Allied Health NDIS Audit Checklist
IncidentsNDIS Incident Management and Reportable Incidents Rulesndis-incident-management-rules--notify-24-hours-and-5-days
Requirement

Reportable incidents notified within 24 hours, then within 5 business days

NDIS Incident Management and Reportable Incidents Rules s 20(1), (2), s 20(3), s 20(4), stated plainly and cited to the edition held, with the evidence an auditor or the regulator asks for, the common gaps, and a free worksheet to fill in.

Clause

Incident Rules s 20(1), (2), s 20(3), s 20(4)

Regulator

NDIS Quality and Safeguards Commission

Edition held

NDIS (Incident Management and Reportable Incidents) Rules 2018, F2018L00633 as made, in force 1 July 2018 (no amendments)

Checked current

6 October 2026, Federal Register: latest version on 6 October 2026

Who it applies to

Registered NDIS providers, every profession. Unregistered providers are not bound by these Rules.

Why these rows sit on one page

s 20(1) and (2), s 20(3) and s 20(4) are one notification in stages: the 24-hour notice, the staged notice when information is short, and the 5 business day follow-up. Three pages would repeat each other.

s 20(1), (2)Notify priority reportable incidents within 24 hourssource
Requirement, our statement of the clause

When the provider becomes aware of a death, serious injury, abuse or neglect, unlawful sexual or physical contact or assault, or sexual misconduct including grooming, it must notify the Commissioner within 24 hours with: its name and contact details; a description of the incident; the impact or harm to the person (except for a death); the immediate actions taken to ensure the health, safety and wellbeing of affected persons and whether police or another body was told; the notifier's name and contact details; the time, date and place if known; the names and contact details of those involved; and any other information the Commissioner requires. The notice may be by telephone or in writing on the approved form.

Evidence that typically shows this
  • Commission portal immediate notification records with submission timestamps
  • Incident register showing the awareness time against the notification time
  • Record of police or other agency reports made
Common gap to check
  • Notification made after 24 hours counted from when the provider became aware
  • Immediate safety actions not described
s 20(3)Staged 24-hour notification when information is incompletesource
Requirement, our statement of the clause

If too little is known within 24 hours, the provider must still give its details, a description of the incident, the impact or harm, immediate actions and the notifier's details within the 24 hours, and give the remaining required information in writing within 5 business days after becoming aware of the incident.

Evidence that typically shows this
  • Initial notification record followed by a written completion within 5 business days
  • Diary or tracker of outstanding notification information with due dates
  • Copies of written follow-up submissions
Common gap to check
  • Initial notice lodged but remaining details never supplied
  • 5 business days counted from the notification rather than from awareness
s 20(4)Five-day notification for priority incidentssource
Requirement, our statement of the clause

For every priority reportable incident the provider must also give the Commissioner, in writing within 5 business days after becoming aware of it, the names and contact details of any witnesses and any further actions it proposes to take.

Evidence that typically shows this
  • Written 5-day notifications on the approved form with witness details
  • Planned further actions linked to the incident action plan
  • Tracker showing each 24-hour notice paired with its 5-day notice
Common gap to check
  • 5-day notice missed because the 24-hour notice was treated as complete
  • Proposed actions vague or absent
Worksheet: what your practice holds, and where
RefHeld (yes, partly, no, not applicable)Where it is keptOwnerLast reviewedNext review
s 20(1), (2)
s 20(3)
s 20(4)

Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.

notify the NDIS Commission of a change: check which notice it needs: the NDIS Aged Care Notifiable Change Checker, from the same publisher, reads one change and lists the notices it needs, by when.

Related requirements

See every requirement for your practiceSee the specimen practice