From 1 August 2026, the amended Heavy Vehicle National Law (HVNL) will commence, introducing mandatory Safety Management Systems (SMS), strengthened Chain of Responsibility (CoR) duties, and heightened executive officer liability. Australian heavy-vehicle operators, consignors, consignees, loaders, packers, and drivers all carry shared responsibility for safety under the existing law — the 2026 amendments raise the bar on what evidence and systems are expected. Training, accreditation readiness, and a documented SMS are the three pillars operators need in place before the changes take effect.
Key takeaways
The amended HVNL commences on 1 August 2026, shifting the regulatory framework toward risk-based safety management and mandatory SMS requirements across heavy-vehicle operations.
- The existing HVNL already imposes a primary duty on every CoR party under section 26C, and an explicit duty on executives of legal entities under section 26D — these duties are not new, but enforcement and expectations will intensify.
- Category 1 offences (section 26F) apply where a breach exposes an individual to a risk of death or serious injury; Category 2 offences (section 26G) apply where a person fails to comply with a duty without that elevated risk threshold.
- The NHVR has published a 2026 Master Code to help CoR parties meet their primary duty — operators should align their systems to it now rather than waiting for commencement.
- Chain of Responsibility training is the foundation of both reasonable-defence evidence and NHVAS accreditation readiness — without documented, current training, operators cannot demonstrate that they have taken all reasonable steps.
What is changing under the HVNL 2026 amendments?
The Heavy Vehicle National Law as it currently stands — applied as a law of Queensland and adopted by participating jurisdictions — already establishes the Chain of Responsibility framework, primary duties, and fatigue management obligations. The 2026 amendments, commencing 1 August 2026, represent the most significant overhaul in over a decade.
Key changes expected under the amended HVNL include:
**Mandatory Safety Management Systems**: SMS will move from being a best-practice and NHVAS-linked option to a broader regulatory expectation across heavy-vehicle operations.
- **Risk-based safety assurance**: The regulator's approach will increasingly focus on whether operators can demonstrate proactive risk identification and mitigation, not just retrospective compliance.
- **Strengthened CoR duties**: The shared-responsibility principle under section 26A and the principles applying to duties under section 26B remain, but the amendments sharpen what is expected of each party in the chain.
- **Increased penalties and enforcement powers**: Penalties for breaches have increased, and the NHVR's enforcement toolkit has expanded.
The NHVR has indicated that the amended HVNL will cover accreditation, fatigue management, and safety assurance. Operators who treat 1 August 2026 as the starting point for preparation are already behind — the systems, training, and evidence need to be in place and functioning before that date.
What is the Chain of Responsibility primary duty under the HVNL?
Under Part 1A.2 of the current HVNL, section 26C establishes the **primary duty**. Every party in the CoR chain has a duty to ensure, so far as is reasonably practicable, the safety of transport activities. This duty is not limited to the driver or the operator — it extends to every person whose actions or inactions can influence safety outcomes.
Operationally, this means:
A **consignor** must not dispatch goods in a way that creates pressure on a driver to speed, exceed fatigue limits, or overload a vehicle.
- A **packer** must ensure goods are packed and secured so they do not shift or cause mass or dimension breaches.
- A **loader** must ensure the vehicle is loaded within legal mass and dimension limits and that load restraint is adequate.
- A **driver** must operate within work and rest hours, maintain accurate work diary records, and not drive while impaired by fatigue.
- An **operator** must maintain vehicles, manage driver schedules, and ensure systems are in place to prevent fatigue, speed, and load-related breaches.
- A **consignee** must not impose contractual terms or schedules that would cause or encourage a driver to breach the HVNL.
Section 26E also prohibits requests and contracts that would induce a breach — meaning a contract clause demanding delivery within an impossible timeframe is itself a violation of the HVNL.
Who are the CoR duty holders and what do they each owe?
The Chain of Responsibility encompasses every party who has influence over the transport task. Under the principle of shared responsibility (section 26A), each party shares responsibility for safety — liability is not confined to the party immediately involved in the breach.
