Quick answer: NDIS providers in Australia operate under two distinct compliance frameworks simultaneously: the NDIS Practice Standards set by the NDIS Commission, and WHS obligations as employers or PCBUs under state and territory WHS legislation. This resource hub brings together the key guides, document requirements, and practical information you need to manage both.
Last reviewed: June 2026 by the BlueSafe Technical Team.
NDIS regulations change frequently. Always verify current requirements with the NDIS Commission before making compliance decisions.
Running an NDIS service involves more than meeting the requirements set by the NDIS Quality and Safeguards Commission. Every provider that employs workers — or engages contractors and volunteers — also carries obligations under Work Health and Safety (WHS) legislation as a person conducting a business or undertaking (PCBU). These two compliance frameworks share overlapping concerns around risk management, incidents, safe environments, and trained workforces, but they are administered by different regulators and carry separate legal obligations.
This hub page collects the key resources, guides, and document requirements that NDIS providers need to understand across both areas. Use it as a starting point, and follow the links to the detailed guides where you need deeper coverage of a specific topic.
WHS obligations for NDIS providers
As a registered or unregistered NDIS provider, your WHS obligations under your state or territory's WHS Act apply independently of your NDIS obligations. Holding NDIS registration does not satisfy your WHS duties, and vice versa. The primary duty of care under WHS legislation requires PCBUs — including disability service providers — to eliminate or minimise risks to the health, safety, and welfare of workers so far as is reasonably practicable.
Key WHS duties that apply directly to NDIS providers include:
- Providing and maintaining a safe work environment, systems of work, and plant and structures
- Managing hazards including manual handling, lone working, client aggression, and psychosocial risks
- Consulting with workers on health and safety matters
- Establishing incident notification, recording, and investigation processes
- Providing training, supervision, and information so that workers can carry out their work safely
The overlap between WHS and NDIS obligations can create confusion, particularly around incident management, risk documentation, and workforce records. Understanding where the frameworks converge — and where they diverge — is essential for providers trying to manage their compliance obligations efficiently.
For a detailed breakdown of where WHS and NDIS requirements interact and how to address compliance gaps across both, see the full guide: WHS Requirements for NDIS Providers.
NDIS Practice Standards and WHS
The NDIS Practice Standards establish the quality and safety benchmarks that registered NDIS providers are assessed against during audit. They are structured around a Core Module — which applies to all registered providers — and a set of supplementary modules that apply to specific service types.
Several Practice Standards directly mirror or intersect with WHS obligations:
- Risk management — the Practice Standards require providers to identify, assess, and manage risks to participants and others. WHS legislation requires a parallel process for worker safety.
- Incident management — both frameworks require documented systems for reporting, recording, and responding to incidents. The NDIS incident reporting requirements and WHS notification obligations are separate but involve many of the same events.
- Safe environment — the Practice Standards require the support environment to be safe and appropriate for participants. WHS obligations require the work environment to be safe for workers delivering those supports.
- Workforce — the Practice Standards require a trained, screened, and supervised workforce. WHS obligations require training and supervision that supports safe work practices.
Understanding where Practice Standards and WHS requirements align — and where each framework has unique requirements — helps providers build systems that satisfy both without unnecessary duplication.
For a thorough overview of the Practice Standards structure, see: NDIS Practice Standards Guide.
Worker safety resources for NDIS providers
The following guides cover the main safety and compliance topics that NDIS providers commonly need to address across both their NDIS and WHS obligations.
| Resource | What it covers |
|---|---|
| WHS Requirements for NDIS Providers | How WHS and NDIS obligations overlap, common compliance gaps, and the key WHS documents disability providers need |
| NDIS Practice Standards Guide | The Core Module, supplementary modules, and what auditors look for against each standard |
| NDIS Code of Conduct Explained | The worker and provider obligations under the NDIS Code of Conduct |
| NDIS Incident Management Obligations | Reportable incidents, NDIS Commission notification requirements, and incident system expectations |
| NDIS Worker Screening Check Guide | Who needs a screening check, the clearance process, and record-keeping obligations |
| What Is a WHS Management System? | How a WHS management system works and why NDIS providers benefit from implementing one |
WHS documents an NDIS provider needs
NDIS providers need a document set that addresses both NDIS Practice Standards and WHS legislative obligations. The table below outlines the key document categories and their primary purpose. This is not an exhaustive list — the full scope of required documents depends on the provider's registration groups, services delivered, and workforce size.
