How to create and roll out workplace policies in Australia

The moment you take on your first employee — or your fifth — your business enters a web of obligations under Australian employment law. The Fair Work Act 2009 (Cth), WHS legislation, anti-discrimination laws and the Privacy Act 1988 (Cth) all expect you to manage people consistently, safely and fairly. Workplace policies are how you do that in practice: they translate legal obligations into everyday operating rules that every manager and team member can follow.

A completed, live policy suite gives your business a documented standard of conduct, a clear process for resolving issues, and — critically — evidence that you took reasonable steps to prevent harm if a complaint or dispute ever reaches the Fair Work Commission or a state tribunal. It does not replace employment contracts or modern awards, and it does not automatically create contractual entitlements — but it sits alongside both as a practical management tool.

What to have ready before you start

Getting policies right the first time is far easier if you have these things sorted before you open a blank document:

A current copy of any applicable modern award. Most Australian employees are covered by one of the modern awards administered by the Fair Work Commission. Awards contain minimum standards for pay, hours, breaks, overtime and — importantly — consultation requirements. Your policies cannot undercut award entitlements.
Your employment contracts. Policies must align with, not contradict, the core terms in your contracts (role, pay, termination, IP, confidentiality). You'll also want your contracts to state that company policies apply but do not form part of the contract itself.
A list of your actual workplace risks and recurring questions. The best policies address real situations in your business, not every conceivable scenario. A quick risk mapping exercise — five minutes with your leadership team — is more valuable than any generic template.
Decisions about scope and ownership. Will you use a single staff handbook or standalone documents? Who owns each policy and who has authority to update it? These decisions drive structure.
Budget or time for legal review. Policies that conflict with awards or contain unenforceable provisions can create more risk than having no policies at all. Factor in a review step before you launch.
An acknowledgement process. You need a way for staff to confirm they've received and read each policy — email confirmation, a signature page, or a tick-box in your HR system all work.

One thing many employers overlook at this stage: consultation obligations. Many modern awards require employers to genuinely consult employees before making significant changes to how work is performed. If your policies represent a material change to existing arrangements, check your award's consultation clause before you finalise anything.

Step 1: Map your legal obligations and operational risks

Before you write a single policy, identify the legal frameworks that apply to your business and the everyday situations most likely to go wrong.

The legal baseline for most Australian employers includes:

The National Employment Standards (NES) under the Fair Work Act 2009 (Cth), which set minimum entitlements covering hours, leave, flexible work requests, notice of termination and more for national system employees.
Your applicable modern award or enterprise agreement, which may add or modify those entitlements.
The primary duty of care under s 19 of the *Work Health and Safety Act 2011* (Cth) (or the equivalent state or territory WHS legislation), which requires a person conducting a business or undertaking (PCBU) to ensure, so far as is reasonably practicable, the health and safety of workers and others affected by the work.
The positive duty under the Sex Discrimination Act 1984 (Cth), as strengthened by the Respect at Work reforms, requiring employers to take reasonable and proportionate measures to eliminate unlawful sex discrimination, sexual harassment, and sex-based harassment in the workplace.
Privacy obligations under the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles, which apply to private sector organisations with an annual turnover above $3 million, and some smaller organisations regardless of turnover.

On the operational side, think about the scenarios that cause most friction or confusion in your business: leave requests, device use, conflicts of interest, after-hours conduct, social media posts, performance concerns. Each recurring question is a signal that a policy would help.

Document your list. It becomes the index for your policy suite.

Step 2: Decide on your structure — handbook or standalone documents

There is no legally prescribed format. The choice comes down to how your team actually consumes information.

A staff handbook (a single document with named sections) works well for teams up to around 30–50 people. Everything is in one place, onboarding is straightforward, and there is only one version to control. The downside is that updating one section requires re-issuing or re-versioning the whole document.

Standalone policy documents suit businesses that need to update individual policies frequently (for example, a WHS policy in a high-hazard industry), or where different policies require sign-off from different stakeholders (legal review of a privacy policy, board approval of a whistleblower policy).

A practical middle ground is a short handbook that references standalone documents for the topics most likely to change — WHS, social media, remote work, drug and alcohol. Whichever format you choose, every document needs version control: a date, a version number, and a named owner.

Step 3: Draft each policy in plain English

Write for your team, not for a court. Policies that employees cannot understand do not protect anyone — including you.

For each policy, cover:

Purpose — one or two sentences on why this policy exists and what it protects.
Scope — who it applies to (employees, contractors, volunteers, visitors where relevant).
Rules and expectations — the actual standards, written as clearly as possible. Define technical or legal terms in plain language the first time they appear.
Procedures — step-by-step processes for common scenarios: how to request leave, how to report a hazard, how to raise a grievance.
Consequences — what may happen if the policy is not followed, including that disciplinary action up to and including termination is possible for serious breaches.
Contacts and escalation paths — who to speak to first, what happens if that person is the subject of the complaint.

Cross-reference related documents. Your IT and device policy should point to your privacy policy; your grievance procedure should reference your anti-bullying and harassment policy.

