When a workplace incident occurs in Canada, whether a serious injury, a fatality, or a dangerous condition that could have caused harm, employers face a critical moment of accountability. Regulatory inspectors arrive, investigations commence, and the question that will ultimately determine the organization's fate is not simply whether something went wrong, but whether the employer did everything reasonably practicable to prevent it. This is the essence of the due diligence defence, a legal concept that sits at the heart of Canadian occupational health and safety law and shapes how employers must think about their obligations long before any incident ever occurs.
The due diligence defence exists because Canadian occupational health and safety legislation operates on a strict liability framework. Unlike criminal law, where the prosecution must prove that an accused intended to commit an offence, regulatory offences under OHS statutes do not require proof of intent. If a violation of the legislation occurs, the employer is presumed to have committed the offence simply by virtue of the violation existing. This might seem harsh, but the rationale is straightforward and deeply embedded in Canadian public policy. Workplaces present inherent risks to human life and safety, and the law places the primary burden of managing those risks on the party with the greatest control over the work environment, which is the employer. The due diligence defence provides a meaningful counterbalance to this strict liability approach. It allows employers who have genuinely committed to safety, who have taken proactive and systematic measures to identify hazards, implement controls, and ensure compliance, to avoid conviction even when something goes wrong.
The legal foundation for the due diligence defence in Canada was established through decades of jurisprudence interpreting regulatory offences and has been codified in various forms across federal, provincial, and territorial occupational health and safety statutes. Under the Canada Labour Code, Part II, which governs federally regulated workplaces including banks, telecommunications companies, interprovincial transportation, and federal Crown corporations, employers have a general duty to ensure the health and safety of every person employed by them. Provincial statutes mirror this fundamental obligation. The Occupational Health and Safety Act in Ontario, as of the date of authorship, imposes duties on employers to take every precaution reasonable in the circumstances for the protection of workers. British Columbia's Workers Compensation Act and its associated Occupational Health and Safety Regulation establish similar obligations, as do Alberta's Occupational Health and Safety Act, Saskatchewan's Occupational Health and Safety Regulations, and Quebec's Act respecting occupational health and safety. While the specific wording varies across jurisdictions, the underlying principle remains consistent throughout the country. Employers must do what is reasonably practicable to protect workers, and the standard against which their conduct will be measured is that of a reasonable and prudent employer acting in similar circumstances.
What the due diligence defence actually requires is best understood as a two-pronged inquiry that examines both the systems an employer has in place and the actual implementation and enforcement of those systems. The first prong concerns the establishment of a system to identify and manage hazards. This means having documented policies, procedures, and protocols that address the foreseeable risks in the workplace. A construction company must have fall protection procedures. A healthcare facility must have protocols for handling biological hazards and preventing patient handling injuries. A manufacturing plant must have lockout and tagout procedures for equipment maintenance. The second prong concerns the active implementation and supervision of those systems. Having a policy manual that sits on a shelf gathering dust will not satisfy the due diligence defence. Employers must demonstrate that they trained workers on the procedures, that they supervised workers to ensure compliance, that they took corrective action when non-compliance was observed, and that they continuously reviewed and improved their systems in response to changing circumstances, new hazards, and lessons learned from near misses or incidents.
The concept of reasonable practicability is central to understanding what the due diligence defence demands. Canadian law does not require employers to guarantee that no harm will ever occur. Such a standard would be impossible to meet and would render the defence meaningless. Instead, employers are required to do what is reasonable given the nature of the hazard, the likelihood of harm, the severity of potential consequences, and the feasibility and cost of preventive measures. A small professional services firm with ten employees working in a low-risk office environment will have different obligations than a large industrial operation with hundreds of workers exposed to heavy machinery, hazardous substances, and working at heights. The reasonable practicability standard is inherently contextual, which means that employers cannot rely on generic, off-the-shelf safety programs and assume they have satisfied their obligations. The systems must be tailored to the actual work being performed, the actual hazards present, and the actual workforce being employed.
The burden of proving due diligence rests squarely on the employer once a regulatory charge has been laid. This is a departure from the general principle in criminal law that places the burden of proof on the Crown throughout. In the OHS context, the Crown need only prove that the violation occurred, which is often straightforward given the physical evidence of an incident. The employer must then affirmatively demonstrate that it exercised all reasonable care to avoid the commission of the offence. This evidentiary burden has profound implications for how organizations must approach safety management on a day-to-day basis. If an employer cannot produce documented evidence of its safety systems, training records, inspection reports, and corrective actions, the due diligence defence will almost certainly fail. The absence of documentation will be interpreted as the absence of the underlying activity. Conversely, thorough and contemporaneous records can provide powerful evidence that an employer genuinely committed to safety even if, despite those efforts, an incident occurred.
