Psychosocial Hazards in Healthcare, Victoria: WHS Obligations and Where to Start
Health care and social assistance records more workers' compensation claims for mental stress than any other Australian industry. In Victoria, that obligation sits under Occupational Health and Safety Act 2004 (Vic), with WorkSafe Victoria assessing compliance against Compliance Code: Psychological Health (September 2025). This page covers what you are required to do, the hazards most relevant to healthcare, and what a realistic first response looks like.
Specific Guidance for Victoria
Regulator
WorkSafe Victoria
Key Legislation
Occupational Health and Safety Act 2004 (Vic)
Code of Practice: Compliance Code: Psychological Health (September 2025)
"In Victoria, WorkSafe describes the employer's duty to provide a safe working environment by identifying psychosocial hazards and implementing effective controls, with training unable to be relied on as the sole control measure."
The 6 most common hazards in healthcare
Here are the six hazards most relevant to healthcare, each with a realistic first control and what to record. You do not need all six solved to be compliant. You need evidence that you are working through them.
Violence and aggression from patients, families and visitors
Physical and verbal aggression is one of the most consistently reported psychosocial hazards in Australian healthcare, and exposure to violence and harassment accounts for a substantial share of national mental stress claims. A first control is a documented de-escalation and reporting protocol that every shift is briefed on, with a clear point of escalation. Record: which wards or roles have an active protocol, when it was last reviewed, and whether staff have confirmed they know how to use it.
Exposure to trauma and critical incidents
Emergency, critical care, oncology and mental health staff routinely absorb trauma as part of the job: resuscitations that fail, sudden deaths, and disclosures of abuse. Under the SWA Code this sits within exposure to traumatic events, a recognised hazard requiring identification and controls, not an assumed cost of the profession. A first control is structured post-incident debrief that is scheduled, not left to whoever remembers. Record: that debrief occurred, who attended, and whether follow-up support was offered.
High job demands from patient loads and staffing shortfalls
Chronic understaffing against patient acuity is a structural psychosocial hazard, not an individual coping problem. The control is not simply hiring more staff, it is a documented process for managing demand when staffing falls below safe levels, including who makes that call and what changes as a result. A first control is a written escalation protocol for high-acuity or under-staffed shifts. Record: when the protocol was activated, what adjustments were made, and whether the outcome was reviewed with the team.
Bullying and poor support within clinical hierarchies
Bullying between senior and junior clinicians, particularly in surgical, medical training and nursing hierarchies, is well documented in the Australian literature and is a named hazard under the Code (poor workplace relationships, poor support). A first control is a clear, confidential reporting pathway that does not require the junior party to raise it with the person involved. Record: that the pathway exists, that new starters are told about it during orientation, and how reports are handled.
Shift work and fatigue
Rotating rosters, night shifts and on-call arrangements concentrate risk: reduced peer support, impaired decision-making, and isolated clinical judgement calls late at night. A first control is ensuring every night or solo shift has a named, reachable escalation contact. Record: that the contact is known to staff on that shift, and that any overnight escalation events are logged with the outcome.
Poor organisational change management
Health services are in near-constant change: new models of care, digital health system rollouts, service restructures and funding-driven reorganisation. Each change is a psychosocial hazard when it is not communicated clearly to the staff who have to run it. A first control is a brief, structured communication each time a significant change is implemented: what is changing, what is not, and who to ask. Record: that the communication occurred, when, and via what channel.
Check Your Compliance
A short set of questions on how hazards get identified, documented and reviewed today, scored against your state's Code, with a gap analysis you can act on.
Where PsychProof sits for a Victoria health service
Survey tools stop at identification. Incident systems start after harm. PsychProof owns the step in between, the one WorkSafe Victoria actually enforces on.
A clinical incident report tells you harm has already occurred. A staff wellbeing survey tells you where the demand sits. Neither produces what WorkSafe Victoria inspectors ask for during a proactive audit or after a notifiable incident: a dated, ongoing record showing hazards were identified on the ward, controls were designed against the hierarchy, workers were consulted, and effectiveness was reviewed before anything went wrong.
That is the gap most Victoria health services have. Not a lack of incident data, and not a lack of an EAP provider, but a lack of the connective evidence between the two. PsychProof is built specifically for that step.
See what running this looks like in healthcare
The six hazards above each need identification, a first control, and a record. PsychProof runs that loop for every hazard and closes it with a dated review.
What to read next
What does "psychosocial" actually mean?
The plain-English definition behind the Act and Code language on this page, and why it is not the same thing as mental health or an HR matter.
A worked risk assessment example
See the identify-assess-control-review cycle applied to a real hazard, from first identification through to a closed, reviewed control.
Important Notice
This information is general in nature and provided for awareness and documentation support only. It does not constitute legal, clinical, or professional advice. Regulatory obligations vary by jurisdiction and circumstances. Organisations should refer to relevant regulators or qualified professionals for advice specific to their situation.