Critical Incident Response Planning for Clubs

1. Why every club needs an incident response plan

Nobody joins a committee expecting to deal with a cardiac arrest at training, a safeguarding allegation against a volunteer coach, or a flood that destroys the clubhouse. But these things happen at clubs of every size, in every sport, in every country. And the clubs that have thought about them in advance handle them immeasurably better than the ones that haven't.

Critical incidents create two simultaneous crises: the incident itself, and the decision-making paralysis that follows it. When a player collapses on the field, someone calls 000. That part is instinctive. But who calls the player's family? Who notifies the insurer? Who talks to the parents gathering in the car park? Who writes down what happened while it's still fresh?

Without a plan, every one of those questions gets answered on the fly by whoever happens to be standing closest. With a plan, each question has a name next to it.

Safe Work Australia and the UK Health and Safety Executive both emphasise that incident response is not a function of organisational size. A person conducting a business or undertaking (PCBU) in Australia - which includes volunteer-run clubs - has the same notification obligations as a corporation. The NZ Health and Safety at Work Act 2015 applies the same framework. Your duty of care does not come with a small-club exemption.

What counts as a critical incident

Not every injury is a critical incident. A rolled ankle at training is an incident. A cardiac arrest is a critical incident. The distinction matters because critical incidents trigger obligations - legal, regulatory, insurance, governance - that routine incidents don't.

Your plan should define critical incidents for your specific context, but most clubs will include:

• Serious injury or medical emergency - anything requiring ambulance transport, hospitalisation, or resulting in permanent impairment
• Death of a member, volunteer, or visitor - at a club activity or on club premises
• Safeguarding allegation - any allegation of abuse, grooming, or inappropriate behaviour involving a child or vulnerable person
• Natural disaster or facility damage - flood, fire, storm damage, structural failure that renders your venue unusable
• Financial fraud or misappropriation - discovery of theft, unauthorised transactions, or financial misconduct by a committee member or volunteer
• Data breach - unauthorised access to your member database, including names, contact details, emergency information, or payment data
• Major reputational event - media coverage of a club incident, viral social media post, public accusation against the club or a prominent member
• Criminal activity - assault, harassment, vandalism, or drug-related incidents at a club event or on club premises

The list above isn't exhaustive. What matters is that your committee has agreed on a definition and written it down, so there's no ambiguity at 9pm on a Saturday night about whether what just happened qualifies.

2. The incident response framework

Your response to a critical incident unfolds in four phases. Each has different priorities, different people involved, and different timeframes. The mistake most clubs make is trying to do Phase 2 work in Phase 1 - investigating causes when they should be securing safety, or drafting communications when they should be calling emergency services.

Phase 1: Immediate response (first 60 minutes)

The only priorities in the first hour are safety and notification. Nothing else matters.

Secure the scene. Remove people from immediate danger. If someone is injured, do not move them unless there's an ongoing threat. Keep bystanders at a safe distance.

Call emergency services. If there is any doubt about whether an ambulance, fire brigade, or police are needed, call them. You will never be criticised for calling unnecessarily.

Administer first aid. If you have a qualified first aider on site, they take charge until emergency services arrive.

Notify your incident response team. The on-ground person calls the president (or their backup). The president activates the team via the phone tree. Every person on the tree should have the one-page response card covered later in this guide.

Preserve the scene. In Australia, a notifiable incident under the WHS Act requires you to preserve the scene until a regulator releases it. Don't clean up, don't move equipment, don't alter anything. Take photos if you can. This applies in the UK under RIDDOR and in New Zealand under the HSWA.

Record the basics. One person starts writing down the facts immediately. Time, location, who was involved, who was present, what happened. Memory degrades within hours. Write it down now.

Phase 2: Short-term response (first 24–48 hours)

Once the immediate danger has passed and emergency services have done their work, the second phase begins. This is where most of the coordination happens.

Notify your insurer. Most policies have a notification window - often 24 to 48 hours. Don't wait. Call even if you're unsure whether the incident is covered. Late notification is one of the most common reasons insurers deny claims.

Notify your governing body. Your state or national sporting body will have incident reporting requirements. Some require notification within 24 hours. Many have critical incident response resources, counsellors, or media advice available to affiliated clubs.