Understanding how the due diligence defence operates in practice requires moving beyond abstract legal principles to examine how employers actually encounter it in the real world. The most common scenario is an investigation following a workplace injury. When a worker is seriously hurt, OHS inspectors typically attend the worksite, gather evidence, interview witnesses, and review the employer's safety documentation. If the investigation reveals a contravention of the legislation or regulations, charges may be laid against the employer as a corporate entity, and in many cases, against individual officers and directors who had authority over the workplace. This is a critical point that often surprises business owners and senior managers. The due diligence obligation is personal to individuals in positions of authority, not just a corporate responsibility that can be delegated away. Provincial and federal legislation uniformly imposes duties on officers and directors to take all reasonable care to ensure that the corporation complies with its OHS obligations. An officer who was unaware of hazardous conditions because they never bothered to inquire, who failed to ensure adequate resources were allocated to safety, or who turned a blind eye to known deficiencies will not be able to claim due diligence simply because they were not personally present when the incident occurred.
The penalties for OHS violations in Canada have increased dramatically over the past two decades, reflecting a societal consensus that workplace safety must be taken seriously. Fines for corporations can reach into the hundreds of thousands or even millions of dollars. Under the Canada Labour Code, as of the date of authorship, a corporation convicted of an offence that causes death or serious bodily harm to an employee can face fines of up to $1.25 million per offence. Provincial statutes have similarly enhanced their penalty provisions. Ontario's Occupational Health and Safety Act provides for maximum fines of $2 million for corporations. Beyond the immediate financial penalties, a conviction creates a public record that can damage an organization's reputation, impair its ability to win contracts, and expose it to civil litigation where the finding of regulatory non-compliance can be used as evidence of negligence. For individual officers and directors, the consequences can include personal fines and, in the most serious cases involving criminal negligence causing death or bodily harm under the Criminal Code of Canada, potential imprisonment. The stakes, in other words, are extraordinarily high.
Consider a detailed scenario that illustrates how the due diligence defence might arise in a Canadian workplace context. A mid-sized environmental services company based in Edmonton operates across multiple sites in Alberta and British Columbia, providing waste management and site remediation services to industrial clients. The company employs approximately eighty workers, including field technicians who work directly with hazardous materials and equipment operators who handle heavy machinery. In early March 2026, a worker at a remediation site near Fort McMurray suffers severe chemical burns when a drum containing caustic materials is inadvertently punctured during handling. The worker is airlifted to a hospital in Edmonton and requires extensive medical treatment. Alberta Occupational Health and Safety officers arrive at the site within hours and commence an investigation. Over the following weeks, the investigation reveals several concerning findings. The company had a written hazardous materials handling procedure, but it had not been updated since 2019 and did not address the specific type of chemical storage system present at the Fort McMurray site. Training records showed that the injured worker had completed general hazardous materials awareness training two years earlier but had not received site-specific training on the chemical handling protocols for this particular project. Supervisory inspection logs were sporadic and did not demonstrate any recent verification that workers were following proper drum handling procedures. The personal protective equipment available on site did not include the chemical-resistant suits specified in the company's own procedure manual for handling caustic materials, and no documented risk assessment had been conducted before the project commenced.
Charges are laid against the company and its operations manager under Alberta's Occupational Health and Safety Act for failing to ensure workers were properly trained, failing to provide adequate personal protective equipment, and failing to ensure compliance with the company's own safe work procedures. At trial, the company attempts to mount a due diligence defence. It argues that it had policies and procedures in place, that it provided training, and that the incident was caused by the worker's failure to follow established protocols. The weakness of this defence becomes apparent under scrutiny. The policy that existed was outdated and did not address the actual conditions at the worksite, demonstrating a failure to review and update safety systems in response to changing circumstances. The training provided was generic rather than task-specific, showing a failure to ensure workers understood the particular hazards they would encounter. The absence of regular supervisory inspections meant that the company had no mechanism to identify and correct non-compliant behaviour before it resulted in harm. The missing personal protective equipment meant that even if the worker had wanted to comply with procedures, the necessary tools were not available. And the lack of a project-specific risk assessment meant that the company had not taken the foundational step of identifying the hazards present and determining appropriate controls. Each of these gaps represents a failure in one or both prongs of the due diligence defence, either a deficiency in the system itself or a failure to implement and enforce the system that nominally existed.
