NDIS policies and procedures: the full list, with templates

The 8 NDIS Code of Conduct obligations, adapted into your own worker code with a sign-off page.

How your business is run, who is responsible, and how you stay compliant.

How you review and improve your services over time (a Practice Standards requirement).

How you identify, assess and manage risks to participants, staff and the business.

How supports keep running through emergencies, disasters and disruptions.

Annual planning template covering priorities, measures, owners and review schedule. Pairs with the Continuous Improvement Policy.

Feedback from the people and services you work alongside (support coordinators, other providers, allied health, families/carers). Continuous improvement expects feedback from a range of sources, not only participants.

Financial governance, budgeting, viability and continuity, NDIS claiming integrity, fraud controls and insurance - the Governance “Financial Management” standard.

A yearly self-audit calendar plus participant-file and worker-file audit checklists - how you check your policies are actually followed between external audits, with findings feeding the Quality Improvement Plan.

A proportionate business plan an auditor can interview you against - purpose, registration scope, participant and worker input, viability, workforce, governance delegation, risks and growth limits. Mostly fill-in prompts, because it only works in your own words.

The skills and knowledge your key personnel need to run an NDIS provider, what each person holds, the gaps, and the training plan to close them - with declarations and an annual review.

How you collect, store, use and protect participant and staff information.

How you record, respond to and report incidents, including NDIS reportable incidents and their timeframes.

How participants raise complaints and give feedback, and how you respond.

Your duty of care and safe-work approach for staff and participants.

Hand hygiene, PPE and outbreak measures. A worker training requirement under the Standards.

How you keep, secure and retain records.

Identifying and managing conflicts so participant choice isn’t compromised.

How workers and others safely report serious wrongdoing - including anonymously - and the protections they have, reflecting the 2026 NDIS Act changes.

How you supervises workers: frequency, what supervision covers, and how concerns are handled.

Planned and unplanned transitions in, out and between supports, including continuity of supports.

Easy Read, interpreters, Auslan, AAC and other accessible-communication arrangements.

Safe transport of participants: licences, vehicle registration and insurance, restraints, transfers, and what to do after a breakdown or accident.

A one-page decision aid separating transport as the support (0108), provider travel, and activity-based transport - and the plan/funding/Support Catalogue checks to run before claiming any of them. No rates - the current Pricing Schedule stays the authority.

The four steps (contain, assess, notify, review) under the Notifiable Data Breaches scheme - which applies to you because you handle health information.

Check-in system, missed-check-in escalation and personal safety for workers supporting participants one-to-one in homes and the community.

How you communicate openly and honestly with a participant after something goes wrong. Pairs with the Incident Management Policy.

Protecting participant privacy online, image consent, professional conduct and boundaries on social media.

The named Core Module standard: how supports continue for participants through emergencies and disasters - realistic local risks, critical-supports triage, backup arrangements, response steps and an annual test. Pairs with the Emergency & Business Continuity Plan and each participant's Individual Emergency Plan.

The Management of Waste standard for in-home and community supports: hygiene vs clinical waste, sharps, chemicals, your recorded local disposal arrangements, and the spill / sharps-injury / exposure emergency response with after-event review.

Rights, choice, dignity of risk, and protection from abuse, neglect and exploitation.

How you take on (and, where needed, decline or exit) participants fairly.

Person-centred support planning, delivering supports day to day, and reviewing them - the gap between intake and an ongoing service.

The agreement between you and each participant: supports, costs, cancellations, rights, ending the agreement.

The participant agreement for support coordination providers: the SC role, conflict of interest and independence, information sharing, costs, 2-business-day cancellations, and ending the agreement.

Consent to provide supports and to collect/share information.

Plain-language pack the participant gets at intake: rights, complaints, emergency contacts and what to expect.

A short, plain-language survey you send participants (e.g. yearly) to ask how things are going. The evidence behind continuous improvement: ask, record what you hear, and show what you changed.

Cash handling, cards, valuables, keys, gifts, and how to respond to suspected financial abuse.

One working safety document per participant: pre-start safety checks for higher-risk supports, risks, ratings and controls (with dignity of risk respected), emergency response, and continuity of critical supports. Replaced the separate Participant Risk Assessment and Individual Emergency Plan - completed copies of those remain valid evidence.

The Commission's extra registration condition on 0107: where a sole worker provides personal support to a participant who lives alone - the risk-factor assessment, the six service-agreement safeguards, the monitoring plan, and the register of affected participants.

Person-centred plan built with the participant, which also carries the initial intake / needs assessment: goals, health and communication needs, the supports you’ll provide, how they like them delivered, key risks and review.

The day-to-day support record, with guidance on writing factual, person-centred notes that an auditor would accept.

A practical safety check of a participant's home before in-home supports start and when things change - the support-environment evidence for in-home services, done with the participant, not to them.

