Your duty
Employers have a duty to review and, if necessary, revise the risk controls in place when certain circumstances occur. This includes when an employee, or a person on their behalf, reports a psychological injury or psychosocial hazard to the employer.
For more information, see Part 3, Step 4 of the Psychological health compliance code.
Reporting of bullying
Employees may not report bullying because of the following reasons.
- It’s seen as ‘part of the job’ or work culture and they think nothing can be done about it.
- The reporting process is unclear, time-consuming or complicated.
- They believe the behaviour is not serious enough to report.
- The workplace culture is to ‘get on with it’ or reporting is discouraged.
- They don’t understand what is and isn’t reportable.
- They think reports:
- will be ignored
- won’t be taken seriously
- won’t be handled respectfully and confidentially.
- They fear they will be blamed, or that reporting may lead to more harm, discrimination or disadvantage. This may include losing their job or shifts.
- A respondent (the alleged perpetrator) may have organisational power over them. For example, a manager or supervisor.
- They may have reported it in the past. Nothing happened to stop the behaviour or they felt victimised, so they don’t want to report again.
Employees who experience or witness bullying should be:
- encouraged to report
- provided with guidance, information and support.
Employers can encourage employees to report bullying by doing the following.
- Regularly discussing and communicating with employees about psychosocial hazards, including bullying.
- Providing various options for protected or confidential reporting. This includes circumstances where the report involves a:
- direct manager
- member of the senior management team.
- Making the system and process for reporting and responding transparent and accessible. Including information about who will be notified of the report.
- Responding to all reports of bullying in a timely, consistent and effective manner. Taking appropriate actions to control any associated risks.
- Making it clear that victimising those who make reports is unacceptable.
- Providing training to employees on all the ways a report can be made.
- Providing training to supervisors and managers on how to respond appropriately to informal and formal reports of psychosocial hazards and incidents, including bullying.
- Documenting in policies and procedures the system of work for reporting and responding to psychosocial hazards and incidents, including bullying.
Ways to report
Employers should provide options for reporting that:
- suit the organisation’s size and circumstances
- are proportional to the risks in the organisation. For example, where the nature of the work means employees are more likely to be exposed to psychosocial hazards, including bullying, a formal reporting system may be required.
In a small organisation, options for reporting may include the following.
- Reporting bullying directly to:
- a supervisor
- alternative contacts in management
- any health and safety representatives (HSRs)
- another appointed designated contact person who is trusted and appropriately qualified within the organisation.
- An alternative reporting option for employees who do not feel comfortable reporting directly to a supervisor. For example, a locked box or anonymous digital form for making confidential reports.
-
External reporting options, especially where:
- internal escalation is not possible
- internal employees do not have the time, resourcing or qualifications to manage reports.
For example, an external human resources (HR), industrial relations or legal consultant engaged by the organisation.
A large organisation should have a formal incident reporting system for reporting psychosocial hazards and incidents, including bullying. All employees should be able to access and understand how to use the system.
Bullying may also be reported through HR systems as a grievance or breach of a code of conduct. Where bullying is investigated and responded to through these systems, the employer should still follow a risk management approach to:
- identify hazards
- assess and control risks
- review and revise risk control measures.
Harmful behaviours may involve unlawful discrimination or victimisation, which is not considered bullying. Discrimination and victimisation may be unlawful under laws such as the Equal Opportunity Act 2010, Fair Work Act 2009 and workplace relations or human rights laws.
Discrimination is where an individual is treated poorly or unfairly because of a personal attribute or characteristic that is protected by law.
Victimisation is where an individual is treated poorly or unfairly because:
- they have made a complaint about discrimination, sexual harassment or vilification
- it is believed they will make a complaint
- they have helped another individual to make a complaint.
Ensure confidentiality where possible
Employees are more likely to report bullying if they feel safe to do so. Part of this may be knowing that it will be kept confidential where possible. A lack of confidentiality can mean employees may not trust the reporting and response process.
Employers should carefully balance confidentiality with issues of transparency.
Measures to limit breaches of confidentiality may include the following.
- Ensuring the security of files, correspondence or documents about a report or investigation. For example:
- viewing files at an appropriate location or time
- protecting files with passwords
- marking meeting invitations as private.
- Having conversations in private spaces.
- Only engaging third parties and disclosing sensitive or private information if this is essential.
- Instructing involved parties to maintain confidentiality about the complaint. This includes how they should do this. For example, telling them who they should and should not speak to about the matter.