What this scenario reveals about employer obligations under the due diligence defence is both instructive and sobering. The defence is not satisfied by having safety policies in a binder or training certificates in a file. It requires a dynamic, integrated, and actively managed approach to safety that begins with hazard identification and risk assessment, proceeds through the development of specific and appropriate controls, includes comprehensive and job-specific training, involves ongoing supervision and inspection to verify compliance, incorporates mechanisms for corrective action when deficiencies are identified, and features continuous review and improvement of the entire system. Each element must be documented contemporaneously, meaning records must be created at the time the activity occurs rather than reconstructed after an incident. Each element must be proportionate to the actual risks present in the workplace, not a generic program borrowed from another industry or downloaded from the internet. And each element must be genuinely implemented, not just documented but actively used as part of day-to-day operations.
The scenario also highlights the importance of management systems thinking in OHS compliance. The individual failures at the Fort McMurray site, including the outdated procedure, the inadequate training, the missing equipment, the absent inspections, and the lack of risk assessment, were not isolated problems. They were symptoms of a broader organizational failure to establish and maintain an effective occupational health and safety management system. Canadian employers across all industries and jurisdictions should understand that due diligence is not a checklist of discrete items but rather an integrated approach to identifying, assessing, controlling, and continuously improving how safety risks are managed. This is why leading frameworks such as CSA Z45001, the Canadian adoption of the international ISO 45001 standard for occupational health and safety management systems, emphasize concepts like leadership commitment, worker participation, hazard identification, risk assessment, operational controls, performance evaluation, and continual improvement. While certification to such a standard is not required by law, the systematic approach these frameworks embody reflects what due diligence genuinely demands.
For HR professionals, people managers, and business owners, translating the due diligence defence into concrete organizational practices requires attention to several critical areas. The first area concerns hazard identification and risk assessment. Every workplace contains hazards, and every employer has an obligation to identify them systematically and assess the risks they present. This process cannot be a one-time exercise conducted when the business first opens or when a new project begins. It must be ongoing, responsive to changes in operations, equipment, materials, workforce composition, and the work environment itself. Risk assessments should be documented, should identify specific hazards and their potential consequences, should evaluate the likelihood and severity of harm, and should specify the controls that will be implemented to eliminate or minimize the risk. Where a workplace falls under multiple jurisdictions, such as a company with operations in Ontario and Quebec, the risk assessment process must account for the specific regulatory requirements in each jurisdiction while maintaining a coherent organizational approach.
The second area concerns the development and maintenance of safe work procedures. Procedures must be specific enough to guide actual work activities, clear enough to be understood by workers with varying levels of literacy and language proficiency, and practical enough to be followed under real working conditions. A procedure that is technically perfect but impossible to implement under time pressure or with available equipment is not a reasonable control. Procedures must also be regularly reviewed and updated to reflect changes in operations, new hazards identified through risk assessments, lessons learned from incidents and near misses, and evolving regulatory requirements. The date of each review should be documented, along with the name of the person who conducted the review and any changes that were made.
The third area concerns training and competency verification. Training is only effective if it results in workers actually understanding the hazards they face and the procedures they must follow. This means training must be delivered in a manner that workers can understand, taking into account language barriers, literacy levels, and learning styles. It must be specific to the actual tasks workers will perform, not generic awareness training that fails to address job-specific hazards. It must include practical demonstration and, where appropriate, assessment to verify that competency has been achieved. And it must be refreshed periodically, both on a scheduled basis and whenever changes in procedures, equipment, or hazards warrant. Training records should document what training was provided, when it was provided, who delivered it, who attended, and how competency was verified.
The fourth area concerns supervision and compliance monitoring. Employers cannot simply train workers and then assume compliance will follow. Active supervision is essential, and the intensity of supervision must be proportionate to the risk. A new worker handling hazardous materials for the first time requires closer supervision than an experienced worker performing a routine low-risk task. Supervisors must be trained not only in the technical aspects of the work but also in their legal obligations to ensure compliance and their authority to stop unsafe work. Inspection programs, whether formal scheduled inspections or informal observations, should be documented, with records showing what was inspected, what deficiencies were identified, and what corrective actions were taken.