| Document | Purpose |
|---|---|
| WHS Policy | States the provider's commitment to worker health and safety and assigns accountability |
| Hazard Identification and Risk Assessment records | Demonstrates the provider has identified and assessed risks in its work environments |
| Safe Work Procedures | Documents the controls for specific high-risk tasks such as manual handling, lone working, and use of equipment |
| Incident and Near Miss Register | Records and tracks safety incidents and near misses; supports investigation and continuous improvement |
| Psychosocial Hazard Assessment | Addresses risks such as client aggression, high job demands, and isolation — particularly relevant in disability support roles |
| Emergency and Evacuation Procedures | Ensures workers and participants can respond effectively to emergencies in support environments |
| Training and Induction Records | Demonstrates workers have received the safety training required for their role |
| Consultation Records | Evidence that workers are consulted on health and safety matters as required under WHS legislation |
| NDIS Policies and Procedures Suite | Addresses the quality indicators under the Practice Standards across participant rights, governance, support delivery, and incident and complaints management |
For a complete overview of the NDIS-specific policies and procedures that registered providers are expected to maintain, see: NDIS Policies and Procedures Required.
NDIS worker screening and training records
All registered NDIS providers are required to verify that workers and volunteers in certain roles hold a valid NDIS Worker Screening Check (or state-specific equivalent where applicable) before they commence delivering NDIS supports. The check assesses whether a person poses an unacceptable risk of harm to NDIS participants.
Key obligations around worker screening for providers include:
- Confirming clearance status before a worker commences in a risk-assessed role
- Maintaining records of clearances for all applicable workers and volunteers
- Re-verifying clearance status periodically and when clearances are due to expire
- Understanding which roles are classified as risk-assessed roles under the NDIS Worker Screening Rules
Worker screening records are one of the most closely examined areas during NDIS audits, and gaps are among the most common non-conformities. Providers should maintain a current register of all required clearances and assign responsibility for monitoring expiry dates.
For detailed guidance on who needs a screening check, the application process, and how to manage records: NDIS Worker Screening Check Guide.
NDIS incident management
NDIS providers have incident management obligations that run across both NDIS and WHS frameworks. Under the NDIS (Incident Management and Reportable Incidents) Rules, registered providers must have a documented incident management system and must notify the NDIS Commission of reportable incidents within defined timeframes.
Reportable incidents under the NDIS Rules include:
- The death of a person with disability in connection with the delivery of supports
- Serious injury of a person with disability
- Abuse or neglect of a person with disability
- Unauthorised use of restrictive practices
- Sexual or physical assault
At the same time, WHS legislation requires providers to notify their state or territory WHS regulator of notifiable incidents involving workers — including deaths, serious injuries or illnesses, and dangerous incidents. Some events will trigger obligations under both frameworks simultaneously and require parallel reporting actions.
Providers should ensure their incident management system can capture events, classify them correctly, trigger the right notifications, and retain records that satisfy both sets of requirements.
For detailed guidance on NDIS reportable incident categories, notification timeframes, and incident system requirements: NDIS Incident Management Obligations.
Preparing for an NDIS audit
NDIS audits — whether verification or certification — assess whether a provider's policies, systems, and operational evidence meet the relevant Practice Standards. Auditors do not just review documents: they look for evidence that systems are working in practice, that staff understand the policies, and that records back up the provider's claims.
