The Governance Shift Most Boards Haven't Recognised Yet
with
From Compliance to Accountability: the new world for managing Psychosocial Hazards
Australia’s workplace regulatory environment has undergone one of the most significant transformations in decades.
Over the past eighteen months:
- SafeWork NSW became a standalone regulator.
- Psychosocial hazards became subject to explicit control requirements.
- Victoria introduced dedicated psychological health regulations.
- AI and digital work systems were brought under workplace safety duties.
- Unions gained expanded rights to bring WHS proceedings.
- SafeWork NSW significantly increased psychosocial inspector capacity.
- The NSW Managing Psychosocial Hazards Code of Practice moves to a mandatory compliance benchmark from 1 July 2026.
Scenario
It is July 2026. The Chair of a NSW-based listed company is reading her director pack on the train (fuel crisis still exists). A headline on her phone mentions a new SafeWork NSW intervention. The board’s quarterly compliance update, three pages in, contains a line about psychosocial risk — the same line as the previous quarter. Her CEO has briefed the executive committee on the AI rostering tool rolling out to operations next month. The People and Culture report is green across all measures.
She does not know that, in eighteen months, the regulatory architecture beneath her organisation has changed completely. Six different regulators have been making the changes – changes she has an obligation to “stay on top of”. The first letter she receives will be from one of them — and by then, the question will be not what to do, but what to explain.
This is not a sector story. It is a governance one. And one that is already appearing in headlines in the past 6months.
The architecture changed
Between July 2025 and July 2026, the rules of engagement for Australian boards were rewritten by eight quiet structural shifts. None of them were marked as transformative on the day they happened. Read in sequence, they are.
In July 2025, SafeWork NSW was separated from the Department of Industry and established as a standalone regulator with its own Commissioner — required to report to the Minister on psychosocial complaints and notices every six months. In August 2025, the new WHS Regulation 2025 commenced in NSW, with sections 55C and 55D explicitly requiring the hierarchy of controls to be applied to psychosocial risk. In November 2025, ASIC published its 2026 enforcement priorities, retaining “governance and directors’ duties failures” as an enduring priority and signalling doubled investigations year-on-year. In December 2025, Victoria’s Occupational Health and Safety (Psychological Health) Regulations 2025 commenced; WorkSafe Victoria established a specialist Psychosocial Inspectorate.
In February 2026, NSW Parliament passed the Work Health and Safety Amendment (Digital Work Systems) Act 2026 — the first Australian law to expressly name AI and automated systems under the section 19 primary duty. In March 2026, registered industrial organisations, including unions, gained the right to bring civil penalty proceedings for WHS contraventions. Also in March 2026, the NSW Government announced 51 additional SafeWork inspectors, with 20 specifically focused on psychosocial safety — the largest single uplift in inspector capacity in the agency’s history. And on 1 July 2026, the SafeWork NSW Managing Psychosocial Hazards Code transitions from guidance to mandatory compliance benchmark.
Read against the longer reform trajectory — the *Respect@Work* recommendations of 2020, the positive duty inserted into the *Sex Discrimination Act* in December 2022, the new section 527D of the *Fair Work Act* commencing March 2023 — the past eighteen months mark the moment Australian workplace governance moved from declared to enforceable.
Enforcements and Interventions
Each of the high-profile interventions over the same eighteen months is a downstream consequence of that architectural shift. The cases that have drawn most media attention are not the largest in financial value. They are the ones that crossed a line of regulatory practice.
**Cobar Management Pty Ltd / CSA Mine** (December 2024). The NSW Resources Regulator accepted an enforceable undertaking from CMPL committing to projects of minimum value $1,031,060. The alleged contraventions concerned psychosocial hazards — excessive workloads, role conflict, and cross-time-zone reporting — affecting two finance-team workers, not miners. (An enforceable undertaking is not an admission of liability.)
**UTS** (September 2025). SafeWork NSW issued a Prohibition Notice to the University of Technology Sydney during a restructure, ordering the university to cancel meetings with approximately 800 staff scheduled the following day. The first publicly reported Prohibition Notice on a university on psychosocial grounds.
**Mad Mex** (August 2025). A Sydney-based employee was awarded approximately $305,000 in compensation and damages by a court that found the employer engaged in sexual harassment and victimisation.
**Mejia v Capital City Café-Bar** (March 2026). The Federal Circuit and Family Court handed down the first concluded case under section 527D of the *Fair Work Act 2009*. The sole director was ordered to pay **$90,000 personally**. A single incident. By the time of judgment, the corporate respondent was in liquidation. The architecture for personal director liability under the *Respect@Work* reforms had landed its first enforceable outcome.