- Ensuring that any organisational reporting on bullying is appropriately de-identified.
The parties involved should still be able to access support for confidential reports. For example, through:
- using the Employee Assistance Program (EAP)
- involving the union
- bringing a support person to meetings.
An employer must still manage any psychosocial risks associated with a confidential report. For example, data from bullying complaints may uncover cultural or structural issues in the organisation that show other psychosocial hazards are present. In this case, de-identified reporting of themes may be needed to manage these other psychosocial hazards.
An organisation’s policy and procedures should explain:
- the steps employers will take to ensure confidentiality
- any limits that may apply when it comes to ensuring the transparency, procedural fairness and accountability of the response process.
Having measures in place to ensure transparency helps to inform the parties involved about the handling of the report. Measures to enhance transparency may include the following.
- Clearly defining who will have access to the information the employee provides.
- What information may be available to parties involved, including the respondent, to ensure procedural justice.
- The steps and estimated timeframes for responding to, resolving or investigating the report.
- Providing relevant parties with progress updates and explanations for delays.
- The name and details of a point of contact for any queries.
- Detailing the actions taken and reasons for the decisions.
- The review options available for involved parties. Any associated limitations of these options.
Employers may need to disclose confidential information:
- to investigate whether the risks are being controlled so far as is reasonably practicable
- where there is an immediate risk to health and safety; for example:
- a direct and serious threat of harm
- a threat of self-harm or suicide
- where required by law.
For more information on managing reports of psychosocial hazards and incidents, see Part 4 of the Psychological health compliance code.
Part 4 – Managing reports of psychosocial hazards and incidents
Responding to reports of bullying
Employers should always respond quickly and appropriately to reports of bullying.
Contact police on Triple Zero (000) when:
- someone is in immediate danger
- a crime is in progress
- you need immediate police attendance.
For non-urgent incidents or to report a crime that has already occurred:
- call the Police Assistance Line on 131 444 (available 24 hours a day, 7 days a week)
- submit an online report at online reporting.police.vic.gov.au
- contact your nearest police station.
Referring a matter to police does not mean that employers take no internal action. Any report of bullying in the working environment is an occupational health and safety (OHS) matter, whether the police are contacted or not.
Employers should have a clear system in place to respond to reports of bullying. This should address the following factors.
- Immediate safety issues or interim risk controls for ongoing risks in the working environment, including at work-related events. For example, considering alternative duties for relevant parties when required.
- Psychological support for all involved parties.
- Internal reporting and investigation.
- How to implement investigation outcomes in a timely manner.
- Notifications required to external agencies such as:
- Child Protection
- WorkSafe Victoria.
Employers must consult with employees and any HSRs when developing policies and procedures for preventing and managing bullying. These should include:
- reporting procedures and investigating incidents
- guidelines on when to call the police, ambulance or other external services
- possible sanctions and actions against respondents
- testing and maintaining of communication systems and duress equipment
- employee supervision and monitoring
- guidelines for managers/supervisors on how to:
- provide options for immediate psychological support
- develop a plan and options for ongoing support
- guidelines for reviewing patients or clients who display harmful behaviours, such as bullying.
Employers should provide training for anyone who may handle a report of bullying. This includes:
- managers
- supervisors
- HSRs
- union delegates
- other nominated people in the working environment, such as contact officers.
This will help to ensure that affected employees are not harmed further.
Reasonable management action or performance processes carried out in a reasonable manner is not bullying. An employee who participates in a performance process may experience a reasonable negative psychological response. Employers should still implement interim risk controls during a bullying investigation to eliminate or reduce the immediate risk of harm for employees involved.
It is important that performance and conduct management processes are carried out in a fair, supportive and reasonable way.
For more information on reasonable management action and how to manage underperformance lawfully and safely, see the Fair Work Ombudsman’s Managing underperformance best practice guide.
Responding to reports of bullying is an important step in the risk management process.
Examining a report of bullying will usually require the following approach.
Initial assessment
Complaints should be triaged through a desktop assessment of their content.
There should be an initial assessment of the allegations to determine if the report meets the definition of bullying.
It is common for initial bullying reports to not meet the full definition. They may describe disagreements, interpersonal conflict or management action that may meet the definition of other psychosocial hazards such as:
- poor workplace relationships
- high job demands.
If the complaint meets the definition of a different psychosocial hazard, it should be referred for further review or investigation as required.
Type of response
If bullying is identified, the duty holder should decide on the appropriate response.
