OHS Management System — Occupational Health and Safety Management

An OHS management system is the integrated framework of policies, procedures, monitoring programmes, and records through which an organisation manages both occupational health risks and occupational safety risks. The critical distinction is that OHS gives equal weight to health outcomes, not just safety outcomes. A safety management system, in practice, tends to focus on acute injury prevention: falls, struck-by events, machinery guarding, electrical isolation. An OHS management system extends that scope to cover occupational diseases, chronic health conditions arising from workplace exposures, psychosocial hazards, and the surveillance programmes required to detect health effects before they become irreversible. This is not a semantic difference. Occupational diseases kill far more Australians each year than traumatic workplace injuries. Safe Work Australia's Work-Related Traumatic Injury Fatalities report counts approximately 170 traumatic workplace deaths per year, while the Australian Institute of Health and Welfare estimates that occupational diseases cause over 4,000 deaths annually when mesothelioma, silicosis, occupational cancers, and cardiovascular disease from chronic workplace stress are included. An OHS management system addresses this imbalance by building health surveillance, exposure monitoring, biological monitoring, and psychosocial risk management into the core management system rather than treating them as optional add-ons. In Victoria, the term OHS is enshrined in legislation through the Occupational Health and Safety Act 2004 (Vic), which uses different terminology and in some respects different obligations from the harmonised WHS Act that applies in most other Australian jurisdictions. Organisations operating in Victoria or across multiple jurisdictions must understand these differences and ensure their management system addresses both frameworks. The OHS Act 2004 imposes duties on employers rather than PCBUs, uses the concept of employees rather than workers, and has different penalty structures and enforcement mechanisms from the WHS Act.

Victoria is the only Australian state that has not adopted the harmonised WHS Act. The Occupational Health and Safety Act 2004 (Vic) remains the primary OHS legislation in Victoria, and organisations operating in that jurisdiction must build their OHS management system around its specific requirements. The VIC OHS Act imposes duties on employers rather than persons conducting a business or undertaking. This narrower duty holder concept means that volunteer organisations, self-employed persons, and some contractor arrangements are treated differently under Victorian law compared to the WHS Act. The maximum penalties under the Victorian OHS Act differ from those under the harmonised WHS Act. For a body corporate, the maximum penalty for the most serious OHS offences under the Victorian Act is approximately $3.6 million (2025-26 CPI-indexed), while individuals face maximum penalties of approximately $720,000. Category 1 offences under the WHS Act carry maximum penalties of $3,451,500 for a body corporate and $690,300 for an individual as of 2025-26 CPI indexation. Victorian employers have specific obligations regarding health and safety representatives that differ from the WHS Act framework. Under the Victorian Act, designated work groups and HSR elections follow a different process, and the powers of HSRs, including the power to issue provisional improvement notices, operate under different procedural requirements. The Victorian Act also has distinct provisions regarding discrimination against workers who raise OHS concerns, with Section 76 creating a reverse onus of proof that requires the employer to demonstrate that an adverse action was not motivated by the worker's OHS activity. An OHS management system designed for national coverage must map these Victorian differences and ensure that procedures, forms, and training materials reflect the correct legal framework for each jurisdiction. This is particularly important for consultation procedures, incident notification requirements, and enforcement response protocols.

Health surveillance is the systematic collection, analysis, and interpretation of health data from workers exposed to specific workplace hazards, conducted for the purpose of detecting early signs of occupational disease and evaluating the effectiveness of exposure controls. Under Part 7.2 of the WHS Regulation 2025, a PCBU must ensure health monitoring is provided to a worker who carries out work that exposes the worker to a substance listed in Schedule 14 of the Regulation. Schedule 14 substances include crystalline silica, lead and inorganic lead compounds, asbestos, organophosphate pesticides, isocyanates, mercury and its inorganic compounds, thallium, cadmium, chromium, benzene, 4,4-methylenebis(2-chloroaniline), pentachlorophenol, and polycyclic aromatic hydrocarbons. Health surveillance for these substances must be provided at the PCBU's expense and must be carried out by a registered medical practitioner with experience in health monitoring. An OHS management system must maintain a health surveillance register that tracks which workers are exposed to Schedule 14 substances, the type and frequency of health monitoring required, the dates of completed and upcoming assessments, and the results of monitoring including any abnormal findings. Health monitoring records must be retained for at least 30 years due to the long latency period of many occupational diseases. If a health monitoring report contains an adverse finding, the PCBU must take action to review exposure controls, inform the worker, and provide the health monitoring report to the regulator if required. Beyond the mandatory Schedule 14 requirements, best practice OHS management systems include voluntary health surveillance programmes for hazards that are not listed but present significant health risks. These may include audiometric testing for noise-exposed workers, spirometry for workers exposed to respiratory hazards not listed in Schedule 14, musculoskeletal screening for workers performing repetitive or physically demanding tasks, and skin surveillance for workers exposed to sensitising chemicals.