Welfare checks. Contact everyone directly involved - not just the injured person, but witnesses, first responders, and anyone present. Don't assume they're fine because they looked fine at the time. Trauma responses are often delayed.

Prepare a holding statement. A few sentences: the club is aware of the incident, we are cooperating with relevant authorities, the welfare of all involved is our priority, and we will provide further information when appropriate. Route all enquiries to your spokesperson.

Preserve records. Secure documents, CCTV footage, sign-in sheets, medical records, and photographs. Do not delete anything. Do not discuss specifics on social media or group chats. Everything you write may be discoverable in legal proceedings.

Brief the committee. Circulate a confidential briefing. They need to know what happened, what's been done, and what's coming next. No speculation about fault or liability.

Phase 3: Medium-term response (first 2 weeks)

The adrenaline has faded. Now comes the structured work.

Formal investigation. Serious injuries, safeguarding allegations, and financial misconduct always warrant investigation. Appoint someone to lead it. For safeguarding, follow your governing body's procedures. For safety incidents, the investigation should be factual, not adversarial - look for system failures, not someone to blame.

Member communications. Silence creates a vacuum that rumour fills. Send a brief, factual communication that acknowledges the incident without compromising any investigation or privacy. Include counselling and support service contact details.

Regulatory notifications. You may need to notify regulators beyond your initial WHS report. Safeguarding allegations must go to child protection authorities. Data breaches may trigger notification under the Privacy Act (Australia), UK GDPR, or the NZ Privacy Act 2020. Financial fraud may need to be reported to police and, for charities, to the ACNC or Charity Commission.

Counselling and support referrals. Connect affected members with professional support. The Australian Red Cross psychological first aid framework provides a practical model - look, listen, link - covered in detail in Section 8.

Review insurance position. Your insurer may appoint a loss assessor. Cooperate fully. Don't admit liability or make commitments about compensation.

Phase 4: Recovery (1–3 months)

Recovery is the phase clubs most often skip. Everyone wants to move on. Resist that instinct until you've completed these steps.

Lessons learned review. Conduct a structured debrief with everyone involved in the response. What worked? What didn't? Where did the plan fail? Document the findings and use them to update your plan.

Policy updates. If the incident revealed gaps in your policies - and it almost certainly did - update them now, while the motivation exists. New safety procedures, revised communication protocols, additional training requirements. In six months, it will be too late.

Return to normal operations. Do it deliberately, with a communication to members, and with any new safety measures visibly in place.

Follow-up welfare. Check in with affected people again at four weeks and eight weeks. Some people cope well initially and struggle later. A phone call costs you nothing.

Committee reflection. At your next AGM, include a standing item on incident preparedness. This creates institutional memory that survives committee turnover.

3. Building your incident response team

You don't need new people. You need existing committee members with clearly defined roles.

President (or deputy) - the decision-maker. Activates the response, authorises communications, liaises with the governing body. In the president's absence, the vice president or a pre-nominated deputy takes this role without delay.

Secretary - the record-keeper and coordinator. Maintains the incident register, coordinates notifications (insurer, governing body, regulators), manages internal committee communications, and schedules response meetings. The secretary should have access to all relevant contact numbers, policy documents, and templates at all times. Keeping emergency contacts and response documents in a central system - your club management platform or a shared folder with offline access - means the secretary isn't scrambling for a phone number at midnight.

Safety officer (or duty officer) - the on-ground responder. Takes charge at the scene, liaises with emergency services, secures the area, and begins the factual record. At clubs without a dedicated safety officer, this defaults to whoever is running the activity - the head coach, the event manager, the canteen supervisor.

Media spokesperson - the single voice. All external communications - media, social media, enquiries from other organisations - go through one person. This is not necessarily the president. It should be whoever on your committee is most comfortable being measured and precise under pressure. The spokesperson's job is to read the holding statement and deflect questions they can't answer. Nothing more.

Every role needs a named backup. Write both names on the response card. If your president is on holiday when the incident happens, the backup needs to know they're the backup before that moment arrives.

4. Communication during a crisis

Communication is where clubs do the most damage after an incident. Not through malice - through panic and a desire to be transparent without understanding that what you say in the first 24 hours will define how the incident is remembered.

