Burnout Is a Signal, Not a Baseline — And Psychosocial Risk Law Is Catching Up.

THE BUSINESS PSYCHOLOGIST · GOOD WORK, GOOD MENTAL HEALTH

When a fire alarm keeps going off, we don't learn to live with the noise.

We find the source.

Somehow, with burnout, we did the opposite.

We got better at managing it. Better at absorbing it. Better at quietly building it into our expectations of what work looks like. We started listing 'supportive culture' in job ads as a point of difference — as if not systematically exhausting your people was a feature worth advertising.

Burnout became background noise. And in doing that, we missed what it was trying to tell us the whole time.

Burnout is a signal. A specific, diagnostic signal that something in the conditions of your organisation has already failed. Not a character flaw in the person experiencing it. Not an inevitable cost of ambitious work. A signal.

The World Health Organisation said so in 2019. The law — in most Australian jurisdictions — has been saying so for years. And yet most organisations are still responding to the person, not the system producing the symptom.

This is what burnout is actually telling you. And what, depending on where your business operates, the law now requires you to do about it.

What the WHO Actually Said about Burnout — and What We Did With It

In 2019, the World Health Organisation classified burnout in the ICD-11 — the international classification of diseases — as an occupational phenomenon. Not a medical condition. Not a personal failing. An occupational phenomenon.

The definition is precise: burnout results from chronic workplace stress that has not been successfully managed. Three dimensions — exhaustion, cynicism and mental distance from one's job, and reduced professional efficacy.

The source is the conditions of work. The unit of intervention is the system, not the individual.

Read that definition again. It says stress that has not been successfully managed. It does not say stress that the individual failed to manage. That distinction is everything — and we've spent seven years ignoring it.

Somewhere between 2019 and every wellbeing webinar that followed, 'managing' workplace stress became the individual's responsibility. Build resilience. Practise mindfulness. Use the EAP. The WHO handed us a diagnostic framework and pointed at the system. We took that framework and handed it back to the person.

The WHO handed us a diagnostic map. They said: look at the workplace, not the person. Find the fault in the building, not the occupant who noticed the smoke.

And the intervention industry responded by handing out earplugs.

Resilience training. Wellbeing webinars. EAP contracts filed somewhere in a shared drive. All of them addressed to the person. None of them addressed to the conditions that put that person in the room.

I say this as a psychologist. Individual support matters — deeply. Therapy helps.

But it doesn't fix a broken system. It helps people survive one. And in 2026, those are not the same thing — strategically or legally.

Where Australian Law Actually Sits for Psychosocial Risk— State by State

There's been significant confusion — and some genuinely misleading marketing — about what's changing and when. Let me be precise, because precision matters here, and your audience of WHS professionals, founders, and managing partners will notice when it's missing.

New South Wales — 1 July 2026

The duty to manage psychosocial risks in NSW has existed since October 2022. That is not what changes on 1 July.

What changes is Section 26A of the Work Health and Safety Act 2011 — a provision that transforms the legal status of every approved Code of Practice in NSW, including the Code of Practice: Managing Psychosocial Hazards at Work.

Until 1 July: the Code was guidance. Strong evidence of what a careful employer should have done — but not a benchmark an inspector could point to directly.

From 1 July: the Code becomes an enforceable compliance benchmark in its own right. A PCBU must either follow the Code or demonstrate they are managing the relevant hazards to an equivalent or higher standard. The duty to manage psychosocial risks was already there — what changes is how an inspector measures whether you've met it.

The burden of proof has shifted. And the enforcement environment has changed alongside it — SafeWork NSW announced 51 additional inspectors in March 2026, 20 of whom are specifically dedicated to psychosocial hazard enforcement. Unions can now also initiate civil penalty proceedings for WHS breaches, a right that commenced 1 March 2026.

Queensland — Already There. Since 2018.

This is the part that tends to surprise QLD business owners.

