Managing reports of bullying

Guidance on how employers should respond to reports of harmful behaviour such as bullying.

Your duty

Employers have a duty to review and, if necessary, revise the risk controls in place when certain circumstances occur. This includes when an employee, or a person on their behalf, reports a psychological injury or psychosocial hazard to the employer.

For more information, see Part 3, Step 4 of the Psychological health compliance code.

Reporting of bullying

Employees may not report bullying because of the following reasons.

  • It’s seen as ‘part of the job’ or work culture and they think nothing can be done about it.
  • The reporting process is unclear, time-consuming or complicated.
  • They believe the behaviour is not serious enough to report.
  • The workplace culture is to ‘get on with it’ or reporting is discouraged.
  • They don’t understand what is and isn’t reportable.
  • They think reports:
    • will be ignored
    • won’t be taken seriously
    • won’t be handled respectfully and confidentially.
  • They fear they will be blamed, or that reporting may lead to more harm, discrimination or disadvantage. This may include losing their job or shifts.
  • A respondent (the alleged perpetrator) may have organisational power over them. For example, a manager or supervisor.
  • They may have reported it in the past. Nothing happened to stop the behaviour or they felt victimised, so they don’t want to report again.

Employees who experience or witness bullying should be:

  • encouraged to report
  • provided with guidance, information and support. 

Employers can encourage employees to report bullying by doing the following.

  • Regularly discussing and communicating with employees about psychosocial hazards, including bullying.
  • Providing various options for protected or confidential reporting. This includes circumstances where the report involves a:
    • direct manager 
    • member of the senior management team.
  • Making the system and process for reporting and responding transparent and accessible. Including information about who will be notified of the report.
  • Responding to all reports of bullying in a timely, consistent and effective manner. Taking appropriate actions to control any associated risks.
  • Making it clear that victimising those who make reports is unacceptable.
  • Providing training to employees on all the ways a report can be made.
  • Providing training to supervisors and managers on how to respond appropriately to informal and formal reports of psychosocial hazards and incidents, including bullying.
  • Documenting in policies and procedures the system of work for reporting and responding to psychosocial hazards and incidents, including bullying.

Ways to report

Employers should provide options for reporting that:

  • suit the organisation’s size and circumstances
  • are proportional to the risks in the organisation. For example, where the nature of the work means employees are more likely to be exposed to psychosocial hazards, including bullying, a formal reporting system may be required.

In a small organisation, options for reporting may include the following.

  • Reporting bullying directly to:
    • a supervisor
    • alternative contacts in management
    • any health and safety representatives (HSRs)
    • another appointed designated contact person who is trusted and appropriately qualified within the organisation.
  • An alternative reporting option for employees who do not feel comfortable reporting directly to a supervisor. For example, a locked box or anonymous digital form for making confidential reports.
  • External reporting options, especially where:

    • internal escalation is not possible
    • internal employees do not have the time, resourcing or qualifications to manage reports.

    For example, an external human resources (HR), industrial relations or legal consultant engaged by the organisation.

A large organisation should have a formal incident reporting system for reporting psychosocial hazards and incidents, including bullying. All employees should be able to access and understand how to use the system.

Bullying may also be reported through HR systems as a grievance or breach of a code of conduct. Where bullying is investigated and responded to through these systems, the employer should still follow a risk management approach to:

  • identify hazards
  • assess and control risks
  • review and revise risk control measures.

Harmful behaviours may involve unlawful discrimination or victimisation, which is not considered bullying. Discrimination and victimisation may be unlawful under laws such as the Equal Opportunity Act 2010, Fair Work Act 2009 and workplace relations or human rights laws.

Discrimination is where an individual is treated poorly or unfairly because of a personal attribute or characteristic that is protected by law.

Victimisation is where an individual is treated poorly or unfairly because:

  • they have made a complaint about discrimination, sexual harassment or vilification
  • it is believed they will make a complaint
  • they have helped another individual to make a complaint.

Ensure confidentiality where possible

Employees are more likely to report bullying if they feel safe to do so. Part of this may be knowing that it will be kept confidential where possible. A lack of confidentiality can mean employees may not trust the reporting and response process.

Employers should carefully balance confidentiality with issues of transparency.

Measures to limit breaches of confidentiality may include the following.

  • Ensuring the security of files, correspondence or documents about a report or investigation. For example:
    • viewing files at an appropriate location or time
    • protecting files with passwords
    • marking meeting invitations as private.
  • Having conversations in private spaces.
  • Only engaging third parties and disclosing sensitive or private information if this is essential.
  • Instructing involved parties to maintain confidentiality about the complaint. This includes how they should do this. For example, telling them who they should and should not speak to about the matter.
  • Ensuring that any organisational reporting on bullying is appropriately de-identified.

The parties involved should still be able to access support for confidential reports. For example, through:

  • using the Employee Assistance Program (EAP)
  • involving the union
  • bringing a support person to meetings.

An employer must still manage any psychosocial risks associated with a confidential report. For example, data from bullying complaints may uncover cultural or structural issues in the organisation that show other psychosocial hazards are present. In this case, de-identified reporting of themes may be needed to manage these other psychosocial hazards.

An organisation’s policy and procedures should explain:

  • the steps employers will take to ensure confidentiality
  • any limits that may apply when it comes to ensuring the transparency, procedural fairness and accountability of the response process.

Having measures in place to ensure transparency helps to inform the parties involved about the handling of the report. Measures to enhance transparency may include the following.

  • Clearly defining who will have access to the information the employee provides.
  • What information may be available to parties involved, including the respondent, to ensure procedural justice.
  • The steps and estimated timeframes for responding to, resolving or investigating the report.
  • Providing relevant parties with progress updates and explanations for delays.
  • The name and details of a point of contact for any queries.
  • Detailing the actions taken and reasons for the decisions.
  • The review options available for involved parties. Any associated limitations of these options.

Employers may need to disclose confidential information:

  • to investigate whether the risks are being controlled so far as is reasonably practicable
  • where there is an immediate risk to health and safety; for example:
    • a direct and serious threat of harm
    • a threat of self-harm or suicide
  • where required by law.

For more information on managing reports of psychosocial hazards and incidents, see Part 4 of the Psychological health compliance code.

Responding to reports of bullying

Further information