When regulators investigate a workplace incident or when a prosecution unfolds before an occupational health and safety tribunal, the central question is rarely whether something went wrong. The injury, the illness, the fatality—these are already established facts by the time enforcement officials arrive or charges are laid. What matters in those moments is whether the employer did everything reasonably practicable to prevent the harm that occurred. This concept of due diligence operates as both a standard of conduct and a legal defence, and understanding how courts and regulators assess it is essential for any person responsible for workplace safety in Canada. The evaluation is not a simple checklist exercise. Adjudicators look at patterns, systems, responses, documentation, and culture. They examine what existed on paper and what happened on the ground. They consider what a reasonable employer in the same circumstances would have done, and they scrutinize whether the organization's actions matched its stated commitments. For human resources professionals, safety officers, and business owners, grasping these evaluative criteria transforms due diligence from an abstract legal concept into a tangible set of organizational practices.
The legal foundation for due diligence in occupational health and safety flows from enabling legislation across every Canadian jurisdiction. The Canada Labour Code governs federally regulated workplaces including banking, telecommunications, interprovincial transportation, and federal Crown corporations, establishing employer duties to ensure health and safety and providing for due diligence as a defence to regulatory charges. Provincial legislation operates similarly. In British Columbia, the Workers Compensation Act and its accompanying Occupational Health and Safety Regulation create the framework. Alberta's Occupational Health and Safety Act, Saskatchewan's Saskatchewan Employment Act with its occupational health and safety provisions, Ontario's Occupational Health and Safety Act, and Quebec's Act respecting occupational health and safety each establish duties and enforcement mechanisms within their respective boundaries, as of the date of authorship. Despite variations in language and structure, these statutes share a common architecture: they impose positive duties on employers, they create offences for failing to meet those duties, and they recognize that an employer who has taken all reasonable precautions may avoid liability even when an incident occurs. This defence requires proof that the employer exercised due diligence—that they took every reasonable step to prevent the contravention or the harm.
Regulatory officials and adjudicators approach due diligence assessments with a practical lens shaped by the recognition that perfect safety is impossible but reasonable safety is achievable. They understand that workplaces involve inherent risks, that human error will occur, and that employers cannot control every variable. What they expect is a demonstrated commitment to identifying hazards, implementing controls, training workers, and responding appropriately when problems arise. The standard is not perfection but reasonableness, measured against what a prudent employer in the same industry, with the same knowledge and resources, would have done. This reasonableness standard contains both subjective and objective elements. Adjudicators consider the specific circumstances of the employer—their size, their industry, their known hazards, their previous experience with similar risks—while also measuring conduct against external benchmarks of good practice. An employer cannot claim ignorance of widely known hazards in their sector, nor can they argue that compliance was too expensive when the cost of controls would have been modest relative to the risk.
The documentation dimension of due diligence cannot be overstated. When investigators examine a workplace after an incident, they look for evidence of what existed before the harm occurred. Verbal assurances that training happened, that inspections were conducted, that hazards were addressed—these carry little weight without contemporaneous records. Adjudicators recognize that memory is fallible, that self-interest can color recollection, and that what people remember having done often differs from what actually occurred. Written records created in the ordinary course of business, before any incident made documentation strategically important, provide the most credible evidence of an employer's safety practices. This means inspection logs with dates and signatures, training records showing who attended what sessions and when, hazard assessments with identified risks and implemented controls, maintenance records for equipment, incident investigation reports, and corrective action tracking. The absence of such documentation creates an inference that the underlying activity did not occur or did not occur systematically. Conversely, comprehensive records demonstrate organizational commitment and create the evidentiary foundation for a due diligence defence.
Regulators examine the structure and resources of an employer's safety program with attention to whether the organization has established appropriate accountability. They look for clarity about who bears responsibility for identifying hazards, who has authority to implement controls, who ensures compliance with established procedures, and who addresses deficiencies when they arise. This accountability structure should be documented in job descriptions, organizational charts, and safety program documents. It should be communicated through training and reinforced through supervisory practices. An organization where safety responsibilities diffuse across multiple people without clear ownership, or where front-line supervisors lack authority to address hazards they identify, demonstrates structural weaknesses that undermine due diligence. The expectation is that someone—ideally multiple people at appropriate levels—owns safety as a defined responsibility with corresponding authority and resources. In smaller organizations, this accountability may concentrate in the business owner or a designated manager. In larger enterprises, it typically distributes across safety committees, departmental supervisors, and dedicated occupational health and safety professionals. The structure matters less than the clarity and genuine implementation of accountability.