Workplace exposure monitoring and biological monitoring are complementary tools that an OHS management system uses to quantify the health risks that workers face from hazardous substances. Workplace exposure monitoring, also called atmospheric monitoring or air monitoring, measures the concentration of airborne contaminants in the worker's breathing zone and compares the results against workplace exposure standards. Safe Work Australia publishes the Workplace Exposure Standards for Airborne Contaminants, which set eight-hour time-weighted average and short-term exposure limit values for hundreds of substances. These standards were comprehensively revised in 2024-25, with many limits tightened significantly. Silica, for example, now has a TWA of 0.05 mg/m3, reduced from the previous 0.1 mg/m3. Exposure monitoring must be conducted by a competent person using validated sampling and analytical methods. For personal exposure monitoring, sampling pumps and appropriate collection media are worn by the worker during representative work activities. Static or area monitoring supplements personal monitoring by characterising the general workplace environment. Results must be documented, retained, and made available to workers and health and safety representatives. Biological monitoring measures the concentration of a substance, its metabolites, or a biological effect marker in a worker's body, typically through blood or urine samples. Biological monitoring provides a measure of actual absorbed dose rather than just airborne concentration, accounting for all routes of exposure including dermal absorption and ingestion. For lead, biological monitoring through blood lead levels is the primary surveillance tool, with removal from lead work required when blood lead levels exceed specified thresholds under the WHS Regulation 2025. Biological exposure indices published by the American Conference of Governmental Industrial Hygienists provide guidance values for many substances. An OHS management system integrates exposure monitoring results with health surveillance data to provide a complete picture of occupational health risk. When exposure monitoring shows levels approaching or exceeding the workplace exposure standard, the system triggers a control review and escalation process.

Psychosocial hazards are the aspects of work design, organisation, management, and social context that have the potential to cause psychological or physical harm. The WHS Regulation 2025, through Regulations 55C and 55D, creates explicit obligations for PCBUs to identify psychosocial hazards, assess associated risks, and implement controls using the hierarchy of controls so far as is reasonably practicable. These regulations were introduced through the Work Health and Safety Amendment (Managing Psychosocial Risks) Regulations and represent a fundamental expansion of the scope of workplace health and safety management. The psychosocial hazards that must be addressed include high or low job demands, low job control, poor support from supervisors or colleagues, poor organisational change management, inadequate reward and recognition, poor organisational justice, traumatic events or material, remote or isolated work, poor physical environment, violence and aggression, bullying, harassment including sexual harassment, and conflict or poor workplace relationships. An OHS management system must include a psychosocial risk assessment process that is distinct from the physical risk assessment process because the hazards, controls, and monitoring mechanisms are fundamentally different. Psychosocial risk assessments typically involve worker surveys, focus groups, job demand analysis, review of human resources data including turnover, absenteeism, and grievance rates, and analysis of workers compensation claims for psychological injury. Controls for psychosocial hazards operate primarily through work design, management practices, and organisational culture rather than through physical barriers or personal protective equipment. An effective OHS management system tracks psychosocial risk indicators alongside physical safety indicators. Key metrics include psychological injury claim rates, worker engagement survey results, voluntary turnover rates, absenteeism patterns, grievance lodgement rates, and the results of psychosocial risk assessments conducted at defined intervals. Maximum penalties for failing to manage psychosocial risks are the same as for any other WHS Regulation breach: up to $690,300 for an individual and $3,451,500 for a body corporate as of 2025-26 CPI indexation for the most serious offences.

