# NSW Digital Work Systems Bill — Compliance Analysis for RateRight

**Prepared by:** Radar (Intelligence)
**For:** Harper (Legal Review)
**Date:** 20 February 2026
**Classification:** 🟡 HIGH — Pre-compliance planning required

---

## 1. Executive Summary

The Work Health and Safety Amendment (Digital Work Systems) Act 2026 (NSW) is now law — **assented 18 February 2026** (Act No 5 of 2026). It amends the WHS Act 2011 to explicitly regulate algorithms, AI, automation, and **online platforms** used in work allocation, monitoring, and performance management.

**Bottom line for RateRight:** The Act's definition of "digital work system" includes "online platform" — which RateRight is. However, the obligations apply to PCBUs (persons conducting a business or undertaking) in relation to **"workers at work in the business or undertaking"**. The key legal question is whether tradies finding work through RateRight are "workers at work in" RateRight's business. Harper's earlier assessment (LOW risk) stands, but this analysis provides the full compliance picture as the Act is now assented and commencement is pending.

**Risk Level:** LOW at current scale. MEDIUM when scaling (especially if adding performance tracking, algorithmic matching prominence, or worker monitoring features).

---

## 2. The Legislation

### Status & Timeline

| Milestone | Date |
|-----------|------|
| Introduced (Legislative Assembly) | 19 November 2025 |
| Passed both Houses | 12 February 2026 |
| Royal Assent | **18 February 2026** |
| Commencement | **NOT YET IN EFFECT** — commences on a day(s) to be appointed by proclamation |
| Prerequisite | Most provisions commence at least **1 month after SafeWork NSW publishes right-of-entry guidelines** |
| SafeWork guidelines | Not yet drafted/published. Public consultation required before issuance |

**Estimated effective date:** Unknown, but likely **mid-to-late 2026** at earliest. SafeWork must draft guidelines → consult publicly → finalise → publish → then 1-month waiting period before provisions commence. This gives RateRight lead time.

### What It Does

Inserts new provisions into the WHS Act 2011 creating a **"Digital Work System Duty"** requiring PCBUs to ensure, so far as is reasonably practicable, that the health and safety of workers is not put at risk by digital work systems used in the business.

### Definition of "Digital Work System"

> An **algorithm, artificial intelligence, automation or online platform**.

This is deliberately broad. Norton Rose Fulbright notes: "This wide definition means that even commonplace HR systems, scheduling software and management platforms fall within scope."

**RateRight is an online platform. We fall within the definition.**

---

## 3. Specific Obligations

### 3.1 The Primary Duty (New s21A)

A PCBU must ensure, so far as is reasonably practicable, that the health and safety of **workers at work in the business or undertaking** is not put at risk from work allocated by a digital work system.

The PCBU must have regard to the following risks:

| Risk Category | Description | RateRight Relevance |
|---------------|-------------|---------------------|
| **Excessive/unreasonable workloads** | Algorithmic allocation creating unsafe work volumes | LOW — We match, we don't allocate ongoing work volumes or shifts |
| **Excessive/unreasonable performance metrics** | Tracking/assessing worker performance with unreasonable standards | LOW currently — We have constructive ratings. Could trigger if we add performance scoring, speed metrics, or acceptance rate penalties |
| **Excessive/unreasonable monitoring/surveillance** | Digital surveillance of workers | VERY LOW — We don't monitor workers on-site or track work activity |
| **Discriminatory practices/decision-making** | Algorithm producing discriminatory outcomes | LOW-MEDIUM — If our matching algorithm preferences certain demographics, this triggers. Need to audit matching logic for bias |

### 3.2 "Workers at Work in the Business"

This is the **critical interpretive question** for RateRight.

- The duty applies to workers **at work in** the PCBU's business
- RateRight's tradies are independent contractors, not employees
- They are not "at work in" RateRight's business — they work for the hiring construction company
- RateRight connects parties; it does not direct, supervise, or manage work performance

**Harper's prior assessment:** RateRight's tradies are independent contractors not directed by our algorithm. RateRight matches, doesn't allocate work like Uber/Amazon. No human employees subject to digital work allocation. **LOW risk.**

**Radar's assessment:** Agrees. The Act was designed for Uber-style gig platforms (algorithmic work allocation, shift management, performance deactivation). RateRight's marketplace model — connect and step away — is fundamentally different. SEEK, Indeed, and similar job boards/marketplaces are likely outside scope for the same reason.

