Working at Height Regulations in Australia: WHS Requirements Across NSW, QLD, and VIC

The Legal Framework Behind Working at Height

Working at height is one of the leading causes of workplace fatalities in Australia. Safe Work Australia data consistently shows falls from height account for around 20 to 25 percent of worker deaths each year, and that figure has remained stubbornly consistent across the past decade.

The legal architecture governing this work sits at two levels. The model Work Health and Safety (WHS) Act and the model WHS Regulations provide the national template. Most states and territories have adopted this model legislation, but adoption is not uniform, and enforcement is entirely state-based. That distinction matters when you are managing compliance obligations across multiple sites or jurisdictions.

This post covers what the regulations actually require, when a Safe Work Method Statement (SWMS) is mandatory, and what non-compliance costs in New South Wales, Queensland, and Victoria.

What the WHS Regulations Require for Working at Height

Under the model WHS Regulations (and their state equivalents), a person conducting a business or undertaking (PCBU) must manage the risk of a fall from one level to another. The threshold that triggers formal risk management obligations is any fall of 2 metres or more.

Below that threshold, the duty to manage risks still exists under the general duty provisions of the WHS Act. The 2-metre mark simply triggers the requirement to apply the hierarchy of controls in a documented and structured way.

The Hierarchy of Controls

Regulation 36 of the model WHS Regulations sets out the order in which controls must be considered. This is not a menu. You must work through the hierarchy in sequence, and you can only move to a lower-order control if the higher-order option is not reasonably practicable.

1. Elimination

The first question is always: can the work be done without anyone going to height? Redesigning a maintenance schedule so that rooftop equipment is serviced from ground level using extended-reach tools, or specifying roof-mounted systems that allow remote monitoring, eliminates the risk entirely. Elimination is the most effective control and should always be the starting point, even when it feels impractical.

2. Substitution

If elimination is not reasonably practicable, consider substituting the activity or method. Using an elevated work platform (EWP) instead of a ladder for a task that previously required roof access is a substitution. The risk still exists, but the exposure is reduced.

3. Engineering Controls

Engineering controls physically change the work environment to prevent falls. Permanent guardrail systems, safety mesh, fixed walkways, and static line systems all fall into this category. These controls do not rely on worker behaviour to function, which is why they sit above administrative controls in the hierarchy.

For most commercial rooftops, engineering controls are the practical baseline. A perimeter guardrail or a horizontal lifeline system installed to AS/NZS 1891.1:2025 standards provides passive or active protection that does not depend on a worker remembering to clip on.

4. Administrative Controls

Administrative controls include procedures, training, permits to work, and supervision arrangements. They do not change the physical environment. A SWMS is an administrative control. Inductions, toolbox talks, and height safety training are administrative controls. They are necessary but insufficient on their own for work at height above 2 metres.

5. Personal Protective Equipment (PPE)

Fall arrest harnesses, lanyards, and self-retracting lifelines are PPE. They are the last line of defence, not the first. The regulations require that PPE be used in conjunction with higher-order controls, not instead of them. A harness clipped to a non-certified anchor point, or used without a compliant static line, may provide a false sense of protection while failing to meet the legal standard.

When Is a SWMS Required?

A Safe Work Method Statement is mandatory for high-risk construction work. Working at height where there is a risk of falling 2 metres or more is explicitly listed as high-risk construction work under Schedule 18 of the model WHS Regulations.

The SWMS must:

• Identify the high-risk construction work being carried out
• Specify the hazards and risks associated with that work
• Describe the control measures that will be applied
• Describe how those controls will be implemented, monitored, and reviewed

A SWMS must be prepared before the work begins. It must be kept at the workplace while the work is being carried out and must be readily accessible to workers and inspectors.

For principal contractors, there is an additional obligation: you must review the SWMS provided by subcontractors and ensure it is appropriate for the site conditions. Receiving a generic SWMS and filing it away does not discharge that duty.

The SWMS requirement applies to construction work. For ongoing facilities management and maintenance on commercial buildings, the obligation shifts to a documented risk assessment and safe work procedure under the general risk management provisions. In practice, many facilities managers apply SWMS-level documentation to routine roof access tasks anyway, and that is a reasonable approach.