The quality of hazard identification and risk assessment receives close scrutiny in any due diligence evaluation. Adjudicators expect employers to have systematic processes for identifying what can go wrong in their workplaces and for evaluating the likelihood and severity of potential harms. These assessments should be documented, they should be reviewed periodically, and they should respond to changes in equipment, processes, personnel, or knowledge. An employer who conducts a hazard assessment once and never revisits it demonstrates a static approach inconsistent with the dynamic nature of workplace risk. An employer who fails to identify obvious hazards known throughout their industry reveals a lack of diligence in the assessment process itself. The assessment should also differentiate among risks, recognizing that some hazards demand immediate and comprehensive controls while others may be addressed through less intensive measures. This prioritization should be rational and documented, with high-risk hazards receiving correspondingly robust controls.
Control implementation is where assessment translates into action, and regulators examine whether employers have moved beyond identification to actual prevention. The hierarchy of controls—elimination, substitution, engineering controls, administrative controls, and personal protective equipment—reflects established occupational health and safety principles that adjudicators apply when evaluating employer conduct. An employer who relies solely on personal protective equipment when engineering controls were feasible and affordable fails to meet the standard of reasonable precaution. An employer who identifies a hazard but delays implementing controls without legitimate justification demonstrates a gap between knowledge and action that undermines due diligence. The controls themselves should be appropriate to the risk, consistently applied, and monitored for effectiveness. Documentation should show not just what controls were implemented but how they were maintained, whether they remained effective, and how compliance was ensured.
Training and supervision constitute twin pillars of any due diligence defence. Regulators expect employers to ensure that workers understand the hazards of their work, the controls in place to address those hazards, and the procedures they must follow to perform their tasks safely. This training should be documented with records showing content, delivery method, attendance, and comprehension verification where appropriate. It should be updated when circumstances change and refreshed periodically to maintain awareness. Supervision reinforces training through observation, correction, and enforcement. An employer who trains workers but never checks whether they follow safe procedures creates a gap between instruction and practice that undermines the training's value. Adjudicators look for evidence that supervisors actively monitored compliance, corrected unsafe behaviour when observed, and escalated concerns when necessary. This supervisory function requires training for supervisors themselves, who need to understand their safety responsibilities and have the skills to fulfill them.
The concept of the internal responsibility system shapes how adjudicators evaluate employer conduct across common law provinces, while Quebec's legislative framework emphasizes similar participatory principles through its distinct mechanisms. Workers have rights to participate in workplace safety, to refuse unsafe work, and to receive information about hazards. Employers must facilitate this participation through joint health and safety committees, worker representatives, and effective communication channels. Regulators examine whether employers have established these participatory mechanisms, whether they function genuinely rather than nominally, and whether worker input actually influences safety decisions. A joint committee that meets rarely, produces no recommendations, and exists primarily on paper fails to demonstrate the kind of worker engagement that supports due diligence. Conversely, active committees that conduct inspections, review incidents, make recommendations, and see those recommendations implemented demonstrate a functioning internal responsibility system that strengthens the employer's position.
Response to incidents and near-misses reveals much about organizational commitment to safety. Adjudicators expect employers to investigate occurrences, identify root causes, and implement corrective actions. Incident investigation should be systematic rather than cursory, looking beyond immediate causes to underlying systemic factors. A worker who slips on a wet floor presents an immediate cause that might be addressed through better housekeeping, but root cause analysis might reveal inadequate cleaning schedules, insufficient staffing, poor drainage design, or lack of appropriate footwear. Effective investigation identifies these systemic factors and implements corrections at the appropriate level. Documentation should show what was investigated, what was found, what corrective actions were implemented, and how their effectiveness was verified. An employer who experiences repeated similar incidents without implementing effective corrections demonstrates a failure to learn from experience that undermines due diligence.
Compliance with regulatory requirements provides a baseline that employers must meet, but due diligence often demands more than minimum compliance. Regulations establish floors, not ceilings, and adjudicators recognize that reasonable precaution may require measures beyond what regulations specifically mandate. An employer who meets every regulatory requirement but ignores obvious hazards not specifically addressed by regulation fails to exercise due diligence. The standard is what a reasonable employer would do, not merely what regulations require. This said, regulatory compliance remains important, and violations create prima facie evidence of failure to exercise due diligence. Employers should maintain awareness of applicable regulations, monitor for changes, and ensure systematic compliance through audits and inspections.
Consider a manufacturing operation in Hamilton, Ontario, operating a facility that produces precision metal components for the aerospace industry. The company employs approximately one hundred and twenty workers across three shifts, using computer-controlled machining equipment, welding stations, coating processes, and assembly operations. In March 2025, a worker suffers a severe hand injury when a machine guard fails during a routine operation. The guard, designed to prevent access to moving parts during machine cycles, had been reported as malfunctioning three weeks earlier. A maintenance request had been submitted, but no repair had been completed. On the day of the incident, the worker had bypassed the guard's interlock system to continue production, a practice that supervisors had observed but not corrected on previous occasions.
