Psychosocial Safety & WHS

A serious workplace incident: the employer’s first 24 hours and notification decisions

A practical first-response guide for employers: protect people, identify the applicable regulator and duty holder, decide notification promptly, preserve the site and evidence, and keep parallel reporting pathways distinct.

By the AWS Editorial Team
Two workers reviewing a tablet at an industrial workplace

Key points

  • Protect life and prevent further harm first. Emergency assistance and essential safety action are not delayed by notification or evidence concerns.
  • Notifiability turns on the enacted test in the jurisdiction — not the label ‘serious’, a workers compensation claim or an internal severity rating.
  • In Victoria, an employer or self-employed person must notify WorkSafe immediately by phone on 13 23 60 once aware of a notifiable incident at a workplace under their management and control, then provide written notification within 48 hours.
  • Preserve a notifiable incident site until an inspector arrives or directs otherwise, subject to the applicable statutory rescue, safety and prevention exceptions.
  • Regulator notification, police, workers compensation, insurer and internal reporting are separate pathways; completing one does not necessarily complete another.
  • Record facts, awareness time, decision-maker, legal basis, contact and directions received without speculating about cause or fault.

The first priority is people, not classification

The first minutes after a serious workplace event are operational, not legal. Call emergency services where required, provide first aid within capability, move people away from continuing danger and take essential steps to prevent another person being harmed. Nominate one incident controller, establish a safe perimeter and account for workers, contractors and visitors. Notification analysis begins at once, but must not delay rescue or necessary safety action.

Use disciplined language from the start. Record what was seen, heard and done; do not convert an early account into a conclusion about cause, blame or legal breach. A concise entry might say a worker fell from a platform, emergency services were called at 10.06 am, power was isolated and south access was closed. It should not say the worker ignored a procedure unless that is later established through a fair process.

This guide deals with immediate response and notification. It does not replace broader psychosocial risk management, early complaint triage, the decision about appointing an external investigator, or psychological injury and return to work.

Why ‘serious’ does not decide notifiability

An organisation may classify an event as critical, serious or high potential for internal escalation. Those labels can sensibly trigger executive attention, but do not decide whether notification legislation applies. The legal question is whether the facts meet a category in the enacted law of the relevant jurisdiction.

Under the established model-WHS framework, a notifiable incident is a death, a serious injury or illness, or a dangerous incident arising from the conduct of the business or undertaking. Serious injury or illness turns on identified treatment and injury categories. A dangerous incident turns on exposure to a serious risk from immediate or imminent exposure to a listed event. Victoria uses separate categories in s 37 of the Occupational Health and Safety Act 2004 and its regulations.

A workers compensation claim is a separate process and is neither necessary nor sufficient to make an event notifiable. The same is true of an internal lost-time classification. Conversely, a dangerous incident can be notifiable even though nobody was injured. Apply the statutory category to known facts and keep the assessment open as medical or technical information emerges.

Psychological harm requires the same discipline. A distress report, threat, complaint, sexual harassment allegation or disclosure of violence may demand immediate protective action and engage OHS or WHS risk duties, positive duties, police, safeguarding or other pathways. It does not automatically meet every jurisdiction’s notifiable-incident test. Some jurisdictions have enacted broader categories and Safe Work Australia published expanded model provisions in December 2025, but model provisions have no legal effect until adopted locally.

The Victorian sequence: notify, write, preserve and retain

Victoria must be treated separately from model-WHS jurisdictions. Under ss 37–39 of the OHS Act, an employer or self-employed person must notify WorkSafe immediately after becoming aware that a notifiable incident has occurred at a workplace under their management and control. WorkSafe Victoria’s notifiable incidents guidance directs immediate telephone notification on 13 23 60, available at any time.

The initial phone call is not deferred for 48 hours. Within 48 hours after being required to notify, the employer or self-employed person must give WorkSafe a written record in the approved form. WorkSafe’s report-an-incident process explains the steps. A copy must be kept for at least five years and made available as the Act requires. Keep the call reference, form, submission confirmation and inspector directions together.

Victorian categories include death; specified treatment consequences such as immediate inpatient hospital treatment, immediate medical treatment for listed serious injuries, and medical treatment within 48 hours of substance exposure; and incidents exposing a person to serious risk from immediate or imminent exposure to listed events. Regulations add detail. Read the current Act, regulations and regulator guidance rather than an old checklist.

The site must be preserved until an inspector arrives or directs otherwise. Section 39 permits disturbance to protect a person’s health or safety, aid an injured person, or take essential action to make the site safe or prevent another incident. These exceptions support rescue and necessary control; they are not permission for convenient clean-up, equipment adjustment or recommencement. Record what moved, by whom, when and why, and ask WorkSafe where the boundary is uncertain.

