If your business has workers who operate alone — security officers doing solo patrols, drivers delivering into remote areas, maintenance technicians in plant rooms, or tradespeople on early-morning callouts — there is a specific piece of legislation that applies to you. Most employers have heard of it. Fewer know exactly what it says.

WHS Regulation 48 deals with remote or isolated work. It is not aspirational. It imposes a legal duty. And it says something quite specific about communication that many employers’ current setups do not actually satisfy.

This article explains what the regulation requires, which industries are named as high-risk, what “effective communication” actually means in a compliance context, and where the most common lone worker setups fall short.

What is WHS Regulation 48?

The Work Health and Safety Regulations 2011 include Division 3.2.6, which covers remote or isolated work. Regulation 48 sits inside this division. It places a specific duty on any person conducting a business or undertaking (PCBU) to manage risks associated with remote or isolated work.

The regulation defines remote or isolated work as work that is “isolated from the assistance of other persons because of location, time or the nature of the work.” That definition is deliberately broad. A security guard doing a solo patrol at 2am is an isolated worker. So is a service technician working alone in a server room on a Sunday. So is a courier driver who spends eight hours in a van with no direct supervisor.

The key obligation under Regulation 48 is this: a PCBU must implement a system of work that includes effective communication with the worker. Not occasional communication. Not best-effort communication. Effective communication.

Regulation 48 applies in all states and territories that have adopted the model WHS Act — which is most of them. Western Australia operates under its own Occupational Safety and Health Act 1984, and Victoria under the OHS Act 2004, but both contain substantially equivalent obligations for isolated workers. If your workers are anywhere in Australia, this duty applies.

Which industries are specifically named as high-risk for lone workers?

Safe Work Australia’s Code of Practice on Managing the Work Environment and Facilities provides guidance on who typically qualifies as an isolated or remote worker. The examples it gives are instructive because they come directly from the regulatory guidance document:

• All-night convenience store and service station attendants
• Security officers — including those doing patrols, static guarding, and crowd control
• Truck drivers and courier drivers on long-haul or regional routes
• Home-visit workers in healthcare and community services
• Workers on remote mine sites and exploration properties
• Agricultural and forestry workers in isolated locations

If your business operates in security, transport, mining, building services, or community care, your workforce almost certainly contains isolated workers as defined by the legislation. This is not a fringe interpretation — these industries are named in the official guidance.

The practical consequence is that these industries are more likely to be examined closely during a SafeWork audit or following an incident. “We didn’t realise this applied to us” is not a defence that will carry weight.

What does “effective communication” actually mean under WHS law?

This is where most employers find themselves in grey territory. The legislation requires effective communication but does not define it with a checklist. That means the standard is applied contextually — based on the specific hazard profile of the work.

Regulatory guidance and SafeWork inspection practice give us a reasonable picture of what “effective” means in practice:

• Reliability: The communication system must function reliably in the locations where the worker is performing the work. A solution that works 80% of the time is not effective if the 20% failure happens during an emergency.
• Reach: The system must be able to reach the worker in the actual places they work — not just in areas with good mobile coverage. For workers in plant rooms, underground areas, or remote properties, this is a material consideration.
• Speed: The system must allow the worker to call for assistance without unreasonable delay. A system that requires the worker to leave their workstation to find coverage, or to navigate a slow mobile app, is unlikely to satisfy “effective” in a high-risk environment.
• Monitoring: Where the nature of the work demands it, there should be a means of monitoring that the worker is safe — not just a means for the worker to call out. This is where check-in procedures and GPS visibility become relevant.

It is worth noting that “effective” is assessed against the specific risk. A home health worker visiting clients in suburban Sydney faces different risks than a mine site worker operating underground machinery. The communication system that satisfies the duty for one may not satisfy it for the other.

Where do common lone worker setups fall short?

Most businesses that have lone workers have some sort of informal arrangement. The problem is that informal arrangements, when examined against the actual duty, often have gaps.

Mobile phone calls. Calling the worker every two hours is a common approach. The issue is coverage. If the worker is in a basement, a steel-framed warehouse, or a rural area, calls may not connect. There is also no guaranteed response time if the worker does not answer — the supervisor has to notice the missed call and follow up.

WhatsApp and messaging apps. Consumer messaging apps have no duty-of-care architecture. They are not designed for emergency response. They have no duress button, no GPS tracking visible to a supervisor, and no mechanism for flagging when a worker has stopped responding. They also store data on overseas servers, which creates separate issues for some government and regulated-sector employers.

UHF two-way radios. On a single site, UHF can be effective. Over a patrol route that spans multiple buildings or a delivery run that crosses a city, UHF range becomes a constraint. Radios also do not provide GPS visibility to a supervisor, and unless recordings are kept, there is no audit trail if an incident is disputed.

No system at all. Some businesses have nothing formal in place. This is an unambiguous breach of the regulation.

What does a compliant communication system actually look like?

A compliant system for isolated workers has a few non-negotiable elements. It works in the locations where the worker actually operates. It allows the worker to call for assistance quickly and reliably. And it provides some form of monitoring or check-in that gives the employer visibility if something goes wrong.

PTT over cellular addresses several of these requirements in one architecture. Because it runs over the 4G/5G cellular network rather than a licensed frequency, coverage follows the same footprint as the national mobile network — which covers the vast majority of locations where workers operate. A worker pressing a single button instantly reaches their supervisor or control room. A duress button triggers an immediate alert.

GPS tracking, available through a dispatcher platform such as the Web Dispatcher, gives supervisors real-time visibility of where each worker is. Voice recordings, retained automatically, create an audit trail that is available if an incident is later disputed.

None of this makes PTT the only compliant solution. Satellite-based check-in devices may be appropriate for genuinely remote locations. A properly structured mobile phone check-in protocol with clear escalation procedures may satisfy the duty for lower-risk isolated work. The point is that the system needs to be designed against the actual hazard, documented, and demonstrably functional.

What does not work is relying on informal arrangements and hoping nothing goes wrong.

What are the penalties for non-compliance?

The model WHS Act imposes significant penalties for breaching the primary duty of care. A Category 1 offence — where reckless conduct causes the risk of death or serious injury — carries penalties of up to $3 million for a body corporate and $300,000 or five years’ imprisonment for an individual.

Category 2 and Category 3 offences (failure to comply with a duty, and failure to comply with a specific requirement) carry lower but still material penalties. The practical consequence for a business that has not implemented an effective lone worker communication system is not just a fine — it is the exposure that comes with a serious incident where the inadequacy of your system becomes part of the investigation.

SafeWork inspectors can and do examine communication systems as part of their assessment of whether a PCBU has managed the risks of remote or isolated work.

Summary: what you actually need to do

If your business has workers who operate alone — whether by location, time, or the nature of their work — Regulation 48 applies to you. Here is what it practically requires:

• Identify which workers in your organisation qualify as remote or isolated workers.
• Assess the specific communication hazards for each of those roles — coverage, speed of response, monitoring requirements.
• Implement a communication system that is actually effective for those specific conditions. Not adequate on paper, effective in practice.
• Document the system and train workers in how to use it.
• Review the system periodically, especially when roles or work locations change.

If you operate in security, mining, transport, courier, or community health — and you are still running lone worker comms on informal phone calls or consumer apps — this is worth examining before a SafeWork inspection or, more importantly, before an incident forces the question.