One of the most important functions of an OHS management system that is not typically found in a purely safety-focused system is the occupational disease register. Unlike traumatic injuries, which are immediately apparent, occupational diseases may take years or decades to manifest. Asbestos-related diseases have latency periods of 15 to 40 years. Noise-induced hearing loss develops progressively over years of exposure. Silicosis can present as accelerated disease within 5 to 10 years of first exposure, particularly with the engineered stone exposures that prompted the national engineered stone ban effective from 1 July 2024. Occupational cancers may not appear until 10 to 30 years after exposure to the causative agent. An occupational disease register maintains a longitudinal record of each worker's exposure history, health surveillance results, and any diagnosed or suspected occupational diseases. This register serves multiple critical functions. It enables the organisation to identify patterns and trends in occupational disease that may indicate inadequate exposure controls. It provides the evidentiary basis for workers compensation claims that may be lodged years after the exposure occurred. It supports epidemiological research into occupational disease causation and prevention. It demonstrates to regulators and courts that the PCBU has taken a proactive approach to occupational health management. The OHS management system must also address the process for managing workers who have been diagnosed with an occupational disease or who have health surveillance results indicating early signs of disease. This includes referral to specialist medical practitioners, review and strengthening of exposure controls for the affected worker and all other workers with similar exposures, notification to the regulator where required, support for the workers compensation claim process, and development of a return-to-work plan that avoids further exposure to the causative agent. Record retention requirements for occupational health data reflect the long latency of occupational diseases. Health monitoring records must be retained for at least 30 years, and exposure monitoring records should be retained for the same period. Some organisations adopt lifetime retention for all occupational health records.

A mature OHS management system integrates occupational health data with occupational safety data to provide a comprehensive view of workplace risk. In many organisations, safety data and health data exist in separate systems managed by different teams. Injury data sits in the incident management system managed by the safety team, while health surveillance results, exposure monitoring data, and workers compensation claim data sit in human resources or occupational health systems. This separation creates blind spots. An organisation may have an excellent lost time injury frequency rate while simultaneously exposing workers to hazardous substances at levels that will cause occupational disease in the future. An integrated OHS management system links exposure data to health outcomes. When a worker undergoes health surveillance, the results are linked to their exposure history, their work location, their job role, and the controls in place at the time of exposure. This linkage enables the system to identify whether health surveillance results are deteriorating in correlation with exposure levels, whether specific work groups or locations have higher rates of abnormal findings, and whether control changes have resulted in improved health outcomes. Dashboard views should present both safety leading indicators and health leading indicators side by side. Safety leading indicators include inspection completion rates, hazard reports submitted, corrective actions closed on time, and safety observations conducted. Health leading indicators include health surveillance compliance rates, the percentage of exposure monitoring results below the workplace exposure standard, the percentage of workers with current fitness-for-task assessments, and psychosocial risk assessment completion rates. This integrated view ensures that organisational attention and resources are allocated proportionally to both acute injury prevention and occupational disease prevention. The OHS management system should generate alerts when health data trends indicate emerging risks, such as a cluster of abnormal audiometry results in a specific work area or rising blood lead levels in a maintenance team. These alerts trigger investigation and control review processes identical to those triggered by safety incidents.

EHS Atlas provides the platform capabilities required to build and maintain a comprehensive OHS management system that gives equal attention to occupational health and occupational safety. The platform's risk register supports both safety hazards and health hazards, with exposure-based risk assessment methodologies that account for duration, frequency, and intensity of exposure alongside the traditional likelihood and consequence matrix. Health surveillance scheduling and tracking is built into the platform, with automated alerts for upcoming and overdue health monitoring appointments, integration with the Schedule 14 substance list, and record retention that meets the 30-year requirement for health monitoring data. Exposure monitoring results can be recorded against specific workers, work areas, and time periods, with trend analysis that identifies patterns of exposure drift before levels breach the workplace exposure standard. The psychosocial risk module provides validated survey instruments, risk assessment templates aligned with the WHS Regulation 2025 requirements, and tracking of psychosocial controls through to effectiveness review. For organisations operating in Victoria, the platform includes jurisdiction-specific configuration that adjusts terminology, duty holder definitions, penalty references, and consultation procedures to reflect the OHS Act 2004 rather than the WHS Act. Multi-jurisdiction organisations can maintain a single management system with jurisdiction-specific variations clearly identified and managed. The platform's reporting engine generates the data views required for management review, including integrated health and safety dashboards, exposure trend analysis, health surveillance compliance reports, and psychosocial risk assessment summaries. All data is maintained with full audit trails and access controls that restrict health surveillance data to authorised occupational health practitioners in accordance with privacy requirements.