Insights · Field Note
HVNL 2026: The Law Now Checks If It Actually Works
The new HVNL audit stopped asking if you have a safety system and started asking if it works. What PSOE means, and where you’re exposed.
For four editions of The Field Note I've been banging the same drum: compliant isn't the same as safe. A signed form proves a process happened, not that a control works. Verify it at the workface.
As of 1 August, that's not just my opinion. It's the law.
The amended Heavy Vehicle National Law commenced this month — the biggest overhaul of heavy vehicle regulation in more than a decade. If you run transport, journey management or contractor logistics anywhere on the east coast (it applies everywhere except WA and the NT), this reaches you. Even if you don't, pay attention, because the shape of this reform is where all safety regulation is heading.
The regulator's own words describe the shift as moving away from a purely compliance-driven approach toward risk-based safety management and safer outcomes. Translated: they've stopped rewarding the thickest folder and started asking whether the thing actually works.
Present, Suitable, Operating, Effective
Here's the part every operator needs to sit with. The new National Audit Standard replaces the old accreditation scheme, and it grades you against four words. Your systems have to be Present, Suitable, Operating and Effective. They call it PSOE.
Read those four words slowly, because they're the death of paperwork safety:
- Present — the system exists. This is the only one most can currently prove.
- Suitable — it actually fits your operation, not a template you bought.
- Operating — it's being used, day to day, by real people. Not filed. Used.
- Effective — and here's the one that changes everything — it's genuinely working.
An auditor now walks onto your site and doesn't just ask "do you have a fatigue policy?" They ask: is it suitable for your routes, is it actually being followed on the road, and is it working — are your drivers less fatigued because of it? A beautiful policy that nobody drives to now fails the audit. As it should.
That is the drawer test, written into national law. Everything I've argued this system needs, a regulator just made mandatory — with a mandatory Safety Management System, tougher and more consistent audits, higher penalties, and no grace period. Compliant from day one, or exposed.
Notice what's underneath it: the audit now demands evidence — telematics, electronic records, live data that a control is operating. Not a signature. Connected proof. That is exactly the difference between activity and assurance.
Where most operators stand
For most operators, the honest position today is this: you can prove Present. You're shaky on Operating, and you have almost nothing that would stand up on Effective. That gap — between the system you can show an auditor and the system that's actually working on the road — is now a legal liability, not just a safety one.
Three questions worth asking this week:
- Take your fatigue management plan. Can you prove it's Effective — that drivers are genuinely less fatigued — or only that it's Present? The gap between those two is your audit exposure.
- Is your safety system Suitable, or did you buy a template? A generic SMS that doesn't match your actual routes and risks fails the second test before you even get to the road.
- What evidence proves your controls are Operating, and how do you know they're effective right now — not last quarter? If the answer is "the paperwork," you've just described the exact thing the new standard was written to see through.
The era of managing the folder is over. The regulator has stopped asking whether you have a system and started asking whether it works. That's not a compliance burden. It's the whole industry being forced, by law, to do the thing good operators were doing anyway: verify the control, not the record.
If you've built your safety on being able to produce a document, this reform is a threat. If you've built it on being able to prove the control works, it's the best thing to happen to our industry in a decade — because it finally rewards the right thing.
Go and test one control against those four words. Whichever one it fails is where you start.
Further reading
- HVNL reform implementation, NHVR. Statutory instruments, the audit standard and transition detail, from the regulator.
- 2026 HVNL reforms, NatRoad. A plain-English breakdown of PSOE and the new audit standard.
- Safety Management System Standard 2026, NTC and NHVR. The standard your SMS is now measured against.
Testing systems against the Effective standard is the core of ROC Advice's independent HSE audits.
First published in The Field Note on LinkedIn.
