Health and Safety at Work Act Documentation for PCBUs in New Zealand

The Health and Safety at Work Act 2015 (HSWA) is New Zealand's primary workplace health and safety legislation. It places duties on every Person Conducting a Business or Undertaking (PCBU) to ensure, so far as is reasonably practicable, the health and safety of workers and others affected by the work. WorkSafe New Zealand is the primary regulator.

HSWA doesn't prescribe specific documents you must have — it's outcomes-based. But to demonstrate that you're meeting your duties, you need documented evidence of your health and safety systems, risk assessments, controls, training, monitoring, and worker engagement. When WorkSafe investigates an incident or conducts an inspection, they ask for documentation. If it doesn't exist, you can't prove you met your duties.

For PCBUs across all industries — construction, manufacturing, agriculture, forestry, healthcare, office-based businesses, and everything in between — this guide covers what documentation you need, where businesses commonly fail, and how to build a review process that keeps your health and safety documentation current and audit-ready.

What HSWA Requires

Primary Duties of a PCBU

Duty	Documentation Implication
Provide and maintain a safe work environment	Workplace inspection records, hazard registers, maintenance records
Provide and maintain safe plant and structures	Equipment inspection records, maintenance schedules, compliance certificates
Provide and maintain safe systems of work	Standard operating procedures, safe work method statements
Ensure safe use, handling, and storage of substances	Safety Data Sheets, substance registers, handling procedures
Provide adequate facilities	Facility assessments, amenity provision records
Provide information, training, instruction, and supervision	Training records, induction records, competency assessments
Monitor health of workers and workplace conditions	Health monitoring records, environmental monitoring, exposure assessments
Maintain worker engagement and participation	Health and Safety Committee records, worker consultation records, HSR election records

Risk Management Documentation

HSWA requires PCBUs to manage risks using the hierarchy of controls. Documentation must show:

Step	Documentation
Identify hazards	Hazard identification records, workplace inspections, incident reports, near-miss reports
Assess risks	Risk assessment records (likelihood × consequence), risk matrices, exposure assessments
Control risks	Control measures implemented (elimination → substitution → isolation → engineering → administrative → PPE)
Review controls	Evidence that controls are monitored and reviewed for effectiveness

Specific Documentation Requirements

Some HSWA regulations prescribe specific documentation:

Regulation	Required Documentation
Health and Safety at Work (General Risk and Workplace Management) Regulations 2016	Emergency plan, first aid provisions, PPE assessment
Health and Safety at Work (Hazardous Substances) Regulations 2017	Substance inventory, emergency response, exposure monitoring
Health and Safety at Work (Asbestos) Regulations 2016	Asbestos management plan, asbestos register, removal records
Health and Safety at Work (Mining Operations and Quarrying Operations) Regulations 2016	Principal hazard management plans, emergency management plan
Health and Safety at Work (Major Hazard Facilities) Regulations 2016	Safety case, emergency plan, safety management system
Adventure Activities Regulations	Safety audit, risk management documentation

Worker Engagement and Participation

HSWA requires PCBUs to engage with workers on health and safety matters:

Requirement	Documentation
Worker engagement	Records of consultation on health and safety matters
Health and Safety Representatives (HSRs)	Election records, training records, issue resolution records
Health and Safety Committees	Committee terms of reference, meeting minutes, action tracking
Worker participation practices	Documented worker participation agreement or default practices

Notifiable Events

PCBUs must notify WorkSafe of notifiable events and preserve the scene:

Event Type	Documentation
Death	Immediate notification, incident investigation report, scene preservation records
Notifiable injury or illness	Notification within prescribed timeframe, investigation report
Notifiable incident	Notification, investigation report, corrective actions
Records	Event register, investigation findings, corrective action tracking

Common Documentation Failures

1. Risk Assessment Gaps

The most fundamental failure — hazards identified but not formally assessed, or risk assessments conducted but not reviewed:

Risk assessments conducted at business startup but never updated
New hazards introduced (new equipment, new processes, new chemicals) without risk assessment
Risk assessments that don't consider all worker groups (contractors, visitors, vulnerable workers)
No evidence that the hierarchy of controls was considered (jumping straight to PPE)
Risk assessments not reviewed after incidents or near-misses
Generic risk assessments that don't reflect the specific workplace