**BUT — risk escalation triggers:**
- If RateRight adds performance-based deactivation ("too many bad ratings = removed")
- If matching algorithm starts **directing** work rather than displaying options
- If we add surveillance/tracking of workers during engagements
- If we set performance metrics that workers must meet to stay on the platform

Any of these would move the needle toward the duty applying.

### 3.3 Union Right of Entry — Expanded Powers

WHS entry permit holders (union officials) can now:
- **Access and inspect** digital work systems suspected of breaching WHS
- **Require "reasonable assistance"** — access to system data, explanations of system logic, demonstrations of how work is allocated/monitored
- Access will be governed by **SafeWork guidelines** (not yet published)

**RateRight implication:** If a union official suspects our platform contributes to unsafe work outcomes for workers, they could theoretically request access to our matching algorithm logic, data about work allocation patterns, and performance tracking systems. This is a data privacy and IP risk.

**Mitigation:** COSBOA and Business NSW have flagged this as the most contentious part of the Act. "Reasonable assistance" will be defined by SafeWork guidelines (yet to be published). There are safeguards:
- Only authorised WHS permit holders (not any union rep)
- Must be investigating a suspected contravention
- Legal professional privilege preserved
- Commercial-in-confidence protections being debated

---

## 4. Penalties

The Digital Work System Duty is a **primary duty of care** under the WHS Act 2011. Breach penalties align with existing WHS categories:

| Offence Category | Description | Individual | Officer (Director) | Corporation (PCBU) |
|------------------|-------------|-----------|-------------------|-------------------|
| **Category 1** | Reckless/grossly negligent breach exposing person to risk of death/serious injury | ~$1,114,000 + 5 years jail | ~$2,318,000 | ~$11,150,000 |
| **Category 2** | Failure to comply causing risk of serious injury/death | ~$223,000 | ~$447,000 | ~$2,234,000 |
| **Category 3** | General failure to comply with duty | ~$55,000 | ~$112,000 | ~$558,000 |

*(Based on 2025-26 penalty unit value of $123.31)*

**Realistic scenario for RateRight:** If a breach occurred, it would almost certainly be Category 3 (general failure) — maximum ~$558,000 for a corporation. Category 1/2 require risk of death/serious injury, which would be exceptional for a marketplace platform.

**Note:** The terms "excessive", "unreasonable", and "discriminatory" in the duty are **not defined** in the Act. COSBOA flagged this: "The NSW Government is creating penalties first and promising to define them later through regulator guidelines. That is backwards and fundamentally unfair." This means compliance standards are currently unclear for everyone.

---

## 5. What Other States Are Doing

- **No other Australian state** has equivalent legislation
- The Act **departs from the national Model WHS Laws** (Safe Work Australia)
- Business groups (BCA, COSBOA, Ai Group) criticise this as fragmenting national consistency
- If RateRight operates nationally, only NSW operations are captured
- Other states may follow; Victorian and federal consultations on algorithmic management are underway but no legislation introduced

---

## 6. RateRight-Specific Risk Assessment

### Current State (Pre-Launch, Feb 2026)

| Factor | Assessment |
|--------|-----------|
| Are we a "digital work system"? | **YES** — we are an online platform |
| Are tradies "workers at work in" our business? | **LIKELY NO** — independent contractors working for the hiring company, not RateRight |
| Do we allocate work algorithmically? | **MINIMAL** — we display matches, workers/hirers choose freely |
| Do we track performance? | **CONSTRUCTIVE RATINGS ONLY** — not performance metrics triggering consequences |
| Do we monitor/surveil workers? | **NO** |
| Do we make discriminatory decisions? | **NOT KNOWINGLY** — matching logic should be audited for bias |
| Is the Act in effect yet? | **NO** — awaiting proclamation, SafeWork guidelines pending |

