Psychosocial Risk: The Governance Gap Organisations Can No Longer Afford
Psychosocial risk has moved from the periphery of workplace health and safety to the centre of regulatory attention. In Australia, recent legislative changes have placed a positive duty on organisations to proactively manage psychosocial hazards in the workplace. This is no longer a wellbeing initiative. It is a legal obligation, and the governance frameworks required to meet it are still underdeveloped in most organisations.
Psychosocial hazards include work demands that exceed capacity, poor role clarity, inadequate support, bullying, harassment, and the kind of chronic uncertainty that has become a feature of AI-driven workplace transformation. These hazards are real, they are measurable, and when they are not managed, they cause serious harm. They also carry significant legal, financial, and reputational consequences for the organisations that fail to address them.
The governance challenge is that psychosocial risk does not sit neatly within existing frameworks. It is not purely a human resources matter, nor a legal one, nor a leadership development concern. It sits across all of these, which means accountability is frequently diffuse and action is frequently delayed. Organisations that manage psychosocial risk well are those that have resolved that ambiguity deliberately, assigning clear ownership, building systematic identification and reporting processes, and ensuring that leadership at every level understands their obligations.
What effective governance in this space looks like is not complicated, but it does require discipline. It requires regular risk assessment processes that go beyond annual surveys. It requires leaders who are trained to recognise psychosocial hazards and empowered to act on them. It requires reporting mechanisms that surface risk before it becomes harm, and accountability structures that ensure identified risks are actually addressed rather than documented and set aside.
AI introduces additional complexity into this picture. The pace of change, the uncertainty about roles, the always-on connectivity, and the shift in how performance is monitored all create psychosocial hazards that existing frameworks were not designed to capture. Organisations adopting AI without considering its psychosocial impact are not just missing a governance obligation. They are creating one.
The organisations that will manage this well are those that treat psychosocial risk with the same seriousness they bring to physical safety and financial risk. The legal framework now requires it. The human cost has always demanded it.
