What Is a Real Risk of Significant Harm?
“Real risk of significant harm” is a critical threshold used across Australian law, workplace safety, child protection, and refugee determination. It refers to a reasonable possibility—based on facts or credible evidence—that a person may suffer serious harm. It is not about vague fears or hypothetical risks but rather about substantiated concerns that warrant action.
Legal Definition in Australian Context
In Australian law, “real risk of significant harm” features prominently in child protection legislation, the Privacy Act 1988, and refugee law. In New South Wales (NSW), for example, child protection statutes specify that a report must be made when a child is at a real risk of significant harm (ROSH). Similarly, under the Notifiable Data Breaches scheme, a data breach must be reported if it poses a real risk of serious harm to an individual (Office of the Australian Information Commissioner).
The Difference Between Risk and Significant Harm
- Risk implies a possibility of harm.
- Significant harm refers to serious consequences such as physical injury, emotional trauma, data misuse, or rights violations.
- Real risk means the likelihood of that harm occurring is credible and based on observable indicators or evidence.
Example: A child missing multiple days of school with visible bruising may meet the real risk threshold. However, a single missed day without further evidence might not.
Workplace and Employment Implications
The concept of real risk also plays a vital role in protecting employees across industries.
Work Health and Safety Considerations
Under Australia’s Work Health and Safety (WHS) laws, employers have a duty to eliminate or minimise risks to health and safety so far as is reasonably practicable. A real risk of significant harm may involve:
- Unsafe machinery
- Bullying and harassment
- Exposure to harmful chemicals or unsafe environments
Failure to manage such risks may result in investigations or penalties by Safe Work Australia.
Employee Data Breaches and Privacy Obligations
According to the OAIC, a notifiable data breach occurs when:
- There is unauthorised access to or disclosure of personal information.
- It is likely to result in serious harm.
“Serious harm” may include financial loss, identity theft, or reputational damage. Employers must notify both the OAIC and affected individuals when such breaches occur.
Real Risk of Harm in Refugee and Humanitarian Protection
Australia’s Protection Obligations
The Department of Home Affairs defines a person as needing protection if they face a real risk of significant harm in their home country due to:
- Torture
- Inhumane treatment
- Arbitrary deprivation of life
- Cruel or degrading treatment
This threshold is used to evaluate refugee and humanitarian visa applications.
Examples of Real Risk from UNHCR or Tribunal Cases
- A woman fleeing forced marriage and honour-based violence in a country with no legal protection may be found to face a real risk of significant harm.
- A person from a war-torn region where civilians are routinely targeted could meet the threshold for refugee protection under Australian law.
See Australia’s protection obligations for further details.
Child Protection and Duty of Care
Indicators of Harm in Children
Under state laws like those in NSW and VIC, professionals must report to authorities when they suspect a child is at real risk of significant harm. Indicators include:
- Unexplained injuries
- Poor hygiene or malnutrition
- Disclosure of abuse or neglect
- Witnessing domestic violence
Reporting Obligations for Workers
Professionals such as teachers, early childhood educators, and health workers are mandatory reporters. If they have reasonable grounds to believe a child is at real risk, they must report to child protection authorities.
For those looking to understand and meet their reporting responsibilities, completing child protection training is essential.
Recognising and Responding to Real Risk in Daily Life
Risk Response Frameworks for Workers
In workplaces, early response to potential harm is crucial. A typical risk response framework includes:
- Identification of possible harm
- Assessment of the risk
- Escalation to management or a safety officer
- Documentation of evidence and response
When to Seek Legal or Government Support
Depending on the issue:
- Contact the OAIC for privacy breaches
- Reach out to Safe Work Australia for safety concerns
- Report to state child protection agencies for suspected harm to a child
- Seek legal advice for complex or high-risk situations
Real Risk vs Perceived Risk: Understanding the Threshold
Importance of Evidence and Context
Perception alone does not meet the “real risk” standard. Evidence must be:
- Objective
- Credible
- Contextually relevant (e.g., prior incidents, medical records, history of violence)
For example, feeling uncomfortable around a person isn’t enough. However, documented threats or a restraining order would likely meet the threshold.
Examples of Cases Where Real Risk Was or Was Not Met
- Met: A teacher reports a student showing repeated signs of physical abuse with corroborating reports from peers.
- Not met: A report based solely on hearsay without supporting evidence may not trigger action under the “real risk” standard.
FAQ
What does “real risk of significant harm” mean in simple terms?
A serious and likely chance that someone will be hurt or harmed in a meaningful way.
How is a “real risk” different from a general risk or worry?
A real risk is backed by evidence or strong indicators, not just feelings.
What are examples of real risk in the workplace?
Faulty equipment, repeated bullying, or exposure to harmful substances.
Who decides what qualifies as significant harm?
It depends on the context: child protection officers, the OAIC, WHS inspectors, or courts.
Do data breaches count as significant harm?
Yes, especially if they involve sensitive information that can be misused.
What happens if you report a risk that turns out to be unfounded?
If made in good faith, there are no penalties. It is better to report and be wrong than ignore and allow harm.
Is there a legal penalty for ignoring a real risk of harm?
Yes, especially for mandatory reporters and employers. Failing to act can result in legal liability.
What is the “real risk” threshold in refugee cases?
It involves credible threats to life, safety, or freedom in the person’s home country.
How do child protection agencies use this standard?
They use it to assess reports and decide whether to intervene.
Can employees be held liable for not reporting real risk?
Yes, particularly if they are in roles with a duty of care or are mandatory reporters.
Key Points
- “Real risk of significant harm” is a legal and ethical standard used in multiple Australian settings.
- It applies to data privacy, child safety, workplace safety, and refugee protection.
- The threshold is evidence-based and requires professional judgement.
- Recognising and responding to real risk is a duty of care for many employees.
- Training, such as child protection training, is essential for proper understanding and action.