When regulatory investigators arrived following the injury report, they examined the company's safety management system with attention to multiple dimensions of due diligence. They reviewed the company's hazard assessment for machining operations, finding that it identified guarding failures as a significant risk and specified lockout procedures and guard maintenance as primary controls. They examined maintenance records, discovering that the malfunctioning guard had been reported on February 28, 2025, through the company's computerized maintenance management system. The work order remained open, assigned but not completed, with no documented explanation for the delay. They reviewed training records, finding that the injured worker had completed machine safety training fourteen months earlier, including instruction on guard requirements and the prohibition against bypassing interlocks. They examined supervisor documentation and found no records of progressive discipline or formal correction for workers bypassing guards, despite testimony from multiple workers that this practice was known to occur.
The investigators also examined the company's joint health and safety committee records. The committee met monthly as required, and minutes showed that machine guarding had been discussed at two meetings in the previous year. A recommendation for enhanced preventive maintenance on safety guards had been made eight months earlier but implementation records were absent. The committee co-chairs could not confirm whether the recommendation had been fully implemented or merely acknowledged. The company's senior management had approved capital expenditure for guard replacement on older machines, but the program was scheduled for the following fiscal year and had not yet commenced.
This scenario reveals the multiple dimensions of due diligence assessment in a single incident. The company had established some elements of a safety management system. Hazard assessments existed. Training occurred. A joint committee met regularly. Maintenance systems captured reported problems. However, the gaps proved significant. The delay between hazard reporting and corrective action demonstrated a failure in responsive maintenance. The observed tolerance of guard bypass practices indicated inadequate supervisory enforcement. The committee recommendation that went unimplemented showed a breakdown between worker participation and management response. The scheduled but deferred capital program suggested that known risks were accepted pending future action.
In evaluating this employer's due diligence, an adjudicator would weigh both positive and negative factors. The existence of documented systems would support the employer's position, but the failures within those systems would undermine it. The critical questions would include whether the maintenance delay was reasonable given workload and parts availability, whether supervisors had clear authority and expectation to enforce guard compliance, whether the committee recommendation had received genuine management consideration, and whether interim measures had been implemented pending the capital program. The employer's ability to answer these questions with documented evidence would largely determine the due diligence assessment.
The implications of this scenario extend beyond the specific incident to illuminate broader principles. Regulators and adjudicators look for alignment between stated policies and actual practices. A written prohibition against bypassing guards carries little weight when supervisors observe violations without correction. They examine response times between hazard identification and corrective action, understanding that delays may be reasonable in some circumstances but require justification and interim measures. They assess whether worker participation mechanisms translate into actual influence on safety decisions or merely create an appearance of consultation. They consider whether management demonstrates commitment through resource allocation and priority-setting, not merely through policy statements.
For human resources professionals and safety managers, these evaluative criteria translate into concrete organizational practices. Documentation must be systematic, contemporaneous, and comprehensive. It should capture not just what procedures exist but how they are implemented, monitored, and enforced. When hazards are reported, response should be prompt, and any delays should be documented with explanation and interim protective measures. Training should be recorded with sufficient detail to demonstrate content and comprehension, and refresher training should occur on a reasonable schedule. Supervisors should understand their safety responsibilities and have documented authority to address violations, with records showing that they exercise this authority consistently.
Organizations should conduct periodic internal audits of their safety management systems, examining whether documented procedures match actual practices. These audits should be documented, and findings should generate corrective actions that are tracked to completion. Joint health and safety committees should operate as genuine participatory mechanisms, with recommendations receiving documented management response and implementation records maintained for accepted recommendations. Incident investigations should follow consistent methodology, with root cause analysis that looks beyond immediate circumstances to systemic factors, and corrective actions should be documented and verified.
The investment in these practices serves multiple purposes beyond preparing for potential prosecution. Effective safety management systems prevent incidents, protecting workers from harm and organizations from the direct costs of injuries and illnesses. They create operational efficiencies by reducing disruption from incidents and enforcement activities. They demonstrate organizational values to current and prospective employees, supporting recruitment and retention. And they provide the evidentiary foundation for due diligence should a defence become necessary.
Federal jurisdiction introduces additional considerations for employers in sectors covered by the Canada Labour Code. These workplaces operate under federal occupational health and safety regulations that may differ in specific requirements from provincial counterparts. Federal investigators and adjudicators apply the same fundamental due diligence principles but within the federal regulatory framework. Employers operating across provincial boundaries must navigate the complexity of multiple regulatory regimes, ensuring compliance in each jurisdiction while maintaining consistent safety practices. This challenge is particularly acute for transportation companies, telecommunications providers, and other federally regulated enterprises with operations in multiple provinces.
