Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you run a small business, “WHS” is one of those terms you’ll hear early (often right around the time you hire your first staff member, take on a contractor, or move into a physical site).
In New Zealand, people sometimes use WHS as a shorthand for “work health and safety” (a term you may see used internationally). But in NZ, the legal framework is usually referred to as health and safety, and the key law is the Health and Safety at Work Act 2015 (HSWA).
The good news is: you don’t need to be a legal expert to build a solid WHS system. You just need to know what your responsibilities are, put practical processes in place, and keep improving them as your business grows.
Below, we’ll break down WHS in a way that makes sense for NZ employers, including what you need to do, what documents help, and what common mistakes to avoid.
What Does WHS Mean In NZ (And Why The Wording Matters)
When business owners search for WHS in NZ, they’re usually looking for one thing: what do I have to do to keep my workplace safe and stay compliant?
In New Zealand, the concept is the same, even if the label is different. WHS is essentially your approach to:
- identifying hazards and risks at work
- taking reasonable steps to eliminate or minimise those risks
- training and supervising workers so they can work safely
- responding properly when an incident happens
- keeping records and reviewing your approach over time
Why does wording matter? Because if you’re operating in NZ, you’ll typically be dealing with:
- HSWA 2015 (the main health and safety legislation)
- WorkSafe (the regulator)
- the idea of a PCBU (a “person conducting a business or undertaking”) rather than just “employer”
Once you understand those building blocks, everything else becomes much clearer.
Who Has WHS Duties In A Small Business?
Under HSWA, multiple people can have health and safety responsibilities at the same time. This catches some small business owners off guard, because it’s not just “the employer” who has duties.
PCBU Duties (Usually Your Business)
Most small businesses will be a PCBU. A PCBU has a primary duty to ensure, so far as is reasonably practicable, the health and safety of:
- workers (including employees and contractors you engage)
- workers whose activities are influenced or directed by the PCBU
- other people who could be put at risk by the work (e.g. customers, visitors, delivery drivers)
This is where WHS becomes very practical. If you control the work (or the workplace), you need to manage the risks.
Officers’ Due Diligence Duties (Company Directors And Some Leaders)
If you operate through a company, your directors (and sometimes senior decision-makers) may have “officer” duties. This includes taking reasonable steps to ensure the business has appropriate resources and processes to manage health and safety.
It’s not enough to assume “someone else handles WHS”. Officers should be able to show they’ve taken due diligence seriously.
Workers’ Duties (Including Contractors)
Workers also have duties, such as taking reasonable care for their own health and safety, following reasonable instructions, and using PPE properly.
That said, worker duties don’t cancel out your PCBU duties. In a small business, WorkSafe will still expect you to have clear systems, training, and supervision in place.
Shared Duties In The Real World
In practice, health and safety duties are often shared across multiple businesses. For example:
- you hire a contractor to do installation work at your premises
- you operate in a shared building (like a retail site, warehouse, or co-working space)
- you have labour hire workers on-site
In these cases, you may need to consult, cooperate and coordinate with other PCBUs so everyone understands who is doing what, and how risks will be controlled.
What Are Your Core WHS Obligations As An Employer?
WHS compliance can sound big and vague, so it helps to translate it into the everyday actions a small business should be doing.
1) Identify Hazards And Manage Risks
You should have a straightforward process to identify hazards and assess risks (physical and psychological). Depending on your industry, common examples might include:
- slips, trips and falls
- manual handling injuries
- hazardous substances
- unsafe equipment or poor maintenance
- fatigue and excessive hours
- bullying, harassment, or high psychosocial risk environments
Once you’ve identified risks, you need to eliminate them if reasonably practicable. If you can’t eliminate them, you should minimise them (e.g. safer systems of work, guarding, training, supervision, PPE, job rotation).
2) Provide A Safe Workplace, Plant And Systems Of Work
This includes:
- safe premises (including access and emergency exits)
- safe tools, machinery, vehicles, and equipment
- safe procedures and supervision (especially for new staff)
- appropriate facilities (e.g. toilets, washing facilities, drinking water)
If you have staff doing physical work, customer-facing work, or work at client sites, this is where you want clear operational guidance in writing (not just “verbal training once on day one”). A practical place to capture expectations is a Staff Handbook.