The key CoR parties recognised under the HVNL include:
| CoR Party | Core Operational Obligation | |---|---| | Consignor | Ensure dispatch practices do not create speed, fatigue, or overload pressure | | Consignee | Ensure receiving schedules and contracts do not induce HVNL breaches | | Packer | Ensure goods are packed to prevent shifting, mass, or dimension issues | | Loader | Ensure vehicle is loaded within legal limits with adequate restraint | | Driver | Comply with work/rest hours, maintain work diary, drive unimpaired | | Operator | Maintain vehicles, manage schedules, implement safety systems | | Scheduler | Ensure rosters allow legal work and rest hours without coercion | | Executive officer | Exercise due diligence to ensure the entity complies with its HVNL duties |
For a deeper explanation of each duty holder's obligations, see [Chain of Responsibilities: What Australian HVNL Duty Holders Need to Understand](/resources/chain-of-responsibilities-duty-holders-australia/).
What is the executive officer duty under section 26D?
Section 26D of the HVNL imposes a direct duty on executives of legal entities. An executive of a corporation that is a party in the CoR chain must exercise due diligence to ensure the corporation complies with its duty to ensure safety.
This is not a passive obligation. Due diligence under section 26D means executives must:
Acquire and keep up to date knowledge of the corporation's safety obligations under the HVNL.
- Gain an understanding of the hazards and risks associated with the corporation's transport activities.
- Ensure the corporation has and uses appropriate resources and processes to eliminate or minimise those risks.
- Ensure the corporation has and uses appropriate processes for receiving and considering information regarding incidents, hazards, and risks.
- Ensure the corporation has and implements processes for complying with its HVNL duties.
Executives who fail this duty can be held personally liable. Section 636 of the HVNL addresses the liability of executive officers of corporations, reinforcing that personal liability cannot be delegated away.
For executives and senior managers, dedicated training is critical. See [Chain of Responsibility Training for Executives and Managers: A Practical Guide for Australian Transport Operators](/resources/chain-of-responsibility-training-executives-managers/) for a targeted breakdown.
What are Category 1 and Category 2 offences under the HVNL?
Under Part 1A.3 of the HVNL, breaches of duty are categorised by severity:
**Category 1 offence (section 26F)**: Applies where a person breaches a duty and that breach exposes an individual to a risk of death or serious injury or illness. This is the most serious offence category and carries the highest penalties.
- **Category 2 offence (section 26G)**: Applies where a person fails to comply with a duty, but the breach does not reach the Category 1 risk threshold.
The distinction matters operationally because it determines both the penalty exposure and the regulator's enforcement approach. A fatigue breach that leads to a driver falling asleep at the wheel could escalate from a Category 2 to a Category 1 offence if the systems failures that allowed it are systemic and the risk was foreseeable.
Section 632 of the HVNL also addresses how courts decide whether a person ought reasonably to have known something — meaning ignorance of a risk is not a defence where the person should have been aware of it through reasonable diligence.
What is the 2026 Master Code and how does it help operators?
The NHVR has published a 2026 Master Code as a key safety tool to help parties in the Chain of Responsibility meet their primary duty under the HVNL. The Master Code provides a framework that operators can adopt to demonstrate they have taken reasonable steps to identify and manage safety risks.
Under section 632A of the HVNL, a code of practice can be used in proceedings — meaning that if an operator can demonstrate alignment with the Master Code, this can serve as evidence of reasonable steps. Conversely, failure to follow a relevant code does not automatically establish liability, but it may be considered by a court in determining whether a duty was breached.
Operationally, the Master Code gives operators a structured reference point for:
Documenting hazard identification and risk assessment processes.
- Establishing maintenance schedules and vehicle inspection regimes.
- Managing fatigue, speed, and load-related risks.
- Ensuring CoR training is current and role-specific.
- Building the evidence trail needed for NHVAS accreditation and regulatory engagement.
How does NHVAS accreditation fit with CoR readiness?
