The Safe Work Australia psychosocial hazard list runs to 13 categories, while many HR teams still treat bullying and burnout as the whole compliance problem.
That gap matters because psychosocial risks are usually produced by work design, management practice and workplace conditions. A complaint about a manager may be the visible incident. The underlying risk may be excessive workload, unclear authority, a poorly managed restructure or a pattern of unsupported remote work.
For a PCBU, the task is not simply to maintain an anti-bullying policy. Under the model WHS framework, the duty to manage risks to workers' psychological health requires a broader process of identifying hazards, assessing risks where appropriate, implementing controls and reviewing whether those controls work. The applicable state or territory framework must still be checked, because the model laws are implemented through each jurisdiction's WHS legislation and regulations.
The 13 categories are a map, not a checklist
Safe Work Australia's Managing psychosocial hazards at work: Code of Practice recognises 13 categories. They overlap. A single work arrangement can involve several categories at once, and the same category can present differently across teams.
- Job demands: excessive workload, unreasonable time pressure, sustained cognitive demands, emotional demands, insufficient staffing or work that is too monotonous or repetitive.
- Low job control: workers have little ability to influence how or when work is done, take breaks, organise tasks or make decisions within their responsibilities.
- Poor support: inadequate assistance, information, supervision or support from managers and colleagues.
- Poor role clarity: uncertainty about duties, priorities, authority, performance expectations or who is responsible for a decision.
- Poor organisational change management: change is introduced without adequate consultation, communication, preparation, training or support.
- Poor organisational justice: workers perceive decisions, processes or treatment as unfair, inconsistent, biased or lacking procedural fairness.
- Low recognition and reward: effort, contribution, capability or achievement is not appropriately acknowledged or rewarded.
- Poor workplace relationships: conflict, incivility, bullying, interpersonal tension or other harmful relationship patterns.
- Remote or isolated work: work arrangements that limit contact, assistance, supervision or access to help, including some remote, lone or geographically isolated work.
- Poor physical environment: physical conditions that contribute to psychological harm, such as inadequate space, noise, lighting, temperature, facilities or equipment.
- Traumatic events or material: exposure to death, serious injury, abuse, violence, distressing content or other traumatic events through work.
- Violence and aggression: threats, abuse, assault, intimidation or other violent or aggressive conduct from customers, clients, patients, members of the public, colleagues or others.
- Harassment: unwanted conduct that may cause harm, including sexual harassment.
Workplace bullying is therefore not a fourteenth category, nor a standalone category within the list. It sits within poor workplace relationships. That classification does not make bullying less serious. It shows why a bullying complaint should be considered alongside the wider conditions in which the conduct occurred.
What each category can look like in practice
Job demands and low job control often appear together. A team may have an unmanageable volume of work but no authority to set priorities, decline new tasks or adjust deadlines. Burnout is not itself a hazard category. It may be an outcome associated with job demands, low control, poor support, inadequate recognition or several of these factors operating together.
Poor role clarity is similarly easy to underestimate. If two managers give conflicting instructions, or workers are held accountable for outcomes they cannot control, the problem is not necessarily an individual performance issue. It may indicate that reporting lines, delegated authority or role descriptions are not functioning as intended.
Organisational change creates another common blind spot. A restructure, acquisition, technology rollout, closure, redundancy process or substantial change in working arrangements can increase psychosocial risk even where the commercial decision is lawful and necessary. Compliance does not require an organisation to avoid change. It requires attention to how change is planned, communicated and implemented, including the effects on workload, consultation, training and support.
Organisational justice concerns the way decisions are made and experienced. Inconsistent disciplinary action, opaque promotion decisions, unexplained allocation of overtime or a complaints process that appears to favour senior staff may all contribute to risk. The relevant question is not whether every worker agrees with every decision. It is whether decision-making and complaint handling are fair, consistent and capable of being explained.
Remote and isolated work is broader than working from home. A worker may be physically alone at a site, travelling between locations, working outside ordinary hours or separated from the team by distance and time zones. The risk may involve limited supervision, delayed assistance, weak social connection or difficulty reporting an incident. A remote work policy that addresses equipment and data security may not address these psychosocial conditions.
The physical environment also belongs in the analysis. Noise, crowding, poor amenities, inadequate temperature control or a lack of private space can affect psychological health, particularly when combined with high demands or difficult interactions. The category does not mean every uncomfortable office condition is a psychosocial breach. It means physical conditions should not be excluded from psychosocial risk assessment merely because the harm is psychological.