2. Training and Competency Documentation

Induction records exist but don't cover site-specific hazards
Training provided but no record of competency assessment (did they understand it?)
Refresher training not conducted or not documented
Contractor induction records incomplete
Specific competency requirements not documented (forklift licence, confined space, working at heights)
No evidence that training was updated when procedures changed

3. Worker Engagement Failures

No documented worker participation practices
Health and Safety Committee meetings not held or minutes not recorded
HSR elections not conducted or not documented
Workers consulted but no record of the consultation or how their input was considered
Changes to work practices made without worker engagement

4. Incident and Near-Miss Documentation

Incidents reported but not investigated
Investigations that identify what happened but not why (no root cause analysis)
Corrective actions identified but not tracked to completion
Near-misses not captured (missing the opportunity to prevent incidents)
Notifiable events not reported to WorkSafe within required timeframes
No trend analysis of incidents and near-misses

5. Contractor Management

Contractors working on site without documented health and safety arrangements
No pre-qualification assessment of contractor health and safety capability
Overlapping duties not clarified in writing (who controls what?)
Contractor induction not documented
No monitoring of contractor health and safety performance

Building a Health and Safety Documentation Review Process

Step 1: Documentation Inventory

Document	Exists?	Current?	Owner	Last Reviewed
Health and safety policy	✅	✅	CEO	January 2026
Hazard register	✅	⚠️	H&S Manager	August 2025
Risk assessments	✅	⚠️	Various	Varies — 5 overdue
Emergency plan	✅	✅	H&S Manager	November 2025
Training matrix	✅	⚠️	HR	October 2025
Induction programme	✅	✅	H&S Manager	December 2025
H&S Committee minutes	✅	✅	Committee Chair	Monthly
Incident register	✅	✅	H&S Manager	Ongoing
Contractor management procedures	⚠️	❌	Operations	June 2024
Worker participation agreement	❌	—	—	Never created
Substance register	✅	⚠️	Operations	March 2025
Equipment maintenance records	✅	✅	Maintenance	Ongoing

Step 2: Prioritise by Risk

High-risk work — risk assessments and safe work procedures for highest-risk activities first
Training and competency — ensure critical competency requirements are documented
Worker engagement — establish documented worker participation practices
Incident management — ensure investigation and corrective action processes are documented
Contractor management — document health and safety arrangements for all contractors
General compliance — policies, registers, and administrative documentation

Step 3: Implement Review Cycles

Document	Review Frequency	Triggered Review
Health and safety policy	Annually	Significant change, incident, WorkSafe feedback
Hazard register	Quarterly	New hazard identified, incident, process change
Risk assessments	Annually per assessment	Incident, near-miss, process change, new information
Emergency plan	Annually	After drill/exercise, incident, facility change
Training records	Quarterly	New employee, procedure change, incident
H&S Committee minutes	Monthly (meeting)	—
Incident register	Ongoing	After every incident/near-miss
Contractor H&S arrangements	Annually per contractor	New contractor, incident, scope change
Substance register	Semi-annually	New substance introduced, SDS update

Step 4: Pre-WorkSafe-Inspection Readiness

If WorkSafe visits (which can be unannounced), you should be able to produce:

Current health and safety policy
Hazard register with risk assessments for key hazards
Evidence of controls implemented (SOPs, engineering controls, PPE provision)
Training and induction records
Worker engagement evidence (committee minutes, consultation records)
Incident and near-miss register with investigation reports
Emergency plan and evidence of drills/exercises
Contractor management documentation
Notifiable event notifications (if applicable)

Using AI to Review Health and Safety Documentation

What AI Can Check

Completeness — verify risk assessments cover all identified hazards, training records cover all required competencies
Currency — flag documents past their review date, risk assessments not reviewed after incidents
Consistency — cross-reference hazard register against risk assessments, training matrix against competency requirements
Quality — check that risk assessments consider the hierarchy of controls, investigations include root cause analysis
Terminology — verify correct use of HSWA terminology (PCBU, worker, reasonably practicable)
Structure — check documents include all expected sections

What AI Cannot Replace

Workplace hazard identification (requires physical inspection)
Risk assessment judgement (requires understanding of specific workplace conditions)
Worker engagement (requires human interaction)
WorkSafe regulatory interpretation for specific situations
Incident investigation (requires on-site assessment)
Competency assessment of workers

Practical Example

In TeamBench, you could configure a reviewer:

Reviewer name: NZ Health and Safety Documentation Reviewer

System prompt:

You are a health and safety documentation reviewer for New Zealand PCBUs. Review health and safety policies, risk assessments, SOPs, training records, and incident investigation reports against the Health and Safety at Work Act 2015, associated regulations, and WorkSafe New Zealand guidance. For risk assessments: check that hazards are clearly described, risks are assessed using likelihood and consequence, the hierarchy of controls is considered (not jumping to PPE), and review dates are within period. For incident investigations: check that root cause analysis is conducted, corrective actions are identified, and actions are tracked to completion. For training: check that competency requirements are documented and training records demonstrate competency, not just attendance. Flag specific gaps with the HSWA section or regulation reference. Use New Zealand English.