NHVAS (National Heavy Vehicle Accreditation Scheme) accreditation is one of the most practical ways an operator can demonstrate compliance with CoR obligations. Accreditation under NHVAS requires operators to maintain documented systems for maintenance management, fatigue management, and mass management — depending on the modules accredited.
The connection between NHVAS and CoR readiness is direct:
NHVAS accreditation requires operators to maintain records and systems that double as CoR evidence.
- The NHVAS audit process tests whether systems are not just documented but actually followed.
- Accreditation signals to the NHVR and other CoR parties that the operator has a structured approach to safety.
However, NHVAS accreditation alone does not guarantee CoR compliance. Operators still need role-specific training, documented risk assessments, executive due diligence evidence, and a functioning SMS. The 2026 amendments will further align NHVAS expectations with the broader mandatory SMS framework.
MAEZ helps operators prepare for and maintain NHVAS accreditation through [Chain of Responsibility Consulting](/cor-consulting/) that closes gaps before audit, not after.
What are the current fatigue management and work diary obligations?
Chapter 6 of the HVNL governs vehicle operations relating to driver fatigue. Under the current law, drivers of fatigue-regulated heavy vehicles must comply with work and rest hour limits and maintain a work diary.
Key obligations include:
**Work diary requirement**: Under section 293, a driver of a fatigue-regulated heavy vehicle must carry and complete a work diary. The information to be recorded is specified under the national regulations, and drivers must record information immediately after starting work (section 297).
- **Record keeper obligations**: Under section 321, record keepers must maintain the records required by the HVNL. Section 322 sets out general requirements about drivers giving information to record keepers.
- **False or misleading entries**: Under section 325, false or misleading entries in work records are offences.
- **Stopping a fatigued driver**: Under section 540, an authorised officer can require a driver to stop working if impaired by fatigue.
- **Work diary not produced**: Under section 541, an authorised officer can require a driver to stop working if the work diary is not produced or is unreliable.
Electronic Work Diary (EWD) technology is referenced in the HVNL (for example, section 324A addresses record keepers giving information from electronic work diary), but MAEZ's current capability focuses on fatigue and driver diary checks — not a live EWD system.
Fatigue management is one of the highest-risk areas for CoR breaches because multiple parties can contribute: schedulers who set unrealistic rosters, consignors who impose tight delivery windows, and operators who fail to monitor driver work diaries. Training is essential to ensure each party understands their role.
Why is Chain of Responsibility training the foundation of readiness?
Training is not a tick-box exercise — it is the evidence that an operator has taken reasonable steps to ensure each party in the chain understands and can discharge their duty. Under the HVNL's reasonable-practicability standard, an operator that has not provided role-specific CoR training will struggle to demonstrate that it has met its primary duty.
Effective CoR training should cover:
**The primary duty** (section 26C) and what it means for each role in the chain.
- **Executive due diligence** (section 26D) for managers and directors.
- **Prohibited requests and contracts** (section 26E) — including how to identify and refuse unsafe demands.
- **Offence categories** (sections 26F and 26G) and what triggers personal liability.
- **Fatigue management** obligations under Chapter 6, including work diary requirements.
- **Transport documentation** obligations, including the prohibition on false or misleading transport documentation under section 186.
- **Container weight declarations** and the duty of the responsible entity under section 190.
MAEZ delivers [Chain of Responsibility Training for Australian Operators](/chain-of-responsibility-training/) through [Training](/training/) at cortraining.com.au, with courses tailored to drivers, schedulers, managers, and executives. For a structured course pathway, see the [Chain of Responsibility Course](/chain-of-responsibility-course/).
How does CoRGuard support SMS and evidence requirements?
CoRGuard, available at chainresponsibility.au, is the SaaS Safety Management System platform that MAEZ uses to help operators build and maintain documented evidence of their CoR compliance.
CoRGuard supports operators by:
Providing a structured SMS framework aligned with the 2026 Master Code.
