Health and Safety at Work Act 2015 — Section 30

How to do a workplace risk assessment in New Zealand

Risk assessment is the foundation of health and safety management under the HSWA. Here is a step-by-step guide to identifying hazards, assessing risks, and applying controls.

📋 HSWA 2015, Section 30 — WorkSafe NZ guidance

Why risk assessment matters

It's a legal requirement for every PCBU

Under Section 30 of the HSWA, every PCBU must manage risks to health and safety using the hierarchy of controls. Risk assessment is how you identify what risks exist, how serious they are, and what controls to put in place. It is not a one-off exercise — it must be reviewed whenever work changes or an incident occurs.

Step 1 — Identify hazards

A hazard is anything that could cause harm

Walk through your workplace and look for things that could injure or make someone unwell. Involve your workers — they often know the hazards better than anyone. Common categories:

  • Physical: noise, vibration, manual handling, slips and trips, working at height, machinery
  • Chemical: hazardous substances, fumes, dust
  • Biological: infection risks, mould, animal hazards
  • Psychosocial: work-related stress, violence, bullying, fatigue
  • Environmental: heat, cold, UV exposure, confined spaces

Step 2 — Assess the risk

Likelihood × Consequence = Risk level

For each hazard, assess:

  • Likelihood: how likely is it that someone will be harmed? (rare / unlikely / possible / likely / almost certain)
  • Consequence: how serious would the harm be? (minor / moderate / serious / major / catastrophic)

Multiply these to get a risk rating. High-risk combinations require immediate action. Document who could be harmed and how — workers, contractors, visitors, the public.

Step 3 — Apply controls (hierarchy)

1
Eliminate — remove the hazard entirely. Can you change how the work is done so the hazard doesn't exist?
2
Substitute — replace with something less harmful (e.g. a less toxic chemical, lighter equipment).
3
Isolate — physically separate people from the hazard (guards, barriers, restricted access).
4
Engineering controls — modify equipment or the environment (ventilation, noise enclosures, ergonomic equipment).
5
Administrative controls — procedures, training, rotation, permits, supervision.
6
PPE — last resort. Hard hats, gloves, hearing protection, respirators. Must be appropriate, fitted, maintained.

Step 4 — Document and communicate

Record it, share it, review it

Your risk assessment must be documented. Workers must be informed of the hazards relevant to their work and the controls in place. Review your assessment:

  • After any incident or near miss
  • When work processes change
  • When new equipment or substances are introduced
  • At least annually
Source: Health and Safety at Work Act 2015, Section 30. WorkSafe NZ guidance at worksafe.govt.nz. This is general information, not legal advice.

Frequently asked questions

Do I need to document my risk assessment?
Yes. While the HSWA does not specify a particular format, WorkSafe expects PCBUs to be able to demonstrate their risk management process. A written record is essential — it proves you identified the hazard, assessed it, and implemented controls.
How often must risk assessments be reviewed?
At minimum: after any incident or near miss, when work changes, when new hazards are introduced, and at least annually. For high-risk activities, more frequent review is expected.
Does every task need a formal risk assessment?
Not necessarily in a formal written format, but every hazard must be managed. For routine low-risk tasks, a simple documented hazard register may be sufficient. For high-risk work, a formal written risk assessment is expected.
Who should be involved in risk assessment?
Workers must be consulted on health and safety decisions — including risk assessment. They often have the most direct knowledge of what the actual hazards are. Health and Safety Representatives (where they exist) should be involved.

Give your workers instant access to your safety procedures

Workstep lets workers ask safety questions and get answers from your risk assessments, SOPs, and NZ legislation — with exact references, on their phone.

Try Workstep free → Book a 20-minute demo for your team