WHS Obligations for Healthcare Clinics in Australia: Complete Guide

Healthcare workers get injured at work more than almost any other profession in Australia. Safe Work Australia data consistently puts health care and social assistance at or near the top for serious workers compensation claims. Musculoskeletal injuries, needlestick exposures, workplace violence, and psychological harm are not rare events. They are predictable outcomes of a high-risk environment.

If you run a clinic, you already know this intuitively. The question is whether your WHS systems actually reflect the risks your team faces every day. Most clinics have a policy folder collecting dust somewhere. That is not compliance.

This guide covers what Australian healthcare clinics are legally required to do under WHS legislation, and what good practice looks like beyond the minimum.

What legislation governs WHS in healthcare?

Australia uses a harmonised model for workplace health and safety. The model Work Health and Safety (WHS) Act was developed by Safe Work Australia and adopted (with variations) by most states and territories.

| Jurisdiction | Legislation | Regulator | |---|---|---| | Commonwealth | Work Health and Safety Act 2011 | Comcare | | NSW | Work Health and Safety Act 2011 | SafeWork NSW | | QLD | Work Health and Safety Act 2011 | Workplace Health and Safety Queensland | | SA | Work Health and Safety Act 2012 | SafeWork SA | | TAS | Work Health and Safety Act 2012 | WorkSafe Tasmania | | ACT | Work Health and Safety Act 2011 | WorkSafe ACT | | NT | Work Health and Safety (National Uniform Legislation) Act 2011 | NT WorkSafe | | VIC | Occupational Health and Safety Act 2004 | WorkSafe Victoria | | WA | Work Health and Safety Act 2020 | WorkSafe WA |

Victoria was the last holdout with its own OHS Act, though its obligations are broadly similar. Western Australia adopted the model WHS laws in 2022. The practical differences between jurisdictions are mostly in codes of practice and enforcement approaches rather than core duties.

The key message: regardless of which state or territory your clinic operates in, you have the same fundamental duty to ensure health and safety so far as is reasonably practicable.

What are your duties as a PCBU?

Under the model WHS Act, a clinic is a Person Conducting a Business or Undertaking (PCBU). This is a broader concept than "employer." It captures sole traders, partnerships, companies, and even volunteer organisations.

Your primary duty as a PCBU is to ensure, so far as is reasonably practicable, the health and safety of:

Workers who carry out work for you (employees, contractors, labour hire, students on placement)
Other people who may be affected by your work (patients, visitors, couriers, cleaners)

"So far as is reasonably practicable" is the legal test. It means considering:

The likelihood of the hazard or risk occurring
The degree of harm that could result
What the person knows, or ought reasonably to know, about the hazard
The availability and suitability of ways to eliminate or minimise the risk
The cost of eliminating or minimising the risk (only after considering the above)

Cost is always the last factor. You cannot argue a safety measure is too expensive without first establishing that the risk is low and alternatives are unsuitable.

Officer due diligence

If you are an "officer" of the PCBU (think: director, partner, or anyone who makes decisions affecting the whole business), you have a personal due diligence obligation. This means you must:

Acquire and keep up-to-date knowledge of WHS matters
Understand the nature of your clinic's operations and the hazards involved
Ensure the PCBU has appropriate resources and processes to manage risks
Ensure the PCBU has processes for receiving and responding to safety information
Ensure the PCBU complies with its duties and obligations
Verify the provision and use of those resources and processes

This is not a "set and forget" obligation. Regulators expect officers to actively engage with WHS, not just sign off on a policy document once a year.

How do you conduct risk assessments for a healthcare clinic?

Risk assessment is the engine of your WHS system. Without it, everything else is guesswork.

The standard approach follows a hierarchy:

Identify hazards through workplace inspections, incident data, worker consultation, and reviewing industry guidance
Assess the risk by considering who could be harmed, how, and how seriously
Control the risk using the hierarchy of controls
Review controls regularly and after any incident or change

The hierarchy of controls

| Level | Control type | Healthcare example | |---|---|---| | 1 (most effective) | Elimination | Remove a hazardous chemical from your clinic entirely | | 2 | Substitution | Replace latex gloves with nitrile for latex-allergic staff | | 3 | Isolation | Use a designated cytotoxic drug preparation area | | 4 | Engineering | Install sharps disposal containers at point of use | | 5 | Administrative | Implement safe work procedures and training schedules | | 6 (least effective) | PPE | Provide gloves, masks, gowns, and eye protection |

Most clinics rely too heavily on the bottom two levels. PPE and procedures are important, but they depend on humans doing the right thing every time. Engineering and design controls work even when someone is tired at the end of a double shift.