3) Information, Training, Instruction And Supervision
One of the easiest WHS mistakes to make is assuming “common sense” is enough. In reality, you should be able to show that you’ve:
- trained workers for the tasks they do
- provided clear safety instructions and inductions
- supervised appropriately (especially while people are still learning)
- kept records of training, licences, and competency checks
This ties into your broader employment documentation too, because clear role expectations and lawful direction matter. For many businesses, it starts with a properly drafted Employment Contract.
4) Monitor Health And Workplace Conditions
WHS isn’t a “set and forget” job. You’re expected to monitor:
- workplace conditions (e.g. changes to layout, equipment, staffing levels)
- worker health where relevant (e.g. exposure risks, fatigue, stress)
- near misses and incident trends
Even if you’re a small team, regular check-ins and a simple reporting channel can go a long way.
5) Consult And Engage With Workers
Under HSWA, PCBUs must engage with workers on health and safety matters that affect them.
In a small business, this can be simple and practical, for example:
- toolbox talks (weekly or fortnightly)
- a short safety item in team meetings
- a clear process to raise hazards or concerns without fear of repercussions
If you have workers, you should also think about your worker participation practices (for example, how workers can contribute to health and safety decision-making, and whether health and safety representatives or a committee are appropriate for your workplace). What that looks like depends on your size and operations, but the core idea is the same: workers should have a voice in safety.
WHS Policies And Documents That Actually Help (Not Just Paperwork)
Small business owners often worry WHS will become a “binder on a shelf” situation. The aim is the opposite: documents should support real-world safety and make your obligations easier to manage.
Common WHS-related documents and tools include:
- Health and safety policy (your overall commitment and approach)
- risk register / hazard register (what risks exist and how you’re controlling them)
- safe work procedures (step-by-step instructions for higher-risk tasks)
- incident and near-miss reporting process
- worker induction and training records
- contractor onboarding (so you don’t “inherit” unmanaged risks)
- emergency plan (fire, earthquake, medical events, etc.)
If you’re building your documents, it helps to keep them consistent across your business. Many employers fold WHS expectations into a wider Workplace Policy framework, so you’re not managing separate and conflicting rules.
Don’t Forget Privacy When WHS Involves Personal Information
WHS often involves collecting or recording personal information, such as:
- incident reports that identify a worker
- medical certificates or return-to-work notes
- training and competency records
- CCTV footage used to investigate incidents
That means privacy obligations can sit alongside WHS obligations. If you collect personal information in your business (including staff information), having a clear Privacy Policy is a smart baseline, and you should also think about internal privacy practices for employee records.
Common WHS Risk Areas For NZ Small Businesses
WHS isn’t one-size-fits-all. A café, a construction subcontractor, and an online business with remote staff will have very different risk profiles.
That said, there are a few WHS “hot spots” that show up again and again for small businesses.
Fatigue, Overwork And Workload Creep
In small teams, it’s common for people to wear multiple hats. Over time, workload can creep up, and fatigue becomes a genuine safety risk (and a performance risk).
If you’re making changes to staffing, shifts, or resourcing, make sure you handle it carefully and lawfully. For example, reducing hours without a proper process can create legal risk as well as morale issues. If this is on your radar, the practicalities discussed in reducing staff hours are worth keeping in mind.
Contractors And “Non-Employees” Doing Core Work
Many small businesses rely on contractors, labour hire, or gig-style workers. From a health and safety perspective, you can still have duties to keep them safe (and to ensure your worksite doesn’t create risks for them or others), even if they’re not your employees.
A good contractor relationship should be clear on:
- scope of work and who controls the work method
- licences, training, and competency requirements
- who supplies equipment and PPE
- site-specific hazards and induction requirements
- incident reporting and cooperation expectations
Clarity upfront reduces the chance of gaps where everyone assumes “the other party is handling it”.
