Health And Safety Legislation In New Zealand: Business Compliance Requirements

Running a small business in New Zealand means wearing a lot of hats. You're juggling customers, cashflow, staff, suppliers, and the day-to-day reality of getting things done.

Health and safety can feel like "one more thing" on the list - especially if you're not in a traditionally high-risk industry.

But health and safety legislation isn't just about hard hats and construction sites. It applies to every workplace, from caf's and retail stores to offices, home-based businesses, mobile services, and online operations with a small team.

This guide breaks down what health and safety legislation in New Zealand requires in practical terms, what "compliance" looks like for a small business, and the steps you can take to protect your people (and your business) from day one.

Note: This article is general information only and isn't legal advice. If you need advice about your specific situation, it's best to speak with a lawyer or WorkSafe.

What Is "Health And Safety Legislation" In New Zealand?

When people talk about "health and safety legislation" in New Zealand, they're usually referring to a bundle of laws and regulations that set out what a business must do to keep people safe at work.

The main law is the Health and Safety at Work Act 2015 (HSWA). It's supported by regulations (including rules on risk management, worker engagement and participation, incident notification, and certain specific work risks), and guidance from WorkSafe.

From a small business perspective, the key idea is simple:

• You must take reasonably practicable steps to ensure health and safety.
• You must actively manage risk - not wait until something goes wrong.
• Responsibility isn't just "on the business" in an abstract sense. Specific people have duties too (including directors).

Good health and safety practice is also good business. It reduces injuries and downtime, supports team morale, and helps you avoid disputes, investigations, and reputational damage.

Who Has Duties Under The Health And Safety At Work Act?

HSWA uses specific terms to describe who owes duties. Understanding where you fit makes compliance much easier.

PCBU: The Business With The Main Duty

The primary duty-holder under HSWA is the PCBU (Person Conducting a Business or Undertaking). In plain English, this is usually:

• your company;
• you as a sole trader; or
• your partnership or other business structure.

If you're the one running the business operations, you're very likely a PCBU.

As the PCBU, you must ensure (so far as reasonably practicable) the health and safety of:

• workers (including employees, contractors, labour hire workers, apprentices/trainees, and sometimes volunteers);
• workers whose work you influence or direct (even if they're not your "employee"); and
• other people who may be affected by your work (customers, visitors, passers-by).

Officers: Directors And People Who Influence The Business

If your business is a company, your directors (and sometimes others in senior decision-making positions) are likely to be "officers" under HSWA.

Officers have a duty to exercise due diligence - meaning they must take reasonable steps to ensure the business is meeting its health and safety obligations.

This isn't just a paperwork role. It's about actively making sure systems exist and are working.

Workers: Everyone Has A Role

Workers also have duties, such as taking reasonable care for their own health and safety and following reasonable instructions and policies.

This is one reason why having the right documents and training in place matters - you want your expectations to be clear and consistent across the team.

When you're hiring, this ties into having a solid Employment Contract and practical workplace policies that match how your business actually operates.

What Does Compliance Actually Look Like For A Small Business?

"Complying" with health and safety legislation is less about ticking boxes and more about building a simple system that fits your workplace and your risks.

For most small businesses, compliance usually includes the following.

1. Identify Hazards And Assess Risk

You'll need a process to identify what could cause harm and assess how serious it is. This should cover your:

• physical workplace (e.g. slips, trips, electrical hazards, storage, manual handling);
• equipment and tools;
• chemicals or substances (if any);
• workload and fatigue (yes, psychosocial risks can be relevant);
• work vehicles or driving;
• remote or home-based work setups; and
• dealing with the public (including aggressive behaviour risk).

A simple hazard register is often a good starting point, but it only helps if you actually use it as a living document.

2. Put Controls In Place (And Make Them Practical)

Once risks are identified, you must take steps to eliminate them if possible - or minimise them if they can't be eliminated.

Controls might include:

• changing the process (e.g. using a trolley instead of lifting);
• training and supervision;
• protective equipment (where appropriate);
• maintenance schedules for equipment;
• cleaning routines and safe storage;
• signage and customer flow controls;
• clear incident reporting procedures.

The best controls are the ones your team can actually follow during a busy day. If a process is too complicated, it won't be used when it matters.

3. Train, Supervise, And Communicate

Compliance is not just writing a policy and filing it away. Your workers should understand:

• the key risks in your workplace;
• what safe work looks like;
• how to report incidents and hazards; and
• what to do in an emergency.

This needs to include new starters and, importantly, contractors (who often get missed in small businesses).

4. Keep Records You Can Actually Use

Small businesses often worry about "documentation", but it doesn't need to be complicated.

In practice, it's helpful to maintain records such as:

• hazard register and updates;
• training records and inductions;
• maintenance and inspection logs;
• incident and near-miss reports;
• toolbox meetings or safety check-in notes.

