Early triage of workplace complaints: the first 24–72 hours

Triage is the short assessment between the moment a concern reaches the organisation and the moment a process starts. Its job is narrow: work out what has been raised, whether anyone is at risk now, who should own it, what must be preserved, and which pathway looks right on what is presently known. It ends at a documented provisional pathway and a handover.

Triage is assessment, not investigation. It does not weigh credibility, make findings, frame allegations, label a concern vexatious or decide discipline. Those belong to the process that follows, described in our guide to managing a workplace complaint and running a fair process.

The 24 to 72 hour window is a practical operating target, not a statutory deadline. It exists because what triage protects degrades quickly: accounts blur, message and system data cycle out on short retention settings, and interim arrangements are easier to settle before positions harden. Immediate medical, safety and security needs, and any actual notification duty, override it.

The label is not decisive. What matters is whether the organisation now knows something that may require it to act. A concern may arrive orally, anonymously, indirectly or through observation.

The first conversation exists to understand enough to assess risk and choose a pathway. Let the person give their account in their own order, and ask open questions: when, where, who else was present, whether it is continuing, what they fear next. Do not test it or put contrary propositions.

Avoid three things: promising an outcome, promising nothing will happen without the person's agreement, and offering a view on whether the conduct is bullying, harassment or a breach. Record the account in the person's words, keep fact separate from characterisation, ask what support is needed, and offer to confirm the note in writing. Common triggers include:

• a written complaint under a policy or enterprise agreement;
• an oral disclosure to a manager, HR contact or health and safety representative;
• something a manager observes or hears second-hand;
• an anonymous note, hotline report or free-text survey comment;
• a hazard or incident report describing behaviour rather than a physical hazard;
• a resignation, exit interview or medical certificate disclosing harm;
• a union, lawyer, regulator or insurer raising a concern for someone else.

Before any pathway question, screen for present risk. Is anyone exposed to harm now, physically or psychologically? Bullying, harassment, violence and unreasonable demands are psychosocial hazards to be eliminated or minimised so far as is reasonably practicable, not only conduct questions.

Apply the law that applies to you. The model WHS laws are not law in themselves; each State, Territory and the Commonwealth decides whether and how to enact them, and Victoria operates under its own OHS scheme, and WorkSafe Victoria's psychological-health guidance is the reference there. Safe Work Australia has updated the model incident-notification provisions, including for contemporary psychosocial incidents, but that does not settle any employer's duty: check whether your jurisdiction has enacted them and confirm the position with the regulator against the current incident-notification guidance. Do not assume every psychological injury or bullying allegation is notifiable, or that none is.

Screen separately for what displaces ordinary sequencing: a medical emergency or risk of self-harm; conduct that may be criminal; a security concern such as a threat or stalking. Support the affected person to contact police; reporting is generally their decision, though some sectors and schemes — child safety and reportable conduct among them — impose their own duties, so check rather than assume. A possible police process does not automatically prevent a carefully managed internal response, but it changes sequencing.

Finally, flag the legal shapes the matter may take without settling them. Sexual harassment and sex discrimination engage the federal positive duty: reasonable and proportionate measures to eliminate, so far as possible, work-related sex discrimination, sexual harassment, sex-based harassment, hostile workplace environments on the ground of sex and related victimisation. The AHRC positive duty guidance explains it, and responding to one complaint is only part of that proactive obligation. A complaint or inquiry in relation to employment may be a workplace right under s 341 of the Fair Work Act 2009, and adverse action taken because of a protected reason is unlawful — though not every changed arrangement is unlawful adverse action.

Two attributes decide who owns triage: authority to act on what the screen finds, and no actual or reasonably perceived conflict. Authority means being able to preserve records, put an interim arrangement in place and commission work without approval from anyone implicated. Conflict is judged as a reasonable person would see it.

Line managers usually receive a concern and act on immediate risk. They should not own the assessment where they supervise a party, are named in it, or have a stake in the outcome: receive, protect, note carefully, escalate the same day.

Where a senior leader is involved, move the decision outside that person's reporting relationships — to the board, a committee, the general counsel or an external adviser. Smaller employers can use a non-executive director or an independent provider engaged for the assessment alone. Whether a later investigation should also be external is a separate question, addressed in when to appoint an external workplace investigator.

Do not promise absolute confidentiality in an ordinary complaint. It cannot be delivered once a respondent must be told what is alleged, or once safety, legal or notification duties are engaged. Say instead that information is handled on a need-to-know basis, identify who may need to know, and explain foreseeable disclosure. Do not issue a blanket direction purporting to stop people speaking to a lawyer, union, doctor, regulator or support person.

Ordinary confidentiality is not statutory confidentiality. A corporate whistleblower disclosure carries stricter identity and detriment protections, so route it before the matter circulates. Not every misconduct complaint qualifies: protection depends on an eligible whistleblower, an eligible recipient, the subject matter and other statutory requirements, and a report solely about a personal work-related grievance is generally excluded, subject to exceptions. ASIC's whistleblower rights and protections guidance is the starting point, and other secrecy regimes may apply in regulated sectors.

Privacy sits alongside this. The Privacy Act's employee-records exemption is a conditional private-sector exemption for acts or practices directly related to a current or former employment relationship and to an employee record held by the organisation, as the OAIC guidance explains. It does not cover contractors, volunteers or applicants, or every collection made before information becomes an employee record. State and Territory surveillance, health-records and privacy laws may also apply.

