There are eight Australian state and territory WHS frameworks to watch, and most HR generalists are expected to keep up while also managing payroll, employment law, HR systems and day-to-day people issues.
I know the problem from the inside. Before co-founding ReFresh, I spent years building WHS management systems inside large Australian corporates. Even with more resources than most HR teams have, regulation tracking could become a recurring administrative task that was easy to postpone and difficult to complete properly.
Psychosocial hazards make the problem more visible. Requirements and expectations can be affected by formal regulation amendments, revised Codes of Practice, regulator guidance, enforcement priorities and court decisions. The information is publicly available, but it is spread across different websites and published in different formats.
A workable approach does not require reading every update in full every morning. It requires a repeatable process for finding relevant changes, deciding what they mean and connecting them to the documents and controls your organisation already uses.
Start with the right source map
The first step is to define which sources your organisation will monitor. A source map prevents the common situation where a team checks one regulator website regularly but misses a relevant update from another jurisdiction.
For psychosocial-hazard obligations, the core sources are:
- Safe Work Australia: Codes of Practice, model legislation updates, guidance material and research reports, including material relating to managing psychosocial hazards at work.
- State and territory regulators: SafeWork NSW, WorkSafe Victoria, Work Health and Safety Queensland, SafeWork SA, WorkSafe WA, WorkSafe Tasmania, NT WorkSafe and WorkSafe ACT.
- Legal and professional update services: useful for alerts, commentary and interpretation, particularly where a change may affect multiple areas of an organisation.
- Internal sources: incident reports, consultation records, audit findings, workers' compensation trends and questions raised by managers or health and safety representatives.
Safe Work Australia is an important starting point, but it is not a substitute for checking the jurisdictions in which your organisation operates. The model WHS framework is not applied identically everywhere. Each state and territory can enact jurisdiction-specific variations to the model Act and Regulations.
It is also worth separating information by source type. A formal amendment to a regulation is different from a new regulator bulletin. A revised Code of Practice carries a different legal status from a practical guidance note. Treating every publication as an urgent legal change creates unnecessary work and makes it harder to identify the updates that genuinely require action.
Use three urgency categories
Once an update is found, classify it before sending it around the organisation. A simple three-level system is usually enough for a small or stretched team.
1. Immediate compliance review
Use this category for changes that may alter a legal obligation, a required process or the timing of an action. Examples include:
- an amendment to a mandatory WHS regulation clause;
- a jurisdiction-specific change that applies where your workers are located;
- a regulator notice that identifies a current enforcement priority relevant to your risk profile; or
- a court decision that changes how an existing obligation may be understood.
These updates should have an owner, a due date and a documented assessment. The assessment does not need to be a lengthy legal memorandum. It should answer three questions: what changed, where does it apply, and which existing controls or documents may be affected?
2. Required policy or process review
This category is suitable for a revised Code of Practice or substantial regulator guidance that may affect how your organisation demonstrates that it has identified and managed psychosocial risks.
Not every change means the organisation must rewrite a policy. It may instead require a review of consultation steps, manager training, risk assessment methods, incident escalation or record keeping. The important point is to record the decision and the reasoning behind it.
3. Monitor and note
Some publications are informative rather than immediately actionable. Research reports, general education material and guidance that does not change your current risk profile may belong here.
This category should not mean "ignore it". Record the update, its source and the reason no immediate action was assigned. That creates an audit trail and allows the item to be reconsidered if your workforce, jurisdictions or risk profile changes.
A useful discipline is to avoid calling something a legal requirement unless the source supports that description. Guidance can help an organisation meet its duties, but an updated guidance note is not automatically a binding amendment to the law.
Connect every update to the documents it can affect
Tracking is only useful when it leads to a decision about your own WHS system. The most practical way to do that is to maintain a register of controlled documents and risk records.
For each major source of obligation, record:
- the relevant jurisdiction or jurisdictions;
- the source and publication date;
- the topic, such as workload, bullying, violence, fatigue, remote work or consultation;
- the urgency category;
- the potentially affected policy, procedure or risk-register entry;
- the person responsible for review; and
- the decision, action and completion date.