Model-WHS jurisdictions are similar, not identical

Sections 35–39 of the model WHS framework provide a common architecture: defined incidents; immediate PCBU notification by the fastest possible means; written notice within 48 hours if the regulator requires it after telephone notification; retention of each notification record for at least five years; and site preservation by the person with management or control. Model exceptions include assisting an injured person, removing a deceased person, essential safety action, police investigation and regulator permission.

That summary is not local legal advice. Safe Work Australia’s incident-notification page says model amendments apply only when adopted in a jurisdiction. Adoption and local modification are not uniform. Forms, phone numbers, who may notify, written follow-up, industry exclusions and expanded categories can differ. The ACT, for example, has enacted changes that are not law everywhere else.

For interstate operations, maintain a jurisdiction schedule rather than one national instruction. Safe Work Australia publishes regulator and workers compensation authority contacts. Record enacted law, regulator, after-hours number, form, duty holder, trigger, written follow-up, retention and site exceptions for each place of work, with an owner and review date.

Identify the duty holder and regulator before roles blur

A shared site can involve the host, labour-hire employer, principal contractor, subcontractors, building manager and equipment owner. Cross-border work can add a head office in one State, a worker based in another and an incident in a third. Start with location and work performed, then identify each legal entity with a relevant duty or management and control. Do not assume the entity paying the worker, host or first caller has completed everyone else’s obligations.

In Victoria, s 38 refers to the employer or self-employed person and an incident at a workplace under their management and control. Under model-WHS laws, the PCBU notification duty and site-preservation duty may rest on different actors. Duties can overlap and contracts do not necessarily displace them. Create a contact group, exchange verified facts, record who makes which notification, and obtain written confirmation. Each entity should retain its own advised decision.

Also test whether mining, petroleum, dangerous goods, electrical, rail, road, maritime, aviation, healthcare or environmental law applies. One authority does not necessarily notify another. If the duty holder or regulator is uncertain and time is running, seek urgent regulator or specialist legal guidance rather than waiting for an organisational chart.

Build a notification decision record in real time

Open a decision log when the incident controller is appointed. Record event time, awareness time for each relevant duty holder, location, work activity, people affected, treatment known, immediate or imminent risk, potential statutory category, jurisdiction and regulator. Separate confirmed facts, reported information and unknowns. Add the decision-maker, advice, notification decision, contact time and method, person spoken to, reference number, directions and next deadline.

A decision not to notify needs a reason tied to the enacted test, not ‘not serious enough’. Record considered facts, uncertainty and the review trigger. Set triggers for medical information, equipment examination, witness evidence or diagnosis changes. If later facts satisfy the threshold, reassess immediately and record when those facts became known.

Do not delay notification for a completed investigation or definitive root cause. Where facts remain genuinely uncertain, WorkSafe Victoria advises reporting if uncertainty remains after reading its guidance. Elsewhere, use the relevant regulator’s current support channel and obtain advice promptly.

What to tell the regulator — facts without speculation

Prepare a brief where circumstances permit: legal entity and contacts; site and activity; date and time; what occurred; who was affected; known injury, treatment or exposure; current condition if lawfully known; immediate controls; site status; emergency-service involvement; other duty holders; and inspector contact. Identify what is confirmed, reported or unknown.

Avoid fault, untested cause or minimisation. Do not call someone careless, speculate about impairment, promise a return-to-work date or say a control failed without evidence. Do not omit an awkward fact. If information materially changes, correct it through the nominated contact and record the correction.

One regulator liaison reduces inconsistent accounts but must not obstruct workers, health and safety representatives or others exercising legal rights. Record requests and deadlines exactly. Obtain legal advice for compulsory requests, privilege or possible offences without delaying immediate safety and notification duties.

Control the scene without obstructing rescue or safety

Establish a proportionate perimeter and restrict access. Isolate energy or plant only as needed for rescue and safety. Do not reset controls, restart equipment, remove debris, clean surfaces or resume routine work for convenience. If an exception requires change, photograph or video first where safe, mark original positions and log the person, time, action and reason.

Assess secondary risks such as unstable structures, stored energy, hazardous substances, traffic, distressed witnesses, aggressive persons or public access. Police or emergency services may control parts of the scene. Capture their directions and reconcile them with regulator instructions; one agency’s attendance does not end another duty.

Ask the regulator what must remain undisturbed, whether retrieval or stabilisation is permitted and when control is released. Record the direction. Site release is not a finding that work is safe to restart; recommencement requires its own risk and control decision.

Preserve digital and human evidence

Issue targeted holds before overwrite: CCTV and access footage; machinery and sensor logs; telematics; phone, radio and collaboration messages; photographs; rosters and handovers; permits, pre-starts and maintenance; training and competency; procedures and risk assessments; contractor documents; and emergency calls. Preserve native files and metadata where possible and record collection and integrity.

