Allied Health NDIS Audit Checklist: worksheet
NDIS Code of Conduct. Edition held: NDIS (Code of Conduct) Rules 2018, Compilation No. 1 (F2024C00048), in force 19 December 2023; checked current on 6 October 2026 (Federal Register: latest version on 6 October 2026).
Standards library: https://compliance.theartofservice.com/frameworks/australia-ndis-code-of-conduct-rules-2018. Page: https://allied-health-ndis-audit-checklist.theartofservice.com/rules/ndis-code-of-conduct/s6-1-b-respect-the-privacy-of-people-with-disability/
| Ref | Requirement (our statement of the clause) | Evidence an auditor or the regulator asks for | Common gap to check | Held (yes, partly, no, not applicable) | Where it is kept | Owner | Last reviewed | Next review |
|---|---|---|---|---|---|---|---|---|
| s 6(1)(b) | Every Code-covered person respects the privacy of people with disability: personal information is collected, used, disclosed and stored consistently with Commonwealth and State or Territory privacy law, and supports are delivered in a dignified way that protects personal privacy (for example during personal care, and in how photographs, social media and conversations about participants are handled). Source: https://www.legislation.gov.au/F2018L00629/latest/text | Privacy policy and collection notice given to participants, with consent records for collection and disclosure; Worker social media and confidentiality rules signed by each worker; Access log or permission settings for participant files in the client management system; Privacy complaint and breach register | Photographs of participants posted by workers without consent; Participant details discussed in group chats or in front of other clients; Small providers assume the Privacy Act small business exemption excuses them, although health information and the Code still apply | ☐ yes ☐ partly ☐ no ☐ n/a |
Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.