These records help you run the business more safely day-to-day, and they're also important if you ever need to show what you did to manage risk.

How Do You Manage Contractors, Labour Hire, And Shared Workplaces?

Many small businesses rely on contractors and third parties - think tradies, cleaners, IT support, marketing contractors, delivery drivers, or specialist consultants.

Under health and safety legislation, you can't assume "they're a contractor, so it's their problem." Duties can overlap, and you may need to coordinate with others.

Contractors Vs Employees: Why It Matters For Safety Duties

Even if someone isn't your employee, they may still be a "worker" for HSWA purposes when they're doing work for your business.

This is one reason it's worth getting the engagement right from the start with a proper Contractor Agreement that sets expectations around safe work, reporting, and compliance.

Shared Duties With Other PCBUs

If you share a workplace (for example, you operate inside a larger premises, a shared kitchen, co-working space, or retail environment), more than one PCBU may have duties at the same time.

In those cases, HSWA expects PCBUs to:

• consult, cooperate, and coordinate activities; and
• make sure responsibilities aren't falling through the cracks.

Practically, this can include agreeing who manages which risks, how incidents are reported, and what happens during emergencies.

Working From Home And Remote Work

If you allow remote work or have a home-based team, you still have health and safety obligations. The approach will look different (and should be proportionate), but you should still think about:

• basic workstation setup and ergonomics;
• reasonable work hours and fatigue management;
• psychological safety and workload expectations;
• how workers report concerns when they're not onsite.

This sits alongside broader legal risks of remote work, including privacy and confidentiality (especially where people access customer data from home).

Do You Need Health And Safety Policies, And What Should They Cover?

Not every business needs a thick manual of policies. But most businesses do need some written processes - particularly once you start hiring, using contractors, or dealing with higher-risk activities.

At a minimum, it's smart to have clear, written guidance on:

• incident and injury reporting (including near misses);
• hazard reporting and how hazards are reviewed and controlled;
• emergency procedures (fire, earthquake, medical emergency);
• training and inductions for new workers;
• bullying and harassment prevention (where relevant);
• fatigue and working hours (especially in shift-based or driving roles).

Health and safety can also overlap with privacy in a few common small business situations, such as:

• collecting medical information for return-to-work planning;
• handling incident reports that include personal details; or
• using CCTV footage as part of an investigation.

If you collect any personal information (including staff records), it's worth ensuring your approach aligns with the Privacy Act 2020 and having a fit-for-purpose Privacy Policy where needed (especially if you collect customer information online).

What Happens If Something Goes Wrong: Incidents, Notifications, And Enforcement

Even with strong systems, incidents can still happen. Health and safety legislation focuses heavily on how you respond.

Notifiable Events

Under HSWA, certain events may be "notifiable" to WorkSafe (for example, a death, certain serious injuries or illnesses, or a serious incident that exposes people to significant risk).

If a notifiable event occurs, you may have duties to:

• notify WorkSafe as soon as possible;
• preserve the site (with limited exceptions); and
• keep records of what happened and your response.

What counts as a "notifiable event" depends on the circumstances, so it's important to get advice quickly when a serious incident occurs.

Investigations, Improvement Notices, And Prosecutions

WorkSafe has the power to investigate and take enforcement action. That can include improvement notices or, in serious cases, prosecution.

The practical takeaway for small businesses is: your systems and your records matter. If you can show you identified risks, put controls in place, trained your team, and responded appropriately, you're in a much better position than if you have no system at all.

Mental Health And Psychosocial Risks Are Part Of The Picture

Workplace health and safety isn't only physical. Stress, burnout, and psychological hazards can become real risks - especially in busy industries or when your team is small and everyone is stretched.

Building reasonable workloads, clear communication, and a culture where people can raise issues early is part of taking "reasonably practicable" steps in many workplaces.

Key Takeaways

• Health and safety legislation in New Zealand is mainly governed by the Health and Safety at Work Act 2015, which applies to all businesses, not just high-risk industries.
• Most small businesses will be a PCBU and must take reasonably practicable steps to keep workers and other people safe.
• Compliance is practical risk management: identify hazards, assess risk, implement controls, train and supervise, and keep usable records.
• Health and safety duties can extend to contractors, labour hire, and shared workplaces, so it's important to coordinate responsibilities and expectations.
• Written policies and processes help turn health and safety duties into day-to-day actions, particularly around reporting, training, and emergency response.
• If a serious incident occurs, you may have notification and site preservation obligations, so getting advice early can make a big difference.
• Health and safety can overlap with other legal areas like employment and privacy, so it's worth making sure your documentation is consistent across the business.

If you'd like help getting your workplace compliance sorted - whether that's reviewing your contracts, setting up practical policies, or working through your risks - you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.