You have signed employment contracts, set up the accounts and hired your first employee. What you probably do not have is a written record of how leave gets approved, what happens when someone is bullied, or whether staff can work from home. Most small businesses start exactly this way, and most discover the gap only when a complaint or a Fair Work application lands on the desk. The good news is that a practical set of written policies does not need to be long or expensive, and the law tells you where to focus.
What a workplace policy is (and what it is not)
A workplace policy is a written document that sets out the rules, standards and processes for how work is done in your business. It tells employees what you expect of them, and what they can expect from you: how to book leave, how to raise a complaint, what counts as acceptable use of the internet, and what happens when performance falls short.
It is worth being precise about what a policy is not. A policy is not an employment contract. The contract binds you and the employee to the terms of the engagement: pay, hours, position and entitlements. A policy sets the standards and procedures that sit alongside the contract. That distinction matters, because a carelessly drafted policy can be argued to have become part of the contract, or to promise more than you intended.
Policies are also not a substitute for the minimum entitlements in the Fair Work Act 2009 (Cth). The National Employment Standards set floors for things like annual leave, personal leave and parental leave, and no policy can undercut them. Your modern award adds industry-specific rules on top.
Some businesses run on unwritten expectations, and that works until it does not. An unwritten rule cannot be produced when a dispute asks what employees were told, when they were told it, and whether it was applied even-handedly. Written policies are how you answer those questions.
Why policies matter when a dispute arrives
Three areas of federal law show exactly why written policies pay for themselves.
First, bullying. Under s 789FC of the Fair Work Act 2009 (Cth), a worker who reasonably believes they have been bullied at work can apply to the Fair Work Commission for an order to stop the bullying. Section 789FD defines bullying as repeated unreasonable behaviour towards a worker that creates a risk to health and safety, and expressly excludes reasonable management action carried out in a reasonable manner. That carve-out is where a written performance management policy earns its keep. If you discipline an underperforming employee, a documented procedure that was followed in good faith is the evidence that your action was reasonable management, not bullying.
Second, unfair dismissal. When the Fair Work Commission decides whether a dismissal was harsh, unjust or unreasonable, s 387 of the Fair Work Act 2009 (Cth) requires it to consider whether there was a valid reason for the dismissal related to the person's capacity or conduct, whether the employee was notified of that reason and given a chance to respond, and, for performance dismissals, whether the employee had been warned about the unsatisfactory performance. A disciplinary policy that sets out the warning process, and records that you followed it, is often the difference between defending a claim and settling it.
Third, discrimination and sexual harassment. Section 47C of the Sex Discrimination Act 1984 (Cth) imposes a positive duty on employers and persons conducting a business or undertaking to take reasonable and proportionate measures to eliminate, as far as possible, sex discrimination, sexual harassment, hostile workplace environments and victimisation. Separately, s 351 of the Fair Work Act 2009 (Cth) prohibits taking adverse action against an employee because of protected attributes such as age, disability, pregnancy or religion. A written anti-discrimination and harassment policy, communicated and enforced, is one of the clearest ways to show you took the measures the law requires.
Beyond disputes, policies create consistency. Leave requests, misconduct and performance issues get handled the same way for every employee, which reduces both grievances and the sense of unfair treatment that drives complaints.
What the law actually requires of you
The honest answer is that few policies are mandated by name. But in several areas the law effectively requires documented arrangements, and in one area it now imposes a positive duty on every employer.
Work health and safety
Under s 19 of the Work Health and Safety Act 2011 (Cth) and its state and territory equivalents, a person conducting a business or undertaking must ensure the health and safety of workers so far as is reasonably practicable, including by maintaining safe systems of work and a safe work environment. Section 47 also requires you to consult with workers on work health and safety matters that directly affect them. A WHS policy is not the duty itself, but it is how you demonstrate that risks have been identified, assigned and managed. Officers of a business can also owe personal duties under these acts, which is why safety documents are not just an operational matter.
Anti-discrimination and sexual harassment
The positive duty in s 47C of the Sex Discrimination Act 1984 (Cth) applies to every employer, not just large ones. "Reasonable and proportionate measures" is a flexible test, but a written policy, training and a complaints process are the obvious starting points. The Australian Human Rights Commission can inquire into compliance with the duty and issue compliance notices. State and territory discrimination laws add their own layers, and employers can be held liable for discriminatory conduct by their employees unless they took reasonable precautions to prevent it.
Fair Work requirements
The National Employment Standards and modern awards set minimum entitlements such as annual leave, personal leave, parental leave and maximum weekly hours. A policy cannot reduce any of these, and a leave policy that is out of step with the award covering your industry is a trap rather than a protection.
Privacy
This is where the popular advice is often overstated. The Privacy Act 1988 (Cth) regulates how organisations handle personal information, and s 7B(3) exempts acts directly related to a current or former employment relationship and the employee records held about that individual. So the Commonwealth Act does not generally require a privacy policy for your staff records. Two qualifications matter. First, if your business collects customer or client personal information and is not a small business operator under s 6D, which broadly means annual turnover of $3 million or less with limited exceptions, the Australian Privacy Principles require you to have a privacy policy. Second, some state laws, such as the Privacy and Data Protection Act 2014 (Vic), can apply to employee information regardless. And whatever the law requires, a short privacy policy for staff and customers is cheap insurance against the messy question of who can look at what.
