Does the Code of Practice apply to my business if I'm not in a 'high risk' industry?

Yes. The Code applies to every PCBU in NSW, regardless of industry. Psychosocial hazards like poor organisational justice, low job control, and poor change management occur in office-based and professional services environments just as much as in frontline sectors — the UTS case involved a university, not a warehouse.

What's the difference between the NSW Code and the model Code from Safe Work Australia?

Safe Work Australia's model Code of Practice is a template that individual states and territories can adopt or adapt. NSW has its own approved version, issued by SafeWork NSW under the state WHS Act. From 1 July 2026, it's the NSW version — not the national model — that carries enforceable weight for NSW-based PCBUs.

Can we depart from the Code and still be compliant?

Yes, but the burden of proof shifts to you. Section 26A allows an 'equivalent or better' alternative approach, but you need documented evidence that your controls meet or exceed what the Code requires. Without that evidence, an inspector or court will default to measuring you against the Code itself.

What happens if we're found non-compliant?

Outcomes range from improvement notices (requiring specific action within a set timeframe) to prohibition notices (halting an activity immediately, as happened at UTS) to fines. Officers also face separate personal liability under section 27 of the WHS Act, with penalties reaching approximately $447,000 for a Category 2 breach and up to $2.3 million plus imprisonment for the most serious Category 1 offences. Since 1 March 2026, unions can also initiate civil penalty proceedings independently of SafeWork NSW.

We have psychosocial policies already — isn't that enough?

Policies are a starting point, not evidence of compliance. Inspectors are looking for a documented risk assessment covering all 14 hazard categories, controls mapped to the hierarchy of controls (not just training), worker consultation records, a live incident register, and a review cycle. If you can't produce dated records showing the process actually ran, a policy document alone is unlikely to satisfy the 'equivalent or better' test.

NSW Code of Practice for Managing Psychosocial Hazards: What Changed on 1 July 2026

If your organisation operates in New South Wales, the ground shifted under workplace mental health compliance on 1 July 2026. The Managing Psychosocial Hazards at Work Code of Practice — a document many businesses treated as optional reading — is now the enforceable benchmark SafeWork NSW inspectors measure you against.

This guide explains what actually changed, what the Code requires, what “auditable evidence” means in practice, and what industries are under the most scrutiny right now.

What is a Code of Practice, and why did its legal status just change?

A Code of Practice is a practical guide, approved by the relevant minister under the Work Health and Safety Act 2011 (NSW), that sets out how a person conducting a business or undertaking (PCBU) can meet their WHS duties for a specific hazard. NSW currently has more than 30 approved codes covering everything from confined spaces to psychosocial hazards.

Until 1 July 2026, codes of practice sat in a specific legal category: they were admissible evidence of what a reasonable PCBU should have known, but they did not, by themselves, create a standalone offence. A court or inspector could point to a code and say “this is the industry standard,” but departing from it wasn’t automatically a breach — it was one factor among several.

Section 26A of the Work Health and Safety Act 2011 (NSW), introduced by the Industrial Relations and Other Legislation Amendment (Workplace Protections) Act 2025, changed that. From 1 July 2026:

Every PCBU must either follow an approved Code of Practice for a given hazard, or
Demonstrate — with evidence — that their alternative approach achieves an equivalent or better standard of health and safety.

This brings NSW into line with Queensland, which enacted similar provisions in 2018. In practice, it converts the Managing Psychosocial Hazards at Work Code of Practice from persuasive guidance into a compliance benchmark inspectors can measure you against directly. A regulator no longer needs to build a lengthy case that you failed to eliminate or minimise risk “so far as reasonably practicable” from first principles — they can instead ask a much simpler question: did you follow the Code, and if not, where’s your evidence that your approach was just as good?

