Allied Health NDIS Audit Checklist
IncidentsNDIS Incident Management and Reportable Incidents Rulesndis-incident-management-rules--s25-keep-reportable-incident-records-for-7-years-from
Requirement

Keep reportable incident records for 7 years from notification

NDIS Incident Management and Reportable Incidents Rules s 25, stated plainly and cited to the edition held, with the evidence an auditor or the regulator asks for, the common gaps, and a free worksheet to fill in.

Clause

Incident Rules s 25

Regulator

NDIS Quality and Safeguards Commission

Edition held

NDIS (Incident Management and Reportable Incidents) Rules 2018, F2018L00633 as made, in force 1 July 2018 (no amendments)

Checked current

6 October 2026, Federal Register: latest version on 6 October 2026

Who it applies to

Registered NDIS providers, every profession. Unregistered providers are not bound by these Rules.

s 25Keep reportable incident records for 7 years from notificationsource
Requirement, our statement of the clause

The provider must keep a record of each reportable incident it becomes aware of for 7 years from the day it was notified under subsection 20(2), paragraph 21(2)(b) or subsection 23(2); keeping the section 12 record satisfies this.

Evidence that typically shows this
  • Retention schedule entry for reportable incident records from the notification date
  • Archived notification copies and acknowledgements from the Commission
  • Retrieval test of an older reportable incident file
Common gap to check
  • Retention period counted from incident closure instead of notification
  • Commission acknowledgements not retained
Worksheet: what your practice holds, and where
RefHeld (yes, partly, no, not applicable)Where it is keptOwnerLast reviewedNext review
s 25

Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.

Related requirements

See every requirement for your practiceSee the specimen practice