Identify witnesses and obtain contact details, but avoid coordinated group reconstruction. Ask people not to delete records or align accounts, without restraining lawful consultation, representation or regulator contact. Welfare checks and factual first accounts may be valuable; detailed interviews should be sequenced to avoid contaminated recollection or conflict with police and regulator work.

Limit access on a need-to-know basis. Medical information, complaints and accounts may be sensitive. Maintain separate welfare, claim, regulator and investigation files where practical. Confidentiality is not absolute: information may be shared for safety, consultation, statutory reporting, fair process or lawful requests. Explain those limits rather than promising secrecy.

Keep external reporting pathways separate

Use parallel workstreams, not one ‘reported’ checkbox. OHS or WHS notification addresses safety law. Workers compensation follows the applicable scheme. Police address possible criminal conduct and public safety. Insurers apply policy notice terms. Industry regulators, safeguarding bodies, environment authorities and privacy regulators may have separate triggers. Executive or board escalation is governance, not a statutory substitute.

Trigger, notifier, content and deadline differ. A compensation claim can exist without a notifiable incident, and a dangerous incident can be notifiable without injury. A sexual harassment allegation may activate internal response, positive-duty and psychosocial work without meeting the local notification threshold; under different enacted law or facts, a category may apply. Log each pathway with basis, owner, deadline, status and completion evidence.

Coordinate facts while preserving purpose. An insurer form should not become an untested disciplinary finding. A police report does not permit deferred safety controls. Regulator notification is not acceptance or rejection of a compensation claim.

Support workers, consult and protect confidentiality

Nominate a welfare contact for affected people and an operational family contact where appropriate. Explain support, pay and leave, compensation contacts, representation and communication. Do not press for detailed accounts during treatment or acute distress. Support witnesses and first responders too.

Consult affected workers and health and safety representatives as required about ongoing risks and controls. Share enough for meaningful participation without unnecessary personal or medical detail. Interim controls can include stopping work, alternative duties, changed access, supervision, security, workload adjustment or temporary separation. Describe them as precautionary and reviewable, not findings.

Monitor response-team workload, distress exposure, retaliation risk and rumours. A brief workforce update can identify the affected area, controls and contact route without naming people or speculating.

Commission investigation without contaminating evidence

Do not assume every incident needs one broad independent investigation. Identify the purpose: regulatory facts, technical failure, WHS root cause, misconduct, complaint, insurance or legal advice. Different purposes may require different investigators, powers and information barriers. The employer remains responsible for controls while processes run.

Check regulator and police directions, conflicts, competence, scope and access. Agree interview timing, equipment testing, communications, legal advice and hazard escalation. External appointment is a practical choice, not a universal statutory requirement. Our investigator guide covers selection and reviewing findings covers later quality checks.

Privilege should not be improvised. It depends on the dominant purpose of each communication or document and can be waived; copying a lawyer does not privilege ordinary records. Obtain specialist legal advice where enforcement, fatality, serious injury, possible criminal conduct, contested notification or overlapping proceedings make structure important.

Corrective controls and board oversight

Immediate controls should be operational: equipment isolated, work stopped, access changed, supervision added or interaction suspended. Give each an owner, start time, area and verification method. A released site is not automatically safe to reopen. Interim controls remain interim until sustainable controls are implemented and tested.

Board or executive reporting should separate confirmed facts, unknowns, completed notifications, directions, people impacts, affected operations, evidence, controls, decision deadlines and issues requiring advice. Use a regular acute-phase cadence. Avoid a traffic-light score that hides uncertainty or implies closure because nobody remains in hospital.

After day one, move to governed corrective action: system and work-design factors, consultation, owners, dates and proportionate verification. If a regulator issues a notice, the AWS guide to responding to compliance notices covers classification, review rights, evidence and closure.

Illustrative first-24-hours timeline

At 9.55 am, a contractor is injured when mobile plant overturns at a Victorian site managed by the host. The supervisor calls emergency services, stops nearby plant, isolates the area and appoints a response lead. Rescue requires a barrier and loose material to move; a safe photograph is taken first and the action, time and reason logged. The contractor’s employer and site controller exchange details rather than assuming one notification answers all duties.

At 10.20 am, the safety lead records treatment and dangerous-incident facts, awareness time and possible s 37 categories. The employer phones WorkSafe on 13 23 60 immediately, gives verified facts, records the reference and direction, and does not wait for the 48-hour written step. CCTV, telematics, rosters, permits, maintenance and radio traffic are held. Witness contacts are captured without group reconstruction.

By midday, separate owners cover WorkSafe, police if required, compensation, insurers, support, consultation, evidence and operations. The executive update separates fact from hypothesis. The written WorkSafe notice is submitted within 48 hours and retained with confirmation for at least five years. Investigation structure is chosen after checking inspector access, evidence boundaries, conflicts and purpose. This illustrates the Victorian sequence, not a universal timetable.