The document connection is the part that is often missed. A team may save a PDF in a compliance folder and send an email to managers, but still fail to identify that the update affects a psychosocial risk assessment completed six months earlier.
For example, a change or new guidance relating to psychosocial hazard management might prompt a review of:
- the psychosocial hazard policy;
- the risk assessment methodology;
- consultation and worker participation procedures;
- complaint, incident and escalation processes;
- manager responsibilities; and
- training or induction content.
The answer will depend on the change and the organisation. The point is to make the relationship visible. When a source changes, someone should be able to see which part of the WHS system needs checking.
A practical example from a multi-state workforce
Consider a synthetic example. An organisation has offices and field staff in NSW, Victoria and Queensland. Its HR generalist notices a state regulator update concerning psychosocial-hazard guidance and an enforcement focus related to how organisations identify and manage risks.
The update is not treated as an automatic instruction to rewrite every document. Instead, the HR generalist records the source and checks the organisation's current controls. The review finds that:
- the psychosocial risk register has separate entries for workload and poor support, but no clear link to team-level consultation;
- the manager procedure explains how to report an issue but not how to document the initial risk assessment;
- the NSW and Queensland processes use different review intervals; and
- the policy refers generally to "applicable WHS requirements" without identifying the relevant jurisdictional owners.
The organisation assigns a medium-priority review. It updates the risk assessment template, adds a consultation step to the manager procedure and records why no immediate change was required to the overarching policy. It then checks whether the same control is suitable in Victoria, rather than assuming that one jurisdiction's material answers every question.
That is a manageable piece of work. Without a connection between the update and the existing risk register, the same publication might simply have been filed and forgotten.
Make the process fit the bandwidth you actually have
A tracking framework fails when it assumes that HR has unlimited time. A small team may be able to complete a weekly source review, not a daily one. That can still be effective if the process is consistent and urgent alerts are escalated separately.
A realistic operating rhythm might look like this:
- Weekly: scan Safe Work Australia and the eight regulator websites for new or revised material.
- Monthly: review open items, overdue assessments and updates that were initially classified as "monitor and note".
- Quarterly: check that policies, risk registers, training materials and document owners are still connected and current.
- After a significant event: review whether recent regulatory material or enforcement priorities affect the organisation's response and controls.
Use a standard intake record for every item. It should take minutes to capture the source, date, jurisdiction, topic, initial classification and next action. The detailed review can then be allocated to the person with the right knowledge, rather than being performed hurriedly by whoever first sees the alert.
Automation can reduce the administrative load. ReFresh monitors Safe Work Australia publications, state WHS authority guidance and court decisions that affect psychosocial-hazard obligations. When something changes, it surfaces which existing policies and risk-register entries may be affected. It also provides AI drafting and regulation tracking across all eight Australian state and territory WHS frameworks.
That does not remove the need for human judgement. A system can help identify and organise a change, but an organisation still needs to decide whether its controls are appropriate, whether consultation is required and whether specialist legal or WHS advice should be obtained.
Know what the framework cannot do
No tracking method can guarantee that an organisation has met its WHS duties. Public sources can be updated after an event has occurred, terminology can differ between jurisdictions, and a short bulletin may not explain how a change applies to a particular workforce.
Manual tracking also has limits that are easy to underestimate. It may not reliably identify every relationship between a new publication and an older risk-register entry. It can depend on one person's inbox, memory and interpretation. It can also create a false sense of coverage when the team has collected documents but has not recorded decisions or completed reviews.
This article describes an operational framework, not legal advice or a substitute for advice on a particular obligation. Where an update may affect a material legal risk, a regulator response or a significant incident, obtain advice from an appropriately qualified WHS or legal professional.
The aim is not to read everything. It is to establish enough control that a relevant change is found, assessed in the right jurisdiction and connected to the document or control it may affect. ReFresh was built around that practical gap, with the goal of providing WHS psychosocial compliance without the paperwork spiral.
Since launching in 2024, ReFresh has tracked more than 12 WHS regulation updates internally. The recurring lesson is straightforward: the hardest part is rarely finding a publication. It is making sure the right person sees it, understands its significance and updates the system before the old document becomes the organisation's answer by default.