Common areas where providers are found to have non-conformities during audit include:
- Outdated or generic policies that do not reflect the provider's actual services or workforce
- Incomplete or missing worker screening records
- Incident management systems that exist on paper but show no evidence of use
- Training records that are incomplete or do not demonstrate competency
- Risk assessments that have not been reviewed or updated
Effective audit preparation involves a gap analysis well in advance of the audit date, a structured approach to resolving document and evidence gaps, and a process for briefing staff on the systems and their responsibilities.
For a step-by-step audit preparation framework, common non-conformity examples, and what to have ready before auditors arrive: NDIS Audit Preparation Guide.
Key resource guides for NDIS providers
The following guides are the primary references for NDIS providers working through their WHS and compliance obligations. Bookmark or share them with your compliance team.
- WHS Requirements for NDIS Providers — how WHS and NDIS obligations interact and what providers need to manage across both frameworks
- NDIS Practice Standards Guide — the Core Module, supplementary modules, and quality indicators explained
- NDIS Policies and Procedures Required — the full document suite registered providers are expected to maintain
- NDIS Audit Preparation Guide — a structured approach to preparing for verification and certification audits
- NDIS Incident Management Obligations — reportable incidents, notification timeframes, and incident system requirements
- NDIS Worker Screening Check Guide — worker screening requirements, role classifications, and record-keeping
- NDIS Code of Conduct Explained — provider and worker obligations under the NDIS Code of Conduct
- What Is a WHS Management System? — how a structured WHS management system supports compliance for disability service providers
Frequently asked questions
Do NDIS providers need a WHS management system?
Yes. As employers or PCBUs, NDIS providers have obligations under WHS legislation to manage worker health and safety in a structured and documented way. A WHS management system — whether built around a formal standard or implemented as a practical set of policies, procedures, and records — provides the foundation for meeting those obligations. It also supports better outcomes under the NDIS Practice Standards, where governance, risk management, and incident systems are assessed. For providers seeking registration or maintaining certification, having a functioning WHS system alongside their NDIS document suite positions them more strongly for audit.
What WHS documents does an NDIS provider need?
The core WHS document set for an NDIS provider typically includes a WHS policy, hazard and risk assessment records for the provider's work environments, safe work procedures for higher-risk tasks (such as manual handling, lone working, and client-facing roles involving aggression risk), an incident and near miss register, emergency and evacuation procedures, training and induction records, and evidence of worker consultation. Providers with larger workforces or more complex service environments may need additional controls. The NDIS-specific policies and procedures required for registration sit alongside this WHS document set — both are needed.
How do NDIS Practice Standards relate to WHS obligations?
The NDIS Practice Standards are set by the NDIS Quality and Safeguards Commission and establish the quality and safety benchmarks that registered providers are audited against. WHS obligations arise under state and territory WHS legislation and are enforced by each jurisdiction's WHS regulator. The two frameworks are legally distinct, but they overlap significantly in practice: both address risk management, incident management, safe environments, and workforce training and supervision. Providers cannot use NDIS compliance as a substitute for WHS compliance, or vice versa. They need to satisfy both in parallel.
What is the NDIS worker screening check?
The NDIS worker screening check is a nationally consistent screening process for workers and volunteers who deliver NDIS supports or have more than incidental contact with NDIS participants. Administered through each state and territory's screening unit, it assesses a person's criminal history and other relevant information to determine whether they pose an unacceptable risk of harm to participants. Workers in risk-assessed roles cannot commence or continue delivering NDIS supports without a valid clearance. Providers must maintain records of clearances and have systems in place to monitor and renew them. Full details are covered in the NDIS Worker Screening Check Guide.
Manage your NDIS and WHS compliance in one place
BlueSafe Online provides WHS and compliance tools built for Australian businesses, including NDIS providers. Access policy templates, risk assessment tools, incident registers, and compliance management features designed to support both your WHS obligations and your NDIS audit readiness.
Explore BlueSafe Online to see how it supports NDIS provider compliance.
This guide provides general information only. NDIS providers should seek independent advice to ensure compliance with both NDIS practice standards and applicable WHS legislation.