State-by-State Enforcement and Penalties

All three states covered here have adopted the model WHS Act and Regulations, but penalties and enforcement culture differ.

New South Wales

Safework NSW administers the Work Health and Safety Act 2011 (NSW). Penalties under that Act are:

• Category 1 (reckless conduct causing death or serious injury): : Up to $3,000,000 for a corporation; up to $600,000 and/or 5 years imprisonment for an individual
• Category 2 (failure to comply with duty exposing a person to risk of death or serious injury): : Up to $1,500,000 for a corporation; up to $300,000 for an individual
• Category 3 (failure to comply with a duty): : Up to $500,000 for a corporation; up to $100,000 for an individual

Safework NSW also has the power to issue improvement notices, prohibition notices, and enforceable undertakings. Prohibition notices can stop work immediately and are commonly issued where inspectors identify uncontrolled fall risks on construction sites.

Queensland

Workplace Health and Safety Queensland (WHSQ) administers the Work Health and Safety Act 2011 (QLD). The penalty structure mirrors the model Act:

• Category 1: : Up to $3,000,000 for a corporation; up to $600,000 and/or 5 years imprisonment for an individual
• Category 2: : Up to $1,500,000 for a corporation; up to $300,000 for an individual
• Category 3: : Up to $500,000 for a corporation; up to $100,000 for an individual

Queensland has historically been active in prosecuting falls from height cases. WHSQ publishes prosecution outcomes on its website, and falls from roofs, scaffolding, and ladders appear regularly in those records. The state also operates a specific falls prevention programme targeting the construction sector.

Victoria

Victoria sits outside the model WHS framework. The state operates under the Occupational Health and Safety Act 2004 (VIC) and the Occupational Health and Safety Regulations 2017 (VIC), administered by WorkSafe Victoria.

The technical requirements for working at height are substantively similar to the model regulations, but the penalty structure and terminology differ. Under the OHS Act 2004:

• Indictable offences (most serious breaches): : Up to $1,817,520 for a body corporate; up to $363,504 and/or 5 years imprisonment for an individual (penalty units are indexed annually)
• Summary offences: : Lower penalty ranges apply depending on the specific provision breached

WorkSafe Victoria is known for active site inspection programmes and has prosecuted numerous falls from height cases resulting in significant fines and, in serious cases, custodial sentences for responsible officers. The Victorian framework places particular emphasis on the duties of designers and manufacturers, which is relevant when specifying roof access systems for new buildings.

Common Compliance Gaps

Across all three jurisdictions, inspectors and auditors repeatedly identify the same failure points:

• Anchor points installed without certification or without evidence of compliance with AS 5532:2025
• Static line systems that have not been load tested or recertified within required intervals
• SWMS documents that do not reflect actual site conditions
• Workers using PPE as the primary control without engineering controls in place
• No documented evidence that the hierarchy of controls was worked through before defaulting to harnesses

The documentation point is worth emphasising. In a prosecution, the question is not only whether the work was done safely on the day. It is whether the PCBU can demonstrate they took all reasonably practicable steps. That demonstration is almost always documentary.

Practical Steps for PCBUs and Contractors

For business owners and safety managers responsible for buildings or construction activities in NSW, QLD, or VIC:

• Conduct a height safety audit of your sites to identify where the hierarchy of controls has not been applied
• Ensure all anchor points and static line systems carry current certification against applicable Australian Standards
• Review your SWMS documents against actual site conditions, not just generic templates
• Confirm that workers performing height work hold the appropriate training and that records are current
• Understand which jurisdiction's legislation applies to each of your sites and check penalty exposure accordingly

The regulatory requirements are not complicated in principle. The hierarchy is logical, the documentation obligations are clear, and the standards that govern installed systems are publicly available. The gap between knowing the requirements and demonstrating compliance in practice is where most organisations run into difficulty.

Height Safety Sydney conducts compliance audits against AS/NZS 1891.1-4:2025 and state WHS regulations for commercial and industrial buildings across Sydney and greater New South Wales. If you are unsure whether your current systems and procedures meet the standard, visit [https://sydney.height-safety.au](https://sydney.height-safety.au) to discuss an audit.