An HSR Asked How the AI Tool Changes Work. A Vendor Slide Is Not an Answer.

A deployed AI tool is still a live WHS issue. Your HSR can ask for the risk picture, the control evidence and the changes since launch. Give them a useful answer without confusing representation rights with unrestricted system access.

Consultation does not finish when an AI tool goes live. Once the system is shaping workload, monitoring activity, recommending actions or changing task mix, your health and safety representative can keep asking how it affects the workers they represent.

Under the harmonised WHS framework, an HSR can represent the work group, monitor the measures taken by the business, investigate complaints and inquire into apparent risks. The PCBU must consult the HSR, confer when reasonably requested and allow access to information it has about relevant hazards, associated risks and worker health and safety. Those duties appear in sections 68 to 71 of the current model WHS Act and in enacted laws including the Commonwealth Work Health and Safety Act 2011 and NSW Work Health and Safety Act 2011.

That is not an unlimited right to source code, model weights or every worker record. The practical response is a usable WHS account of the system, based on relevant information the organisation holds, within the HSR's work-group remit and the Act's privacy limits.

What can an HSR ask about a deployed AI tool?

The sharper question is what information is connected closely enough to hazards, risks or worker health and safety that section 70 access is engaged.

For a contact-centre summarisation tool, that may include whether corrections add after-call work, whether staff are pressured to accept inaccurate summaries, and what happens when the product changes. For a complaints triage tool, it may include exposure to customer aggression, escalation design and whether speed measures are distorting recovery time.

Safe Work Australia identifies high job demands, low job control, poor support, lack of role clarity, poor organisational change management, poor organisational justice, including surveillance technologies used in an unfair or unjust way, and fatigue as possible psychosocial hazards arising from AI and digital technologies. Its current guidance also says control measures must be reviewed before a change, such as a software update, that is likely to have new or different WHS risks, and calls for worker consultation, human oversight, audits and review of controls (Safe Work Australia).

An HSR can therefore ask for evidence such as:

• the system's purpose, actual use, affected work group and accountable owner;
• a plain-language workflow showing inputs, outputs, human decisions, override points and escalation routes;
• the hazard and risk assessment, including interacting psychosocial hazards;
• the controls selected, reasons for selection and evidence that they operate in practice;
• testing results, known limitations and the response to errors or unsafe outputs;
• de-identified complaint, incident, override and workload trends;
• training, supervision and worker-support arrangements;
• consultation records, unresolved concerns and resulting actions; and
• the change log, including vendor updates, configuration changes and expanded use cases.

The law does not prescribe an "AI answer pack". It is a practical response to the underlying duties. Safe Work Australia says workers and HSRs must be consulted about WHS matters associated with AI and given genuine opportunities to ask questions or raise concerns (Safe Work Australia). SafeWork NSW likewise tells PCBUs to give HSRs access to information about hazards and risks affecting their work group (SafeWork NSW).

Consultation also requires more than sending a finished slide deck. Section 48 of the model Act requires relevant information to be shared, a reasonable opportunity for workers to express views and contribute to decisions, consideration of those views, and timely advice about the outcome. If workers are represented by an HSR, the consultation must involve that representative.

An HSR can go further when a control has not kept pace. Regulation 38 of the current NSW Work Health and Safety Regulation 2025, reflecting the model provision, permits a control-review request when a prescribed review circumstance affects the work group and the duty holder has not adequately reviewed it. A vendor update, error pattern or evidence of work intensification may be the trigger. The human duty holder must conduct the review.

Use this prompt to turn existing source records into an HSR briefing. A WHS professional and the system owner must verify every statement against the underlying records before anything is shared.

Prepare a factual WHS answer pack for [SYSTEM_NAME] and [WORK_GROUP].

Use only the supplied risk assessment, workflow, control evidence, testing, consultation record, incident summary and change log. Do not infer missing facts.

Structure the pack as:
1. What the system does and does not do
2. How it changes work
3. Hazards and affected workers
4. Controls and human decision points
5. Evidence the controls are working
6. Changes since deployment
7. Open HSR questions and named action owners

Mark every unsupported point [SOURCE REQUIRED]. Do not include personal or medical information.

