Quick answer: WHS records must be kept for the period required by the law or, where the law is silent, for long enough to prove compliance and manage risk. The most common retention issue is notifiable incident records, which must be kept for at least five years.
Last reviewed: March 2026 by the BlueSafe Technical Team. Reflects current Australian WHS laws and regulations.
Record keeping is part of the safety system, not an admin afterthought. If a business cannot show what was done, when it was done, and who did it, it becomes much harder to prove compliance after an inspection, dispute, or incident.
Why does WHS record keeping matter?
WHS records do three jobs. They prove what decisions were made, they help the business track safety over time, and they give the PCBU and officers evidence that their legal duties were actively managed.
Good records help with:
- inspections and regulator requests;
- incident investigations;
- workers compensation and insurance matters;
- contractor management;
- trend analysis and continuous improvement;
- due diligence evidence for officers.
If the record exists, the business can point to something concrete. If it does not, the business is left relying on memory.
What WHS records must be kept?
The exact records depend on the type of work, but most businesses need a core set of records at all times.
| Record type | Minimum retention period | Why it matters |
|---|---|---|
| Notifiable incident records | At least 5 years | Proves the incident was notified and managed correctly |
| SWMS | For the duration of the work, with longer retention recommended | Shows how high-risk work was controlled |
| Risk assessments | Recommended at least 5 years | Supports due diligence and review history |
| Training and induction records | Recommended at least 5 years | Proves workers were trained and informed |
| Plant inspection and maintenance records | Life of the plant or as long as the plant is used | Demonstrates plant is being maintained safely |
| Hazardous chemical registers and SDS | While in use, and retained after removal where required | Supports chemical safety and exposure management |
| Consultation records and toolbox talks | Recommended at least 2-5 years | Shows workers were consulted on safety matters |
| Incident investigations | Recommended at least 5 years | Shows root causes and corrective actions were addressed |
| Contractor induction records | Recommended at least 5 years | Demonstrates contractor control and site access management |
| Health monitoring records | Long periods often apply, including jurisdiction-specific retention rules | Needed for exposures such as noise, asbestos, or chemicals |
The table shows the general position. The best practice is to keep a retention schedule for each record type, because some jurisdictions and record classes require longer storage than others.
How long must notifiable incident records be kept?
The model requirement is five years. That five-year period starts from the date of the notification, not the date of the incident or the date the file was opened.
A good incident record file should include:
- the notification form or record;
- the date and time of the incident;
- the people involved;
- any photos, witness notes, or site sketches;
- corrective actions and follow-up evidence;
- regulator correspondence, if any.
If a business only keeps the notification but not the supporting documents, the record is incomplete. The point is not just to show that a form was sent. It is to show the business understood the event, responded to it, and learned from it.
What are the retention periods for other common WHS records?
Some records are governed by the nature of the risk rather than a simple fixed period.
| Record | Common retention approach | Notes |
|---|---|---|
| SWMS | Work duration, then longer retention recommended | Keep the version actually used on site |
| Risk assessments | At least until the task is reviewed or changed, with long-term retention recommended | Version control matters |
| Induction records | Several years, often 5+ | Important for visitor, contractor, and worker access evidence |
| Toolbox talk records | Several years, often 2-5 | Useful to prove consultation and communication |
| Incident investigations | Several years, often 5+ | Keep corrective action evidence with the report |
| Plant maintenance records | For the life of the equipment | Repair and service history should be traceable |
| SDS and chemical registers | While in use and after removal if the substance is relevant | Check jurisdiction and substance-specific requirements |
| Health monitoring / audiometric records | Often long-term, sometimes decades | These records are highly jurisdiction-dependent |
When in doubt, keep the record longer rather than shorter. The main risk of short retention is that a later claim, injury, or audit arrives after the document has been deleted.
How should a business organise WHS records?
The best record system is one that people can actually use. It should be simple enough for a supervisor to follow and controlled enough for an officer to rely on.
- Create a record register.
- Group records by type, project, and date.
- Assign an owner for each record class.
- Use consistent file names and version numbers.
- Decide where originals are stored and who can access them.
