Allied Health NDIS Audit Checklist
ChildrenNDIS Quality Support for Children (guidance) : guidance, not a rulendis-children-guidance--protect-privacy-and-dignity-and-ask-before-touching
Requirement

Protect privacy and dignity, and ask before touching

NDIS Quality Support for Children (guidance) P-2, stated plainly and cited to the edition held, with the evidence an auditor or the regulator asks for, the common gaps, and a free worksheet to fill in.

Clause

Children guidance P-2

Regulator

NDIS Quality and Safeguards Commission

Edition held

Quality support for children in the NDIS, DA0855, August 2024 (guidance, not a rule)

Checked current

1 October 2026, our build record of the held copy; the October 2024 copy carries the same text

Who it applies to

Providers supporting children under the NDIS, registered or not. Guidance from the NDIS Commission, not a rule.

Read with the Privacy Act

Consent is the usual basis for sharing a child's information. A disclosure required or authorised by law, such as a mandatory child protection report or a court order, is still permitted (APP 6.2(b)), and so is a disclosure in a permitted general situation, such as lessening a serious threat to life, health or safety (APP 6.2(c)). Nothing in this guidance stops a mandatory report or an emergency disclosure.

Working with children checks

Working with children checks are state and territory law, which this list does not cover. Whether a worker needs one, and the exemptions, are set by each state: Queensland, for example, exempts registered health practitioners acting in their professional capacity in specified circumstances. See the state laws page. NDIS worker screening is a separate clearance under the NDIS rules. State laws this checklist does not cover.

P-2Protect privacy and dignity, and ask before touchingsource
Requirement, our statement of the clause

Provide safe, private spaces for play, conversation and personal care; ask the family and child before touching or moving the child and explain where they are going; minimise the number of staff assisting with personal care; obtain consent before sharing information, consent being the usual basis for sharing a child's information (a disclosure required or authorised by law, such as a mandatory child protection report or a court order, still applies); never ask a child to keep a secret; and avoid labelling a child to others as having behaviours of concern.

Evidence that typically shows this
  • Consent to share information form
  • Personal care procedure naming which staff assist
  • Confidentiality section in the service agreement
Common gap to check
  • Reports sent to a school without consent
  • Telehealth sessions with others visible in the background
Worksheet: what your practice holds, and where
RefHeld (yes, partly, no, not applicable)Where it is keptOwnerLast reviewedNext review
P-2

Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.

Related requirements

See every requirement for your practiceSee the specimen practice