The change management obligation you probably don’t know you have

Psychosocial safety legislation has changed. Here is what that means for how you manage change, and what it is costing you if you don’t.

Most senior leaders know psychosocial safety is a regulatory obligation. Fewer realise that poorly managed organisational change is now explicitly named as a psychosocial hazard in the national Code of Practice.

That one shift changes the exposure profile for any organisation running significant transformation.

This is not a compliance scare piece. It is a commercial one.

If your organisation struggles to land change effectively, this legislation turns that weakness into a regulatory risk and a measurable drag on ROI from transformation spend.

Most transformation business cases assume full adoption. Even a 10 to 20 per cent drop in adoption on a major program can translate into millions in unrealised benefits. This sits outside traditional financial tracking, is rarely owned, and is often repeated across multiple initiatives. The legislation does not create that problem. It makes it visible and enforceable.

Why this matters now

Across Australian jurisdictions, obligations around psychosocial hazards have strengthened. The direction is consistent: organisations must actively design out harm, not just respond to it when things go wrong. New South Wales (NSW) is the clearest signal of where national enforcement is heading.

Three shifts matter commercially:

1. The hierarchy of controls now applies to psychosocial hazards

The WHS Regulation 2025 in NSW requires psychosocial risks to be managed using the same hierarchy applied to physical hazards. Lower-order responses like EAP programs, training, and communications are easy to deploy but have limited impact on root causes. Higher-order controls like governance design, change sequencing, and leadership accountability are harder to implement but directly improve change success rates. If your organisation is only investing at the lower end of the hierarchy, you are spending without shifting outcomes.

2. Codes of Practice are becoming enforceable benchmarks

NSW’s Code becomes enforceable from 1 July 2026. The shift is from “reasonable effort” to “defensible position.” For executives and boards, that means greater scrutiny in the event of incidents and a clear requirement for documented, principled decision-making. Other jurisdictions are in active review. Organisations operating nationally should treat this as a leading indicator, not an NSW-specific issue.

3. Regulators are actively prioritising psychosocial compliance

Larger organisations are a stated priority. If your organisation has poor change survey results, visible change fatigue, or inconsistent leadership behaviour, your exposure is higher than you think.

Why change management specifically?

The Code explicitly identifies poorly managed organisational change as a psychosocial hazard. That creates a direct link between your employee survey results and your legal obligations.

If your people are reporting poor consultation, unclear communication, or change fatigue, you have documented evidence of a known risk. That is not simply a performance problem. Under the current regulatory framework, if there is a documented psychosocial hazard, your organisation has a positive duty to address it.

From a commercial lens, this is also where value leaks. Poor change management drives delayed benefits realisation, rework across programs, and attrition in critical roles. Most organisations are already paying this cost. They just do not track it.

The broken chair test

If there were a broken chair in a meeting room, it would be fixed. Not because of policy, but because the risk is visible, the issue is known, and action is expected.

Your employee survey works the same way. It tells you where change is failing, where people are overloaded, and where leadership is not landing.

The question is no longer whether there is a problem. It’s what’s it costing, and why has it not been fixed?

That cost shows up in lost transformation value, reduced productivity, avoidable attrition, and increased regulatory exposure.

What the legislation is actually asking for

Four expectations matter in practice:

1. Consult before, not after

The duty to consult workers on psychosocial hazards includes consulting them on changes that may affect their psychological health. This means genuine involvement in the design of change, not communication after decisions have already been made. Most organisations know this in principle. The regulation now expects it in practice, which calls for skilled and empowered change leadership and genuinely people-centred processes.

2. Apply higher-order controls

Most organisations overinvest in communication and training. These are necessary, but they do not fix structural issues. Coordinated change governance, visible executive sponsorship, and an enterprise-wide view of the change portfolio are the kinds of structural responses the framework expects. Without them, organisations effectively scale poor change practice across the portfolio.

3. Understand cumulative load

The biggest risk is rarely one change in isolation. It is many changes, poorly coordinated. If your organisation lacks visibility across what is being asked of people, when, and by whom, you cannot credibly claim to be managing the psychosocial hazards of change.

4. Document what you are doing and why

Strong organisations can show what they heard, what they changed, and what improved. A clear line from hazard identification through to implemented controls is both good governance and a defensible compliance position. That gap signals both compliance risk and low change maturity.

The strategic choice

There are two ways to respond to this:

For organisations already investing heavily in change, this is not an additional cost. It is recovering value from existing investment. For organisations with known gaps, the legislation provides a useful prompt to address them, and the language of duty of care tends to accelerate conversations that have previously stalled.

A clear starting point

For organisations with low change scores, the path is straightforward:

This approach maps naturally to the risk management framework that the legislation expects. It produces better change outcomes and a coherent, evidence-based response to a known regulatory obligation. The two are not in tension. Getting clarity across those three phases, understanding what needs to be built and in what sequence, is how organisations move from knowing they have an obligation to being able to demonstrate they are meeting it.