The Gibson verdict: what New Zealand’s first CEO health and safety conviction means for your business

Gibson Vs Maritime

When a shipping container killed a Sāmoan father of seven on a Port of Auckland night shift, it set in motion a legal case that has redrawn the boundaries of personal liability for every business leader in New Zealand. This is what happened — and what it means for you.

At around 2am on 30 August 2020, Palaʻamo Kalati was working a night shift at the Fergusson Container Terminal, securing and unsecuring shipping containers aboard the MV Constantinos P. He had been working at the port for just five months. A crane nearby was lifting containers from the deck when a third container, still partially fastened, accidentally caught and lifted before breaking free. It fell and crushed him. He was 31 years old. He left behind his wife Dro and seven children.

His death was the third fatality connected to Ports of Auckland since 2017, following the deaths of ocean swimmer Leslie Gelberger, struck by a POAL pilot boat in 2017, and 23-year-old straddle crane driver Laboom Midnight Dyer, killed when his crane tipped at the Fergusson Terminal in August 2018. A fourth death would follow in April 2022 — by which point Gibson had already resigned.

The pattern of accidents, and what the subsequent investigation revealed about safety culture at the port, would eventually put his CEO in a criminal courtroom.

In November 2024, after a seven-week trial, the Auckland District Court convicted Anthony (Tony) Gibson — POAL’s chief executive at the time of Palaʻamo’s death — of failing to exercise due diligence as an officer under the Health and Safety at Work Act 2015. He was fined $130,000 and ordered to pay $60,000 in costs. He appealed. On 31 March 2026, the High Court dismissed the appeal entirely. The conviction and sentence both stood.

It was the first time in New Zealand’s history that a chief executive of a large company had been convicted under the personal officer liability provisions of the Act. It will not be the last.

Case at a glance
CaseGibson v Maritime New Zealand [2026] NZHC 813
Incident30 August 2020 — Fergusson Container Terminal, Port of Auckland
VictimPalaʻamo Kalati, 31, father of seven
POAL fine (as PCBU)$500,000 + $90,000 costs (guilty plea, 2023)
Gibson fine (as officer)$130,000 + $60,000 costs
TrialSeven weeks, Auckland District Court, April–May 2024
Conviction26 November 2024 (Judge Bonnar KC)
Sentencing21 February 2025
Appeal dismissed31 March 2026 (Justice Gault)
RegulatorMaritime New Zealand (jurisdiction because incident occurred on a vessel)

The CEO who cared about safety — and was still convicted

It is worth being precise about what this case is and is not. Tony Gibson was not found to be an indifferent or negligent CEO. The District Court acknowledged he was a “hands-on” chief executive who had expanded the port’s health and safety team, introduced an online safety monitoring system called PortSafe, and made genuine efforts to improve workplace safety during his tenure. The sentencing judge, in February 2025, described him as a person of good character.

That context matters. Because if this conviction had been handed down against someone who simply ignored safety, the business community might have shrugged and moved on. Instead, the case is significant precisely because Gibson did many of the right things — and was still found guilty.

The Court’s finding was narrower, and for that reason more unsettling: Gibson knew about specific, ongoing risks at the port, and did not personally verify that anything had been done about them. There was a documented culture of ‘cutting corners’, particularly on night shifts. Exclusion zones around operating cranes were inadequate. Night shift monitoring was poor. Gibson was aware of all of this. But the Court found he relied too heavily on subordinate managers and health and safety staff without checking, himself, whether the problems had been fixed.

His counsel argued during the appeal that the District Court had set the standard too high — that it had conflated POAL’s duties as an organisation with Gibson’s personal obligations as an individual. Justice Gault rejected that argument. The appeal was dismissed on both conviction and sentence.

The underlying complaint — that Gibson had been “singled out” while POAL’s non-executive board members, who also carried health and safety responsibilities, were not charged — was also rejected. The High Court noted that Maritime New Zealand could have charged board members. It chose not to. That decision did not make Gibson’s personal obligation any less real.

My immediate reaction was that this is going to be significant for every CEO and director in New Zealand where critical risk is in play. For the first time, a regulator has successfully prosecuted a senior individual — not just the company — and that sets a clear precedent. Regulators now have a proven pathway to go after the person at the top, not just the organisation.