Evaluation criteria:

Risk Management Quality (weight: 3) — Hazards identified, risks assessed, hierarchy of controls applied
Completeness (weight: 3) — All required documentation elements present
Currency (weight: 2) — All documents within review period, updated after incidents
Worker Engagement (weight: 1) — Evidence of worker participation documented
Consistency (weight: 1) — Information aligned across all H&S documents

Quality gate: Minimum score: 80.

Upload HSWA, relevant regulations, and WorkSafe guidance into a Knowledge Base.

Frequently Asked Questions

What is a PCBU?

A Person Conducting a Business or Undertaking — essentially any business, regardless of size, structure, or industry. This includes companies, sole traders, partnerships, government agencies, and not-for-profits. Volunteer organisations are PCBUs if they employ one or more people. Every PCBU has primary duties under HSWA.

Does HSWA prescribe specific documents I must have?

HSWA itself is outcomes-based — it doesn't prescribe a specific list of documents. However, associated regulations require specific documents (emergency plans, asbestos registers, hazardous substance inventories). And practically, you need documentation to demonstrate you're meeting your duties. If WorkSafe asks how you manage a risk and you have no documented evidence, it's very difficult to demonstrate compliance.

What are the penalties for HSWA non-compliance?

HSWA has three offence categories: reckless conduct (up to $3 million for a PCBU, up to $600,000 and/or 5 years imprisonment for an individual), failure to comply with a duty exposing to risk of death or serious injury (up to $1.5 million for a PCBU), and failure to comply with a duty (up to $500,000 for a PCBU). Officers (directors, senior managers) can be personally liable.

How often should risk assessments be reviewed?

At minimum annually, and additionally: after any incident or near-miss related to the hazard, when work processes change, when new equipment or substances are introduced, when new information about the hazard becomes available, and when workers raise concerns. The review should be documented.

Do I need a Health and Safety Committee?

A PCBU must have a health and safety committee if requested by an HSR or 5+ workers. Even without a formal committee, the PCBU must have worker participation practices — either agreed with workers or using the default practices in the Worker Engagement, Participation and Representation regulations.

What must I report to WorkSafe?

Notifiable events include: death of any person, notifiable injuries or illnesses (amputation, serious head injury, serious burn, spinal injury, loss of bodily function, serious infection), and notifiable incidents (uncontrolled escape of substances, uncontrolled implosion/explosion, electric shock, fall from height, collapse of a structure). Notify WorkSafe as soon as possible and preserve the scene.

How do I manage overlapping duties with contractors?

When multiple PCBUs have duties at the same workplace, each must consult, cooperate, and coordinate with others. Document: who controls what aspects of health and safety, the agreed arrangements for managing shared risks, communication protocols, and monitoring arrangements. This is typically documented in a contractor health and safety agreement.

Key Takeaways

HSWA places duties on every PCBU to ensure health and safety so far as is reasonably practicable. Documentation is how you demonstrate you're meeting those duties.
Risk management documentation is foundational — hazard identification, risk assessment using the hierarchy of controls, control implementation, and review.
Common failures include outdated risk assessments, training records without competency evidence, missing worker engagement documentation, incident investigations without root cause analysis, and gaps in contractor management.
Worker engagement must be documented — committee minutes, consultation records, and evidence that worker input is considered in health and safety decisions.
Incident and near-miss documentation must include root cause analysis and corrective actions tracked to completion.
Review risk assessments annually and after any incident, near-miss, or change to the work environment.
AI-assisted review can check completeness, currency, consistency, and quality of health and safety documentation, but cannot replace workplace inspection or risk assessment judgement.
Be inspection-ready at all times — WorkSafe can visit unannounced. Keep documentation current, organised, and accessible.

This article provides general information about HSWA documentation requirements and is not legal advice. Always consult WorkSafe New Zealand for current guidance and seek qualified health and safety advice for your specific situation.