- Capturing training records, risk assessments, and maintenance evidence in a single platform.
- Creating an auditable evidence trail that supports NHVAS accreditation and regulatory engagement.
- Enabling role-based access so executives, managers, and drivers can each see and discharge their obligations.
CoRGuard does not remove liability — software cannot guarantee compliance. What it does is provide the structured evidence infrastructure that operators need to demonstrate they have taken all reasonable steps. Combined with MAEZ's advisory and training, it forms the implementation path from gap identification to ongoing compliance.
For operators who need a chartered risk assessment before implementing software, see [Using a Chartered Risk Lens to Close Chain of Responsibility Gaps in Australian Transport](/resources/chartered-risk-chain-of-responsibility-gap-review/).
Practical next steps: How to prepare for HVNL 2026 now
Operators who wait until August 2026 to start preparing will be acting after the law has already changed. Here is a practical sequence MAEZ recommends:
1. **Conduct a CoR gap review** — Assess your current systems against the HVNL primary duty, executive duty, and the 2026 Master Code. Identify where training, documentation, or processes are missing. 2. **Deliver role-specific CoR training** — Ensure every party in the chain — drivers, schedulers, loaders, consignors, consignees, managers, and executives — has current, documented training. Use [About Chain of Responsibility](/about-chain-of-responsibility/) as a starting reference. 3. **Build or upgrade your SMS** — Whether through CoRGuard or a structured manual process, ensure your Safety Management System is documented, implemented, and auditable. 4. **Prepare for NHVAS accreditation or re-accreditation** — Align your systems with NHVAS module requirements and schedule a pre-audit gap assessment. 5. **Review fatigue management practices** — Ensure work diary checks, roster auditing, and driver fitness processes are in place and documented. 6. **Engage expert advisory** — [Contact MAEZ](/contact-us/) to scope a tailored readiness plan, or start at [Stop losing sleep over transport compliance](/) to understand how MAEZ closes the gap.
The operators who sleep soundly are not the ones with no risks — they are the ones who have identified their risks, trained their people, documented their systems, and can produce evidence when the regulator asks.
FAQs
### When do the HVNL 2026 changes take effect?
The amended Heavy Vehicle National Law is scheduled to commence on 1 August 2026. Until that date, the current HVNL remains in force. Operators should treat the period before commencement as preparation time — not a waiting period.
### Who is in the Chain of Responsibility under the HVNL?
The CoR includes consignors, consignees, packers, loaders, drivers, operators, schedulers, and executives of legal entities involved in heavy-vehicle transport. Under the principle of shared responsibility (section 26A), each party shares responsibility for safety based on their role and capacity to influence.
### What is the primary duty under the HVNL?
Under section 26C, every party in the CoR chain has a primary duty to ensure, so far as is reasonably practicable, the safety of transport activities. This includes preventing fatigue, speed, mass, dimension, and load-restraint breaches.
### What is the executive duty under section 26D?
Executives of legal entities that are CoR parties must exercise due diligence to ensure the entity complies with its HVNL duties. This includes acquiring safety knowledge, understanding risks, ensuring resources and processes are in place, and verifying compliance. Failure can result in personal liability.
### Is CoR training mandatory under the HVNL?
The HVNL does not explicitly mandate training by name, but the primary duty's reasonable-practicability standard means that operators without documented, role-specific training cannot demonstrate they have taken all reasonable steps. NHVAS accreditation also requires evidence of training. Effectively, training is a compliance necessity.
### Does CoRGuard guarantee compliance?
No. CoRGuard is a SaaS platform that provides structured SMS infrastructure and evidence capture. It supports compliance but does not remove liability or guarantee that a duty holder has met every obligation. MAEZ's advisory and training complement CoRGuard to close the gap between software and genuine compliance readiness.
### How often should CoR training be refreshed?
Best practice is to refresh CoR training at least annually, and whenever there is a change in role, a change in legislation (such as the HVNL 2026 amendments), or after a significant incident. Training records should be documented and accessible for audit.