Risk assessments should be documented, dated, and reviewed at least annually. They should also be reviewed after any incident, near-miss, or significant change to your operations.

What are the manual handling requirements?

Manual handling injuries account for a massive proportion of healthcare workers compensation claims. Lifting, transferring, and repositioning patients is inherently risky. So is repetitive work like dental procedures, sonography, and pathology collection.

Your obligations include:

Identifying manual handling tasks that pose a risk (patient transfers, equipment moving, repetitive clinical tasks)
Assessing the risk using tools like the Manual Tasks Risk Assessment (from your state regulator)
Implementing controls such as mechanical lifting aids, adjustable-height beds and chairs, team lifting protocols, and job rotation
Training workers in safe manual handling techniques specific to their role
Monitoring for early signs of musculoskeletal injury

The National Code of Practice for the Prevention of Musculoskeletal Disorders from Manual Tasks provides detailed guidance. Your state regulator will also have healthcare-specific resources.

Key point: "Bend your knees" training on its own is not enough. The evidence shows that manual handling training without engineering controls does not significantly reduce injury rates. You need the equipment and systems to match.

How should you manage sharps safety?

Needlestick and sharps injuries remain a significant hazard in healthcare settings. The risk is not just physical injury but exposure to bloodborne viruses including hepatitis B, hepatitis C, and HIV.

Your minimum obligations

Use safety-engineered sharps devices wherever reasonably practicable (retractable needles, shielded scalpels)
Provide sharps containers that comply with AS 4031 at every point of use
Never require workers to recap, bend, or break needles
Implement a sharps injury management protocol (first aid, risk assessment, post-exposure prophylaxis, reporting, follow-up testing)
Maintain a sharps injury register
Train all workers who handle or may encounter sharps

Sharps injury response checklist

| Step | Action | Timeframe | |---|---|---| | 1 | Wash the wound with soap and water. Do not squeeze | Immediately | | 2 | Report to supervisor and complete incident report | Same shift | | 3 | Assess the source patient's infection status (with consent) | Within hours | | 4 | Attend emergency department or designated medical officer | Within hours | | 5 | Begin post-exposure prophylaxis if indicated | Within 72 hours (ideally within 2 hours for HIV) | | 6 | Arrange baseline blood tests for the injured worker | Within 24 hours | | 7 | Schedule follow-up blood tests | At 6 weeks, 3 months, and 6 months | | 8 | Notify the state WHS regulator if required | Per jurisdictional requirements |

What are your obligations around hazardous chemicals?

Healthcare clinics use a surprising number of hazardous chemicals. Disinfectants, sterilisation agents (glutaraldehyde, peracetic acid), anaesthetic gases, cytotoxic drugs, and laboratory reagents all fall under the WHS Regulations for hazardous chemicals.

Your obligations:

Maintain a register of all hazardous chemicals kept or used at your clinic
Obtain and keep current Safety Data Sheets (SDS) for every hazardous chemical (these must be no more than 5 years old)
Ensure hazardous chemicals are correctly labelled according to the Globally Harmonized System (GHS)
Conduct risk assessments for each hazardous chemical, considering routes of exposure and who might be affected
Provide appropriate controls including ventilation, PPE, spill kits, and safe storage
Train workers in the safe use, handling, storage, and disposal of hazardous chemicals they work with
Ensure health monitoring where required by the WHS Regulations (certain chemicals trigger mandatory health monitoring)

If your clinic handles cytotoxic drugs, you also need to comply with specific guidelines for their preparation, administration, and disposal. This includes designated preparation areas, biological safety cabinets, and specific PPE requirements.

How do you address psychosocial hazards?

This is the area where healthcare WHS compliance has evolved most dramatically in recent years. Psychosocial hazards are now explicitly covered in model WHS Regulations, and regulators are increasingly willing to prosecute for failures in this area.

