For Australian small and medium enterprises, HR policies are far more than administrative paperwork. They serve as an important framework for managing workplace expectations, compliance, safety and employee relations, while helping businesses respond consistently when issues arise.

From workplace behaviour and performance management to psychosocial safety and the Right to Disconnect, having the right policies in place can reduce risk and create greater clarity for both employers and employees.

Here are the 10 HR policies every Australian SME should consider having.

1. Code of Conduct & Workplace Behaviour

A Code of Conduct establishes baseline expectations for employee conduct, professional integrity and organisational values.

A clear policy helps employees understand what constitutes appropriate workplace behaviour and provides a framework for addressing misconduct or breaches of workplace standards.

It should clearly outline expected behaviours, unacceptable conduct, conflicts of interest, confidentiality and how concerns or breaches will be managed.

2. Work Health & Safety (WHS) & Psychosocial Hazards

A WHS policy outlines your legal duty to provide and maintain a safe working environment, including managing risks to workers’ psychological health.

Psychosocial hazards can arise from the design or management of work, workplace interactions and behaviours, and other aspects of the work environment. Businesses must eliminate psychosocial risks where reasonably practicable, or minimise them where elimination isn’t reasonably practicable. ⁠Safe Work Australia – Psychosocial hazards

Your policy should address issues such as excessive workloads, poor support, bullying, harassment, workplace conflict and other psychosocial risks relevant to your business.

3. Equal Opportunity, Anti-Discrimination & Respect@Work

An Equal Opportunity and Anti-Discrimination Policy establishes clear behavioural standards and provides employees with a pathway for raising concerns about discrimination, harassment or inappropriate workplace behaviour.

Australian businesses also have a positive duty under the Sex Discrimination Act 1984 to take reasonable and proportionate measures to eliminate, as far as possible, sex discrimination, sexual harassment, sex-based harassment, hostile workplace environments based on sex and related victimisation. ⁠Australian Human Rights Commission – Positive Duty

A strong policy should therefore go beyond simply responding to complaints. It should set clear expectations around respectful behaviour, prevention, reporting and how complaints will be handled.

4. Performance Management & Disciplinary Policy

A Performance Management and Disciplinary Policy defines a procedurally fair process for managing poor performance and disciplinary issues.

Following a documented, step-by-step framework can help businesses manage issues consistently and reduce the risk of disputes.

Fair Work Ombudsman guidance recommends that employers clearly identify performance concerns, discuss them with the employee, agree on clear and reasonable steps for improvement, provide appropriate support and document meetings and outcomes. ⁠Fair Work Ombudsman – Managing performance and warnings

Your policy should cover performance expectations, warnings, improvement plans, disciplinary action, documentation and review processes.

5. Flexible Working & Right to Disconnect

A Flexible Working and Right to Disconnect Policy governs remote work expectations, hybrid arrangements and out-of-hours communication boundaries.

The Right to Disconnect now applies to employees of small business employers, having commenced for businesses with fewer than 15 employees on 26 August 2025. Employees generally have the right to refuse to monitor, read or respond to work-related contact outside their working hours unless that refusal is unreasonable. ⁠Fair Work Ombudsman – Right to disconnect

A policy should set clear expectations around working from home, availability, communication channels, core hours and when out-of-hours contact may be necessary.

6. IT, Cybersecurity & Acceptable Use

An IT, Cybersecurity and Acceptable Use Policy sets clear rules regarding company-issued devices, internet access, information security and personal use of technology.

It should cover appropriate use of company systems, passwords, access permissions, confidential information, social media and the handling of business and client data.

Clear expectations can help safeguard proprietary information and reduce the risk of security incidents or reputational damage caused by inappropriate employee activity online.

7. Leave Entitlements & Absence Management

A Leave and Absence Management Policy clarifies how employees request and take annual leave, personal and carer’s leave, parental leave and family and domestic violence leave.

Aligning the policy with the National Employment Standards (NES) helps businesses apply minimum entitlements consistently and reduces the risk of payroll and leave administration errors.

For example, all employees are currently entitled to 10 days of paid family and domestic violence leave each year, including full-time, part-time and casual employees. ⁠Fair Work Ombudsman – Family and domestic violence leave

The policy should also establish clear processes for requesting leave, providing evidence where required, recording absences and managing extended periods of leave.

8. Grievance & Dispute Resolution

A Grievance and Dispute Resolution Policy provides a confidential, structured internal pathway for employees to raise workplace concerns.

Having a clear process encourages issues to be raised and addressed early, rather than allowing workplace conflicts to escalate.

The policy should explain who employees can approach, how complaints will be assessed, how confidentiality will be managed and what steps will be taken to investigate and resolve concerns.

A well-designed grievance process can help businesses respond consistently while giving employees confidence that workplace concerns will be taken seriously.

9. Privacy & Data Handling

A Privacy and Data Handling Policy regulates how employee, applicant, client and business information is collected, stored, accessed and protected.

Businesses should understand whether and how the Privacy Act 1988 and Australian Privacy Principles apply to their activities. Importantly, not every small business is automatically covered by the Privacy Act, and exemptions can apply to certain employee records. ⁠Office of the Australian Information Commissioner – Small business (⁠OAIC)

A good policy should nevertheless establish clear internal standards for handling sensitive information, including employee records, client data, passwords and confidential business information.

10. Alcohol, Drugs & Fitness for Work

An Alcohol, Drugs and Fitness for Work Policy sets clear expectations regarding employees being fit to perform their duties safely.

The policy should outline expectations around alcohol and drug use, working while impaired, prescription medication where it may affect fitness for work, testing requirements where applicable and the process for responding to concerns.

For businesses operating in higher-risk environments, having clear and consistently applied procedures can form an important part of the broader WHS framework.

The policy should also balance workplace safety with appropriate support for employees who may be experiencing substance-related issues.

Why HR Policies Matter for SMEs

HR policies shouldn’t exist simply because “HR says we need them.”

They provide a clear framework for how your business manages people, workplace risks and difficult situations. More importantly, policies help ensure that expectations are communicated before a problem occurs.

For Australian SMEs, the right policies can help:

• Clarify expectations for employees and managers
• Support consistent decision-making
• Reduce workplace and compliance risks
• Provide a framework for managing difficult situations
• Support WHS and psychosocial risk management
• Improve employee understanding of their rights and responsibilities
• Create stronger documentation when workplace issues arise

The key is making sure policies are relevant, current and actually used.

A folder full of outdated policies won’t protect your business. Your policies should reflect your organisation, be communicated to employees and be reviewed regularly as workplace laws and business practices change.

The right HR policies don’t just protect your business. They create the framework for a better, safer and more consistent workplace.