Source: SafeWork NSW — Code of Practice: Managing psychosocial hazards at work; NSW legislation, WHS Act 2011, s26A

Timeline: how we got here

Date	Milestone
May 2021	SafeWork NSW issues the Managing Psychosocial Hazards at Work Code of Practice, approved under section 274 of the WHS Act 2011 — at this point, persuasive guidance only.
22 August 2025	The WHS Regulation 2025 commences, introducing sections 55C and 55D, which explicitly require PCBUs to apply the hierarchy of control measures to psychosocial risks — not just administrative controls like policies and training.
1 September 2025 – onward	SafeWork NSW visibly ramps up enforcement: compliance blitzes, a rare prohibition notice against a university restructure, and a dedicated Psychosocial Advisory Service.
1 March 2026	Registered organisations, including unions, gain standing to initiate civil penalty proceedings for WHS breaches; courts can direct a portion of any penalty to the prosecuting union.
1 July 2026	Section 26A commences. All 30+ approved NSW codes of practice, including the psychosocial hazards Code, become enforceable compliance benchmarks. PCBUs must follow the Code or prove an equivalent-or-better alternative.

One nuance most organisations miss: the Code itself was written in 2021 and still references the older WHS Regulation 2017. The WHS Regulation 2025’s sections 55C and 55D — which came later — now explicitly require the hierarchy of controls. An organisation that follows the 2021 Code to the letter but leans only on administrative controls (policies, e-learning modules, posters) risks failing the “equivalent or better” test, because the Regulation has effectively raised the bar the Code was built against. Your controls need to be mapped to both documents.

Source: SafeWork NSW Code of Practice; Norton Rose Fulbright, NSW WHS law update

The 14 psychosocial hazards the Code expects you to identify

SafeWork NSW’s psychosocial hazards framework — reflected consistently across the Code of Practice and the regulator’s hazards A–Z — groups workplace psychosocial risk into 14 recognised categories:

Job demands — workload, pace, or complexity that is consistently too high (or too low)
Low job control — little say over how, when, or in what order work is done
Poor support — inadequate practical or emotional support from managers or colleagues
Lack of role clarity — unclear expectations, responsibilities, or reporting lines
Poor organisational change management — change introduced without adequate consultation or support
Inadequate reward and recognition — imbalance between effort and recognition, pay, or career progression
Poor organisational justice — perceived unfairness in how decisions, processes, or discipline are handled
Traumatic events or material — exposure to distressing incidents, images, or content as part of the job
Remote or isolated work — working alone or in locations without ready access to support
Poor physical environment — noise, heat, poor air quality, or other conditions that add psychological strain
Violence and aggression — threats, intimidation, or physical aggression from clients, patients, or the public
Bullying — repeated, unreasonable behaviour directed at a worker
Harassment, including sexual and gender-based harassment
Conflict or poor workplace relationships and interactions

These hazards are rarely isolated. A support worker doing remote home visits (#9) with unclear escalation procedures (#4) and no debrief after a difficult client interaction (#8) is carrying compounding risk from at least three categories at once — which is exactly the kind of pattern the Code expects your hazard identification process to catch.

Source: SafeWork NSW — Psychosocial hazards; Safe Work Australia — Psychosocial hazards

What “auditable evidence” actually means

This is the phrase that trips organisations up. Under section 26A, having a policy is not evidence. Having run a process, and being able to show you ran it, is evidence. SafeWork NSW inspectors are trained to ask for records, not intentions.

A practical five-item evidence checklist:

A documented psychosocial risk assessment, dated, naming who was involved (including worker consultation — not just management sign-off), and covering all 14 hazard categories, not just the ones that have already caused a complaint.
Controls mapped to the hierarchy of controls, showing you considered elimination and higher-order controls (redesigning a role, changing a roster, adding a second staff member to high-risk visits) before falling back on training and policy documents alone. This directly reflects the WHS Regulation 2025 sections 55C/55D requirement.
A live incident and hazard register with dates, actions taken, and who owns each action — not a spreadsheet last updated the week before an audit.
Evidence of worker consultation, such as meeting minutes, survey results, or toolbox talk records, showing workers had genuine input into identifying hazards and shaping controls.
A documented review cycle — evidence that controls are checked for effectiveness on a set schedule, and updated when they’re not working, rather than “set and forget.”

If your current system is a folder of PDF policies nobody has opened since induction, you do not have auditable evidence — you have a starting point.

