guidance (and common industry practice) generally expects you to size these arrangements based on risk - for example, a low-risk office with five people is different to a construction site, a manufacturing workshop, or a remote service team on the road.
How Do You Work Out The Right First Aid Setup For Your Workplace?
If you’re trying to meet your workplace first aid obligations, the key question is:
“What could realistically go wrong here, and how quickly could we respond?”
A good approach is to do a simple, practical risk assessment focusing on:
- Workplace hazards (machinery, sharp tools, heat, chemicals, heavy lifting, customer aggression, slips/trips)
- Work environment (office, retail floor, warehouse, outdoors, vehicle-based, client sites)
- Number of workers per shift (including part-timers and casuals)
- Shift structure (day/night, weekends, lone work)
- Workplace layout (multiple floors, separate buildings, large site areas)
- How quickly emergency services can arrive (especially relevant in rural/remote areas)
- Public/customer access (because “others” can be affected by your work too)
Risk-Based First Aid: Why It Matters
Under HSWA, the standard isn’t “what’s cheapest” - it’s what’s reasonably practicable given the likelihood and severity of harm and what you know (or should know) about managing it.
That’s why having the right kit but no trained first aider (or having a trained first aider who is never rostered on) can still leave you exposed.
Don’t Forget: First Aid For Remote, Mobile, And Off-Site Work
A common blind spot for small businesses is assuming first aid only applies at your main premises. But if your workers are:
- driving between client sites,
- working in clients’ homes or workplaces,
- doing deliveries,
- working alone, or
- working in areas with limited phone reception,
you’ll need a first aid plan that makes sense for that reality (for example: vehicle kits, check-in procedures, and ensuring at least one person on shift is first aid trained).
What First Aid Facilities Should You Have (Kits, Rooms, And Equipment)?
For many small businesses, “first aid facilities” will start with:
- a properly stocked first aid kit, accessible and clearly labelled
- a basic process so staff know where it is and how to get help
But your needs can increase depending on risk.
First Aid Kits: Practical Must-Haves
Your kit should be appropriate for your work. For example:
- An office kit might focus on minor cuts, burns, and common issues like headaches or sprains.
- A hospitality or food business may need burn treatment supplies and a plan for slips and cuts.
- A workshop or trade business might need more extensive wound care and eye wash supplies.
Whatever your business type, the key is that your kit should be:
- easy to access quickly (not locked away or hidden behind stock)
- kept in-date (with someone responsible for restocking)
- consistent across locations if you operate multiple sites
Do You Need A Dedicated First Aid Room?
Not every business needs a first aid room. However, if your workplace is larger, higher-risk, or has a higher chance of serious injury, you may need more than a kit - such as:
- a suitable area to treat an injured person privately and safely
- additional first aid equipment (depending on hazards)
- clear access for emergency services (including site entry instructions)
As your business grows, it’s worth reviewing whether your first aid setup still matches your headcount and operations - especially if you add shifts, vehicles, or new service lines.
Do You Need A Trained First Aider - And How Many?
In practice, many workplaces will be expected to have at least one trained first aider available when work is being carried out - but the “right” number depends on your risk profile and staffing arrangements.
It’s not just about headcount on paper. You should think about coverage, including:
- who is actually on site during each shift
- breaks and meal times
- sick leave and annual leave
- multiple floors/areas
- remote or off-site work
What Training Is Expected?
First aid training should be suitable for the risks your workers might face. For example:
- low-risk workplaces may need basic first aid training and refreshers
- higher-risk workplaces may need additional training specific to hazards (e.g. chemical exposure or serious trauma scenarios)
There’s also a practical business reason to take training seriously: if someone is injured and you can’t respond appropriately, the outcome can be much worse - and the regulator may ask what systems you had in place.
Where Should These Requirements Live In Your Business Documents?
First aid is the sort of thing that should be written into your internal systems so it’s not forgotten when you’re busy.
For example, you might record expectations about emergency response, first aid kits, and incident reporting inside a Workplace Policy or a wider safety framework, and then reinforce practical “how we do things here” guidance in a Staff Handbook.
It also helps to make sure your core employment documents support your approach - for example, your Employment Contract can reference your health and safety expectations and the obligation for workers to follow reasonable instructions and policies.