Queensland has had codes of practice as enforceable benchmarks since 1 July 2018. Not guidance. Not strong evidence. Enforceable. The same rule that NSW is moving to on 1 July — QLD has had for eight years.

Queensland's framework is widely regarded as the most prescriptive of the harmonised jurisdictions. The hierarchy of controls is explicitly required for psychosocial hazards. WorkSafe Queensland has integrated psychosocial checks into inspection and audit checklists. The expectation is documented rationale for the controls chosen — not a policy, not a training record, not an EAP contract.

If you're a QLD business owner reading about 1 July in NSW and thinking 'I should probably get onto this' — the more accurate thought is: 'I've been behind since 2018, and enforcement has been ramping up while I've been watching NSW.'

WorkSafe Queensland data from the 2024–25 annual report: 3,633 primary mental injury claims accepted — an 8% increase from the previous year. The average statutory claim cost for a mental injury is $23,600, compared to $13,000 for a physical injury. The financial case for getting this right is not abstract.

Victoria — From 1 December 2025

Victoria sat outside the national harmonised WHS framework and, until December 2025, was the only jurisdiction without explicit psychosocial regulations. The Occupational Health and Safety (Psychological Health) Regulations 2025 changed that.

A notable feature of the Victorian framework: training and information cannot be used as the sole control measure. If you're a Victorian business whose psychosocial risk strategy is a mental health awareness session, that approach is now explicitly insufficient under the regulations.

Everywhere Else

South Australia, Tasmania, the ACT, Western Australia, and the Northern Territory all operate under the harmonised WHS framework and have psychosocial risk duties in place. The detail varies — Western Australia and Tasmania, for example, have not amended their regulations to explicitly mandate the hierarchy of controls in the same way as QLD and NSW. But the primary duty to manage psychosocial risks exists in every jurisdiction.

The symptoms showing up in your organisation — the exhaustion, the disengagement, the quiet exits — do not check which state issued your ABN before they arrive.

Why SMBs Are the Most Exposed Group

Large organisations have WHS teams, legal counsel, and in many cases have been working toward psychosocial compliance for years. Small and medium businesses have been trying — and often falling short — not because they don't care, but because the tools and frameworks were built for organisations much bigger than they are.

A 2025 QUT study of 288 Australian SME decision-makers identified six specific barriers to psychosocial compliance in smaller organisations: awareness gaps, knowledge gaps, capability gaps, design mismatches, structural gaps, and decision paralysis. Every barrier leads to the same outcome — an organisation that has done something, but not the right thing, and doesn't know the difference.

An EAP is not a psychosocial control. A wellbeing day is not hazard management. A policy sitting in a shared drive is not evidence of a functioning system. In every jurisdiction, these measures can form part of a control suite — but only as lower-order controls, and only where higher- order controls have already been applied or genuinely aren't practicable.

For most small and medium businesses, this is a significant gap between where they currently are and where the law requires them to be — regardless of state.

What Burnout Is Actually Telling You

Here's the framework I use when I'm working with an organisation and burnout is showing up in the team.

Burnout has three dimensions under the WHO classification: exhaustion, cynicism, and reduced efficacy. Most people understand these as symptoms that accumulate over time. What's less well understood is that each dimension maps directly onto a different layer of conditions in the workplace.

Exhaustion — the psychosocial safety layer

When people are chronically exhausted, the conditions producing that exhaustion are almost always structural. Work demand is too high. Recovery is never built in. Roles are poorly designed. Hazards — including job demands, low control, and poor role clarity — are present and unmanaged.

Psychosocial safety is about the structural layer: how work is designed, how hazards are identified and controlled, whether people have the resources to match the demands placed on them. When this layer is failing, exhaustion is the output.

Cynicism — the psychological safety layer

Cynicism doesn't usually arrive as a sudden attitude shift. It's learned. It develops in environments where speaking up doesn't lead anywhere, where problems are flagged and ignored, where the informal message is that silence is safer than honesty.

Psychological safety — the team-level climate where people believe they can speak up without penalty — is the early warning system of a healthy organisation. When it's absent, problems stop being surfaced. They compound quietly. Which feeds exhaustion. Which deepens cynicism.

