Positive Duty Investigation Compliance

What Is Positive Duty and Why Does It Matter Now?

Positive Duty is the most significant shift in Australian workplace law in a generation. Introduced through the Anti-Discrimination and Human Rights Legislation Amendment (Respect at Work) Act 2022, it fundamentally changed the obligation model for Australian employers. Before Positive Duty, the burden sat with individual complainants to pursue action after harm occurred. Now, the obligation sits squarely with employers to prevent that harm before it happens.

The legislation amended the Sex Discrimination Act 1984 to impose a positive duty on all employers to take reasonable and proportionate measures to eliminate, so far as possible:

• Sexual harassment in connection with work
• Sex discrimination in connection with work
• Conduct creating a hostile work environment on the ground of sex
• Related acts of victimisation

This is not aspirational guidance. From 12 December 2023, the Australian Human Rights Commission (AHRC) gained full enforcement powers to investigate whether organisations are meeting their Positive Duty obligations. The AHRC can now initiate inquiries on its own motion, without waiting for an individual complaint.

For investigation teams, compliance managers, and legal counsel, this changes everything. Your organisation’s complaint handling and investigation processes are no longer internal matters. They are subject to external regulatory scrutiny, and the standard is whether your processes are reasonable and proportionate given the nature and size of your organisation.

The Seven AHRC Standards for Positive Duty Compliance

The AHRC published seven standards that guide compliance. Each standard represents a pillar of what the Commission considers reasonable and proportionate action. Understanding all seven is critical, but for investigation professionals, Standard 6 is where the operational rubber meets the road.

Standard 1: Leadership

Senior leaders must demonstrate visible and consistent commitment to preventing unlawful conduct. This means board-level oversight, executive accountability, and leadership that models expected behaviour.

Standard 2: Culture

Organisations must foster a culture where unlawful conduct is not tolerated, and where reporting is encouraged and psychologically safe.

Standard 3: Knowledge

All workers must understand what constitutes unlawful conduct, the organisation’s policies, and how to report concerns. This requires ongoing training, not a one-off induction module.

Standard 4: Risk Management

Organisations must identify and assess the risk of unlawful conduct occurring in their specific workplace context, and implement controls proportionate to those risks.

Standard 5: Support

Appropriate support must be available for anyone who experiences or witnesses unlawful conduct, including access to counselling, Employee Assistance Programs, and clear guidance on available pathways.

Standard 6: Reporting and Response

This is the standard that creates direct investigation obligations. Organisations must have processes to receive, respond to, and resolve reports of unlawful conduct. These processes must be:

• Accessible to all workers, including casual employees, contractors, and labour hire
• Transparent in their methodology and timelines
• Fair to all parties, with procedural fairness protections for respondents and complainants
• Confidential to the extent possible under the circumstances
• Documented with sufficient detail to demonstrate the process followed and the reasoning applied

Standard 6 is where informal, ad hoc investigation approaches fail. The AHRC is not looking for outcomes alone; it is examining whether your process was adequate.

Standard 7: Monitoring, Evaluation, and Transparency

Organisations must track complaint trends, evaluate whether their prevention measures are working, and report on outcomes. This requires data, which requires systems.

What Investigation Obligations Does Positive Duty Create?

Positive Duty creates several concrete investigation obligations for Australian employers:

Structured complaint intake. You must have a clear, accessible mechanism for receiving reports. This means more than an email address or a verbal conversation with a manager. Intake must capture the nature of the complaint, the parties involved, dates, witnesses, and the desired outcome of the complainant. Every intake must be recorded consistently.

Timely triage and assessment. Once a complaint is received, you must assess it promptly. Is a formal investigation required? Is interim action needed to protect parties? Is there a mandatory reporting obligation to police or a regulator? These decisions must be documented with the reasoning that informed them.

Procedurally fair investigation. If a formal investigation is warranted, it must follow a defensible methodology. The respondent must be given the allegations in sufficient detail to respond. Witnesses must be interviewed and their evidence recorded. Findings must be based on evidence, applying the appropriate standard of proof (balance of probabilities in workplace matters). The investigator must be appropriately skilled and, where necessary, independent.

Documented outcomes and follow-up. Investigation findings must be recorded, communicated to relevant parties, and acted upon. Remedial action, disciplinary outcomes, and systemic recommendations must be tracked. Follow-up must occur to ensure effectiveness.

Trend analysis and reporting. Complaint data must feed into your risk management framework. If multiple complaints arise from the same team, location, or type of conduct, your organisation must be able to identify and act on that pattern.

Why Word Templates and Informal Processes No Longer Pass Muster

Many Australian organisations still manage workplace investigations using a combination of Word document templates, email chains, shared drive folders, and institutional knowledge held by individual HR practitioners. This approach was always fragile. Under Positive Duty, it is a compliance liability.

Here is why:

Version control failures. When investigation files live in Word documents, there is no reliable way to demonstrate that records were not altered after the fact. The AHRC expects contemporaneous records. A Word document modified six weeks after an interview does not meet that standard.

Lost audit trails. Email-based case management means that key decisions, approvals, and communications are scattered across inboxes. When a regulator asks “who authorised this decision, and when?”, you need a clear answer, not an Outlook search.

