The NDIS Commission complaint process

In plain English

Anyone can lodge a complaint with the NDIS Quality and Safeguards Commission about an NDIS provider — a participant, a family member, a worker, another provider, or a member of the public. Complaints can be made online, by phone, by post, or through the National Relay Service. The Commission will assess the complaint, contact the provider, and decide what action (if any) to take.

Most complaints close at the first stage with the Commission confirming the provider has addressed the issue. A smaller proportion escalate to formal investigation, compliance notice, enforceable undertaking, banning order, or civil penalty proceedings. The Commission's annual report gives a rough sense of the funnel: tens of thousands of contacts a year, a few thousand investigations, hundreds of enforcement actions.

Who can complain

The NDIS Act 2013 (s 73X) is deliberately broad. Complaints may come from:

• A participant — about supports they receive, or about the conduct of a worker or another participant in a shared setting.
• A family member, advocate, guardian or other nominee — on behalf of a participant who can't complain themselves or prefers not to.
• A worker — including a contractor or former employee, who has whistleblower protections under section 73ZA when reporting reasonable suspicions of non-compliance.
• Another provider — commonly when a participant transitions and the receiving provider sees evidence of prior neglect, abuse, or unsafe practice.
• A member of the public — including a health professional, school, or community member with concerns about a participant's wellbeing.
• The Commission itself — the Commissioner can act on own-motion concerns without a formal complaint.

How the intake process works

Once a complaint is received, the Commission's Complaints Resolution Branch triages it. Triage looks at: the severity (is anyone at immediate risk?), the credibility of the information, and whether the matter fits the Commission's jurisdiction or should be referred elsewhere (police, state health complaints commissioner, the NDIA itself for plan disputes, Worksafe for worker safety).

Triage outcomes

1. No further action — the matter falls outside the Commission's remit, the complaint is already being resolved directly, or there's insufficient information to progress.
2. Provider resolution — the Commission asks the provider to engage with the complainant directly and report back on the outcome. Most complaints close at this stage within 30–60 days.
3. Conciliation — the Commission facilitates a structured discussion between complainant and provider, sometimes with an external conciliator. Used for relationship breakdowns or where direct resolution stalled.
4. Investigation — the Commission opens a formal investigation under Part 3A of the Act. Investigators can compel documents, interview workers, attend the provider's premises, and require sworn answers under section 55A.

What triggers an investigation

The Commission publishes its Compliance and Enforcement Policy, which sets out the factors it weighs when deciding to investigate. The main triggers:

• Serious harm or risk of serious harm— physical, sexual, financial, or psychological abuse; neglect resulting in injury; medication errors leading to hospitalisation.
• Pattern of complaints — multiple complaints about the same provider, worker, or setting, even if individually below the investigation threshold.
• Reportable Incident notifications that the Commission considers warrant further inquiry — particularly unexplained injuries, deaths, and uses of restrictive practices that aren't authorised under a behaviour support plan.
• Breach of registration conditions — the provider has continued operating despite a failed audit, expired worker screening on rostered staff, or non-implementation of required Practice Standards.
• Refusal to cooperate with Commission inquiries — itself a civil-penalty matter under section 73U.

Timeframes the provider sees

There's no statutory deadline for the Commission to conclude a complaint, but the practical timeline a provider can expect:

• First contact: usually within 7–14 days of intake. Often a letter or email asking the provider's position on specified allegations.
• Provider response: 14 or 28 days depending on complexity. Extensions are typically granted on request with reasons.
• Resolution at intake stage: 30–90 days from first contact.
• Formal investigation: 3–12 months for most matters; complex matters with multiple participants or criminal-conduct allegations can run longer.
• Federal Court civil penalty proceedings: once filed, typically 12–24 months to judgment.

What providers should do when a complaint lands

The Commission's first contact almost always asks for the provider's policies, the relevant participant's records, worker rosters and screening status, incident reports, and any prior complaint responses. The single biggest determinant of how the matter resolves is whether you can produce that documentation immediately, in a form that's coherent and cross-referenced.

1. Acknowledge promptly — confirm receipt of the Commission's contact within 48 hours, even if the substantive response will take longer.
2. Preserve everything — freeze the relevant participant file, worker screening records, incident log, and any digital communications. Don't alter records after notice. The Commission can ask for a forensic copy of your records and compare versions.
3. Investigate internally first — speak to the workers involved, the participant (if appropriate), and anyone who witnessed the incident. Document the interviews. Identify whether a Reportable Incident was triggered separately.
4. Take legal advice — for any complaint naming individual workers or alleging serious harm. The response you give the Commission is admissible in later civil penalty proceedings.
5. Implement corrective action — a credible remediation plan (training, supervisory changes, policy updates) presented at the response stage often closes the matter without further escalation.

How Checkbase helps

When the Commission asks for participant records, worker screening histories, incident reports, and policy versions, Checkbase produces a clean evidence pack on request — timestamped, audit-logged, and exportable as a single PDF. Continuous compliance documentation is the strongest mitigation against a complaint escalating to an investigation or penalty. We also surface expiring screening and overdue incident close-outs so the gap that triggers a complaint is fixed before someone outside the organisation notices.

Frequently asked questions