**Overall: LOW RISK at current model and scale.**

### Risk Escalation Matrix — What Would Change This

| Feature/Change | Risk Impact | Action |
|----------------|-------------|--------|
| Adding acceptance rate penalties | LOW → MEDIUM | Legal review before implementing |
| Performance-based deactivation | LOW → MEDIUM-HIGH | Clear criteria needed, human review required |
| Algorithmic work direction (not just display) | LOW → HIGH | Could make us a "work allocator" under the Act |
| Worker GPS/activity tracking | LOW → HIGH | Would trigger monitoring/surveillance provisions |
| Expanding to employ workers directly | LOW → HIGH | Workers become "at work in" our business |
| Adding shift scheduling/rostering | LOW → HIGH | Direct work allocation = core of the Act |

---

## 7. Recommended Actions for Harper

### Immediate (Before Launch)
1. **No compliance blockers exist.** The Act is not yet in effect (awaiting proclamation).
2. **Document our marketplace model** — formal position paper on why RateRight is a connector, not a work allocator. This is our primary defence.
3. **Audit matching algorithm for bias** — ensure no discriminatory patterns in how matches are displayed (age, gender, nationality). Builder should be flagged.

### Medium-Term (When Act Commences)
4. **Monitor SafeWork guidelines** — these will define "reasonable assistance" for right-of-entry and clarify compliance expectations. Publication triggers the countdown.
5. **Prepare right-of-entry protocol** — internal procedure for handling union permit holder requests to inspect digital systems. Identify what's commercial-in-confidence vs accessible.
6. **Review any new features** — any feature touching work allocation, performance tracking, or worker monitoring should be legally reviewed against this Act before deployment.

### Long-Term
7. **Watch for national harmonisation** — if other states adopt similar laws, a single compliance framework may be needed.
8. **Consider formal legal opinion** — if RateRight reaches significant scale in NSW (100+ matches/month), a formal legal opinion on whether the duty applies would be prudent ($2-5K estimated cost).

---

## 8. Competitive Angle

This Act is actually a **potential advantage** for RateRight vs labour hire competitors:

- **Labour hire firms** (Yakka, Sidekicker, traditional agencies) employ workers and direct their work → they are unambiguously PCBUs with digital work system duties
- **RateRight as marketplace** → likely outside scope because workers aren't "at work in" our business
- Our competitors face compliance costs we don't
- This mirrors the VIC Labour Hire Licensing Act advantage (Harper confirmed RateRight exempt, Feb 20)

**Positioning:** "RateRight connects you directly — no intermediary managing your workers digitally. You're in control of the work, the relationship, and the outcomes."

---

## 9. Sources

| Source | Date | Key Contribution |
|--------|------|-----------------|
| NSW Parliament Bill Tracker | 18 Feb 2026 | Assent confirmed, Act No 5/2026 |
| Norton Rose Fulbright | Feb 2026 | Key features, legal risks, expanded access powers |
| Pinsent Masons | 13 Feb 2026 | Definition breadth, compliance implications |
| Hamilton Locke | 18 Feb 2026 | Commencement timeline, proclamation requirement |
| HR Leader / Swaab / Dentons | 17 Feb 2026 | Practical employer implications |
| HCA Magazine / AIHS | 13 Feb 2026 | Expert criticism, "fundamentally flawed" assessment |
| COSBOA | 26 Nov 2025 | Small business impact, undefined terms |
| Courtenell WHS | Feb 2026 | NSW penalty unit values 2025-26 |
| Harper (Fleet) | 19 Feb 2026 | Prior LOW risk assessment confirmed |

---

## 10. Summary for Michael (If Escalated)

**One-liner:** NSW passed a law regulating AI/algorithms/platforms in workplaces. RateRight is technically an "online platform" under the definition, but the obligations likely don't apply to us because our tradies work for the hiring company, not for us. The law isn't in effect yet (months away). No action needed now. Harper should monitor for when it commences and review any new features that touch work allocation before we build them.

---

*Prepared by Radar. Confidence: HIGH (primary legislative sources, multiple law firm analyses). For Harper's legal review — not legal advice.*