Workplace Surveillance, CCTV, And Monitoring
Some businesses use cameras for theft prevention, customer safety, or investigating incidents. This can be helpful, but you need to manage it carefully and fairly.
From a WHS and employment perspective, the key is having a legitimate purpose, communicating transparently, and handling footage appropriately. If you’re thinking about monitoring, it’s worth checking the legal boundaries around cameras in the workplace.
Remote Work And Home Offices
Even if your team works from home, WHS responsibilities don’t disappear. You should still think about:
- basic workstation safety and ergonomics
- mental health and psychosocial risks (isolation, burnout)
- communication channels for hazards and incidents
- reasonable expectations about hours and availability
This is usually manageable with a simple checklist and regular check-ins, especially if you’re proactive from day one.
When Things Go Wrong: Incidents, Notifications And Investigations
Even with good systems, incidents can happen. What matters is how you respond.
A strong WHS response plan typically covers:
- first aid and immediate safety steps
- internal reporting (who is told, and how quickly)
- making required notifications to WorkSafe for notifiable events (notifiable injuries or illnesses, notifiable incidents, and notifiable work-related deaths)
- preserving the site where required (generally for notifiable events, until a WorkSafe inspector releases it - except to help an injured person, remove an immediate danger, or as directed by an inspector)
- investigation steps and corrective actions
- worker support and communication
If an incident involves personal information (for example, reports that include sensitive details, or an IT/security incident affecting staff data), you may also need a plan for privacy response. Depending on the situation, a Data Breach Response Plan can be part of a broader risk management framework.
How To Set Up A Practical WHS System (A Step-By-Step Checklist)
If you’re starting from scratch (or upgrading what you have), here’s a straightforward way to approach WHS in a small business without overcomplicating it.
Step 1: Map Your Work And Your Risks
- List the tasks your team performs (including non-routine tasks).
- Identify hazards for each task and environment (physical and psychological).
- Assess which risks are highest and most likely.
Step 2: Decide Your Controls (And Make Them Realistic)
- Eliminate risks where you can (e.g. replace hazardous substances, redesign a process).
- Minimise what remains (engineering controls, admin controls, PPE).
- Document controls in a risk register and safe work procedures.
Step 3: Assign Responsibility
- Who is responsible for WHS overall?
- Who maintains the risk register?
- Who does inductions and training sign-offs?
- Who responds to incidents?
In a small business, this might be one person wearing multiple hats. That’s fine, as long as it’s clear.
Step 4: Train, Induct, And Keep Records
- Run a simple induction for every new worker (including contractors where relevant).
- Provide role-specific training (not just a generic safety talk).
- Keep basic records (dates, topics covered, who attended).
Step 5: Build WHS Into Your Daily Rhythm
- Add a short safety item to team meetings.
- Encourage near-miss reporting (and respond constructively).
- Review incidents and update your controls.
This is the difference between a WHS “document set” and an actual WHS culture.
Step 6: Make Sure Your Employment Paperwork Supports Your WHS Approach
Your WHS system should align with your broader employment processes, including performance management and lawful directions.
If you want to tighten up your overall employer risk management, it can help to look at WHS in the context of your wider duty of care obligations.
Key Takeaways
- WHS in NZ is mainly governed by the Health and Safety at Work Act 2015, even if you and your industry commonly use the term “WHS” in conversation.
- Your business (as a PCBU) has a primary duty to manage workplace risks so far as is reasonably practicable, including risks to workers and other people affected by your work.
- WHS compliance is practical: identify hazards, control risks, train and supervise workers, consult with staff, and keep improving your systems.
- Good documents should support real work (risk register, incident reporting, safe work procedures, inductions), not just exist for show.
- Small business WHS often overlaps with employment and privacy issues, especially where you’re managing incidents, collecting health information, or using monitoring tools like CCTV.
- Getting WHS right from day one protects your people and your business and makes it easier to grow confidently.
This article is general information only and does not constitute legal advice. If you’d like advice specific to your business, it’s a good idea to speak with a lawyer.
If you’d like help setting up your workplace policies, employment documents, or a practical compliance framework that supports your WHS approach, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.






