WHS Regulations Explained
The WHS Regulations translate broad legal duties under the WHS Act into detailed, enforceable requirements across specific risk areas and operational situations.
The WHS Regulations are subordinate legislation made under the Work Health and Safety Act 2011. They do not create new duties — rather, they specify how the broad duties established by the Act must be discharged in particular circumstances. A failure to comply with a specific Regulation can constitute a breach of the Act itself, because the Regulations define the standard of conduct expected when managing particular risks.
Unlike the Act, which is largely performance-based — requiring duty holders to do what is "reasonably practicable" — the Regulations contain a mix of prescriptive and performance-based obligations. Some Regulations mandate specific actions (for example, the requirement to prepare a Safety Data Sheet in a prescribed format). Others set outcome-based standards and leave the method of compliance to the duty holder. Understanding which type of obligation you are dealing with is critical to compliance.
The Regulations are structured into chapters, each addressing a specific risk domain. They operate in connection with the Act, Codes of Practice, and model WHS laws. Regulators routinely cite specific Regulation numbers in improvement notices, prohibition notices, and prosecution proceedings — making familiarity with the Regulations essential for any person conducting a business or undertaking (PCBU).
How the WHS Regulations Are Enforced
Enforcement of the WHS Regulations is carried out by the relevant state or territory regulator — such as SafeWork NSW, WorkSafe Victoria, or Workplace Health and Safety Queensland. Inspectors appointed under the Act have broad powers, including the power to enter workplaces, require the production of documents, issue improvement notices and prohibition notices, and recommend prosecution.
An improvement notice is issued when an inspector believes a person is contravening, or has contravened, the Act or Regulations. It requires the person to remedy the contravention within a specified period. A prohibition notice is issued when an inspector believes an activity involves, or will involve, a serious risk to health or safety. Work must cease until the risk is remedied.
In prosecution proceedings, regulators will often cite specific Regulation numbers alongside the relevant duty provision in the Act. For example, a prosecution for a fall from height may allege a breach of the primary duty of care (s19 of the Act) and a failure to comply with the specific fall prevention requirements in Chapter 4 of the Regulations. The specificity of the Regulation strengthens the prosecution case because it establishes a clear, prescriptive standard against which conduct can be measured.
From a practical standpoint, documentation and verification are critical. Regulators will request evidence that risk assessments were conducted, that control measures were implemented and monitored, that training was provided, and that consultation occurred. The absence of documentation does not automatically prove non-compliance — but it makes it significantly harder to demonstrate that duties were met.
How the Regulations Work in Practice
Businesses must interpret both the general duties in the Act and the specific obligations in the Regulations. The Act sets the overarching duty — to ensure, so far as is reasonably practicable, the health and safety of workers and others. The Regulations specify what that duty looks like in defined contexts. Where a Regulation prescribes a specific action, doing less than what is prescribed will generally not satisfy the duty.
Codes of Practice provide practical guidance on how to meet the standards set by the Regulations. While they are not legally binding in the same way as the Regulations, they are admissible in court proceedings. A PCBU that follows an approved Code of Practice will generally be regarded as having met the standard of care — but departing from a Code requires evidence that the alternative approach provides an equivalent or better level of protection.
Australian Standards are frequently referenced within the Regulations or within Codes of Practice. They set technical benchmarks for equipment design, installation, testing, and maintenance. While not all Australian Standards are mandatory, those referenced in the Regulations or Codes carry practical significance — and regulators will expect compliance with them as evidence of meeting the Regulation.
Compliance is not a documentation exercise alone. Regulators draw a clear distinction between businesses that have procedures on paper and those that have procedures that are implemented, monitored, and reviewed. A risk register that has not been updated for three years, or a training matrix that does not reflect current staff, will not satisfy a regulator — even if they technically exist.
Do All Regulations Apply to Every Business?
No. The application depends on the type of work being performed, the risk profile of the business, whether high-risk activities are undertaken, and whether threshold quantities are exceeded.
However, Chapter 3 (risk management) applies broadly to most businesses and forms the foundation of compliance.
Not sure whether you need a formal system? Read our practical guide →
Common Misunderstandings About the WHS Regulations
"The Regulations only apply to construction."
Construction is one of several risk domains covered by the Regulations. Chapter 3 (risk management) applies to every workplace, and Chapters 5, 7, and 8 apply across manufacturing, agriculture, hospitality, healthcare, and many other sectors.
"If it's not specifically listed, it's not required."
The Regulations do not attempt to list every workplace hazard. The Act's general duty of care requires PCBUs to manage all risks, whether or not a specific Regulation addresses them. The Regulations supplement the Act — they do not limit it.
"Codes of Practice are optional, so we can ignore them."
Codes of Practice are admissible as evidence in proceedings. A PCBU that departs from an approved Code of Practice must demonstrate that the alternative approach provides an equivalent or better level of protection. In practice, ignoring a Code without documented justification is a significant compliance risk.
"Only high-risk industries need to understand the Regulations."
Every PCBU has obligations under Chapter 3. Businesses in office environments, retail, education, and professional services are all required to identify hazards, assess risks, and implement controls — and the Regulations prescribe how this must be done.
In Summary
If the Act answers "What is your duty?", the Regulations answer "What must you do to meet it?"
Understanding the Regulations means understanding where your business has specific, non-negotiable compliance obligations. Explore our WHS management system to see how these requirements are implemented in practice.