Allied Health NDIS Audit Checklist: worksheet
NDIS Incident Management and Reportable Incidents Rules. Edition held: NDIS (Incident Management and Reportable Incidents) Rules 2018, F2018L00633 as made, in force 1 July 2018 (no amendments); checked current on 6 October 2026 (Federal Register: latest version on 6 October 2026).
Standards library: https://compliance.theartofservice.com/frameworks/australia-ndis-incident-management-and-reportable-incidents-rules-2018. Page: https://allied-health-ndis-audit-checklist.theartofservice.com/rules/ndis-incident-management-rules/notify-24-hours-and-5-days/
| Ref | Requirement (our statement of the clause) | Evidence an auditor or the regulator asks for | Common gap to check | Held (yes, partly, no, not applicable) | Where it is kept | Owner | Last reviewed | Next review |
|---|---|---|---|---|---|---|---|---|
| s 20(1), (2) | When the provider becomes aware of a death, serious injury, abuse or neglect, unlawful sexual or physical contact or assault, or sexual misconduct including grooming, it must notify the Commissioner within 24 hours with: its name and contact details; a description of the incident; the impact or harm to the person (except for a death); the immediate actions taken to ensure the health, safety and wellbeing of affected persons and whether police or another body was told; the notifier's name and contact details; the time, date and place if known; the names and contact details of those involved; and any other information the Commissioner requires. The notice may be by telephone or in writing on the approved form. Source: https://www.legislation.gov.au/F2018L00633/latest/text | Commission portal immediate notification records with submission timestamps; Incident register showing the awareness time against the notification time; Record of police or other agency reports made | Notification made after 24 hours counted from when the provider became aware; Immediate safety actions not described | ☐ yes ☐ partly ☐ no ☐ n/a | ||||
| s 20(3) | If too little is known within 24 hours, the provider must still give its details, a description of the incident, the impact or harm, immediate actions and the notifier's details within the 24 hours, and give the remaining required information in writing within 5 business days after becoming aware of the incident. Source: https://www.legislation.gov.au/F2018L00633/latest/text | Initial notification record followed by a written completion within 5 business days; Diary or tracker of outstanding notification information with due dates; Copies of written follow-up submissions | Initial notice lodged but remaining details never supplied; 5 business days counted from the notification rather than from awareness | ☐ yes ☐ partly ☐ no ☐ n/a | ||||
| s 20(4) | For every priority reportable incident the provider must also give the Commissioner, in writing within 5 business days after becoming aware of it, the names and contact details of any witnesses and any further actions it proposes to take. Source: https://www.legislation.gov.au/F2018L00633/latest/text | Written 5-day notifications on the approved form with witness details; Planned further actions linked to the incident action plan; Tracker showing each 24-hour notice paired with its 5-day notice | 5-day notice missed because the 24-hour notice was treated as complete; Proposed actions vague or absent | ☐ yes ☐ partly ☐ no ☐ n/a |
Completing this worksheet records what your practice holds and where. It does not make a practice compliant or ready for audit, and it is not legal advice.