**TEQSA – ANU** (April 2026). The Tertiary Education Quality and Standards Agency accepted a voluntary undertaking from the Australian National University in relation to the selection process for its next Chancellor. The process is to be managed by a majority-independent panel chaired by a former TEQSA Chief Commissioner. The sitting Chancellor publicly resigned within weeks, citing “unprecedented and co-ordinated interference.” (A voluntary undertaking is not an admission of liability.)
**Medical college board** (May 2026). SafeWork NSW issued a Prohibition Notice to the directors of a major Australian medical college; two weeks later, the Australian Charities and Not-for-profits Commission used that notice as evidence to suspend the college’s incoming Chair under Governance Standard 5. First publicly reported Australian charity-regulator suspension on psychosocial grounds. Two regulators, sharing information, escalating in sequence.
Beneath the named cases is the scale. SafeWork NSW issued over 500 non-compliance notices in a July 2025 compliance blitz and over 700 in November (including 228 psychosocial checks). ASIC took enforcement action against 69 parties for corporate governance misconduct in the March 2026 quarter alone. WorkSafe Victoria announced more than $17 million in penalties for unsafe work in 2025.
This is not a regulator making occasional examples. It is systematic, sustained enforcement across the corporate spectrum.
The PPS Board Health Index is built for that earlier read. It surfaces the diagnostic chain at the upstream end — where psychological safety, trust, respect, and accountability indicators predict whether the regulator's letter is years or weeks away. It is not a compliance audit. It is a governance instrument.
Why Now and Why it will not slow
If you have been governing for any length of time, you will recognise the temptation to read this list as the regulators getting bolder. They have not. They have been given new tools, more staff, and explicit benchmarks against which to enforce.
The cognitive trap is older than the regulation. Daniel Kahneman spent his career mapping it: under uncertainty, the brain economises by reading new threats against known patterns. If your sector has never been the target of one regulator, the brain codes that regulator as Other People’s Problem. The Cobar case is read as a mining case, not a finance-team case. The UTS notice is read as a higher-education case, not a restructure case. The Mejia judgment is read as a hospitality case, not a sole-director-liability case.
But the cases share a single feature. In every one, the alleged hazard arose from how the work was designed, governed, or led. They are governance cases dressed in sector clothes.
The PPS Boardroom Psychological Safety Index 2025 (n=944 Australian directors and senior executives) found that boards with high psychological safety are **three times less likely** to have psychosocial hazards in their workplaces. The inverse holds. Boards with low psychological safety are three times more likely. Whatever sector you are in, the predictor of whether a regulator will appear at your gate is not the sector — it is the design of how your board hears, escalates, and acts on risk.
What this means for entities operating in Australia
Three things.
1. First, the perimeter of your board’s risk now includes the psychosocial design of every part of your workforce, including the parts that have never appeared in the risk register before. The Cobar case is the cleanest illustration: the affected workers were accountants reporting to executives in Switzerland. Boards reading risk through the lens of “what could physically injure a worker” will miss the design fault that puts the regulator at the door.
2. Second, the regulators are working together. The same SafeWork notice can become the basis of an ACNC suspension, a Fair Work claim, an AHRC compliance inquiry, an ASIC director-duties investigation. Information that lands at one agency is increasingly visible to others. There are many channels for complaints to be escalated to when your organisation does not take complaints seriously. Or, indeed, when the board IS the hazard.
3. Third, the documentation standard has shifted. Where an organisation departs from the Code from 1 July 2026, the burden of demonstrating an equivalent or better control sits with the organisation, at the time of the regulator’s visit. Records that have not been built yet will not be built that day.
The Diagnostic Chain
People Plus Science has been tracking the same chain across four years of board research:
> Cognitive bias and concentrated power → suppressed challenge → escalating psychosocial hazards (often unreported) → regulator notified by a complaint → external intervention → reputational and personal-liability consequence.
Every public case in the cluster maps onto this chain. The interventions are downstream. Boards that fix the upstream architecture rarely meet the regulator at the downstream end.
The work is not theoretical. The Managing Psychosocial Hazards Code names the hierarchy of controls and the consideration matters under sections 55C and 55D. People Plus Science uses the adapted hierarchy — **ELIMINATE → SUBSTITUTE → REDESIGN → REGULATE → EDUCATE** — to map the levels of intervention. The reform programs your board should be funding are at the top of that hierarchy, not the bottom. Training is a control. It is the last one.
