Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you’re running a small business, health and safety can feel like one more thing on an already long to-do list.
But in practice, your workplace health and safety obligations are one of the most important “from day one” legal foundations you’ll put in place. They’re about protecting your people, keeping your business running smoothly, and reducing the risk of serious incidents (and the legal and financial fallout that can come with them).
In this guide, we’ll break down health and safety obligations in the workplace for New Zealand businesses in plain English, including what the law expects, who is responsible, and the practical steps you can take to stay compliant as you hire, grow, and change the way you work.
What Are Health And Safety Obligations In The Workplace In New Zealand?
In New Zealand, the main law governing workplace health and safety is the Health and Safety at Work Act 2015 (HSWA).
HSWA sets out what businesses must do to make sure work is carried out safely. It applies to almost every business, regardless of whether you run:
- a café or retail store,
- a construction or trades business,
- a professional services firm,
- an e-commerce business with a warehouse, or
- a home-based or remote team.
At a high level, your workplace health and safety obligations include taking reasonably practicable steps to ensure workers and others aren’t put at risk because of work your business controls or influences.
That sounds broad (and it is), but it usually comes down to a few key themes:
- Identify hazards and assess risks.
- Eliminate risks where you can, or minimise them if you can’t eliminate them.
- Provide safe systems of work (equipment, training, supervision, procedures).
- Consult and communicate with workers about health and safety.
- Report and respond appropriately to incidents and notifiable events.
Importantly, these obligations aren’t just about physical hazards like machinery, slips, trips, or dangerous substances. They can also include risks to mental health and wellbeing, such as:
- fatigue from long hours or poor rostering,
- bullying, harassment, or violence at work,
- stress and other psychosocial risk factors (particularly where work demands are high or poorly supported), and
- driving risks for delivery and mobile businesses.
Who Is Responsible For Health And Safety (And What Does “PCBU” Mean)?
HSWA uses a few key terms that are worth understanding early, because they shape who owes duties and how they apply.
PCBUs (The Business) Have The Primary Duty
Most small businesses will be a PCBU, which stands for Person Conducting a Business or Undertaking.
A PCBU can be a company, a sole trader, or a partnership. If you’re the one running the business, hiring people, engaging contractors, and directing work, you’re usually the PCBU (or part of the PCBU).
A PCBU has the primary duty of care to ensure, so far as is reasonably practicable, the health and safety of:
- workers who work for the business (including contractors in many situations), and
- workers whose work is influenced or directed by the business, and
- other people who could be put at risk by the work (customers, visitors, members of the public).
Officers Must Exercise Due Diligence
If your business is a company, your directors (and sometimes others in similar positions) may be “officers” under HSWA. Officers have their own duty to exercise due diligence to ensure the PCBU complies with its health and safety obligations.
This typically involves making sure your business has appropriate systems in place, and that health and safety is actively monitored-not treated as a set-and-forget policy.
Workers Also Have Duties
Workers must:
- take reasonable care for their own health and safety,
- make sure their actions don’t adversely affect others, and
- follow reasonable instructions and policies.
This is one reason it’s so important to have clear workplace rules and expectations documented and communicated (more on that below).
What Does “Reasonably Practicable” Mean For Small Businesses?
One of the most common concerns we hear from business owners is: “How far do we have to go?”
HSWA doesn’t expect you to eliminate every possible risk in every scenario. Instead, you must do what is reasonably practicable to ensure health and safety.
In simple terms, “reasonably practicable” usually means you should consider:
- How likely the hazard or risk is to occur
- How serious the harm could be
- What you know (or should reasonably know) about the risk and controls
- What control measures are available and suitable
- The cost of controls (but only after considering the risk-cost alone isn’t a free pass)
For a small business, this means you should be able to point to a sensible process and clear actions, such as:
- training staff properly (especially new starters),
- using checklists, manuals, and basic safe-work procedures,
- making sure equipment is fit for purpose and maintained,
- responding quickly to hazards and near misses, and
- documenting key steps so you can show what you’ve done.
As your business grows, what’s “reasonably practicable” will usually grow too. The key is building habits and systems early, then scaling them as needed.
How Can You Meet Health And Safety Obligations In The Workplace? (A Practical Compliance Checklist)
Health and safety compliance is much easier when you treat it like a repeatable process, not a one-off project.
Below is a practical checklist that works well for many small businesses.
1. Identify Hazards And Assess Risks
Start by identifying what could cause harm in your workplace and in the work your team does.
This can include:
- physical hazards (manual handling, slips/trips, equipment, noise, heat),
- chemical hazards (cleaning products, fuels, fumes),
- environmental hazards (working at height, confined spaces, weather exposure),
- customer-related risks (aggressive behaviour, lone working), and
- psychosocial hazards (bullying, high workload, fatigue, stress).
Once you identify hazards, assess the risk (likelihood and severity) and decide what controls are needed.
2. Put Controls In Place (Eliminate Or Minimise Risks)
A common way to think about controls is the “hierarchy of controls”:
- Eliminate the risk (best option, if possible)
- Substitute (use something safer)
- Isolate (separate people from the hazard)
- Engineering controls (guards, ventilation, mechanical aids)
- Administrative controls (procedures, training, rostering, signage)
- PPE (last line of defence)
The right mix depends on your industry. For example, for a hospitality business, administrative controls like cleaning schedules, food safety processes, and slip prevention might be key. For construction or manufacturing, engineering controls and formal site safety processes may be critical.
3. Train, Induct, And Supervise Your Team
Even a great safety system won’t work if your team doesn’t understand it.
For most businesses, you should have:
- New starter induction (including emergency procedures, site rules, and job-specific risks)
- Ongoing training where tasks or risks change
- Supervision (especially for young or inexperienced workers)
This is also where your employment paperwork matters, because it supports your ability to set expectations and give lawful directions. In many businesses, the first place these expectations appear is the Employment Contract.
