New Zealand’s health and safety legislation is changing.
The Health and Safety at Work Amendment Act 2026 has been passed, with the changes coming into effect from 1 April 2027.
For businesses, one of the most significant changes is a clearer focus on critical risk — identifying the risks capable of causing the most serious harm and prioritising attention and resources accordingly.
But what does that mean for your business?
Do you need to rewrite your health and safety system? Do you need new policies and procedures? Or does the first step simply need to be understanding where you currently stand?
For business owners and leaders, the changes provide a good opportunity to ask three important questions:
- Where does our real health and safety exposure sit?
- Are we focusing on what matters most?
- How confident are we that the controls we’re relying on are actually working?
What is changing under the Health and Safety at Work Amendment Act 2026?
The Amendment Act changes several aspects of New Zealand’s Health and Safety at Work Act 2015 (HSWA).
A key change is that the main purpose of HSWA will expressly include providing a balanced framework that prioritises the management of critical risks.
The changes also introduce different requirements for small and larger PCBUs.
Small PCBUs
A small PCBU is defined as a business or undertaking with fewer than 20 workers for at least nine months of a financial year.
From 1 April 2027, small PCBUs will have more proportionate duties focused on managing critical risks and prioritising those risks when complying with relevant health and safety obligations.
Larger PCBUs
PCBUs with 20 or more workers will continue to manage both critical and other health and safety risks.
However, critical risks must be given the highest priority when deciding which risks to address first and where time, money and resources should be allocated.
The practical message is straightforward: understand what could cause the most serious harm and make sure those risks receive appropriate attention.
What is a critical risk?
Under the amended HSWA, critical risks are associated with specified hazards or hazards that are likely to result in serious outcomes such as death, notifiable injury or illness, a notifiable incident, or specified occupational disease.
Importantly, the concept isn’t simply about how often something might happen. It considers the potential consequence if the event occurs.
Depending on your business, critical risks might arise from activities involving:
- mobile plant and vehicles;
- working at height;
- machinery and stored energy;
- electricity;
- lifting operations;
- excavations;
- hazardous substances;
- confined spaces;
- occupational health exposures; or
- other work capable of causing serious injury, illness or death.
The critical risks will be different for every business. That’s why the starting point shouldn’t be another generic checklist or template. It should be understanding your business, your work and where your real exposure sits.
What do the HSWA changes mean for your health and safety system?
The changes don’t automatically mean you need an entirely new health and safety system.
Many businesses already have plenty of health and safety documentation. Policies. Procedures. Risk registers. Training records. Forms. Perhaps a manual developed several years ago when the business looked quite different.
The better question is: does your existing system still reflect how your business actually operates?
Businesses change. They grow. New workers arrive. Equipment changes. Different services are introduced. New contracts are won and work moves into different environments.
Your health and safety arrangements need to keep pace. A useful system should help you clearly understand:
- What could seriously harm someone?
- What controls are we relying on to prevent that harm?
- Who is responsible for those controls?
- Do our people understand what is expected?
- How do we know those controls are working?
If those answers aren’t clear, simply adding more documentation may not provide the solution.
More paperwork doesn’t necessarily mean better health and safety
A large health and safety manual can look impressive. But volume isn’t the same as effectiveness.
If the people expected to use the system can’t understand it, responsibilities aren’t clear or the documentation describes processes that don’t reflect the work being performed, the business can be left with a false sense of confidence.
There is also an important relationship between what is documented and what happens in practice. If your system says a particular control is required, but that control isn’t consistently being implemented, there is a gap.
The objective shouldn’t therefore be the largest or most sophisticated health and safety system. It should be having arrangements that are appropriate to your business, your people and your risks — and provide useful information for making decisions.
From critical risks to critical controls
Identifying a critical risk is only the beginning. The next question is: what controls are we relying on to prevent serious harm?
Consider interaction between pedestrians and mobile plant. A business might rely on physical separation, designated traffic routes, exclusion zones, competent operators, vehicle technology and communication arrangements.
But which of those controls are essential to preventing a serious event? Those are the controls you need confidence in.
And that leads to another important question: how do you know they’re actually working?
A risk register tells you what controls should exist. A procedure explains what should happen. A training record demonstrates that someone has received training. But those documents alone don’t necessarily tell you what’s happening when the work is actually being performed.
From systems to assurance
A useful way to understand this is through four simple questions:
SYSTEM
What should happen?
↓
IMPLEMENTATION
Is it happening?
↓
VERIFICATION
Are the important controls working?
↓
ASSURANCE
Do we have enough evidence to be confident?
Verification means looking beyond the paperwork. It might involve observing work, talking with workers, reviewing evidence and checking whether the controls the business relies upon are actually present and effective.
For business leaders, that final step — assurance — is particularly important. Good assurance isn’t about receiving more health and safety information. It’s about receiving the right information to understand where exposure sits, what’s working, where weaknesses exist and what requires attention.
What do the changes mean for Officers?
The Health and Safety at Work Amendment Act 2026 also clarifies Officer duties, with greater emphasis on governance functions.
These include understanding the PCBU’s risks and relevant health and safety matters, ensuring appropriate resources and processes are available, and verifying that the business is actually using those resources and processes.
That reinforces an important distinction. Knowing that a procedure exists isn’t the same as knowing the risk is being effectively managed.
Officers need enough reliable information to understand what matters and make informed decisions about where attention and resources are required.
What should businesses do before 1 April 2027?
There is no need to panic or immediately rewrite your entire health and safety system.
Start with clarity.
1. Understand your critical risks
Identify which aspects of your work have the potential to cause the most serious harm.
2. Identify the controls that matter most
Understand what you’re relying on to prevent or minimise those serious outcomes.
3. Review what you already have
Does your existing health and safety system reflect how your business operates today?
4. Talk to your people
The people doing the work often provide the clearest view of whether controls are practical, understood and actually being used.
5. Verify your important controls
Don’t assume a control is effective simply because it appears in a procedure or risk register. Look for evidence that it’s present and working.
6. Prioritise what happens next
Not every gap carries the same importance. Focus your time, attention and resources where they can make the greatest difference.
Clarity before action
The Health and Safety at Work Amendment Act 2026 provides businesses with a good reason to review their existing health and safety arrangements before the changes take effect on 1 April 2027.
But the starting point shouldn’t automatically be: “What new documents do we need?”
Start instead with:
- Where are we now?
- Where does our real exposure sit?
- What matters most?
- What’s already working?
- Where are the genuine gaps?
- How confident are we that our important controls are working?
Once you have clarity around those questions, deciding what to do next becomes much easier.
Know where you stand
TruSafe helps businesses gain an independent view of their health and safety arrangements — understanding what’s working, identifying where genuine exposure sits and prioritising what requires attention.
Where systems need strengthening, we help establish practical arrangements around the business and its risks. And where greater confidence is required, we independently verify whether important controls are actually working in practice.
Because preparing for the Health and Safety at Work Amendment Act 2026 shouldn’t simply be about creating more health and safety documentation.
It’s about having the clarity to understand what matters and the confidence to make informed decisions about what to do next.
TruSafe — Providing Clarity & Confidence.