— Reuben Brooker, Principal Consultant, HSCA

What the law actually says — and what this case confirms

The Health and Safety at Work Act 2015 has its roots in a decade of failure. By the early 2010s, New Zealand had one of the worst workplace fatality rates in the developed world — roughly twice Australia’s rate per worker. The Pike River mine disaster of November 2010, which killed 29 men, made that failure impossible to ignore. The subsequent Royal Commission in 2012, and an Independent Taskforce on Workplace Health and Safety in 2013, both concluded the same thing: the existing system, built around the Health and Safety in Employment Act 1992, was not working. The HSWA that replaced it was modelled on Australian law, itself based on the internationally endorsed Robens framework, and came into force in April 2016.

One of its specific innovations was the personal liability of officers. Where the old regime focused primarily on companies as duty holders, the HSWA created an explicit, individual duty on directors, chief executives, and anyone in a position to exercise significant influence over a business — enforceable by criminal prosecution. The Gibson case is the first time that provision has been tested at the highest level of a major organisation.

Section 44 of the Act imposes a duty on officers — which includes directors, chief executives, and anyone in a position to exercise significant influence over the management of a business — to exercise due diligence to ensure that the business complies with its health and safety obligations. Section 44(2) sets the standard: the care, diligence, and skill of a “reasonable officer” in the same circumstances.

The standard is not perfection, and it does not require a CEO to personally supervise every shift. What it requires is informed, active oversight — the ability to demonstrate that you understood your critical risks, that you had systems to manage them, and that you checked those systems were actually working. The last part is where Gibson fell short.

For eleven years, the officer provisions sat largely untested for executives of large companies. The Gibson case changed that. And the High Court’s decision on appeal clarified precisely what “reasonable officer” means in practice.

The key principles that emerged from the judgment:

Officers must understand critical risks from what’s happening on the ground, not just from management reports. The Court used the phrase ‘work as done’ rather than ‘work as planned’ — the distinction being that what workers actually do on any given shift may differ substantially from what a policy document says they should do.

Delegation does not discharge the duty. An officer can delegate operational responsibilities, but cannot delegate their personal obligation to verify that those responsibilities are being met. The duty is described in case commentary as ‘non-delegable’ — meaning it cannot be transferred to someone else simply by assigning the work.

Good systems on paper are not enough. POAL had policies, procedures, and a safety monitoring system. The Court found that none of this translated into effective risk control at the sharp end — the night shift, the crane operators, the lashers working in proximity to moving loads.

Awareness of a problem without action is itself a breach. Where an officer knows about a safety risk — and the evidence showed Gibson did — and fails to take reasonable steps to verify that the risk has been addressed, that inaction can constitute the breach.

The distinction between governance and management, which boards and executives often rely on to separate strategic oversight from operational responsibility, was also addressed. The High Court confirmed there is no bright-line separation for the purposes of the officer due diligence duty. The duty is assessed against the officer’s actual role and the influence they hold over the business.

A gap that is more common than you might think

The Court’s finding hinges on what practitioners call the ‘verification gap’ — the distance between documented systems and what actually happens at the workface. Having spent years working alongside New Zealand businesses on health and safety, I can say this gap is not limited to large organisations or high-risk industries.

In my experience, the verification gap is far more common than most business owners would expect — and it’s not limited to small businesses. I regularly work with medium and large organisations where there is no formal process for directors or CEOs to verify that their health and safety systems are actually working on the ground. It’s something I’m now building directly into every policy and procedure framework I develop for clients: a fourth layer of verification that closes the gap between what’s documented and what’s actually happening.

— Reuben Brooker, Principal Consultant, HSCA

That fourth layer — a formal, structured process by which senior leaders personally verify compliance, rather than relying solely on the reporting chain below them — is precisely what the Court found Gibson lacked. He had systems. He had reports. He had a safety team. What he did not have was a reliable mechanism for checking whether any of it reflected reality on the ground, especially after hours.

So what does it mean if you run a business?

The honest answer is that it depends on how your business is structured, what risks it carries, and what you actually know about those risks. But the direction of travel from this judgment is clear, and it points in one direction for all officers: closer, not more distant, personal engagement with the health and safety realities of your operation.

Some of the questions business owners raise when they engage with this case:

“I have a health and safety manager. Does that mean I’m covered?” No. Your H&S manager carries responsibilities within the organisation. But as the officer — whether you’re a CEO, a director, or an owner-operator — your personal duty under section 44 remains. The Court was explicit: officers cannot simply rely on those with specific health and safety responsibilities in the management chain without proper enquiry.

“We have policies and procedures documented. Isn’t that enough?” Not on its own, no. POAL had documented systems. The issue was that those systems were not operating as intended, and no one at the top was in a position to know that. Documentation without verification provides no legal protection.

