Two things happened in Australian mining safety this year that will shape how contractor compliance is run for the rest of the decade. They are connected, and the connection is the part worth understanding.
1 June 2026: critical control management became mandatory
Queensland's Resources Safety and Health Legislation Amendment Act 2024 embedded critical control management into the safety and health management system. The provisions commenced on 1 June 2025 with a one-year transition, so compliance has been required since 1 June 2026.
What it requires, in substance:
Identify the material unwanted events. The things that could kill or seriously harm people — fire, explosion, inrush, structural failure, vehicle interaction, and the rest of the site's fatal-risk list.
Identify the critical controls. For each of those, the specific controls that prevent it or mitigate its consequences. Not every control. The ones whose failure would materially change the outcome.
Assure they are effective, through a systematic and verifiable approach.
The word doing the work is verifiable. The obligation is not to have controls, or to believe they are working. It is to be able to show, systematically, that they were.
Two details get missed. It applies to quarries and mineral mines as well as coal — a good deal of the commentary framed it as a coal issue, and quarry operators have spent 2026 working through obligations they had not planned for. And the same Act removed prescribed notifiable incident types, moving reporting further onto a site's own judgement about potential consequence rather than onto a checklist.
March 2026: the first mining industrial manslaughter conviction
Mastermyne Crinum Operations Pty Ltd was convicted of industrial manslaughter under the Coal Mining Safety and Health Act 1999, following the death of Graham Dawson, an experienced underground miner, in a roof collapse at Crinum underground on 14 September 2021.
In May 2026 the company was sentenced to a $7 million fine plus $299,000 in costs — the largest work health and safety penalty imposed in Australia to that point.
Queensland extended industrial manslaughter into the resources legislation in 2020. For six years it was discussed as a theoretical exposure. It is not theoretical now.
Two features of the outcome are worth sitting with. The size: Australian WHS penalties have historically clustered well below a million dollars, to the point where "the fine is a cost of doing business" was a defensible cynicism. And the gap: the death was September 2021, the conviction March 2026 — four and a half years during which every record the business held about that site, that team and that control was examined by people whose job was to find the gap.
Why these two are the same story
They look like separate events. They are the two halves of one shift.
A critical control is, by definition, the thing whose failure kills somebody. Which makes it precisely the thing a manslaughter prosecution investigates.
So requiring operators to name their critical controls and demonstrate they are working creates, as a by-product, a documented expectation about exactly what should have been in place — written by the operator, about its own site, in advance.
That cuts both ways, and it is worth being clear-eyed about both.
An operator that can show its critical controls were identified, verified and monitored has built the strongest available evidence that its conduct was not negligent. That is a genuinely valuable position.
An operator that named a control and never verified it has, in writing, established what it knew it should have been doing.
After 1 June 2026 there is no neutral position. The record either exists, or its absence is itself the finding.
What it means for contracting companies
Contracting companies have experienced 2026 as a year in which client requirements got noticeably heavier and more specific, often without much explanation. This is the explanation.
Work through the logic. A critical control is performed by a person, usually using plant. The control is only genuinely in place if the person is competent and the machine is fit. On a contracting company-heavy site — which is most Queensland mines — a large share of both belongs to contracting companies.
So an operator verifying its critical controls is verifying your workers' competencies and your machines' condition. Not accepting that somebody verified them. Verifying.
The distinction between attestation and verification is the whole of the change. A signed statement that everyone is current is an attestation. A record showing this named person held this named competency, assessed on this date, and this named machine was serviced on that date, is verification.
The thing to actually do about it
For an operator: pick one critical control and try to evidence it end to end. Who performed it last month, what were they qualified to do, what evidence did you hold on that day, what plant was involved and when was it last verified. If assembling that takes more than an afternoon, you have found the gap while it is still cheap to find.
For a contracting company: the same exercise from the other end. Pick a client site and a date in the past, and try to produce the evidence for the people and machines you had there. Your client will ask for exactly this, and increasingly they will ask for it at short notice, because their own obligation now runs on a clock.
Neither exercise requires buying anything. Both tell you, in an afternoon, whether what you have is a system or a set of documents.