Enforcement is not theoretical

SafeWork NSW’s own numbers show this is not a slow-moving reform sitting quietly in the background:

July 2025: A statewide compliance blitz issued 506 non-compliance notices (435 improvement notices, 61 prohibition notices, and 10 fines totalling close to $50,000), timed with SafeWork NSW’s transition to a standalone agency.
November 2025: A follow-up blitz issued 736 non-compliance notices, including 228 dedicated psychosocial checks — targeted conversations with employers and workers specifically about psychosocial hazard management, not just physical safety.
UTS prohibition notice (September 2025): SafeWork NSW issued a prohibition notice halting a university restructure affecting roughly 800 staff, on the basis that the redundancy process itself posed a serious and imminent risk of psychological harm. It was the first reported case in NSW of a prohibition notice being used to stop a corporate restructure — a clear signal that “white collar” change processes are now squarely in scope.
March 2026 Industrial Relations Commission ruling: In Secretary, NSW Department of Education v SafeWork NSW (No 2), the Commission upheld two psychosocial improvement notices and confirmed that a single employee complaint does not reduce an employer’s duty — and that it can be reasonable for a notice to apply across an entire organisation’s workplaces where the underlying risk is general rather than site-specific. One complaint, handled badly, can trigger an organisation-wide compliance obligation.
Court Services Victoria was convicted and fined $379,157 (the maximum penalty available) after a toxic culture at the Coroners Court of Victoria contributed to a worker’s suicide and multiple others taking stress leave — a reminder that while this guide focuses on NSW, the direction of travel is national.

Workers compensation data tells the same story from a different angle: psychological injury claims now represent around 12% of all workers compensation claims but roughly 38% of total claims cost, according to a statement to NSW Parliament by Treasurer Daniel Mookhey in March 2025. The average cost of a single psychological injury claim has climbed sharply in recent years. This is why regulators are prioritising psychosocial hazards — the cost curve, not just the compliance curve, has changed.

Source: NSW Government — SafeWork NSW issues over 500 non-compliance notices; NSW Government — Minns Labor Government issues over 700 non-compliance notices; Law Society Journal — Psychosocial safety at work not a “soft issue”; WorkSafe Victoria — Court body fined almost $380,000

Industry callouts: who is under the most scrutiny

NDIS and disability support providers. Support work combines several high-risk hazard categories at once — remote or isolated work, exposure to traumatic events, violence and aggression from participants in distress, and high job demands from rostering pressure. Incident management is also a condition of your NDIS registration under section 73Y of the NDIS Act, which means your psychosocial evidence trail and your NDIS reportable incident records increasingly need to tell the same consistent story to two different regulators. See our NDIS incident report template guide for the reporting side of this.

Aged care providers. Residential and home care staff face comparable pressures — traumatic events, poor physical environments in some settings, and violence and aggression from clients experiencing cognitive decline — layered on top of Serious Incident Response Scheme (SIRS) obligations to the Aged Care Quality and Safety Commission. See our SIRS reporting guide for the aged-care-specific reporting rules and timeframes.

Employers with 200+ employees. Larger organisations face structurally higher exposure to poor organisational change management (restructures, mergers, system rollouts) and poor organisational justice (perceived unfairness at scale). The UTS case above shows exactly how this plays out — a change process run without adequate consultation became the psychosocial hazard itself, not just a trigger for one. Larger employers are also first in line for the new section 21A digital work systems duty (commencing under the Work Health and Safety Amendment (Digital Work Systems) Act 2026), which requires PCBUs to assess whether algorithmic rostering, AI scheduling, or automated performance monitoring is creating excessive workloads, performance pressure, or surveillance-related psychosocial risk.

Source: Colin Biggers & Paisley — NSW amends WHS Act for AI risks; Law Society Journal — New WHS duties for digital work systems in NSW

Where to start

The five-item evidence checklist above is the fastest way to see where your gaps are. If your current process lives in shared drives, email threads, and someone’s memory of what happened last quarter, it will not hold up to the kind of scrutiny SafeWork NSW is now applying.

Not sure where your organisation stands against the Code? Run our free compliance self-assessment to see which of the five evidence items you’re missing, and get a plain-English summary you can take to your next safety committee meeting. It takes about ten minutes and doesn’t require you to hand over sensitive incident data to get a result.

Sources

This page provides general information about WHS compliance in New South Wales and does not constitute legal advice. Organisations should seek advice from a qualified WHS professional or lawyer for guidance specific to their circumstances.