Key takeaways
- Under the WHS Act, if it is foreseeable your staff could face aggression, managing it is part of your primary duty of care, and that duty covers psychological harm and members of the public, not just physical injury.
- Prevention beats reaction: assess where your team is exposed, train consistently, and have a documented incident plan for when prevention is not enough.
- Keep training records. Officers carry a due diligence duty, and a clear record is how you show you took your duty of care seriously.
If your team deals with the public, the question isn’t whether they’ll face conflict. It’s when, how often, and whether they’re ready for it. Abuse, aggression and the threat of violence have become a normal part of a lot of frontline roles across Australia, and as an employer that lands squarely on your desk. Serious workers’ compensation claims for assault and exposure to workplace violence have jumped by more than half over the last five years, so this is a trend heading the wrong way, not a rare event.
This post is for the person who owns that problem. The business owner, the operations manager, the WHS lead. It covers what your duty of care actually means under Australian law, why prevention is the smart play, and the practical steps that make a real difference. I spent years in the New Zealand Police dealing with the sharp end of this, and the patterns are remarkably consistent no matter which side of the Tasman you’re on.
What your WHS duty of care actually means
Across most of Australia, workplace safety runs on the model Work Health and Safety (WHS) Act, which is in force in the Commonwealth, New South Wales, Queensland, South Australia, Western Australia, Tasmania, the ACT and the Northern Territory. Victoria is the exception and runs its own Occupational Health and Safety Act, which works on the same principles but uses different language. Wherever you are, the core idea is the same.
Under the WHS Act, if you’re a person conducting a business or undertaking, a PCBU, which is usually just the employer, you have a primary duty of care to ensure the health and safety of your workers and others, so far as is reasonably practicable. Two things worth pulling out of that. First, health explicitly includes psychological health, not just physical injury. Second, the duty covers others at the workplace too, which means customers and clients, not only your staff.
Most people read “health and safety” and think about trip hazards, machinery and chemicals. Fewer think about the angry customer, the volatile client, or the person who walks in looking for trouble. But Safe Work Australia has made this explicit. Its model Code of Practice on managing psychosocial hazards at work, which came into effect in late 2024, names violence and aggression as a hazard PCBUs are expected to manage, whether it comes from other workers or from members of the public.
In plain terms, if it’s foreseeable that your staff could face aggression or violence in their role, you’re expected to take reasonable steps to manage that risk. “We didn’t think it would happen to us” is not a defence, and it’s usually not true anyway. The warning signs are almost always there beforehand.
A quick note. I’m not a lawyer, and this isn’t legal advice. For your specific obligations, talk to a professional or start with your regulator and Safe Work Australia at safeworkaustralia.gov.au. What I can tell you is what good prevention looks like in practice.
‘We didn’t think it would happen to us’ is not a defence, and it’s usually not true anyway.
Why prevention beats reaction
Here’s the mindset shift that matters. Most businesses don’t act until something happens. An incident, a near miss, a staff member who quits because they no longer feel safe. By then you’re managing fallout, not risk, and often a compensation claim as well.
Prevention is cheaper, calmer and far more effective. It protects your people, it protects your business from liability and reputational damage, and it keeps good staff who feel looked after. The goal is to reach the problem before it reaches you.
There are three outcomes worth aiming for:
- Your business meets its WHS duty of care and can show it.
- Your staff make better decisions when it matters, because they’ve been trained to.
- Your people feel safe and equipped, which shows up in retention and morale.
The practical steps that work
Prevention isn’t one thing. It’s a few layers that stack together.
Assess the real risk. Look honestly at where your team is exposed. Who works alone? Who handles money, enforces rules, or delivers bad news? Where and when do incidents tend to happen? Under the WHS framework you’re expected to identify these risks, so putting it in writing is both good practice and part of the job. You can’t manage a risk you haven’t named.
Train your people, properly and consistently. This is the big one. Staff who can read a situation early, communicate under pressure and de-escalate before things boil over are your single best line of defence. The key word is consistently. Training once and never again means your newest, most exposed staff are the least prepared. The aim is for every new team member to get the relevant training from their first day on the job, not eventually.
Have a plan for when prevention isn’t enough. Even with the best training, some situations escalate. Your team needs to know exactly what to do, who does what, and how to respond to an aggressive customer, a robbery, or worse. A documented incident management plan turns panic into process.
Track it. Keep a record of training completed and refreshed. This is partly about capability and partly about evidence. Officers of a business carry their own due diligence duty under the WHS Act, and if you ever need to show you took your duty of care seriously, a clear training record does the talking.
Create a culture where reporting is normal. A lot of aggression goes unreported because staff think it’s “just part of the job”. It isn’t. When people report near misses and abuse, you get the data you need to fix things before they become serious incidents, and you build the record that shows you’re actively managing the hazard.
The goal is to reach the problem before it reaches you.
Where to start
If this feels like a lot, start small and start now. Pick the most exposed roles in your business and get them trained first. Put a basic incident response in writing. Make it normal for staff to talk about the difficult interactions they’re having. Momentum builds from there.
Getting your team trained in de-escalation and situational awareness is the most effective first move, and it’s the heart of what we do, both through in person training and the Online Platform so every staff member can be brought up to speed. If a serious incident is a realistic risk for your site, a tailored Incident Management Plan makes sure everyone knows their role when it counts.
If you’d like to talk through what’s reasonable and practical for your business, book a call here. No pressure, just a conversation about keeping your people safe.
