The Health and Safety at Work Act 2015 rewrote New Zealand health and safety law after Pike River. It replaced a regime built around hazard management with one built around duties, and it put those duties on people rather than on entities alone. Ten years on, the practical question for most organisations is no longer what the Act requires but how you prove you did it.
ISO 45001 does not replace HSWA obligations. It gives you a structured way to discharge them and, more usefully, to evidence that you discharged them. That distinction matters because officer due diligence is a personal duty and the evidence is what stands between an officer and a difficult conversation.
One Regime, Not Eight
New Zealand operates a single national health and safety framework under HSWA, regulated by WorkSafe New Zealand. If you have worked with Australian systems, this is a genuine simplification: no state-by-state variation, no separate Victorian regime, one regulator and one set of regulations and approved codes of practice. Trans-Tasman businesses often try to run one system across both countries and discover that Australian jurisdictional variation forces a split. New Zealand does not.
Looking for an ISO 45001 Consultant in New Zealand?
The Anatomy of HSWA, and Where ISO 45001 Attaches
A person conducting a business or undertaking must ensure, so far as is reasonably practicable, the health and safety of workers and of others affected by the work. Reasonably practicable is an evidence test. A documented risk assessment showing what you considered, what you selected and why, plus records that the controls operated, is precisely what the test asks for.
Officers must exercise due diligence to ensure the PCBU complies. The Act sets out what that involves: keeping up to date knowledge, understanding operations and hazards, ensuring resources and processes are available and used, ensuring information about incidents is received and responded to, and verifying that all of this is happening. ISO 45001’s leadership and performance evaluation clauses map onto those elements almost directly, which is why officer-level reporting is one of the first things we build.
Where more than one PCBU has a duty in relation to the same matter, each must consult, cooperate and coordinate with the others. On a New Zealand construction site or in a labour-hire arrangement, this is the clause that determines whether contractor management is real or theatrical.
HSWA requires worker engagement on matters affecting health and safety and effective participation practices. ISO 45001 Clause 5.4 asks for the same thing in management system language. Auditors interview workers, and the question they ask is whether anyone was consulted about the risk assessments. The answer is usually more revealing than the documentation.
The ACC Dimension
New Zealand’s accident compensation scheme changes the commercial calculus in a way Australian material does not account for. There is no common law personal injury litigation here. Instead there are ACC levies, and levy rates are influenced by your classification and, for larger employers, by experience.
A functioning safety management system reduces injury frequency, which flows through to levy exposure over time. It also produces the injury management and return-to-work records that make ACC claims administration considerably less painful. We build those records into the system rather than treating them as an HR problem that sits somewhere else.
Have a construction, infrastructure or facilities tender needing a safety system?
Psychosocial Risk Is Inside the Primary Duty
HSWA defines health to include physical and mental health, so psychosocial risk is not an optional extension. WorkSafe has published guidance on work-related mental health, bullying and fatigue, and organisations that manage physical hazards well and psychosocial risk not at all are covering half the duty.
Most safety systems we assess list working at heights and confined spaces and say nothing about workload, role clarity or how a bullying complaint gets investigated. ISO 45001 requires hazard identification without limiting it to the physical, and ISO 45003 provides the supporting guidance. If you are building or rebuilding a system, this belongs in scope from the start.