Reduced efficacy — the psychological contract layer

The third dimension is the most subtle. Reduced efficacy — the sense that effort doesn't matter, that contribution isn't recognised, that there's no point — often signals a fractured psychological contract.

The psychological contract is the implicit agreement between employer and employee: the unspoken expectations about fairness, reciprocity, trust, and recognition. When that contract breaks — through poor organisational justice, through effort unrewarded, through leadership absent when it matters — people don't always leave. Often they stay, and quietly stop giving anything beyond the minimum.

Why the three dimensions compound — and why that matters

These three layers don't just exist in parallel. They cause each other.

The fire alarm goes off — exhaustion shows up, someone goes quiet, performance drops. Instead of looking at the conditions, the organisation hands the person an EAP and tells them to be more resilient. The source stays exactly as it was.

Because nothing changes, people stop speaking up. Why would you raise a problem if the last signal was ignored — or turned back on you? Psychological safety erodes. Cynicism sets in. The early warning system goes dark precisely when it's needed most.

And then — and this is the part that doesn't get named enough — the grief arrives.

Not just frustration or disengagement. Grief. Because the implicit deal was: I give my effort, my loyalty, my full self to this place — and in return I'm treated with fairness, dignity, recognition. When that deal breaks, and then the person is told the problem is their inability to cope — that's not just a contract breach. That's betrayal on top of breach.

Reduced efficacy isn't laziness or attitude. It's what happens when someone has grieved the contract and stopped believing their effort changes anything.

This is the sequence most organisations never see — because by the time reduced efficacy shows up visibly, the first two stages have already been quietly running for months. Often years.

Burnout isn't what you get when all three of these are breaking down simultaneously. It's what three separate system failures look like, landing in the same person at the same time. Which is why treating it at the individual level misses the point almost every time.

The person showing the symptoms is the evidence that something in the system has already failed. The question is which part — and what to do about it.

What the Law Now Requires

Across the harmonised jurisdictions, the framework is consistent: identify reasonably foreseeable psychosocial hazards, assess the risks they give rise to, implement control measures using the hierarchy of controls — starting with elimination and substitution, not policies and training — consult with workers throughout, review controls regularly, and document the process.

The detail varies by state. In NSW, the Code's legal status upgrades on 1 July. In QLD, that upgrade happened in 2018. In Victoria, the new regulations commenced December 2025 and explicitly prohibit training as a sole control. Everywhere, the direction is the same: higher-order controls, documented rationale, active systems — not administrative measures alone.

For small and medium businesses whose psychosocial risk strategy currently consists of a policy and an EAP, this represents a real gap. In most jurisdictions, that gap is already enforceable.

What This Means in Practice

I work with small and medium businesses — professional services firms, allied health practices, legal and advisory teams — on exactly this kind of assessment. The Psychosocial Risk & Protection Review is built around what the legislation and codes actually require: structured identification of hazards, validated diagnostic tools, document and policy review, staff consultation, and formal written findings that give you a defensible picture of your organisation's risk.

It's not a survey with a traffic light at the end. It's the work a registered psychologist does when they're looking at the actual conditions — not just asking people whether they feel supported.

The Foundation tier is designed specifically for smaller organisations: 1 to 8 professionals, a first formal assessment, clarity on what the highest-priority risks are and a practical 90-day action plan for addressing them.

The starting point is a free 30-minute Discovery Call. No commitment. Just a clear conversation about where your organisation sits and what makes sense as a next step.

The question isn't whether you need to manage psychosocial risk. You do — and you have for some time, regardless of which state you're in. The question is whether what you currently have in place is proportionate to what the law now requires you to evidence.

If you're not sure, that's worth finding out.

GET IN TOUCH

Book a free 30-minute Discovery Call, or send an enquiry and I'll respond within two business days.

mindlogistics.com.au/workplace-psychology-services/psychosocial-risk-protection-review