Where does the information right stop?

Section 70 concerns information the PCBU has about hazards and risks affecting the work group, and worker health and safety. It does not create a general right to every commercial, technical or personnel record, or automatically require the PCBU to obtain every vendor-held artefact.

Under harmonised sections 68 and 69, an HSR ordinarily acts on matters affecting the represented group. Limited exceptions apply only where the other work group's HSR is found, after reasonable inquiry, to be unavailable, and either there is a serious risk from immediate or imminent exposure to a hazard affecting that group or one of its members asks for assistance. Holding office creates no separate WHS duty for the HSR.

Privacy changes the form of the answer, not the need to answer. Harmonised sections 68 and 71 prevent access to a worker's personal or medical information without consent unless the material neither identifies the worker nor could reasonably be expected to lead to identification. Removing a name may not be enough in a five-person team when the role, shift, date and incident detail reveal who it is. The OAIC says de-identification requires contextual assessment of re-identification risk, not just deletion of direct identifiers (OAIC).

Use aggregation, date-banding, category grouping, free-text removal and controlled viewing while preserving the safety signal. If an individual account is necessary, seek informed consent and document its scope. Record the precise basis for anything withheld. "Privacy" is not a useful blanket response.

Section 269 of the harmonised Act preserves legal professional privilege. Commercial sensitivity is different. A vendor confidentiality clause is not an express section 70 exception, so give the HSR the risk-relevant substance through a suitable extract, briefing or controlled inspection rather than stopping at "the vendor owns it".

Do not confuse an HSR with a WHS entry permit holder. An HSR is an elected worker representative with an ongoing role. A WHS entry permit holder is a union official whose Part 7 inquiry entry power under Division 2 depends on a reasonably suspected contravention affecting relevant workers. Section 118 of the current Commonwealth Act allows an entry permit holder to inspect a work system and directly relevant documents at the workplace, subject to statutory conditions. Those are not ordinary HSR powers.

NSW makes that distinction especially important. The Work Health and Safety Amendment (Digital Work Systems) Act 2026 was assented to on 18 February 2026, but as at 31 July 2026 most operative provisions had not commenced. The future power to require reasonable assistance to access and inspect a digital work system is an entry permit holder power, not an HSR power. TheAICommand's union inspection piece covers that incoming entry-permit-holder power in detail; this article is about what an HSR can already ask for today. SafeWork NSW says only the guideline-related provisions have started and the remaining provisions await proclamation after publication of the guidelines (SafeWork NSW).

Victoria uses a separate OHS regime. Sections 35, 58 and 69 of the Occupational Health and Safety Act 2004 cover consultation, HSR powers and employer information obligations. Victorian HSRs represent a designated work group, and employers must give access to information about actual or potential hazards and the health and safety of represented people. Section 69 restricts access to medical information without consent unless identity is removed or cannot reasonably be ascertained. A Victorian ARREO has a separate suspected-contravention right of entry under sections 87 to 90 (WorkSafe Victoria).

Fictional worked example: The HSR for [CONTACT_CENTRE_WORK_GROUP] asks whether an [AI_SUMMARY_TOOL] update increased after-call work. The organisation withholds identifiable transcripts and individual correction scores. It supplies the workflow, change record, aggregated correction trend, de-identified feedback, workload control and test method. When the HSR says the aggregate hides a difficult complaint queue, the parties agree on a privacy-safe subgroup analysis and control review. The organisation records the view and decision.

Use this prompt to test a proposed disclosure for re-identification risk. A privacy specialist and WHS lead must decide what is disclosed and confirm that relevant safety evidence has not been stripped away.

Review this proposed HSR information extract for [WORK_GROUP].

Identify direct identifiers, indirect identifiers and combinations that could reasonably reveal a worker. Recommend the minimum aggregation, redaction or access control needed while preserving the WHS issue.

Do not decide whether disclosure is lawful. List each proposed change, the safety information it may remove, and the human decision required.