How We Build the System
| Stage | What Happens | Duration |
|---|---|---|
| 1. Gap analysis against the standard and the Act | Not one or the other. Assessment against ISO 45001:2018 and against HSWA duties, regulations and relevant approved codes of practice, producing a single gap register | 1–2 weeks |
| 2. Compliance obligations register | Acts, regulations, approved codes of practice, safe work instruments, licences and contractual safety obligations, each mapped to the control that satisfies it | 1–2 weeks |
| 3. Risk framework | Hazard identification across physical and psychosocial risk, risk assessment methodology, and the hierarchy of controls applied and evidenced rather than merely cited | 3–4 weeks |
| 4. System build | Policy, objectives, job safety analysis and permit frameworks, incident and investigation procedures, emergency preparedness, contractor management and worker participation arrangements | 3–5 weeks |
| 5. Implementation and engagement | Rollout, toolbox delivery, health and safety representative support, and the consultation records that prove engagement happened | 4–8 weeks |
| 6. Audit, review and certification | Full internal audit, findings closed, documented management review with officer-level reporting, then Stage 1 and Stage 2 with a JAS-ANZ accredited body | 4–6 weeks |
Why Organisations Choose Nathan
Sectors and Regions
Construction and civil contracting is our largest New Zealand safety sector, concentrated in Auckland, Hamilton, Tauranga, Wellington and Christchurch but extending through every regional centre. Forestry and wood processing work takes us to the central North Island, Northland, Gisborne, Nelson and the West Coast. Manufacturing and food processing clients sit across the Waikato, Bay of Plenty, Manawatū, Canterbury and Southland.
We also work with transport and logistics operators, ports and marine services, agriculture and horticulture businesses, engineering and maintenance contractors, facilities management providers, labour hire firms, and health and aged care providers. Safety systems are audited where the work happens, so we plan site attendance around your operational calendar rather than ours.
Preparing for an upcoming audit?
Tell Us Where the Work Happens
Sites, shifts and the contractors you engage shape a safety project more than headcount does. Start there and the scope conversation gets much shorter.
Ready to start your ISO 45001 certification journey?
FAQ'S
No standard can confer legal compliance. HSWA duties rest with the PCBU and its officers. ISO 45001 gives you a systematic way to identify those duties and generate the evidence that you met them, which is directly useful when demonstrating due diligence.
No. New Zealand operates one national regime under the Health and Safety at Work Act 2015, regulated by WorkSafe New Zealand. This differs from Australia, where eight jurisdictions apply variations and Victoria uses a separate Act entirely.
Keeping knowledge current, understanding operations and hazards, ensuring appropriate resources and processes exist and are used, ensuring incident information is received and acted on, and verifying that all of this is actually happening. The last element is where most organisations fall short.
Yes. HSWA defines health to include mental health, and ISO 45001 requires hazard identification without limiting it to physical hazards. ISO 45003 provides detailed supporting guidance on managing psychosocial risk within the same management system.
Not directly. Levies are set by classification and, for larger employers, by experience. A functioning safety system reduces injury frequency over time, which affects experience-based components, and produces the injury management records that make claims administration far simpler.
Where more than one PCBU has a duty about the same matter, each must consult, cooperate and coordinate with the others so far as is reasonably practicable. On shared sites and in labour hire arrangements this is what makes contractor management a legal obligation rather than good practice.
It depends on the agency and the work. Certification or an equivalent certified system appears in evaluation criteria for construction, infrastructure, facilities and maintenance contracts with some regularity. Check the specific tender rather than assuming.
HSWA shifted the focus from hazard identification alone to risk management, requiring you to eliminate risks so far as is reasonably practicable and, where elimination is not possible, to minimise them. A hazard list without risk assessment and control evidence no longer meets the duty.
Yes, and it is usually worth doing. The three share a common structure, so one integrated system with combined audits means a single set of internal audits and one management review rather than three separate cycles.
Typically 12 to 24 weeks. The constraint is that you need genuine operational records before Stage 2: completed risk assessments, toolbox records, worker participation evidence, and at least one internal audit and management review cycle.
Worker participation that exists on paper only, a compliance register nobody uses, psychosocial risk absent from the register, investigations that record what happened but never why, and contractor management that stops at collecting an insurance certificate.
Both islands. Our safety work spans Auckland, Waikato, Bay of Plenty, Taranaki, Hawke's Bay, Manawatū, Wellington, Nelson, Marlborough, Canterbury, Otago, Southland, Northland and the West Coast, with site attendance planned around your operational calendar.
0
Projects
0
Services
0
Clients Serving
0
Countries Serving