Psychosocial hazards in healthcare include:

High workload and time pressure (understaffing, unrealistic patient loads)
Workplace violence and aggression from patients, relatives, or colleagues
Bullying and harassment (including from senior clinicians)
Traumatic events (patient deaths, critical incidents, vicarious trauma)
Poor organisational change management (restructures, new systems with inadequate training)
Lack of role clarity or conflicting demands
Remote or isolated work (home visits, after-hours clinics)

What you need to do

Identify psychosocial hazards through worker surveys, incident data, absenteeism trends, and direct consultation
Assess the risk by considering the duration, frequency, and severity of exposure
Implement controls that address the source of the hazard, not just the individual response
Provide support systems including Employee Assistance Programs (EAPs), debriefing after critical incidents, and clear reporting channels
Monitor and review the effectiveness of your controls

The biggest mistake clinics make is treating psychosocial hazards as an individual resilience problem. Telling staff to practice self-care while running a chronically understaffed clinic is not compliance. Regulators expect you to address the organisational factors that create the risk.

Safe Work Australia published a model Code of Practice for Managing Psychosocial Hazards at Work in 2022. If you have not read it yet, put it on your list.

What emergency preparedness do you need?

Your clinic must have an emergency plan that covers:

Fire (evacuation procedures, extinguisher locations, assembly points, warden training)
Medical emergencies in the workplace (resuscitation equipment, first aid officers, emergency drug kit)
Natural disasters relevant to your location (flooding, cyclone, bushfire)
Security incidents (aggressive patients, armed threats, lockdown procedures)
Hazardous chemical spills (spill kits, evacuation triggers, decontamination procedures)
Utility failures (power outage plans, particularly for clinics with cold chain medications or life-support equipment)

Emergency plans must be tested regularly. "Regularly" means at least annually, and more often for high-risk elements like fire evacuation. Staff must be trained in the plan and know their roles.

You also need to maintain appropriate first aid facilities and have trained first aiders available during all operating hours. For a healthcare clinic, this seems obvious, but the WHS obligation extends to having designated first aid kits for staff (separate from clinical supplies) and ensuring workers know where they are.

What are the incident reporting requirements?

Under the WHS Act, certain incidents must be reported to your state or territory WHS regulator. These are called "notifiable incidents" and include:

| Category | Examples in healthcare | |---|---| | Death | Death of a worker or other person at your clinic | | Serious injury or illness | Amputation, spinal injury, loss of consciousness, serious burns, medical treatment required for sharps exposure to bloodborne virus | | Dangerous incident | Uncontrolled escape of gas or chemical, electric shock, fall from height, collapse of structure |

For a death, you must notify the regulator immediately by phone. For serious injuries and dangerous incidents, you must notify as soon as possible after becoming aware.

You must also preserve the incident site until an inspector directs otherwise (or until a regulator advises it is safe to disturb).

Beyond notifiable incidents

Good practice goes well beyond regulatory minimums:

Record and investigate all incidents, including near-misses
Use a standardised incident classification system
Conduct root cause analysis for serious incidents (not just blame the individual)
Track incident trends over time to identify systemic issues
Share learnings across the team (de-identified where appropriate)
Close the loop by implementing and verifying corrective actions

An incident reporting system that captures data but never triggers improvement is a waste of everyone's time. The point is to learn and change.

What workers compensation obligations apply?

Workers compensation is separate from WHS legislation but closely connected. Each state and territory has its own workers compensation scheme.

Your obligations typically include:

Taking out workers compensation insurance that covers all workers (in most jurisdictions this is mandatory, even for sole employees)
Displaying your workers compensation policy information in the workplace
Reporting injuries to your insurer within required timeframes
Supporting injured workers through return-to-work programs
Not discriminating against workers who make a claim
Maintaining records of all workplace injuries

The detail varies significantly by jurisdiction. Check with your state or territory workers compensation authority for specific requirements.

One common gap: contractors. In many jurisdictions, if a contractor is injured while working at your clinic, your workers compensation policy may need to cover them if they do not have their own. Check your policy wording and your insurer's advice.

WHS compliance checklist for healthcare clinics

Use this as a starting point for your annual WHS review.

Governance and systems

[ ] WHS policy is current, signed by senior management, and communicated to all workers
[ ] WHS responsibilities are clearly assigned and documented
[ ] Risk register is maintained and reviewed at least annually
[ ] Worker consultation arrangements are in place (Health and Safety Representative, committee, or other agreed mechanism)
[ ] WHS is a standing agenda item at management meetings
[ ] Officers can demonstrate due diligence activities

Hazard management

[ ] Workplace inspections conducted at least quarterly
[ ] Risk assessments completed for all significant hazards
[ ] Hierarchy of controls applied (not just PPE and procedures)
[ ] Hazardous chemicals register is current
[ ] Safety Data Sheets are accessible and less than 5 years old
[ ] Sharps safety devices are used wherever practicable
[ ] Manual handling risks are assessed and controlled