What good boards are doing now
The defensible position is not unfamiliar. It is the read on your own organisation, against the Code, before 1 July. It is the board paper that names psychosocial risk position alongside financial and operational risk, every quarter. It is the documented consultation trail under section 47 of the WHS Act. It is the deliberate question — asked of directors, executives and frontline staff separately — about what the board (or for that matter the executive leadership team) is missing.
The pattern in the cluster of cases is not that regulators are punishing organisations for being unaware. They are intervening where awareness produced no change. The shift is from “we didn’t know” to “we knew, and the architecture didn’t respond.” ture.
The People Plus Science Perspective
In eighteen months, six regulators have crossed a line they previously held — from inspecting workplaces to intervening in governance itself. Each of the cases on the public record could have been read, by the relevant board, in the years before the regulator arrived.
The PPS Board Health Index is built for that earlier read. It surfaces the diagnostic chain at the upstream end — where psychological safety, trust, respect, and accountability indicators predict whether the regulator’s letter is years or weeks away. It is not a compliance audit. It is a governance instrument.
If your board is reviewing the cluster and wondering how to read your own organisation through this lens, we are happy to scope a conversation. [peopleplusscience.com](https://peopleplusscience.com).
Disclaimer: This article is general information only, not legal advice. Specific obligations under WHS, charity, higher-education, and corporate law vary by jurisdiction and circumstance. Allegations described as such remain contested where the proceedings, notices, or undertakings state so on the public record. Enforceable and voluntary undertakings are not admissions of liability. Individuals involved in publicly reported cases are referred to by role, not by name, in accordance with People Plus Science editorial standards.
References
**Court decisions and tribunal records**
– *Mejia v Capital City Café-Bar* [2026] FedCFamC2G 468. Federal Circuit and Family Court of Australia.
– *Court Services Victoria* (2023). WorkSafe Victoria prosecution: AUD $379,157. Conviction relating to psychosocial harm at the Coroners Court of Victoria.
**Regulator press releases and decisions**
– NSW Resources Regulator. (2024, 18 December). *Enforceable undertaking accepted from Cobar Management Pty Ltd.* https://www.resources.nsw.gov.au/news-articles/enforceable-undertaking-accepted-from-cobar-management-pty-ltd
– NSW Resources Regulator. (2024). *WHS undertaking — Cobar Management Pty Ltd* (full undertaking document, $1,031,060). https://www.resources.nsw.gov.au/sites/default/files/2025-01/whs-undertaking-cobar-management-pty-ltd.pdf
– TEQSA. (2026, 27 April). *TEQSA accepts voluntary undertaking from the ANU for Chancellor selection process.* https://www.teqsa.gov.au/about-us/news-and-events/latest-news/teqsa-accepts-voluntary-undertaking-anu-chancellor-selection-process
– TEQSA. (2026, 27 April). *Voluntary undertaking accepted 27 April 2026.* https://www.teqsa.gov.au/national-register/condition-decision/voluntary-undertaking-accepted-27-april-2026
– ASIC. (2025, 13 November). *25-273MR ASIC announces 2026 enforcement priorities.* https://www.asic.gov.au/about-asic/news-centre/find-a-media-release/2025-releases/25-273mr-asic-announces-2026-enforcement-priorities/
– ASIC. (2026, 25 February). *26-033MR Misconduct reports to ASIC highlight spike in corporate governance issues.* https://www.asic.gov.au/about-asic/news-centre/find-a-media-release/2026-releases/26-033mr-misconduct-reports-to-asic-highlight-spike-in-corporate-governance-issues/
– WorkSafe Victoria. (2026, January). *More than $17 million in penalties for unsafe work in 2025.* https://www.worksafe.vic.gov.au/news/2026-01/more-17-million-penalties-unsafe-work-2025
Press coverage of high-profile cases
*Times Higher Education.* (2025, 4 September). *”‘Irreconcilable’ pressures as watchdog derails UTS restructure.”* https://www.timeshighereducation.com/news/irreconcilable-pressures-watchdog-derails-uts-restructure
*Times Higher Education.* (2026, 28 April). *”Teqsa to take charge of ANU chancellor recruitment.”*
“Neuroscience is the foundation for the approach we bring to every engagement. Partnering with our leaders to provide the insights that allow for improved decision making resulting in organisational resilience. Carolyn Grant
Interested in Learning More?
Book a briefing on psycho-social assessments and organisational resilience today. Mitigate your greatest risk and drive high performing, thriving teams.
