Is an EAP Mandatory in Australia? What the Law Actually Requires

No. No Australian statute, regulation or code of practice requires an employer to provide an Employee Assistance Program. If you searched this question hoping a one-line procurement decision would tick a compliance box, that is genuinely the answer.

But the question behind the question deserves the longer answer, because what Australian law does require is broader than an EAP, and an EAP alone does not satisfy it.

What does the law require instead?

Under WHS legislation, a person conducting a business or undertaking (PCBU) must eliminate risks to psychological health, or minimise them so far as is reasonably practicable: the same primary duty that covers physical safety. The psychosocial codes of practice turn that duty into a concrete cycle, and none of its four steps can be purchased as a phone number.

1. Identify the psychosocial hazards present in your workplace, in consultation with workers.
2. Assess the risks, including how hazards combine.
3. Control them, prioritising changes to the work itself over supports for the individual.
4. Review whether the controls actually reduced exposure.

Notice what that list is about: the work. The legal duty is to manage the conditions that cause harm, not merely to fund a counselling service people can ring after harm has occurred.

So where does an EAP fit legally?

In the language of the codes, an assistance program is a lower-order control: a support mechanism, sitting well below work-design changes in the hierarchy of controls. It can form a legitimate part of a compliant program, particularly for intervention once someone is struggling. What it cannot do is be the program, because it answers none of the four steps: it does not identify hazards, assess them, change the work, or evidence review.

This is the trap in treating the EAP as the compliance artefact. It is the part of the system that activates after the duty has already failed. A regulator examining your psychosocial risk management after an incident will ask what you did about workloads, role clarity, support and behaviour, not what your counselling utilisation was. To be clear about tone here: the people who deliver EAP counselling do good and necessary work. The problem is not the counsellors. It is a design that waits.

Why isn't "support is available" enough?

Because mostly, it isn't used. Around 1 in 4 people face a mental health challenge in a year, while around 5% of a workforce ever uses a traditional EAP (a figure consistent across syntheses of Productivity Commission and IBISWorld data and Australian provider guides). The gap between those numbers is the majority of the people who needed support, unassisted.

The reason is design, not apathy. The traditional model asks the person in distress to notice they are struggling, find the number, call a stranger and trust them, at exactly the moment each of those steps is hardest. Every step filters someone out, and the people filtered out first are the people least able to ask.

For a WHS lens, this matters twice over. First, "support was available" is a weak defence when the support demonstrably goes unused. Second, a reactive service generates almost no identification signal: it cannot tell you which teams are drifting into risk, so it contributes nothing to the identify-and-review steps the law actually demands. Most organisations wait for people to reach out. The duty, read honestly, asks you to reach in.

What does a defensible structure look like?

Employers who handle this well run three layers, each mapped to a duty the law actually names.

Layer	What it does	Which duty it serves
Continuous signals	Regular, voluntary check-ins; de-identified team trends mapped to recognised psychosocial factors	Identify and review: leading indicators between formal assessments
Proactive outreach	Scheduled, confidential check-in calls that reach 100% of people	Identification, early intervention, and consultation evidence
Professional support	Support sessions, referral pathways and escalation: the traditional EAP function	Intervention and support, as a lower-order control

The third layer is what most organisations already buy. The first two are what make it reach anyone, and what produce the risk intelligence that satisfies the identify and review steps. That inversion, reaching in on a schedule instead of waiting for the roughly 5% who ask, is the design of a proactive EAP, and it is why the model doubles as psychosocial risk infrastructure rather than an after-the-fact service.

One more difference worth knowing about the support layer itself. When a check-in surfaces a need, a trained Mental Health First Responder (an MHFR: a certified, non-clinical peer responder) doesn't just offer sessions. Where clinical care is the right next step, they guide the person to see their GP for a Mental Health Care Plan, which unlocks Medicare-rebated psychology sessions with a practitioner of the person's own choosing. Support stops being capped by an EAP session limit or confined to the provider's own panel; the person ends up with care that is theirs.

CONCLUSION

An EAP is not mandatory in Australia. Managing psychosocial risk is. The law requires you to identify hazards, assess them, control them at the level of work design, review the results and consult your workers throughout. An assistance program is a legitimate support inside that system and a hollow substitute for it. The strongest position is the combination: work-design controls driven by real identification data, continuous signals so problems surface early, outreach that reaches everyone rather than waiting for the few, and professional support people are actually connected to, including pathways to care they own.

FAQ

Does having an EAP satisfy our psychosocial risk duties?

No. In the codes' terms, an EAP is a lower-order support, not a control of the hazards themselves. It can be part of a compliant program, but the duties are met by managing the work factors that cause harm and evidencing that cycle.

Why do so many employers have EAPs if they're not required?

Because providing professional support is genuinely valuable for intervention, is widely expected by employees and insurers, and is straightforward to procure. The problem is not having one. It is relying on one as the whole answer when around 5% of a workforce ever uses it.

What should we put in place alongside an EAP?

The layered model: work-design controls driven by a genuine risk assessment; continuous, privacy-preserving check-in signals for identification and review; proactive scheduled outreach so support reaches everyone; and professional support for intervention, including GP and Mental Health Care Plan pathways so care isn't capped by session limits.

Is an EAP mandatory for government or public-sector employers?

The WHS duties apply to public-sector PCBUs the same way. Some agencies adopt EAP provision as internal policy or under enterprise agreements. That is an organisational commitment, not a general legal mandate.

Quick Answer: No Australian law makes an EAP mandatory. What WHS law requires is that employers identify, assess, control and review psychosocial risks in consultation with workers: a duty about the design of work itself. An EAP is a legitimate lower-order support within that system, but it does not discharge the duty. With utilisation around 5%, a reactive service neither reaches most people who need help nor produces the identification evidence the law expects. The defensible structure pairs work-design controls with continuous check-in signals, proactive outreach to 100% of staff, and professional support that includes Medicare pathways people own.