Sources, limits and how AWS can help

This guide was checked against WorkSafe Victoria’s current incident guidance and ss 37–39 of the authorised OHS Act; Safe Work Australia’s current model incident material and model Act; and official State and Territory regulator material for the limited comparison. Safe Work Australia is a policy body, not the local regulator, and its December 2025 model changes apply only where enacted. Check laws, categories, forms and processes again when an incident occurs.

Australian Workplace Strategies supports incident-response governance, duty-holder mapping, factual logs, evidence processes, worker consultation, control design, investigation scope and corrective-action tracking through psychosocial safety and WHS, workplace investigations, workplace advisory and governance, risk and compliance. AWS is a workplace consultancy, not a law firm, and does not provide legal advice or representation. Obtain specialist legal advice on contested notification, regulator powers, privilege, fatalities, possible offences and overlapping proceedings. This is general information current at 24 September 2026.

First-day incident decision log and checklist

  • Emergency response: emergency services, first aid, rescue, headcount, continuing hazards and action to prevent further harm.
  • Incident control: named controller, safe perimeter, authorised access, family and worker welfare contacts.
  • Core facts: event time and place, activity, people and entities, treatment or exposure, witnesses and sources.
  • Awareness: time each relevant duty holder became aware, recipient and information then known.
  • Jurisdiction: place of work, enacted law, safety regulator, industry regulator and cross-border issue.
  • Duty holders: employer, PCBU, self-employed person, site controller, host, labour-hire employer and contractors.
  • Notification test: category, facts, unknowns, advice or regulator guidance and review trigger.
  • Regulator contact: channel, time, notifier, contact, reference, information and directions.
  • Written follow-up: form, deadline, approver, submission evidence and retention period.
  • Site preservation: perimeter, protected items, exception changes, reason, photographs and permission or release.
  • Evidence hold: CCTV, access, plant data, messages, rosters, permits, maintenance, training and risk records.
  • Parallel pathways: police, compensation, insurer, industry regulator, safeguarding, privacy and governance.
  • People and consultation: treatment, support, HSR consultation, interim controls, confidentiality and communications.
  • Investigation: purpose, scope, conflicts, regulator or police coordination, interview sequence and legal advice.
  • Governance: board briefing, open decisions, control owners, next update and re-test requirement.

Frequently asked questions

Does every serious near miss have to be notified?
Not every event described internally as a serious near miss is legally notifiable. In model-WHS jurisdictions, a dangerous incident generally requires exposure to a serious risk from immediate or imminent exposure to a listed event. Victoria uses its own categories under s 37 of the OHS Act. Apply the enacted test to the facts, not the internal rating. If the threshold may be met, contact the regulator or obtain urgent specialist legal advice rather than waiting for certainty.
Can an incident away from the employer’s premises be notifiable?
Potentially. A workplace is not limited to the employer’s office or factory. The test, duty holder and regulator depend on the jurisdiction, place, work connection and management or control. For mobile, remote, cross-border or hosted work, identify the legal entities, location and regulator immediately and coordinate with other duty holders without assuming the host alone will notify.
What if serious medical information arrives after the event?
Reassess as soon as the new information is received. An event may meet the enacted threshold when treatment, diagnosis or exposure facts become known. Record when the information reached the duty holder and why the assessment changed, then notify immediately if required. Do not wait for a final prognosis where the statutory facts are already established.
Is a psychological incident, threat or sexual harassment allegation automatically notifiable?
No single Australian answer applies. A complaint, threat, psychological symptom or sexual harassment allegation does not automatically satisfy every jurisdiction’s test. It may still require immediate safety action and engage OHS or WHS risk duties, discrimination-law positive duties, police or safeguarding pathways, workers compensation or internal reporting. Some jurisdictions have expanded categories, while model changes have no effect until locally enacted. Check current local law and facts promptly.
Do weekend incidents wait until the regulator opens?
No where the law requires immediate notification. Use the regulator’s published after-hours or 24-hour channel. WorkSafe Victoria receives notifiable incident calls on 13 23 60 at any time. Record attempts and directions, but do not substitute an internal email sent on Monday for immediate statutory notification required on the weekend.
When may a notifiable incident site be disturbed?
The exceptions depend on the enacted jurisdiction. In Victoria, the site may be disturbed to protect health or safety, aid an injured person, or take essential action to make the site safe or prevent another incident. Model-WHS laws also identify removing a deceased person, police investigation and regulator permission. Take only the action the exception supports, record changes where safe, and seek regulator direction before broader clean-up, repairs or recommencement.

Discuss this matter with AWS

Briefings can be scoped on a confidential basis. We respond within two business days.

Contact AWS