Incident management system and reportable incident notification
NDIS Provider Registration Rules ss 73Y and 73Z, stated plainly and cited to the edition held, with the evidence an auditor or the regulator asks for, the common gaps, and a free worksheet to fill in.
Provider Registration Rules ss 73Y and 73Z
NDIS Quality and Safeguards Commission
NDIS (Provider Registration and Practice Standards) Rules 2018, Compilation No. 6 (F2026C00527), in force 1 July 2026, with NDIS Act 2013 Part 3A as in Compilation No. 27 (C2026C00401)
6 October 2026, Federal Register: latest version on 6 October 2026
Registered NDIS providers, every profession. Unregistered providers are not bound by these Rules.
Civil penalties were raised and new offences added by the latest amendments; the plan management changes start on proclamation. The provisions this product cites are in force.
A registered provider implements and maintains an incident management system appropriate to its size and supports and meeting the NDIS (Incident Management and Reportable Incidents) Rules 2018, and notifies and manages reportable incidents as those rules prescribe. Reportable incidents are the death of, serious injury to, abuse or neglect of, unlawful sexual or physical contact with or assault of a person with disability, sexual misconduct against or in the presence of them (including grooming), and use of a restrictive practice other than in accordance with a State or Territory authorisation. The Commissioner may require the provider to inform people of their right to an advocate, and to fund an independent investigation and give the report to the Commissioner.
- Incident management system documents and incident register
- Reportable incident notifications with timestamps against the rule timeframes
- Independent investigation reports where required by the Commissioner
- Unauthorised restrictive practices not recognised as reportable
- Late notifications
| Ref | Held (yes, partly, no, not applicable) | Where it is kept | Owner | Last reviewed | Next review |
|---|---|---|---|---|---|
| ss 73Y and 73Z |
Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.
Related requirements
NDIS Provider Registration Rules
- s 73WImplement and maintain a complaints management and resolution system
- ss 73ZBA and 73ZCProtect disclosers: keep identity confidential and prohibit victimisation
- ss 73Q and 73R and s 45BKeep prescribed records, including after registration ends
- s 73ZNA and s 73U(5A)Comply with banning orders and do not use banned people
- s 73KApply for renewal within 6 months before registration expires
- ss 73F, 73G, 73H and 73JComply with every condition of registration
- ss 73C and 73DApply in the Commissioner's form and give no false or misleading information
- s 73B and Rules s 7Do not provide, or hold out as able to provide, a support that requires registration unless registered
- Every page of this instrument
The same topic in other instruments (incidents, registration)
- NDIS Practice Standards Core 14.1 to Core 14.4Core module: Incident management
- NDIS Practice Standards Module 6 5.1Module 6: Incident management
- NDIS Practice Standards Module 2 8.1, Module 2 8.2Module 2: Reportable restrictive practice incidents
- NDIS Practice Standards Module 2A 9.1 to Module 2A 9.7Module 2A: Reportable restrictive practice incidents
- NDIS Code of Conduct s 6(1)(e)Promptly raise and act on concerns about quality and safety
- Incident Rules s 20(1), (2), s 20(3), s 20(4)Reportable incidents notified within 24 hours, then within 5 business days
- National Law s 75Non-practising registrants do not practise
- Common registration standards CH-1 to CH-6Criminal history registration standard
See every requirement for your practiceSee the specimen practice