Workplace bullying reports that are of a serious or complex nature should always be investigated. All reports should be taken seriously and assessed on their merits and facts.
Consider the following points that can show the seriousness or complexity of the report. They may set useful thresholds for when an investigation or review is necessary.
- The nature of the hazards or incidents. For example, were incidents extremely serious or dangerous?
- The level of risk involved. For example, is the respondent in a managerial or high-level role? Is the employee who is lodging the report a vulnerable worker?
- The complexity of the situation. For example, the complexity may be increased if:
- the reports involve senior managers
- there have been no previous actions put in place to resolve the matter
- the allegations are being disputed
- the report includes examples that cover a long period of time.
- Any repeated exposure to incidents of a similar nature. For example, if there is a cluster of reports or allegations made about a single individual.
- The number of employees involved or affected. For example, if multiple employees are involved or affected.
- Other people involved, such as clients, customers, patients or students.
- For larger employers, whether an organisational response is required to manage the risk in a systematic way across multiple work sites or locations.
In some organisations, psychosocial hazards, such as bullying, may be reported frequently, due to the nature of the work. The employer should put processes in place to consider all reports.
For example, this may include reviewing reports of bullying perpetrated by a particular client, patient, student or parent together. This may:
- reduce the administrative load for an organisation
- help employers to assess if there is new information about risks in the working environment
- highlight if risk controls need to be revised.
Investigation scope and process
Once an employeer has decided that an investigation is needed, they should establish the scope and process. This includes the following.
-
Who will do the investigation. This should be someone who:
- is unbiased
- has experience or knowledge in dealing with workplace bullying matters
- will maintain focus within the scope of their investigation.
For example, an internal party may be suitable if they do not know the involved parties and are suitably qualified. In small workplaces where there may be perceived or actual conflicts of interest, it may be best to appoint an external investigator.
In many workplaces, this appointed person may come from Human Resources (HR). In this case, the HR and OHS teams should work closely together to:
- share appropriate information
- identify all psychosocial hazards
- control any associated risks.
-
The scope of the investigation. This includes:
- the allegations or behaviours that are being investigated
- what the investigation seeks to achieve.
Multiple coordinated investigations may be needed for different purposes. For example:
- a security investigation when a security breach is identified
- a conduct investigation into employee behaviour
- an OHS investigation to consider psychosocial hazards that may be interacting to increase the risk of bullying.
If multiple coordinated investigations are required, employers should consider opportunities to reduce the need for employees to retell their story, to minimise further harm. For example, considering whether there are opportunities to do a single interview and share information with other relevant parties, with the individual’s consent.
-
How the investigation will be conducted. This includes:
- likely timeframes
- the communication of outcomes; for example, in an investigation report.
Investigation reports generally will outline:
- what was investigated
- the process that was used
- all relevant evidence, including any witnesses interviewed
- if any claims were substantiated and any recommendations made on this basis.
- Investigation findings. At the end of an investigation, all parties involved should be told of the findings. If a report is substantiated or recommendations are made, actions taken by the organisation must be consistent with relevant policies and procedures. This is important for:
- managing specific risk that may relate to individuals
- maintaining organisational justice
- ensuring there is no further harm caused.
An investigation of a report of bullying should have the following characteristics.
- It is done in a fair, timely and transparent way.
- All parties are engaged and supported throughout the process. For example:
- providing regular progress communications or check-ins with involved parties
- offering EAP details to all involved parties once a report is made or at the outset of an investigation
- offering to have a support person present at interviews or meetings. This might be an HSR, a peer or a union representative.
- There is neutrality, impartiality and procedural fairness. For example:
- all reports should be treated as allegations until otherwise substantiated
- respondents must be provided with allegations so they can explain their version of events
- the person making the report should be respectfully listened to and treated as credible
- there should be opportunities to review decisions
- the investigating party must not be directly involved in the allegations or have a personal relationship with anyone involved.
- Investigators use a trauma-informed process, so interviewees do not have to repeat their story. This can help to minimise further harm to those involved.
- The investigator is impartial, with the appropriate expertise and skills. They may also:
- be trained in trauma-informed interviewing techniques
- have expertise in psychosocial risk management.
- The investigation outlines how sensitive information will be handled. This includes issues of privacy and confidentiality. Confidentiality should be protected as much as possible. Only people directly involved in the complaint or with resolving it should know details of the matter.