A plain-language guide for participants: what an incident is, what we do about it, how to complain (including anonymously), advocacy and interpreter help, and how to go straight to the NDIS Commission. Give one to every participant at intake.

Recruiting, screening (incl. NDIS Worker Screening), training and supervising staff.

Induction (incl. the NDIS Worker Orientation Module), role-specific and mandatory training, and keeping worker skills current.

A casual contract you can issue to support workers.

A part-time contract template.

A full-time contract template.

For providers who have already determined they are engaging a genuine independent contractor support worker. Works for registered and unregistered providers.

For engaging a genuinely independent OT, physio, speech pathologist, psychologist, dietitian, exercise physiologist or podiatrist. Registered and unregistered providers.

A ready-to-use support worker role description.

A conditional offer letter that precedes the Employment Agreement - makes the offer subject to NDIS Worker Screening, references and right to work.

A worker undertaking to keep participant and business information confidential, during and after employment. Backs the Privacy & Confidentiality Policy.

Collects new-starter details, bank/super/TFN declaration prompts, emergency contact and qualifications.

A ready-to-run induction session for new workers - branded cover page, what your organisation does, and every standard a new NDIS worker needs (Code of Conduct, safeguarding, incidents, privacy, WHS) with a sign-off page. Edit the highlighted parts for your organisation.

The evidence the induction happened: pre-start checks (screening, orientation module, agreements), every topic signed off, a recorded understanding check, participant-specific briefings, and a graded approval to commence work.

How workers raise a grievance and how conduct or performance concerns are managed fairly - procedural fairness, warnings, serious misconduct, suspension, and what happens when a concern involves participant safety.

The single log of all incidents (incl. reportable ones) with follow-up and status, so incidents can be tracked and trended - not just recorded one-by-one.

A form your staff fill in when an incident happens.

A log to track complaints and how they were resolved.

A log to record risks, ratings and controls.

Logs declared conflicts and declared gifts, benefits and hospitality - how each is managed, approved and disclosed. The evidence behind the Conflict of Interest Policy.

Logs each use of a regulated restrictive practice under an authorised behaviour support plan, for monthly Commission reporting. For providers who use restrictive practices.

Tracks each worker’s screening, qualifications, orientation module and training.

Per-worker record of training completed, evidence held and refreshers due, plus a forward training plan - the live evidence behind the Training & Development Policy.

Two ready-to-send letter templates pairing with the Complaints Policy.

Where workers handle participant money or belongings: per-shift transaction records with receipts and participant confirmation, custody handovers, oversight reconciliation, and a property record. Pairs with the Participant Money & Property Policy.

Levels of medication support, the "five rights", recording every dose, storage and what to do when an error happens.

The signing chart workers complete every time they assist with or administer medication - current medications, the administration grid, PRN, refusals, errors and near misses, and a worker signature register. The record behind the Medication Management Policy.

Mealtime risk and dysphagia, mealtime plans, modified diets, choking response and enteral feeding (HIDPA).

The 5 regulated restrictive practices, when use is permitted, monthly Commission reporting, and the 24h-vs-5BD timeframes for unauthorised use.

The anchor for an allied health organisation: credential verification per profession (AHPRA, Speech Pathology Australia, APD, AEP), scope of practice, clinical oversight and escalation, new-graduate and therapy-assistant oversight, and the boundary that clinical findings are never directed.

One clinical record per participant: documentation standards, corrections with an audit trail, report integrity, access and release, and retention including the longer periods for participants who were minors.

The clinical consent that sits beside the Participant Consent Form: what the assessment and therapy involve, benefits and material risks in plain language, telehealth and recording consent, and the right to decline or withdraw at any time.

The participant agreement for therapy services across the seven professions: assessment and therapy, reports agreed in advance, provider travel and non-face-to-face activity, telehealth as an agreed option, and the same consumer protections as the core service agreement.

Professional supervision for practitioners - distinct from operational worker supervision - with arrangements for new graduates and provisional registrants, supervision records, and CPD verified against each profession’s body at credential renewal.

Delivering therapy by video or phone: clinical suitability, consent, privacy and platform security, session safety including the participant’s location and an emergency contact, documentation to the same standard, and billing only as the pricing rules allow.

A ready-to-use practitioner role description with the exact credential per profession, scope and clinical-independence boundaries, documentation duties and selection criteria.

Per-practitioner evidence that credentials are real and current: registration or credential checks with dates, status and conditions, professional indemnity insurance, screening, supervision arrangement and CPD confirmation - verified at engagement and every renewal.

The participant-specific record behind delegation: what the treating practitioner delegated to a therapy assistant (or agreed for a student), the written instructions, limits and stop-and-escalate triggers, the supervision arrangement, and the participant’s advance agreement - reviewed at a recorded date.