First Aid, Incident Reporting, And Privacy: What Records Should You Keep?
When first aid is provided, it’s common (and often sensible) to keep a basic record - particularly if:
- the incident was more than minor,
- the injury happened because of a workplace hazard,
- the worker needed time off, or
- you may need to demonstrate what actions you took.
However, there’s a balance to strike: first aid records often contain health information, which is generally treated as particularly sensitive in practice and needs to be handled carefully under the Privacy Act 2020.
How Do You Handle Health Information Properly?
Good privacy practice includes:
- only collecting what you actually need (don’t over-collect details)
- storing records securely (limit access to managers/HR or a responsible person)
- being clear about why you’re collecting it (e.g. incident management, legal compliance)
- not sharing it casually with other staff
If your business collects and stores personal information (including staff health information in incident logs), it’s often appropriate to have a clear Privacy Policy in place to explain how personal information is handled.
Do You Need Consent Forms For Medical Information?
Sometimes employers want extra information from a worker’s doctor, or they’re dealing with return-to-work planning after a serious incident. This is an area where you want to be careful - because asking for medical details can quickly become a privacy and employment law issue if it’s not handled properly.
Depending on the situation, you may need a properly drafted Medical Release Consent Form (and you’ll want to make sure the request is relevant and proportionate).
If you’re unsure what you can request or store, it’s worth getting tailored advice - this is one of those areas where well-meaning employers can accidentally overstep.
Common Mistakes Small Businesses Make With Workplace First Aid (And How To Avoid Them)
Even employers with the best intentions often fall into a few predictable traps. Fixing these early is usually straightforward - and it can save you a lot of stress later.
1. Having A First Aid Kit That No One Can Find
If it’s not clearly labelled, accessible, and known to staff, it won’t help when something goes wrong.
Practical fix: Put kit locations into onboarding, label them clearly, and do quick reminders during team meetings (especially if you’ve moved premises or renovated).
2. Relying On One First Aider Who’s Not Always There
If your only trained first aider is part-time, works different shifts, or goes on leave, you may end up with no coverage.
Practical fix: Train multiple people, plan for shift coverage, and assign a backup.
3. Not Updating First Aid When The Business Changes
Your workplace first aid setup might have been fine when you had three staff in one room. But if you expand to a warehouse, add weekend shifts, or send workers off-site, your needs change too.
Practical fix: Review first aid arrangements whenever you change:
- premises or layout
- headcount
- hazards (new equipment, new chemicals, new services)
- working hours/shifts
4. Treating First Aid As Separate From Your Health And Safety System
First aid is part of a bigger system: hazard management, training, incident response, and recordkeeping.
Practical fix: Document your approach in policies and make sure staff know what to do. If you’re building your employment systems from scratch, it can help to keep key expectations in one place (like a policy suite or handbook) so your approach is consistent.
5. Over-Recording Or Under-Recording Incidents
If you record nothing, you might struggle to identify recurring hazards or demonstrate compliance. If you record too much (especially health details), you may create privacy risk.
Practical fix: Keep records practical, relevant, and secure - and get advice if you’re unsure what should be collected and who should access it.
Key Takeaways
- The HSWA requires you to provide appropriate first aid as part of your primary duty of care, but the right setup depends on your workplace risks and operations.
- A compliant first aid approach usually includes suitable first aid facilities (like a stocked kit), access to trained first aiders (or other suitable arrangements), and clear procedures for responding to injuries and emergencies.
- Work out what you need by looking at hazards, staff numbers, shift coverage, workplace layout, and how quickly emergency services can attend - especially for remote or mobile work.
- First aid arrangements should be documented and embedded into your business systems so they don’t get missed during busy periods (for example, in policies, handbooks, and employment documents).
- First aid records can include health information, so you should handle them carefully under the Privacy Act 2020 and keep what you collect proportionate and secure.
- Review your first aid setup whenever your business changes - new premises, new equipment, new services, or more staff usually means new risk.
This article is general information only and doesn’t take into account your specific circumstances. If you need advice on your legal obligations, you should get professional advice tailored to your business.
If you’d like help putting your health and safety expectations into clear workplace documents (or you’re not sure whether your first aid arrangements are enough for your specific business), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.