Core policies most small businesses need from day one:

Code of conduct (behavioural standards, conflicts of interest, gifts)
Work health and safety (hazard reporting, incident response, roles and responsibilities)
Anti-bullying, harassment and discrimination (prohibited conduct, reporting process, investigation steps)
Leave and attendance (requesting leave, notice, medical certificates)
IT, internet and device use (acceptable use, passwords, monitoring, personal devices)
Privacy and data handling (how staff collect, access and share personal information)
Social media and external communications
Grievance and disciplinary procedure

Policies to add as you grow:

Flexible and remote work arrangements
Drug and alcohol (particularly for safety-critical roles)
Whistleblower policy (mandatory for certain public companies; best practice for others)
Expense reimbursement, vehicle and travel

Step 4: Align each policy with the applicable law and instruments

Before you finalise any draft, run it against three checks:

Award and NES compliance. Your leave policy must reflect — not undercut — the minimum annual leave, personal/carer's leave, and other entitlements in the NES and any applicable award. Your disciplinary procedure must be consistent with the Fair Work Act's unfair dismissal protections: employees must be notified of the reason for any action taken against them and given a genuine opportunity to respond.
WHS obligations. Your WHS policy should describe the specific hazards relevant to your industry, not just restate the legislation in general terms. Incident and near-miss reporting processes, emergency procedures and first aid arrangements should all be clearly set out.
Privacy and data handling. If your business is covered by the Privacy Act 1988 (Cth), staff conduct must align with the Australian Privacy Principles. Even if you fall below the turnover threshold, best practice is to treat personal information with the care the APPs require — especially customer data.

If any draft policy contradicts an award entitlement or an employment contract term, fix the policy before you publish it.

Step 5: Consult, train and launch

Roll out is not just distribution. Policies that land in an inbox without context are routinely ignored.

Before you launch, consult with staff as required by any applicable award or enterprise agreement. Even where consultation is not strictly required, a brief period of staff input catches practical gaps and builds buy-in. Managers should see and understand the policies before they go to the rest of the team — they will be the first point of contact when questions arise.

At launch:

Brief managers separately on their obligations and the escalation process for each policy area.
Run a short team session (in person or recorded) explaining the purpose of the policies, walking through key procedures, and answering questions.
Distribute the documents through your HR system, intranet or shared drive — somewhere accessible at any time.
Collect acknowledgements. Each employee should confirm in writing (or via your HR system) that they have received, read and understood the policies.
Record the launch date and retain acknowledgements. This is your evidence of reasonable steps if a dispute later arises.

New starters should receive all policies as part of onboarding and provide acknowledgement before or on their first day.

Step 6: Enforce consistently and document every action

A policy only delivers its protective value if you apply it consistently. Selective enforcement — disciplining one employee for conduct you overlooked in another — is itself a legal risk under the Fair Work Act's general protections provisions, which prohibit adverse action based on protected attributes or the exercise of a workplace right.

When you take disciplinary action, document everything:

The conduct or performance issue, with dates and specifics
Any prior conversations, counselling or written warnings
The employee's response and any explanation they gave
The decision reached and the reason for it
Any support or improvement plan put in place

This documentation serves two purposes: it helps you manage the issue fairly, and it is your primary evidence if the matter is later contested before the Fair Work Commission or a tribunal.

Step 7: Review and update on a regular cycle

Laws change, awards are varied, and your business evolves. Policies that were current when you wrote them may become non-compliant or simply out of date.

Set a formal review cycle — annually at minimum. Trigger an earlier review whenever:

A relevant law or award is amended (Fair Work Act changes, WHS code of practice updates, Privacy Act amendments)
Your business changes significantly (new locations, remote work, new industry activities)
An incident, complaint or near-miss reveals a gap in your current policies

When you update a policy, increment the version number, note the effective date, and communicate material changes to staff with refresher training where needed. Keep archived copies of superseded versions.

How Artificer Legal can help

Workplace policies sit at the intersection of employment law, WHS obligations, privacy law and contractual arrangements. Getting the drafting right — and keeping it current — is more demanding than it looks from the outside. This is where Artificer Legal can add direct value.

Our practitioners will:

Review your existing employment contracts and any applicable modern awards to identify misalignments before drafting begins
Draft a tailored policy suite or staff handbook that reflects your specific industry, workforce composition and operational risks
Verify that each policy meets the NES, Fair Work Act, WHS and Privacy Act requirements currently in force
Advise on consultation obligations under your award before you launch new or revised policies
Assist with training materials for managers so they can apply the policies consistently
Review your policies annually or after any significant legislative change to keep your suite current

If a complaint or dispute arises despite your policies being in place, we can also help you respond — including advising on investigation procedures, disciplinary processes and, where necessary, representation before the Fair Work Commission.

Getting it right from the start matters most

The single factor most likely to determine whether your workplace policy suite does its job is whether it is actually grounded in your business from day one — not copied from a generic template, not filed away unread, and not left unchanged as your team and the law evolve. Policies that are tailored to your industry, aligned to your contracts and awards, and genuinely embedded in how managers operate are the ones that resolve problems early, before they become formal disputes.

Beyond that: make sure every employee has acknowledged the policies in writing, keep that acknowledgement on file, and set a date in your calendar to review. The employers who end up in front of the Fair Work Commission are rarely the ones who had good policies — they are far more often the ones whose policies existed only on paper.