What to say

A holding statement should be factual, brief, and compassionate:

• Acknowledgement that an incident occurred
• Confirmation that the welfare of all involved is the priority
• Statement that the club is cooperating with relevant authorities
• A note that further information will be provided when appropriate
• Contact details for the spokesperson

What not to say

Do not speculate on causes. Do not assign blame. Do not name individuals without their explicit consent (and never name minors). Do not provide medical details. Do not use language that admits liability. Do not share opinions, theories, or unconfirmed information.

When silence is appropriate

Silence is appropriate when an investigation is underway and any public comment could compromise it. Silence is appropriate when legal proceedings are possible and your insurer or lawyer has advised restraint. Silence is appropriate when the individuals involved have asked for privacy. Silence is not appropriate when your members are frightened and have no information at all - that's when a brief, factual update is essential, even if it says very little.

Social media management

Appoint one person to monitor your club's social media channels. Do not engage with speculation or hostile commentary. Do not delete posts containing factual information - it looks like a cover-up. If misinformation is circulating, correct it once through your official channel and don't get drawn into a back-and-forth.

5. Working with external parties

When emergency services arrive, they are in charge of the scene. Your role is to cooperate, provide information, and stay out of the way. Have your sign-in sheet or attendance record available - paramedics and police may need to know who was present.

With your insurer, notify early and provide facts, not speculation. Keep copies of everything. Follow their instructions on documentation and scene preservation. Do not admit liability or make financial commitments to injured parties - direct them to your insurer.

Your governing body is not the enemy after an incident. Most state and national sporting bodies have incident reporting protocols, and many have critical incident response teams that can support your club. Sport Australia, Sport NZ, and UK Sport all provide guidance. They've seen it before, they have resources, and it's in their interest to help you manage it well.

6. Legal considerations

Your club owes a duty of care to every person it interacts with - members, visitors, spectators, volunteers. This is a common law obligation in Australia, the UK, and New Zealand. It means taking reasonable steps to prevent foreseeable harm. An incident response plan is part of discharging that duty.

Mandatory reporting. In Australia, mandatory reporting obligations for child abuse vary by state and territory. The safest position for a club is to require all members to report any concern to the safeguarding officer, who then determines the legal reporting obligation. In the UK, safeguarding referrals go to the Local Authority Designated Officer (LADO). In New Zealand, concerns are reported to Oranga Tamariki. See the safeguarding guide for detailed state-by-state obligations.

Notifiable incidents. Under Australian WHS harmonised legislation, you must notify the regulator immediately for a death, serious injury, or dangerous incident. "Immediately" means as soon as the person in charge becomes aware. You must also preserve the site. Failure to notify is an offence. The UK equivalent is RIDDOR. In New Zealand, notifiable events under the HSWA must be reported to WorkSafe NZ.

Privacy during investigations. Investigations involve personal information - medical details, witness statements, allegations. Handle this in accordance with the Privacy Act (Australia), UK GDPR, or the NZ Privacy Act 2020. Limit access to people who need to know. Store records securely. Do not discuss details outside the response team.

7. The incident register

Every incident - not just critical ones - should be recorded in your incident register. This is a legal record. Courts, insurers, and regulators give significant weight to contemporaneous records, and almost no weight to recollections assembled weeks later.

Your register should capture:

• Date, time, and exact location
• Names and contact details of everyone involved (including witnesses)
• Factual description of what happened
• Injuries sustained, if any
• First aid or medical treatment provided
• Emergency services called (and reference numbers)
• Actions taken and by whom
• External notifications made (insurer, governing body, regulators)
• Follow-up actions required and their deadlines
• Outcome and resolution

Store the register securely. Digital records should be in a system with role-based access - your club management platform's document storage works well for this. Restrict access to the president, secretary, and safety officer. Individual entries may contain sensitive personal information and should only be accessed by people with a legitimate reason.

Retain records for at least seven years. For incidents involving minors, retain indefinitely.

8. Psychological first aid

A cardiac arrest on the field doesn't only affect the person who collapsed. It affects the player who administered CPR, the teenager who watched from the sideline, and the volunteer who answered the phone the next morning.