- Back up digital records and test the backup.
- Set a review and destruction schedule.
- Keep a separate process for legally sensitive records such as incident files and health monitoring.
If records are scattered across inboxes, phones, and random folders, the business will struggle to prove compliance. A controlled register is easier to defend and easier to audit.
What makes a WHS record defensible?
A defensible record should be accurate, dated, attributable, and complete. That means:
- the person completing the record is identifiable;
- the date of the record is clear;
- the version or job it applies to is clear;
- the content matches what actually happened;
- later changes are tracked rather than overwritten.
This is especially important for SWMS, risk assessments, incident investigations, and consultation records. Those are the records inspectors usually expect to see first.
Electronic vs paper records - is digital record keeping acceptable?
Yes. Digital records are acceptable if they are legible, backed up, and accessible when needed. A digital record system often works better than paper because it is easier to search, version, and store.
The key is control. The business should know:
- where the record is stored;
- who can edit it;
- who can view it;
- how the system is backed up;
- how old versions are preserved if needed.
Printing a document and putting it in a folder is not enough if the system cannot produce the latest version, the supporting notes, or the history of revisions.
What happens if a business cannot produce WHS records?
If the record should exist and cannot be produced, that is a problem in itself. It may suggest the duty was never met, or that the business does not have a reliable safety system.
The consequences can include:
- penalty notices;
- inspector directions;
- weaker defence in a prosecution;
- insurance and claim difficulties;
- loss of trust with clients and principal contractors.
The issue is not just missing paperwork. It is the inability to prove the business managed risk in a controlled way.
Building a WHS record keeping system
Start by listing every record the business creates or should create. Then decide the retention period, file owner, storage location, and review point for each record type.
| Step | What to do | Outcome |
|---|---|---|
| 1 | List all WHS record types | You know what exists |
| 2 | Set retention periods | Records are not deleted too early |
| 3 | Assign owners | Someone is responsible for each class |
| 4 | Standardise names and versions | Records are easier to find |
| 5 | Back up and test access | Records remain available if something fails |
| 6 | Audit the system | Gaps are identified before an incident does |
This is one of the most efficient ways to improve due diligence evidence without adding unnecessary bureaucracy.
State and territory variations
The information on this page is based on the Model WHS Act and Model WHS Regulations published by Safe Work Australia, adopted (with some variations) across most jurisdictions.
| Jurisdiction | Regulator | Key notes |
|---|---|---|
| NSW | SafeWork NSW | Notifiable incident records and some health monitoring records may require longer retention under local rules |
| VIC | WorkSafe Victoria | OHS framework applies, but record retention is still critical for proving compliance |
| QLD | Workplace Health and Safety Queensland | Model WHS framework with local record requirements |
| SA | SafeWork SA | Model WHS framework with local record requirements |
| WA | WorkSafe Western Australia | Model WHS framework with local record requirements |
| TAS | WorkSafe Tasmania | Model WHS framework with local record requirements |
| ACT | WorkSafe ACT | Model WHS framework with local record requirements |
| NT | NT WorkSafe | Model WHS framework with local record requirements |
Always verify current requirements with your state or territory regulator, as local codes of practice and guidance may impose additional obligations.
Related guides
- What is a WHS Management System?
- The WHS Act, Regulations and Codes of Practice
- WHS Due Diligence for Officers and Directors
Frequently asked questions
How long must notifiable incident records be kept under WHS law?
The model requirement is at least five years from the date the notification was made.
What WHS records must a PCBU keep?
The main records include incident notifications, SWMS, risk assessments, training records, consultation records, plant maintenance records, and other records tied to the hazards in the business.
Is there a legal requirement to keep SWMS records?
A SWMS must be kept for the duration of the high-risk construction work. Keeping it longer is usually sensible because it may be needed later as evidence.
What happens if I cannot produce WHS records during an inspection?
It weakens the business's position immediately and can lead to penalties, directions, or stronger enforcement if a breach is found.
Get the right documents for your business
A controlled record system is much easier to maintain when the templates and registers are built into a consistent structure. BlueSafe's management system and management plan products are designed to support that kind of record discipline.