Inconsistent methodology. Without structured workflows, investigation quality depends entirely on the experience of the individual investigator. This creates inconsistency, which regulators interpret as a systemic failure, not an individual one.

No trend visibility. If your complaints exist as individual Word files in a shared drive, you cannot aggregate them to identify patterns. Standard 7 requires monitoring and evaluation. That is impossible without data.

Confidentiality risks. Shared drives and email chains make it extremely difficult to enforce need-to-know access controls. A single misdirected email can breach confidentiality and create a victimisation claim.

How SentinelOps Supports Positive Duty Compliance

SentinelOps is an Australian-built investigation case management platform designed by investigators who understand what defensible investigation processes look like in practice. Here is how it directly supports Positive Duty compliance:

Structured complaint intake. SentinelOps provides configurable intake forms that capture the information Standard 6 requires, consistently, every time. No fields missed, no details lost. Every submission is timestamped and attributed.

Procedural fairness audit trails. Every action taken on a case is logged automatically. Interview scheduling, evidence collection, decision points, approvals, and communications are all recorded with timestamps and user attribution. When the AHRC asks how a matter was handled, you have a complete, contemporaneous record.

Consistent investigation methodology. SentinelOps enforces structured workflows that guide investigators through a defensible process. This does not replace investigator judgement; it ensures that judgement is applied within a framework that meets regulatory expectations.

AHRC-ready documentation. Investigation reports, evidence registers, and case summaries generated within SentinelOps are formatted and structured to meet the documentation standards regulators expect. You are not retrofitting records for an inquiry; they are built correctly from the start.

AI-assisted analysis. SentinelOps integrates artificial intelligence to assist investigators with evidence review, chronology building, and pattern identification. This reduces administrative burden while improving the thoroughness of investigations.

Trend reporting and dashboards. Complaint data is aggregated across the organisation, enabling the monitoring and evaluation that Standard 7 demands. Identify emerging patterns before they become systemic failures.

Confidentiality controls. Role-based access ensures that case information is only visible to those with a legitimate need to know. Access logs demonstrate who viewed what and when, which is critical if a confidentiality breach is alleged.

What Happens When Organisations Fail

The AHRC’s enforcement powers are graduated but consequential:

Preliminary inquiries. The AHRC can conduct preliminary inquiries to determine whether a full investigation is warranted. These can be triggered by complaints, media reports, or the Commission’s own monitoring.

Full inquiries. The AHRC can compel the production of documents, require persons to answer questions, and enter premises. This is an investigative power with real teeth.

Compliance notices. If the AHRC finds that an organisation is not meeting its Positive Duty, it can issue a compliance notice specifying the actions the organisation must take and the timeframe for compliance.

Enforceable undertakings. Organisations can enter into enforceable undertakings with the AHRC, committing to specific remedial actions.

Federal Court orders. If compliance notices are not met, the AHRC can apply to the Federal Court for orders enforcing compliance. Court orders are public, enforceable, and reputationally damaging.

Beyond AHRC enforcement, Positive Duty failures create exposure under state and territory WHS legislation, workers’ compensation regimes, and common law negligence claims. A workplace sexual harassment complaint that is poorly investigated can generate liability across multiple jurisdictions simultaneously.

Frequently Asked Questions

Does Positive Duty apply to small businesses?

Yes. Positive Duty applies to all employers covered by the Sex Discrimination Act 1984, which includes all Australian employers regardless of size. However, what constitutes “reasonable and proportionate” measures differs based on the size and resources of the organisation. A 15-person business is held to a different standard than a 15,000-person enterprise, but both must demonstrate they have taken action.

What is the difference between Positive Duty and existing anti-discrimination obligations?

Existing obligations were reactive: they required employers not to discriminate and gave individuals the right to complain after the fact. Positive Duty is proactive: it requires employers to take steps to prevent unlawful conduct. The shift is from “respond when something goes wrong” to “build systems that stop things going wrong.”

Can the AHRC investigate even if no individual has complained?

Yes. The AHRC can initiate inquiries on its own motion. This means that public reporting, media coverage, or the Commission’s own intelligence can trigger an inquiry without any individual complaint being lodged.

How does Positive Duty interact with WHS psychosocial hazard laws?

They are complementary but distinct. Positive Duty sits under Commonwealth anti-discrimination law and is enforced by the AHRC. WHS psychosocial hazard obligations sit under state and territory WHS legislation and are enforced by SafeWork/WorkSafe regulators. In practice, the same workplace complaint may trigger obligations under both frameworks simultaneously, which makes consistent, documented investigation processes even more critical.

What documentation does the AHRC expect during an inquiry?

The AHRC expects to see evidence that your organisation has implemented systems and processes proportionate to its risk profile. This includes policies, training records, complaint handling procedures, investigation records, trend data, and evidence of leadership engagement. The emphasis is on systems, not individual case outcomes.

Take Action Before the AHRC Does

Positive Duty is not a future obligation. It is enforceable now. If your investigation processes rely on informal methods, fragmented tools, or institutional knowledge that walks out the door when staff leave, you are exposed.

SentinelOps gives you the structured, auditable, defensible investigation capability that Positive Duty demands, built by Australians who understand the regulatory landscape because they have operated within it.

Book A Demo and see how SentinelOps makes Positive Duty compliance operational, not aspirational.