Do this Monday

1. Name the deployed systems. List the AI and automated tools that shape work for each HSR work group. Include embedded features, configuration changes and vendor-pushed updates, not just products labelled "AI".
2. Build one evidence map. Link each system to its risk assessment, controls, tests, worker feedback, incidents, training and change history. Name the record owner and last verification date.
3. Agree on the request route. Give HSRs a named WHS contact and a ledger for the question, evidence supplied and resulting action. Agree response dates. Escalate difficult privacy, privilege or vendor-access issues without freezing the whole response.
4. Prepare the privacy-safe view. Define aggregation rules for small teams. Separate WHS analysis from individual performance reporting. Test whether role, shift, location, date and free text reveal a person after names are removed.
5. Close the loop. Record the HSR's view, who considered it, the decision, reasons, action owner and review date. If the HSR reasonably requests review under regulation 38, address that request as a control-review issue rather than treating it as another request for a presentation.
6. Reopen the pack after change. A new model, altered threshold, changed workflow or vendor update may change the risk. Revisit the evidence pack with the affected HSR and test whether controls remain fit for purpose, suitable and correctly used.

Bottom line

An HSR does not need a suspected breach before asking how deployed AI affects their work group. The organisation should answer with the risk picture, operating evidence and change history it holds, not a vendor brochure or a confidentiality slogan. Privacy and privilege set real boundaries, but those boundaries must be applied precisely. The duty to manage the risk and make the final decision stays with the human duty holder.

This article is general information and education only. It is not legal, compliance, financial or professional advice. Obligations vary by organisation and circumstance. Verify current requirements against the primary sources cited and seek advice specific to your situation.

References

1. Safe Work Australia, Model Work Health and Safety Bill, 5 December 2025. https://www.safeworkaustralia.gov.au/sites/default/files/2025-12/model-whs-bill-5_december_2025.pdf
2. Safe Work Australia, Model Work Health and Safety Regulations, 5 December 2025. https://www.safeworkaustralia.gov.au/sites/default/files/2025-12/model-whs-regulations-5_december_2025.pdf
3. Federal Register of Legislation, Work Health and Safety Act 2011, current compilation. https://www.legislation.gov.au/C2011A00137/latest/text
4. NSW Legislation, Work Health and Safety Act 2011 No 10, current version. https://legislation.nsw.gov.au/view/html/inforce/current/act-2011-010
5. New South Wales legislation, Work Health and Safety Regulation 2025, current version, regulation 38. https://legislation.nsw.gov.au/view/html/inforce/current/sl-2025-0440
6. Safe Work Australia, Artificial intelligence and digital technologies: WHS duties. https://www.safeworkaustralia.gov.au/safety-topic/hazards/digital-technologies-ai/whs-duties
7. Safe Work Australia, Artificial intelligence and digital technologies: Managing risks. https://www.safeworkaustralia.gov.au/safety-topic/hazards/digital-technologies-ai/managing-risks
8. SafeWork NSW, PCBU responsibilities for Health and Safety Representatives. https://www.safework.nsw.gov.au/advice-and-resources/health-and-safety-representatives/PCBU-responsibilities
9. SafeWork NSW, Work Health and Safety Amendment (Digital Work Systems) Act 2026. https://www.safework.nsw.gov.au/legal-obligations/legislation/accordians/work-health-and-safety-amendment-digital-work-systems-act-2026-amendment-act
10. SafeWork NSW, Development of the Digital Work Systems Guidelines. https://www.safework.nsw.gov.au/resource-library/consultation/development-of-the-digital-work-systems-guidelines
11. Victorian Government, Occupational Health and Safety Act 2004, authorised version 045. https://content.legislation.vic.gov.au/sites/default/files/2025-08/04-107aa045-authorised.PDF
12. WorkSafe Victoria, Information for ARREOs about right of entry. https://www.worksafe.vic.gov.au/information-arreos-about-right-entry
13. Office of the Australian Information Commissioner, De-identification and the Privacy Act. https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/handling-personal-information/de-identification-and-the-privacy-act