Psychological first aid is not counselling. It's a framework for supporting people in the immediate aftermath of a traumatic event. The Australian Red Cross model uses three steps:

Look. Who seems distressed, withdrawn, or unusually agitated? Who was closest to the incident? Don't assume people who seem fine are fine.

Listen. Approach people calmly. Let them talk. Don't minimise what happened ("at least nobody died"). Don't tell them how to feel. Just listen.

Link. Connect people with professional support. Your governing body may provide access to counselling. Beyond Blue (Australia), Mind (UK), and the Mental Health Foundation (NZ) all offer free support lines.

In your communications to members after a serious incident, always include contact details for support services. Some people won't ask for help directly but will follow a link in an email.

9. The one-page critical incident response card

Laminate it. Put one in the first aid kit, one on the canteen noticeboard, and one with each team manager.

The card should contain:

• Emergency numbers: 000 / 111 / 999 plus the nearest hospital and poison control
• Incident response team contacts: President, secretary, safety officer, media spokesperson - name, phone number, and backup for each
• Insurer: Company name, policy number, claims phone number
• Governing body: Incident reporting contact and phone number
• Immediate actions checklist:
  1. Ensure safety of all people at the scene
  2. Call emergency services if any doubt
  3. Administer first aid if qualified
  4. Call the president (or backup)
  5. Secure the scene - do not clean up or move anything
  6. Start writing down what happened: time, who, what, where
  7. Do not speak to media - direct all enquiries to the spokesperson
  8. Do not post on social media

Keep it to one page. Update it at the start of every season and whenever committee members change. A response card with last year's president's phone number on it is worse than useless - it wastes time.

10. Annual review and testing

A plan that lives in a folder and never gets tested is a document, not a plan. The only way to know whether your incident response works is to simulate an incident before a real one happens.

Tabletop exercises

Once a year, at a regular committee meeting, run a tabletop exercise. The president reads out a scenario - "It's Saturday at 2pm, a junior player has collapsed during a game and is unresponsive" - and the committee walks through the response step by step. Who does what? Who calls whom? Where's the AED? Who has the insurer's number? Where is the incident register kept?

You will find gaps. That's the point. Better to find them in a meeting room than on a Saturday afternoon.

Review triggers

Beyond the annual exercise, review your plan whenever:

• A real incident occurs (even a minor one that tested part of the plan)
• Committee members change (update the response card)
• You change venues or add new activities
• Your insurer or governing body updates their requirements
• Legislation changes in your jurisdiction

After each review, check: Are all contact numbers current? Are all named people still in their roles? Have any policies changed that affect the response process? Are there new risks your plan doesn't cover? Store your updated plan where every committee member and team manager can access it - your club's document storage should have the current version, with previous versions archived.

11. Country-specific reporting obligations

Australia. Under the model WHS Act, a notifiable incident (death, serious injury or illness, dangerous incident) must be reported to the regulator immediately. Failure to notify is a criminal offence. You must preserve the site until an inspector releases it. Victoria has its own OHS Act with similar requirements. Safe Work Australia maintains current notification requirements. Sport Integrity Australia provides additional guidance for integrity-related incidents.

United Kingdom. RIDDOR requires people in control of premises to report specified incidents to the HSE. Safeguarding allegations go to the LADO. The Charity Commission must be notified if the incident constitutes a serious incident under their reporting framework.

New Zealand. The Health and Safety at Work Act 2015 requires PCBUs - including volunteer organisations - to notify WorkSafe NZ of notifiable events. The duty applies regardless of whether the person affected is a worker, volunteer, or visitor. Sport NZ provides sport-specific guidance.

12. Keeping your plan alive

The difference between clubs that handle critical incidents well and clubs that don't isn't resources, or size, or the severity of the incident. It's preparation.

Your plan doesn't need to be long. It doesn't need to be written by a lawyer. It needs to be written down, agreed to by your committee, rehearsed at least once a year, and accessible to the people who need it when they need it. Store it in your document management system. Print the response card and laminate it. Put the emergency contacts in your phone. Track response actions with deadlines so nothing falls through the cracks.

The clubs that have a plan hope they'll never use it. The clubs that don't have a plan hope nothing goes wrong. Hope is not a risk management strategy.

Build the plan. Test it. Update it. Put the card in the first aid kit. Then go back to doing what your club actually exists for.