“I’m a small business. Surely this applies to major corporations, not me?” The HSWA applies to every person conducting a business or undertaking in New Zealand, regardless of size. The standard of what constitutes ‘reasonable steps’ scales to your context — a 10-person building company is not held to the same operational complexity as a major port — but the personal duty on officers does not vanish at a certain headcount.

“What if I genuinely didn’t know there was a problem?” This is the question that the Gibson case answers most directly. The Court’s position is that if you were not asking the right questions, that itself may constitute a breach. Ignorance that stems from inadequate inquiry is not a defence.

The first thing I’d tell any business owner feeling exposed by this ruling is to sit with one honest question: how confident are you in the information you receive from the field? Not whether the reports look good on paper — but whether you could actually verify it if you had to. If you’re not sure what that verification would even look like, that’s exactly where you need to start.

— Reuben Brooker, Principal Consultant, HSCA

The question that tells you everything

When I walk into a business for the first time, I have a simple test I apply before I’ve looked at a single document.

The biggest red flag I look for is simple: ask the CEO or director how many incidents their business has had in the last 12 months. If they can’t answer that quickly and honestly, that tells me everything I need to know. Anyone operating at a senior level should have that number at their fingertips — because if you don’t know your incident rate, you’re not verifying anything.

— Reuben Brooker, Principal Consultant, HSCA

That number — your incident rate — is not a bureaucratic metric. It is the clearest available signal of whether your health and safety systems are functioning. A business where near-misses and incidents are consistently recorded, reviewed, and acted on looks very different, on the ground, from one where the same problems recur. The Court’s judgment in Gibson essentially asks whether you know the difference in your own business, and whether you have done anything about it.

A self-assessment for officers and business owners
  • Can you name your top three critical risks without looking at a document?
  • How many incidents has your business recorded in the last 12 months? (You should know this immediately.)
  • When did you last personally observe work being carried out — not just receive a report about it?
  • Do your frontline workers know what the safety procedures are, or just your managers?
  • When a corrective action is recommended after an incident, do you track whether it was actually implemented?
  • Can you show an auditor evidence that your controls are working — not just that they exist on paper?
  • Do you have a formal process — not just informal reassurance — for verifying safety compliance at the operational level?

Why the timing of this ruling matters

The Gibson decision has not arrived in isolation. The Health and Safety at Work Amendment Bill was introduced to Parliament in February 2026 and is currently moving through its legislative stages. The Bill proposes to sharpen the HSWA’s focus on critical risk management — a direction that, whatever its intent, sits alongside a growing body of case law making clear that officers will be held personally accountable when those risks go unmanaged.

Whatever form the final legislation takes, the Gibson ruling — affirmed at High Court level — is now settled law. It provides Maritime New Zealand, WorkSafe, and other regulators with a clear and tested precedent for prosecuting individuals, not just organisations, when safety systems fail. The business community should read that for what it is.

My advice is straightforward: look at your policies and procedures and ask yourself honestly whether you understand them and where the gaps are. Then ask whether you’re out in the field checking work as it’s actually done — not just as it’s supposed to be done on paper. If you can’t define the gap between those two things, you have a real problem. And if you’re not sure where to start, that’s exactly when you bring in professional advice.

— Reuben Brooker, Principal Consultant, HSCA

Palaʻamo Kalati’s family went through a legal process that lasted nearly six years. The Maritime Union, whose members work alongside stevedores on the wharves, described the High Court’s decision as a vindication for workers who had long warned about systemic safety failures on New Zealand’s waterfronts. Whatever your view of the outcome for Gibson personally, the legal framework it has confirmed is not going away.

For business owners and officers across New Zealand, the question the Court is now asking is disarmingly simple: do you actually know what’s happening in your business, and can you prove it?


Not sure where you stand? Let’s find out.

HSCA works with NZ businesses to close the gap between H&S systems on paper and what’s actually happening on the ground. Book a governance review today.

This article is intended as general information only and does not constitute legal advice. For advice specific to your situation, consult a qualified health and safety professional or legal adviser. All case details are sourced from publicly available court documents: Maritime New Zealand v Gibson [2024] NZDC 27975 and Gibson v Maritime New Zealand [2026] NZHC 813.

Reuben Brooker is Principal Consultant at Health and Safety Consultants Auckland. The expert commentary in this article represents his professional views based on his consultancy experience and does not constitute legal advice.

What We Do

We help small businesses to ensure they are compliant with the Health and Safety at Work Act 2015.

Our experienced consultants design & implement systems for a safer environment.

With 10+ years of expertise in the field, we offer practical solutions tailored to your specific needs.