4. Use Clear Policies That Fit Your Actual Workplace
Policies help you turn “common sense” into consistent behaviour across the team.
Your policies should reflect how you actually operate (and they should be followed in practice), including areas like:
- reporting hazards and incidents,
- what to do if someone feels unsafe,
- drugs and alcohol rules (where relevant),
- bullying and harassment processes, and
- privacy and monitoring (if you use cameras or tracking tools).
Many small businesses document these rules in a Workplace Policy or staff handbook that you can update as you grow.
If your workplace uses monitoring tools (like CCTV), make sure you also consider privacy and transparency. Whether you can use cameras (and how) can depend on the context, so it’s worth understanding the basics in Are Cameras Legal In The Workplace.
5. Consult With Workers (And Take Feedback Seriously)
HSWA places real importance on engaging with workers on health and safety matters.
In a small business, consultation doesn’t need to be overly formal. It can look like:
- regular toolbox talks or short check-ins,
- a simple process for workers to raise concerns,
- following up near misses, and
- involving workers when you introduce new equipment, processes, or sites.
This can also reduce risk in a practical way-your workers are often the first to spot hazards and “workarounds” that may create safety issues.
What Records And Processes Should You Keep To Show You’re Compliant?
Health and safety isn’t only about having the right practices-it’s also about being able to show you’ve taken your obligations seriously if something goes wrong.
Good record-keeping also helps you run a better business. You’ll spot patterns, fix recurring problems, and reduce downtime.
Key Documents Small Businesses Commonly Use
Depending on your workplace, you may want to keep records such as:
- Hazard register (hazards identified, risk rating, controls in place)
- Incident and near-miss register (what happened, action taken)
- Training and induction records (who was trained, when, on what)
- Equipment maintenance logs (especially for high-risk equipment)
- Safety meeting notes (even informal notes can be useful)
- Emergency procedures (including evacuation plans and first aid)
Notifiable Events And Reporting
Some workplace events are legally “notifiable” and must be reported to the regulator (WorkSafe New Zealand) as soon as possible. These are typically serious incidents (like death, notifiable injury or illness, or a notifiable incident/near-miss event as defined by HSWA).
Depending on what happens, you may also need to preserve the site of the incident until a WorkSafe inspector authorises otherwise (subject to limited exceptions, such as helping an injured person or making the site safe).
If you’re unsure whether something is notifiable, it’s worth getting advice early-both to manage legal risk and to make sure you’re supporting your team properly after an incident.
Privacy And Sensitive Information
Health and safety issues often involve sensitive personal information (for example, medical information following an injury).
How you collect, store, and share that information can trigger obligations under the Privacy Act 2020. If you hold staff records, incident reports, or medical certificates, you’ll want a sensible internal approach to confidentiality and access. Many employers manage this through something like an Employee Privacy Handbook and clear internal processes.
What If You Use Contractors, Labour Hire, Or Share A Site With Other Businesses?
One of the easiest ways for small businesses to accidentally trip up on workplace health and safety obligations is when work isn’t performed by a straightforward employee on your premises.
In real life, you might be engaging:
- independent contractors (e.g. tradies, cleaners, delivery drivers),
- labour hire workers,
- specialist subcontractors, or
- other businesses in a shared space (like a shared warehouse, salon, or building site).
Your Duties Often Extend Beyond Employees
Under HSWA, health and safety duties can apply to contractors and other workers whose work your business influences or directs.
That means you should think about:
- who controls the work environment,
- who sets the work method and schedule, and
- who provides equipment and safety controls.
In many cases, you’ll want contractor arrangements that clearly set expectations around safety processes, reporting, and site rules. This is where a properly drafted Contractor Agreement can help reduce misunderstandings and support your operational processes.
Overlapping Duties And Coordination
Where multiple PCBUs are involved (for example, a principal contractor and multiple subcontractors on a job), HSWA expects PCBUs to consult, cooperate, and coordinate activities so everyone can meet their duties.
Practically, that could mean:
- sharing safety plans and site rules,
- agreeing on who manages specific hazards (like traffic management),
- having clear sign-in/out processes, and
- making sure incident reporting lines are understood.
Remote Work And Working From Home Still Counts
If your team works remotely, you still have workplace health and safety obligations-even if “the workplace” is someone’s home, a coworking space, or on the road.
That doesn’t mean you need to control every detail of a home office. But you should still take reasonable steps to identify common risks and provide guidance (like ergonomics, safe setup, and wellbeing check-ins), especially where remote work is ongoing.
It’s also worth aligning your health and safety approach with your broader employment setup for flexible work arrangements, including what your business expects around hours, availability, and tools. This often comes up alongside Working From Home arrangements.
Key Takeaways
- Health and safety obligations apply to most New Zealand businesses under the Health and Safety at Work Act 2015, and they require you to take reasonably practicable steps to keep workers and others safe.
- Your business (as a PCBU) has the primary duty of care, but directors and senior leaders may also have separate obligations as “officers” to exercise due diligence.
- Compliance is practical: identify hazards, assess risk, implement controls, train and supervise staff, and regularly review what’s working (and what isn’t).
- Good documentation helps you stay on track and show what you’ve done-hazard registers, training records, incident and near-miss reporting, and maintenance logs are common starting points.
- Health and safety obligations often extend to contractors and shared worksites, so you should clearly coordinate responsibilities and expectations with other parties.
- Remote and flexible work still involves workplace health and safety-your systems should reflect how your team actually works day to day.
This article is general information only and does not constitute legal advice. If you’d like advice tailored to your business, it’s best to speak with a lawyer.
If you’d like help getting your health and safety documentation and employment setup right (without overcomplicating it), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.