The fifth area concerns corrective action and continuous improvement. When deficiencies are identified, whether through inspections, incident investigations, worker reports, or external audits, employers must take timely and effective corrective action. A documented corrective action program should specify what issue was identified, what action was taken to address it, who was responsible for the action, when it was completed, and how effectiveness was verified. The underlying principle is that safety systems must be living systems that evolve in response to experience and changing circumstances. An employer who identifies a hazard but fails to correct it, or who implements a corrective action but fails to verify that it was effective, cannot claim to have exercised due diligence.
The sixth area concerns leadership commitment and organizational culture. While this may seem less tangible than policies and procedures, it is fundamental to a successful due diligence defence. Investigators and adjudicators will look for evidence that safety was genuinely prioritized by those in positions of authority, not merely given lip service while production pressures dominated operational decisions. Leadership commitment is demonstrated through the allocation of adequate resources to safety programs, the inclusion of safety objectives in strategic planning and performance management, visible participation by senior leaders in safety activities, and a willingness to stop work or slow production when safety concerns arise. In Quebec, where the Act respecting occupational health and safety mandates the establishment of joint health and safety committees in workplaces meeting certain thresholds, the effective functioning of these committees can serve as evidence of genuine organizational commitment to worker participation in safety management.
Documentation deserves particular emphasis because it is the evidentiary foundation on which any due diligence defence will rest. The types of documents an employer should maintain include written health and safety policies, hazard identification and risk assessment records, safe work procedures, training materials and training records, inspection and audit reports, incident and near-miss investigation reports, corrective action records, equipment maintenance logs, personal protective equipment distribution and inspection records, meeting minutes from health and safety committees or other safety-related meetings, and correspondence related to safety matters, including communications with regulators, contractors, and suppliers. These documents should be organized in a manner that allows them to be retrieved efficiently if an investigation occurs. They should be stored securely with appropriate backup and retention periods that meet or exceed any regulatory requirements. And they should be created contemporaneously, meaning at the time the relevant activity occurs, not weeks or months later when memories have faded and the accuracy of the information cannot be assured.
When a workplace incident does occur, the immediate response is also relevant to the due diligence defence, not because it changes what happened before the incident but because it demonstrates the employer's overall approach to safety. An employer who responds to an incident by conducting a thorough investigation, identifying root causes, implementing corrective actions, and communicating lessons learned across the organization demonstrates a commitment to safety that will be viewed favourably. An employer who attempts to minimize the incident, discourage reporting, intimidate witnesses, or destroy evidence will face not only evidentiary problems but also a presumption that the organization's safety culture was deficient from the start.
For employers operating in multiple Canadian jurisdictions, the due diligence obligation requires attention to the specific regulatory requirements in each jurisdiction while maintaining a coherent organizational approach. The fundamental principles of due diligence are consistent across Canada, but the specific regulatory requirements vary. Federally regulated employers must comply with the Canada Labour Code and its regulations, including requirements for workplace health and safety committees, health and safety representatives, and internal complaint resolution procedures. Provincially regulated employers must comply with the OHS legislation applicable in each province where they operate, along with associated regulations that may prescribe specific requirements for particular industries or hazards. In Quebec, the civil law framework and distinct statutory scheme create additional considerations, including the role of the Commission des normes, de l'équité, de la santé et de la sécurité du travail in administering both preventive and compensatory aspects of the system. Employers operating across provincial boundaries should ensure that their safety management systems can accommodate these variations without creating confusion for workers or gaps in compliance.
The due diligence defence is not a technicality that allows employers to escape responsibility for workplace injuries through clever legal maneuvering. It is a recognition that employers who genuinely commit to safety, who invest the time and resources necessary to identify hazards, implement controls, train workers, supervise compliance, and continuously improve their systems, should not be punished when harm occurs despite their best efforts. For HR professionals, people managers, and business owners, understanding the due diligence defence is not primarily about preparing for litigation. It is about understanding what the law expects of them every day, in every workplace decision, from the allocation of budgets to the hiring of supervisors to the design of work processes to the response to a worker's safety concern. The organizations that genuinely internalize the due diligence standard, that treat it not as a legal burden but as a framework for operational excellence, will find that the defence, should they ever need it, builds itself through the ordinary course of their operations. Those that treat safety as an afterthought, a cost to be minimized, or a box to be checked, will find that when the moment of accountability arrives, they have nothing to show but regret.