There's a common assumption in small business: compliance training is what large corporates do to protect themselves from their own scale. "We're a team of 15 — we know each other. We don't need all that."
It's understandable. It's also increasingly wrong.
Where the Risk Actually Lives
Health & safety is the most immediate. Worksafe and its equivalents in Australia, NZ, and the UK don't make exceptions for small employers. If a staff member is injured and you can't demonstrate that they received adequate training and understood the relevant hazards, you're exposed — personally, not just as a business entity.
Privacy is the fast-growing one. With GDPR, the Australian Privacy Act, and the NZ Privacy Act 2020 all sharpened up in recent years, businesses of any size that hold customer data have obligations. A team member who doesn't know what "personal information" means in a legal context, or who sends data to the wrong person, can trigger a notifiable breach.
Employment law catches businesses off guard constantly. Harassment and discrimination policies aren't just moral requirements — they're legal ones. Without documented training and acknowledgement, your position in an employment dispute is significantly weaker.
The Math
WorkSafe fines in New Zealand start at $10,000 for minor breaches and can reach $500,000 for more serious ones. Australian penalties are comparable. Privacy breach investigations carry their own costs — legal fees alone can run to tens of thousands before any penalty.
Compare that to what it costs to build a proper compliance training program: a few hours of your time to set it up, and a few hundred dollars a year to run it on a platform like WyzAZ.
What "Good" Looks Like
You don't need a 4-hour course. You need:
- Clear policies on the relevant topics (most businesses already have these)
- A structured module that walks staff through the key points
- A quiz or acknowledgement that confirms they've understood
- A certificate and completion record for your files
That's the asset you point to when something goes wrong. "We trained this person, on this date, they passed this assessment, here's the certificate." It's not a guarantee — but it's the difference between an expensive conversation and a catastrophic one.