Psychosocial safety

[ ] Psychosocial hazards have been identified and assessed
[ ] Controls address organisational factors (workload, rostering, support)
[ ] Workplace violence prevention plan is in place
[ ] Bullying and harassment policy is current and communicated
[ ] EAP or equivalent support service is available to all workers
[ ] Critical incident debriefing process exists

Emergency and incident management

[ ] Emergency plan is current and tested at least annually
[ ] Fire wardens are trained and identified
[ ] First aid kits are stocked and checked regularly
[ ] Incident reporting system is in place and used
[ ] Notifiable incident procedures are documented
[ ] Incident investigations identify root causes and corrective actions

Training and records

[ ] WHS induction for all new workers (including contractors)
[ ] Role-specific WHS training completed and recorded
[ ] Manual handling training provided
[ ] Hazardous chemicals training for relevant workers
[ ] Emergency response training and drills
[ ] Training records are maintained and up to date

Workers compensation

[ ] Workers compensation insurance is current
[ ] Return-to-work procedures are documented
[ ] Injury reporting procedures are known by all staff
[ ] Claims are managed in accordance with jurisdictional requirements

Tracking all of this manually is a recipe for things slipping through the cracks. If your clinic still relies on spreadsheets and shared drives for WHS compliance, consider using a purpose-built compliance tracking platform to centralise your policies, training records, and audit schedules.

AHCRA's compliance management tools include WHS policy templates, risk assessment frameworks, and staff training tracking across all 12 compliance categories. You can see exactly which staff are current on their WHS training and which policies are due for review, without digging through folders.

For a broader view of all the compliance obligations your clinic needs to meet (not just WHS), check out our medical practice compliance checklist.

Frequently asked questions

Do I need a Health and Safety Representative?

Under the model WHS Act, workers have the right to request the election of a Health and Safety Representative (HSR). As a PCBU, you must facilitate this process if requested. You do not need to proactively establish an HSR, but you do need consultation mechanisms in place. For smaller clinics, this might be regular team meetings with WHS as a standing item.

How often should WHS training be refreshed?

There is no single mandated frequency for all WHS training. First aid certification typically requires renewal every 3 years (annually for CPR). Fire warden training should be refreshed annually. Manual handling, hazardous chemicals, and infection control training should be reviewed annually or when procedures change. Document your training schedule and stick to it. AHCRA's training courses cover key WHS topics with built-in tracking so you know when refreshers are due.

What happens if a regulator inspects my clinic?

A WHS inspector can enter your workplace at any time without notice. They can inspect, ask questions, take samples, and require the production of documents. If they find a contravention, they can issue improvement notices (fix it within a timeframe), prohibition notices (stop the activity immediately), or on-the-spot fines. Serious breaches can lead to prosecution. The best preparation is genuine compliance, not a last-minute scramble.

Are volunteers covered by WHS laws?

Yes. Under the model WHS Act, volunteers are "workers" and you owe them the same duty of care as employees. This includes medical students on placement, work experience students, and anyone else performing work at your clinic without payment.

Can I be personally liable for WHS failures?

Yes. Officers of a PCBU have personal due diligence obligations. If a serious WHS breach occurs and you failed to exercise due diligence, you can face personal fines or even imprisonment for Category 1 offences (reckless conduct causing serious injury or death). This is not theoretical. Prosecutions of healthcare clinic directors have occurred.

Sources and further reading

Safe Work Australia - Model WHS Laws - Full text of the model WHS Act, Regulations, and Codes of Practice
Safe Work Australia - Health Care and Social Assistance Industry Profile - Industry-specific data and guidance
Comcare - Healthcare Sector Guidance - WHS guidance for Commonwealth-regulated healthcare workplaces
Safe Work Australia - Managing Psychosocial Hazards at Work Code of Practice - 2022 model Code of Practice
AS/NZS 4801:2001 - Occupational health and safety management systems (being replaced by ISO 45001)
Safe Work Australia - Hazardous Chemicals - GHS labelling, SDS requirements, and hazardous chemicals register guidance

Your WHS obligations are not optional extras. They are legal requirements with real consequences for non-compliance, including fines, prosecution, and most importantly, harm to your team.

If you are not sure where your clinic stands, start with the checklist above and work through it systematically. For help building out your WHS policies, tracking staff training, or running a compliance gap analysis, get in touch with us.