The core policies worth having
No list fits every business, but most Australian businesses benefit from the following, adapted to size, industry and risk profile:
- Code of conduct: the standards for behaviour, dress, ethics and communication, including how staff treat each other and manage conflicts of interest.
- Work health and safety policy: how risks are identified and reported, who is responsible, and how incidents are handled.
- Anti-discrimination, bullying and harassment policy: the conduct that is not acceptable, including sexual harassment, and how complaints are made and investigated. This is the policy that responds directly to the positive duty.
- Leave policy: how annual, personal and parental leave is requested and approved, in line with the National Employment Standards and your award.
- Social media and IT use policy: what staff can do with company devices, accounts and time, and when personal use is acceptable.
- Privacy policy: how customer and staff information is collected, used and stored.
- Drug and alcohol policy: rules on substance use at work, and the approach to testing and support where that is relevant to your industry.
- Performance management and discipline policy: the warning and review process, and how underperformance is addressed. This is the policy that protects dismissals.
- Flexible work and remote work policy: expectations about hours, availability, communication and safety when staff work from home or on flexible arrangements.
- Grievance handling policy: how employees can raise concerns and how the business will respond, including who hears the complaint and within what timeframe.
Many of these can be combined into a single employee handbook, with the more detailed procedures kept as separate documents. A handbook is easier for staff to read and easier for you to update.
How to write and roll out policies that hold up
A policy only protects you when it is written, communicated and followed, so how you draft and roll it out matters as much as what it says. The steps that make the difference are:
- Start with your real risks: Look at your industry, the roles you have, and any incidents or complaints in your history. A tradesperson with a small crew and a twenty-person office have very different policy needs.
- Write in plain English: Policies that read like legal documents get ignored. Use short sentences and concrete examples of what is and is not acceptable.
- Check the legal floor: Make sure nothing undercuts the National Employment Standards, your award, your WHS duties or the positive duty. This is the step where a lawyer's review earns its fee.
- Consult your team: Asking staff for input on a WHS or flexible work policy is not just good management. For WHS matters it is a statutory obligation under s 47 of the Work Health and Safety Act 2011 (Cth).
- Communicate and train: Distribute the policies, hold a short induction session for new starters, and refresh existing staff when policies change.
- Get written acknowledgement: Have each employee sign or click an acknowledgement that they have read and understood the policies. This single step converts your policies from documents into evidence.
- Enforce them consistently: A policy that is applied selectively is worse than no policy at all, because it becomes evidence of inconsistency and unfair treatment.
- Review annually, and after incidents: Laws change, awards change and your business changes. Schedule a yearly review and an immediate one after any complaint, dismissal or regulator contact.
What goes wrong without them
The most common failure is not a sudden disaster but a slow bleed: an unfair dismissal claim you cannot defend because there is no record of warnings, a bullying complaint that the Fair Work Commission resolves with orders about how your workplace must operate, a discrimination claim where you cannot show what measures you took, or a WHS incident where you cannot show how the risk was managed. Each of these starts with the same question: what did the business have in writing, and did it follow it?
There is also direct regulatory teeth behind the risk. A worker can apply to the Fair Work Commission for a stop-bullying order under s 789FC of the Fair Work Act 2009 (Cth), the Australian Human Rights Commission can inquire into compliance with the positive duty, and WHS regulators can issue notices and prosecute breaches of the primary duty of care. None of these require a formal written policy to exist, but every one of them is easier to defend when your standards and processes are documented and followed.
The non-legal costs are just as real. Without written standards, every dispute is decided ad hoc, every manager improvises, and employees conclude that the rules apply differently to different people. That is how culture problems start.
When a lawyer is worth the cost
Drafting policies is something you can do yourself, but the value of a lawyer is in the judgement calls. Is this policy proportionate for a business of your size, or is it overreach that invites a challenge? Does the handbook language inadvertently create contractual promises? Does your leave or disciplinary procedure line up with the specific award that covers your staff? Have you met the positive duty in a way that would stand up to an inquiry?
A lawyer can also do the parts you cannot easily do yourself: review your existing policies against current law, draft the procedures that need to be precise, such as disciplinary, grievance and WHS processes, and step in when a complaint, dismissal or regulator contact means the policy is about to be tested. The cost of getting these documents right the first time is usually far smaller than the cost of defending one dispute on the strength of a policy that was never followed.
Why the performance management policy pays for itself
Most businesses fixate on the code of conduct, but the policy that most often decides the outcome of a dispute is the performance management and discipline policy. When an employee is dismissed for underperformance or misconduct, s 387 of the Fair Work Act 2009 (Cth) asks whether there was a valid reason and whether the employee was warned and given a chance to respond. When the same employee claims they were bullied, s 789FD asks whether your action was reasonable management carried out in a reasonable manner. Both questions are answered by the same document: a written, followed and recorded disciplinary procedure. Get that one policy right, follow it in good faith, and the rest of the handbook has somewhere to hang.
In short: workplace policies set the standards that protect you when things go wrong. Keep them in plain English, aligned to the law, communicated to staff and reviewed regularly. The handful that matter most are work health and safety, anti-discrimination and harassment, leave, privacy, and performance management and discipline. And treat the written acknowledgement as the point of the exercise: a policy you can prove your staff read is the one that protects you.