Preservation is most often left too late. Chat platforms may run short or user-controlled retention, CCTV can overwrite within days, access and rostering logs cycle, and devices are reissued. Identify the narrow categories that matter — messages between named people over a defined date range, access records, rosters and actual hours, the relevant CCTV window — and issue a written hold to the system owner the same day.

Preservation must be authorised, targeted and proportionate, with access controlled and a record of who holds what. A hold is not permission to search or review everything: review is a separate decision with its own privacy, surveillance and industrial constraints, and usually belongs to the pathway. Where covert monitoring or device imaging is contemplated, obtain advice first; the surveillance law, not the policy wording, governs.

Interim measures manage risk while facts are unknown. They are temporary, reviewable controls, not findings and not punishment, and should be communicated that way. Options run from adjusting contact, supervision or reporting arrangements, to changing shifts, location or duties, to leave arrangements in the most serious matters.

Do not assume a policy sentence authorises whatever is convenient. A direction must be lawful and reasonable, and paid suspension may require contractual, industrial or other lawful authority. Ordinary complaint-related removal is not an unpaid "stand-down"; the Fair Work Act stand-down provisions are not triggered merely because a complaint has been made.

Weigh who bears the burden and record the reason. Moving or disadvantaging the person who raised the concern is rarely the right first option and can itself be detrimental treatment. Every measure needs a purpose, a proportionality assessment, a review date and an owner.

The matrix is a starting position, not a rule. Each row assumes the screening and ownership steps above are complete, and each pathway is provisional.

A complaint does not automatically require an investigation. The pathway follows purpose, risk and duties, not the label on the intake form, and is revisited whenever facts or risk change. The options are:

• management action — coaching, a direction or a workload change;
• a facilitated conversation, where both people want one;
• mediation, where the relationship is the substance and participation is voluntary;
• a targeted inquiry into a narrow factual question;
• a formal investigation into defined allegations, where facts are disputed;
• a WHS or OHS risk assessment and control response where conditions or demands are the issue;
• the performance process, where capability rather than conduct is the question;
• the whistleblower process, where the disclosure attracts those protections;
• legal advice, or notification to a regulator or insurer where required.

Assess an anonymous report on specificity, corroborative sources and risk, not on anonymity. Ask what can be tested without the reporter: rosters against actual hours, access and system logs, complaint history, exit and survey data, or the accounts of people it identifies. Where a return channel exists, use it to seek detail and explain what anonymity limits.

Requests that nothing be done deserve respect and a straight answer. Acknowledge the reasons, then explain the constraint: the organisation has duties to other workers, and some disclosures carry their own obligations. Identify the least intrusive lawful response consistent with those duties — an anonymised workload or behaviour review, closer supervision, refresher training, or a risk assessment that does not identify the reporter. Never promise inaction you may have to withdraw.

Within a couple of days the person who raised the concern should know their contact, what happens next and roughly when, what confidentiality can and cannot be maintained, what support exists, and that raising a concern in good faith will not be held against them.

Timing the respondent's notification takes judgement. It may briefly follow urgent safety or preservation steps where justified, but the delay must be reasoned, short and reviewed. Notification is not procedural fairness: before any adverse finding or action, the person needs sufficiently specific allegations, the substance of adverse material and a genuine opportunity to respond. Do not interview a respondent at triage merely to look fair.

The triage record is short, neutral and factual: source and date; the issue in plain terms; risks and steps taken; conflicts; preservation; consultations and notifications; interim measures with review dates; the provisional pathway with brief reasons; what each person has been told; and the next owner. Keep out credibility conclusions and pejorative labels. It may later be scrutinised or produced, depending on the forum and the privilege position.

A. Senior manager, short-retention messages, possible sex-based dimension. An employee tells the HR manager that a general manager sends late-night messages pressuring her about performance and commenting on her appearance, and that some have disappeared. The HR manager reports to that general manager, so she records the account and escalates to the general counsel the same day. The screen identifies continuing psychosocial risk, a possible sexual and sex-based harassment dimension engaging the positive duty, and short retention on the messaging platform. Authorised preservation issues that afternoon across a defined date range, with access limited. A neutral interim control follows: after-hours contact is routed through another manager, with a review date, and her reporting line changes only at her request. The general counsel then notifies the general manager of the substance and directs no contact. The provisional pathway is external investigation given seniority; no finding is made, and the short notification delay is recorded with its reason.

B. Anonymous workload and after-hours report. A hotline report says a field-services team is exhausted by unrecorded overtime and constant after-hours contact, naming nobody. The owner is chosen from outside that team and does not try to identify the reporter. Objective material is checked: rostered against actual hours, leave cancellations, message timestamps, turnover and exit comments. A pattern is confirmed, so the pathway is a psychosocial risk assessment with consultation with the affected workers; because this is a model-WHS jurisdiction and those workers are represented by a health and safety representative, that representative is involved, consistent with Safe Work Australia's consultation guidance. Anonymity does not make inquiry impossible; it shapes what can be tested. If conduct toward an individual emerges, a conduct pathway is considered, with timing addressed in how long a workplace investigation should take and harassment features engaging managing discrimination and harassment complaints.