CoR Compliance: What Australian Transport Operators Need to Know

A supply chain is the network between a company and the suppliers that help produce and distribute its products to the final customer. Supply chains come in all shapes and sizes — airlines procure food for passengers, banks move customer money, and most businesses move goods in some form. If your supply chain includes the use of heavy vehicles, CoR obligations apply to you.

Many businesses assume the responsibility sits entirely with their transport provider. That is a dangerous misconception. The two most common statements MAEZ hears when reviewing transport risk are:

• "Let me get back to you when we work out what our transport supplier is doing."
• "We leave all the safety up to our transport supplier."

Unfortunately, the people who say this are often at significant risk of prosecution by the National Heavy Vehicle Regulator (NHVR) or Police — simply because they do not understand their own legal liability. The responsibility cannot be delegated. If you engage a transport company within your supply chain, you are expected to actively understand and manage the risks associated with that engagement.

Under the HVNL, the organisation and its executives and directors who participate in running the business must:

• Acquire and keep up to date knowledge about the safe conduct of transport activities.
• Gain an understanding of the nature of the entity's transport activities and the hazards and risks — including public risk — associated with those activities.
• Ensure the entity has and uses appropriate resources to eliminate or minimise those hazards and risks.
• Ensure the entity implements processes to eliminate or minimise hazards and risks, including receiving and responding to information about incidents.
• Verify that those resources and processes are being provided, used, and implemented.

This is drawn directly from the executive duty provisions in the HVNL, which sit alongside the principle of shared responsibility (Part 1A.1) and the primary duty provisions (Part 1A.2). The duty cannot be delegated; it rests solely with those who actively participate in running the business.

In practical terms, this means you need documented evidence that you understand your transport risks, have allocated resources to manage them, and have processes in place to respond when issues arise. For a structured risk review, see Chain of Responsibility Consulting.

Some business owners worry that training staff is a waste of time because employees may leave. The opposite is closer to the truth — a lack of training creates direct risk. WorkSafe authorities across Australia have published numerous prosecution examples where businesses were fined — sometimes into the millions — because employees were not trained on tasks that posed foreseeable risks.

In several cases, significant injuries were attributed to executives or business owners not ensuring simple preventive measures. Chain of Responsibility is an onerous obligation, but it is the law. Training your staff on CoR principles means you have more people watching for potential issues and risks — before they become incidents, fines, or criminal charges.

Beyond compliance, good safety records can reduce insurance premiums, improve staff retention, and demonstrate due diligence if you are ever audited or investigated. MAEZ offers targeted Chain of Responsibility training and a practical CoR training course designed for specific roles within your business.

A compliance audit gives you a clear picture of where your gaps are before an enforcement agency or accreditation body finds them for you. When choosing an auditor, make sure the following elements are in place:

• The audit is based on industry-approved codes of practice.
• The auditor can show professional indemnity insurance.
• The auditor can benchmark your results so your team understands the impact.
• The auditor provides a full and comprehensive proposal outlining expectations.
• The auditor has genuine industry experience and offers practical, not purely theoretical, advice.

Taking the time to select the right auditor prevents the costly outcome of acting on poor or incomplete advice. If you would like to discuss your audit options, contact MAEZ for a no-obligation conversation.

Policies or business rules allow your employees to understand what must occur when training and experience are not enough. It is up to the business to decide which policies to implement, based on foreseeable risks and real operational experience. The NHVR is clear that every transport task must have a safety system.

Once implemented, a safety system helps a business identify where the biggest risks lie and put processes in place to reduce the potential for injury or death. However, simply having policies on paper does not make commercial or legal sense unless they are actively delivered to the people who need them.

Key principles for effective policies

• A policy must be written, reviewed, and signed off by those who work where the risk is present.
• Hidden policies on a computer are as useless in court as having no policy at all.
• Standards must be delivered to employees in a specific, digestible manner.
• Delivery is critical — a policy that no one reads or follows will not protect you.

When standards are properly applied, they not only document your risks but also help you run a more efficient operation.

A safety system must reduce on-road risks so that heavy vehicles do not damage infrastructure or endanger the public. To do that effectively, an organisation must actively manage the on-road risks a transport task presents.

Speed is a clear example. A driver is unlikely to return to the yard and report when, where, and why they were speeding. No one starts the day intending to cause harm, but speed can kill — and if it occurs in your supply chain, your organisation is at risk of contravening the legislation and incurring significant fines.

The most efficient way to manage speed is through GPS telematics and the data such systems produce. The law requires you to ensure, so far as reasonably practicable, that risks to infrastructure and the public are removed or minimised.

What to look for in telematics

• The system does not need to record video — it needs to produce reliable, actionable data.
• Not all GPS units will let you demonstrate CoR compliance.
• Good telematics can confirm your fleet is operating within speed limits and doing what you need it to do, when you need it done.
• Data quality matters — unreliable data will not hold up under scrutiny.

Reliable data is not just a technical convenience — it is part of the evidence trail that shows you are actively managing your transport risks.

MAEZ has helped hundreds of Australian businesses with their Chain of Responsibility obligations. Whether you are starting from scratch or tightening an existing system, the approach can be practical rather than costly. MAEZ helps Australian businesses turn CoR, HVNL, WHS, transport safety, and chartered risk obligations into practical training, advisory, audit, and implementation pathways.

Ways MAEZ can support you

• Chain of Responsibility training targeted at specific roles in your business.
• CoR consulting for a structured risk review.
• Practical guidance on telematics, policies, and evidence.

If you need help with any of the elements above, MAEZ is here as your Chain of Responsibility partner. Contact us to discuss where to start.