Quebec's distinct legal framework affects due diligence assessment in that province's workplaces. The Act respecting occupational health and safety establishes duties and mechanisms that parallel but do not replicate common law provincial approaches. The Commission des normes, de l'équité, de la santé et de la sécurité du travail administers the regime with enforcement practices reflecting Quebec's civil law tradition. Employers operating in Quebec must understand the specific requirements of that jurisdiction while recognizing that fundamental due diligence principles—systematic hazard identification, effective controls, worker training, supervisory enforcement, documentation—remain consistent across provincial boundaries.
The practical application of these principles requires ongoing attention rather than periodic compliance efforts. Safety management is not a project to be completed but a continuous process of identification, assessment, control, monitoring, and improvement. Organizations should establish regular review cycles for hazard assessments, updating them when conditions change and validating them through inspections and incident data. Training programs should be refreshed periodically and supplemented with focused instruction when new hazards emerge or incidents reveal knowledge gaps. Maintenance systems should prioritize safety-related work orders and track completion times to identify delays requiring management attention.
Human resources professionals play a crucial role in ensuring that supervisory personnel understand their safety responsibilities and have the skills to fulfill them. This includes selection processes that assess safety leadership capability, training that covers safety supervision requirements, performance management that incorporates safety metrics, and support systems that help supervisors address challenging situations. The documentation of safety responsibilities in job descriptions and performance standards creates accountability and provides evidence of organizational commitment.
Communication channels should enable workers to report hazards without fear of reprisal and with confidence that reports will receive prompt attention. Organizations should track hazard reports and response times, identifying patterns that may indicate systemic problems or barriers to reporting. The joint health and safety committee or worker representative should serve as an additional channel for worker concerns, with established processes for bringing issues to management attention and receiving documented responses.
Corrective action tracking deserves particular attention because it demonstrates whether organizations learn from experience and close identified gaps. When inspections, incidents, or audits identify deficiencies, organizations should document the findings, assign responsibility for corrective action, establish timelines for completion, and verify that actions are actually implemented and effective. A database or tracking system for corrective actions provides both operational management and evidentiary value, showing the systematic approach that supports due diligence.
The standard of reasonable precaution evolves with knowledge and practice. What constituted adequate diligence a decade ago may be insufficient today as understanding of hazards improves and control technologies advance. Employers should maintain awareness of developments in their industries, including best practices, emerging hazards, and evolving regulatory expectations. Industry associations, professional organizations, safety consultants, and regulatory guidance documents provide resources for staying current. Organizations that demonstrate engagement with external knowledge—through training attendance, publication subscriptions, conference participation, and consultant relationships—show the kind of proactive commitment that strengthens due diligence assessment.
The financial implications of due diligence failures extend beyond potential penalties. Workers compensation premiums reflect injury experience, and organizations with poor safety records pay higher costs over extended periods. Civil liability may attach to incidents causing injury, particularly where regulatory violations establish negligence. Reputational harm affects relationships with customers, employees, and communities. Operational disruption from enforcement activities consumes management attention and resources. These costs collectively exceed the investment required for effective safety management, creating a business case that reinforces legal obligations.
For business owners and executives, the due diligence message is that safety requires sustained organizational commitment, not episodic attention. Resources must be allocated for training, equipment, maintenance, and personnel. Priorities must reflect safety values through decisions about production schedules, staffing levels, and capital investment. Culture must be shaped through leadership behaviour, communication, and accountability systems. These commitments create the foundation on which documented systems operate, and without them, even well-designed procedures become empty formalities.
The questions that human resources professionals and safety managers should continuously ask themselves reflect the evaluative criteria that regulators and adjudicators apply. Have we identified the hazards in our workplace and assessed their risks systematically? Have we implemented controls appropriate to those risks, following the hierarchy of elimination, substitution, engineering, administrative measures, and protective equipment? Have we trained our workers effectively and documented that training? Are our supervisors enforcing safe work procedures consistently? When hazards are reported, do we respond promptly? When incidents occur, do we investigate thoroughly and implement corrective actions? Do our joint committees function genuinely? Can we demonstrate all of this through contemporaneous documentation?
Organizations that can answer these questions affirmatively, with documentary evidence supporting their answers, possess the foundation for due diligence. They have created workplaces where injuries are less likely to occur and where, should an incident happen despite reasonable precautions, they can demonstrate the systematic commitment to safety that the law requires. This preparation serves workers by preventing harm, serves organizations by reducing liability, and serves the broader objective of occupational health and safety legislation by incentivizing the practices that make Canadian workplaces safer for everyone who enters them.