Traumatic material and events, violence and aggression require attention to the work itself and not only to internal relationships. Customer-facing, health, care, emergency, security, education, media and moderation roles may expose workers to distressing events or material. A worker can be affected even where no colleague has behaved improperly. Controls may include work design, staffing, training, supervision, incident response and access to support, assessed against the circumstances.
A workplace example: the bullying complaint that is not only about bullying
Consider a synthetic example. A 60-person aged-care provider in regional Queensland introduces a new rostering system. The implementation is rushed because the existing system is being retired. Staff receive limited training, rosters change frequently and team leaders are told to meet occupancy targets without additional staff. Several employees work alone across multiple sites. One senior employee begins sending hostile messages to a junior colleague who repeatedly misses handover information and asks for clarification about competing instructions.
The junior employee makes a bullying complaint. An organisation focused only on the complaint might interview the parties, decide whether the conduct meets the relevant definition and issue a reminder about respectful behaviour. Those steps may be necessary, but they do not exhaust the risk analysis.
The facts also point to poor organisational change management, poor role clarity, job demands, low support and remote or isolated work. There may be a workplace relationship problem involving the messages, but the surrounding system may be making conflict more likely. The response should address the alleged conduct and examine the roster design, training, communication channels, escalation arrangements and staffing pressures.
This does not mean that organisational factors excuse bullying, harassment or violence. Individual conduct can require disciplinary or other action regardless of the underlying work design. Nor does a psychosocial risk assessment decide whether a particular legal claim has been established. The compliance point is narrower and practical: resolving one complaint does not necessarily control the hazard that allowed the problem to develop or recur.
Where compliance work becomes more difficult
The categories are useful, but they do not produce an automatic answer. Not every demanding role is unsafe. Not every workplace disagreement is bullying. Not every organisational change is poorly managed. A control must be proportionate to the risk and reasonably practicable in the circumstances.
Context matters. A short period of intense work may be manageable with adequate staffing, rest, support and worker control. The same demand may become harmful when it is sustained, unpredictable or combined with no capacity to influence priorities. A firm management direction is not automatically poor organisational justice. It becomes more concerning where decisions are arbitrary, unexplained or applied inconsistently.
Evidence also needs careful handling. Worker surveys can reveal patterns, but a low response rate may hide a problem. Complaint numbers can increase because reporting has become safer, not because the workplace has become worse. Absence, turnover and overtime data may identify pressure points, but they do not prove a particular hazard on their own. Interviews, consultation, incident records, policies, rosters, workload information and prior control reviews may all be relevant.
Confidentiality creates a further boundary. Organisations should protect sensitive information and avoid turning a risk register into a list of identifiable allegations. At the same time, excessive secrecy can prevent meaningful review. A useful system records the hazard, affected work group, risk assessment, controls, owner, review date and evidence of action without disclosing more personal information than necessary.
The hierarchy of controls remains relevant. Changing work design, staffing, reporting lines, rosters or physical conditions will usually address a hazard more directly than telling workers to be more resilient. Training, policies and support services can form part of the control set, but they should not be used as a substitute for correcting an unreasonable workload, unsafe customer interaction or dysfunctional reporting structure.
Turning the 13 categories into a working compliance system
HR and workplace safety teams can use the categories as a structured prompt for consultation and review. The starting point is to identify how work is actually performed, not just what the organisation's policies say. Consider teams, locations, employment arrangements, peak periods, customer interactions, management changes and groups that may experience risks differently.
A practical review should ask:
- Which categories are plausible in each work group, site or work arrangement?
- What information indicates that a hazard exists, including worker feedback, incidents, complaints, turnover, overtime or absence patterns?
- Who may be affected, and are particular workers exposed because of their role, location, hours, experience or employment arrangement?
- What controls already exist, and do workers understand and use them?
- Who owns each action, when will it be completed, and what evidence will show whether it worked?
Documentation should connect the analysis to action. A policy library alone will not show that a PCBU identified a risk, consulted workers, selected controls and reviewed their effectiveness. Keep records of consultation, decisions, control owners, training, incidents, changes and review outcomes. Where a control is not adopted, record the reason and the alternative response.
Jurisdictional coverage matters for organisations operating across Australia. ReFresh covers all eight Australian state and territory WHS frameworks, with AI policy drafting, regulation change alerts, a psychosocial risk register and an evidence trail. Those tools can help a small HR or safety team keep work organised. They do not replace consultation, professional judgement or the duty to respond to the conditions workers actually experience.
The most useful question is not whether an organisation has an anti-bullying policy. It is whether the organisation can show how it has considered the full set of recognised hazards, identified the ones relevant to its work, implemented controls and checked their effect over time. Bullying may be the complaint that brings a problem to light, but the compliance record needs to explain the wider work system in which that complaint arose.