- The investigation identifies and manages any ongoing physical and psychological risks in the working environment. For example, serious allegations may warrant an individual to be stood down. In this case, the employer should maintain contact with the employee who has been stood down to:
- provide support and wellbeing monitoring
- answer questions and provide clarity
- manage expectations about the investigation process.
- There are proper records of the investigation.
What is a trauma-informed approach?
A trauma-informed approach focuses on wellbeing and safety to help prevent any further harm. It recognises that:
- Employees may have experienced trauma or been exposed to traumatic events or content.
- Trauma can affect people in many ways. For example, how an employee recalls and describes events.
- Any investigation needs to be done in a way that prevents further psychological harm. For example, there is a risk of further harm if employees must explain what happened multiple times.
Reviewing risk controls
Following a review or an investigation, employers should use the findings, themes and any other relevant information to:
- review risk controls
- if necessary, revise risk controls.
An OHS response to a report of bullying should include the following.
- Identifying whether any other psychosocial hazards are present.
- Identifying if there is any new or additional information available about bullying.
- Assessing associated risks, including:
- if new or additional information changes the risk
- if so, how the risk has changed.
- Reviewing existing risk controls, including their effectiveness.
- Revising risk controls to eliminate or reduce the risk where necessary.
- Monitoring the implemented risk controls following the review or investigation.
- Monitoring trends in reporting data for bullying and any related hazards. This includes across multiple sites where relevant.
The review or investigation should also check whether the risk controls available to employees were used and effective. For example:
- Did recruitment processes help to identify candidates with a history of harmful behaviour? For example, reference checks or psychological pre-employment screening.
-
For students, clients, patients or residents engaging in disrespectful behaviours, was a:
- risk assessment completed?
- management or support plan developed and/or reviewed?
If a manager was present and saw the behaviour, did they intervene appropriately at the time? If available risk controls were not used, consider why.
The OHS review or investigation should avoid placing blame on individuals. Instead, consider the reasons the risk controls may not have been used or effective. For example:
- A team had a high workload and needed to quickly backfill vacant roles. This meant that recruiters had to choose candidates:
- with mediocre references
- who were a poor organisational fit.
- A risk assessment and management or support plan was not created, reviewed and/or updated due to the high job demands of employees who reported having insufficient time to do so.
- Management did not intervene as they:
- were unsure how to manage the situation
- had not received active bystander intervention training or training on how to respond to a report of bullying.
Any relevant findings should be implemented to help control the risk. See Step 3: control risks for more information.
Employers should document and communicate the outcomes of a review or an investigation to all appropriate parties, to the extent that it is necessary and consistent with confidentiality obligations. This may include:
- involved employees
- relevant supervisors or managers, where appropriate
- relevant representatives from HR and OHS teams.
An employer must give an HSR access to information they have about:
- relevant hazards
- the health and safety of people the HSR represents.
This does not include access to:
- medical information
- details of reports or allegations
- information on the specifics of complainants, witnesses or respondents.
Outcomes of a bullying investigation will vary according to the nature of the situation. Following a report of bullying, you must review and revise risk control measures. You may also need to take action at the individual level.
Review and revise organisational-level risk controls
- Complete a psychosocial risk assessment for the affected work area to:
- identify psychosocial hazards and risks
- review and implement additional risk controls where required. See Step 3: control risks for more information.
- Ensure ongoing monitoring of the affected work group.
Take action at the individual level
- Direct an employee to stop the behaviour.
- Provide a verbal or written warning.
- Invite an apology.
- Provide mediation or another dispute resolution process.
- Coach, counsel and/or mentor an employee or employees. For example, training sessions with follow-up coaching sessions that focus on:
- communication skills
- conflict management
- interpersonal skills
- respectful behaviours
- bystander intervention.
- Use disciplinary action subject to workplace relations laws.
If an investigation finds that bullying did not occur, outcomes should still recommend further actions to address the situation. This may include mediation, counselling or changing working arrangements.
A report of bullying that is found to be false and intended to cause harm is known as a vexatious report. If a report of bullying is found to be vexatious, disciplinary action or counselling may be considered against the person who made the report, in line with the employer’s policies on misconduct.
An employee may wish to contact other agencies about a report of bullying. When dealing with the report and discussing referral options, employers and other employees should respect:
- what the affected employee wants to happen
- how the affected employee would like to manage the matter.
If the affected employee wishes, it may be appropriate for them to contact:
- WorkSafe Victoria Advisory
- Victoria Police for matters that may be criminal offences
- Fair Work Commission.