Why Mental Health is the New Frontier of Occupational Safety

For most of the 20th century, occupational safety meant hard hats and machine guards, and psychological harm was left to HR. That has changed. Mental health risks at work can be as damaging and as preventable as physical injuries, and regulators and standard setters now treat them that way.

ISO 45003:2021 gives guidance on managing psychosocial risk inside an ISO 45001 system. The EU Strategic Framework on Health and Safety at Work 2021 to 2027 also prioritises mental health.

What are psychosocial hazards and why do they matter?

Psychosocial hazards are aspects of work design, organisation and management that can cause psychological or physical harm. Guidance from the World Health Organization and ISO 45003 groups them as follows:

• Work demands: excessive workload, time pressure, emotional demands from client-facing roles
• Role clarity and control: unclear responsibilities, conflicting demands, little say over how work is done
• Workplace relationships: harassment, bullying, discrimination, poor management support
• Organisational change: restructuring, job insecurity, poor communication during transitions
• Work-life interface: unpredictable hours, always-on culture, inadequate recovery time
• Remote and hybrid work: isolation, blurred boundaries, inadequate digital tools

The cost is large. The WHO estimates that depression and anxiety cost the global economy about USD 1 trillion a year in lost productivity. EU-OSHA identifies work-related stress as one of the most common occupational health problems in Europe. In 2019, the WHO added burnout to ICD-11 as an occupational phenomenon, which means a syndrome linked to chronic workplace stress, not a medical condition.

What does ISO 45003 actually require?

It requires nothing on its own, because it is guidance, not a certifiable standard. It extends the ISO 45001 hazard identification and risk assessment process to cover psychosocial hazards. Key areas:

• Hazard identification: surveys, interviews, focus groups and analysis of sickness absence and turnover.
• Risk assessment: likelihood and severity of harm, with the same logic used for physical hazards.
• Controls: the hierarchy of controls, with elimination and work redesign before individual measures such as employee assistance programmes.
• Worker participation: involve workers in finding hazards and shaping controls, because top-down assessment misses ground-level knowledge.
• Leadership commitment: visible management commitment, including manager training to recognise and respond to distress.

Many organisations default to counselling or mindfulness apps, which treat the effects of psychosocial hazards, not the causes. The standard puts primary prevention first. For wider context, see our post on the HSE management system trends shaping 2026.

Which laws on psychosocial risk apply in Germany, the UK, the US and Canada?

Legal duties come from national OHS law, not from ISO 45003:

• Germany: the Arbeitsschutzgesetz (ArbSchG) requires a risk assessment (Gefährdungsbeurteilung) that includes psychological strain, and administrative fines can reach EUR 30,000 for the most serious breaches under section 25.
• UK: the Management of Health and Safety at Work Regulations 1999 require risk assessment that covers work-related stress, enforced by the Health and Safety Executive (HSE) under the Health and Safety at Work etc. Act 1974. The HSE Management Standards for work-related stress are practical guidance, not law.
• US: no OSHA standard on psychosocial hazards exists. OSHA’s General Duty Clause under the OSH Act of 1970 covers recognised serious hazards, and state workers’ compensation rules vary.
• Canada: CSA Z1003, the national standard for psychological health and safety in the workplace, is voluntary. Binding rules include the federal Work Place Harassment and Violence Prevention Regulations under the Canada Labour Code (in force January 1, 2021) and provincial OHS laws such as those in Ontario and Quebec.
• Other EU states: countries such as France, Belgium and the Netherlands also have explicit psychosocial risk rules.

For sustainability reporting, ESRS S1 asks in-scope companies to disclose workforce health and safety, including work-related ill health and the coverage of the occupational health and safety management system. After Omnibus I (Directive (EU) 2026/470, in force since March 18, 2026), CSRD covers companies with over 1,000 employees and EUR 450 million net turnover. The revised ESRS, adopted on July 3, 2026, apply from financial year 2027, and the second-wave reports fall due in 2028. Assurance is at limited level.

What practical steps should HSE managers take?

Build a structured programme that follows ISO 45003:

• Run a psychosocial risk assessment: use a validated tool such as the Copenhagen Psychosocial Questionnaire (COPSOQ) to set a baseline.
• Analyse leading indicators: review sickness absence, turnover, grievance records and productivity for patterns of accumulating risk.
• Engage workers directly: add focus groups and conversations, especially in teams with elevated indicators.
• Prioritise work design: fix workload, role clarity and management support before investing in individual wellbeing programmes.
• Train line managers: they are the first contact for distressed workers, and training them is among the highest-return measures.
• Integrate into ISO 45001: put psychosocial hazards into the hazard register, risk assessment and management review, not into a separate wellbeing project.

Measurement matters too. Traditional lagging metrics such as injury rates are blind to psychological harm until it is severe, so read our explanation of leading and lagging HSE indicators. Companies that treat psychosocial risk like any other hazard can expect less absence, better retention and a stronger safety culture.

---

Frequently Asked Questions

What is ISO 45003 and is it mandatory?

ISO 45003:2021 is voluntary guidance for managing psychological health and safety within an ISO 45001 system. It is not mandatory and not certifiable, but it helps you meet legal duties such as ArbSchG in Germany or the 1999 Management Regulations in the UK.

What is the difference between a psychosocial hazard and a mental health condition?

A psychosocial hazard is a feature of work, such as excessive workload or bullying, that can cause harm. Conditions such as depression or anxiety can follow exposure, but they also have non-work causes. HSE management addresses hazards at the source, and clinical conditions are handled by occupational health and healthcare services.

Does burnout count as a work-related illness under HSE law?

It depends on the country. The WHO’s ICD-11 classes burnout as an occupational phenomenon, not a medical condition. Legal treatment varies: employers can face liability where they knew of excessive workloads or stress risks and failed to act, and workers’ compensation rules differ between Germany, the UK, the US and Canada. Take local legal advice for a specific case.

How does psychosocial risk management relate to CSRD reporting?

In-scope companies disclose workforce health and safety under ESRS S1, if it is material in their double materiality assessment. CSRD now covers companies with over 1,000 employees and EUR 450 million turnover, and the revised ESRS apply from financial year 2027.

What is the most effective way to reduce psychosocial risk?

Primary prevention, meaning changes to work design, is generally recommended over individual measures. That means reducing excessive demands, clarifying roles, improving management quality and giving workers control over how they work. Counselling and wellbeing apps help as a complement, not a substitute.