Common Mistakes in an NDIS Behaviour Support Policy

Why Your Behaviour Support Policy Is a High-Risk Document

For SIL and disability support providers, the behaviour support policy sits at one of the most scrutinised intersections of the NDIS Practice Standards: it touches participant rights, restrictive practices, staff competency, and safeguarding all at once. NDIS Commission auditors treat this policy not as a formality but as live evidence of how your organisation actually operates when a participant's behaviour presents risk — to themselves or to others.

With the strengthened NDIS Practice Standards now in effect for providers seeking or renewing registration, the bar has risen. A policy that may have passed a 2022 audit can generate non-conformances today. Below are the most commonly identified mistakes, and the specific fixes that bring a policy back into alignment.

Mistake 1: Treating the Policy as a Static Document

Many providers write a behaviour support policy at registration, file it, and revisit it only when auditors arrive. This fundamentally misrepresents what the NDIS Commission requires. The Practice Standards expect policies to be reviewed regularly and updated when incidents occur, when a participant's needs change, or when new guidance is issued by the Commission.

The fix: Build a review cycle into the document itself — at minimum annually — and tie it to your incident management review process. Record the date of every review and the name of the person responsible. If a significant incident occurs involving behaviour support or a restrictive practice, a triggered review should be documented.

Mistake 2: No Genuine Commitment to Positive Behaviour Support

A common drafting error is listing Positive Behaviour Support (PBS) as a heading or bullet point without explaining what it means operationally for your organisation. The NDIS Commission's Behaviour Support in the NDIS framework makes clear that PBS is not simply a preference — it is the evidence-based approach required to underpin any behaviour support activity. Policies that pay lip service to PBS without describing how PBS plans are developed, implemented, monitored, and updated will draw scrutiny.

The fix: Include a dedicated section explaining your organisation's PBS approach: how you engage NDIS-registered Behaviour Support Practitioners, how staff are trained to implement PBS plans, and how you monitor whether the plan is actually reducing behaviours of concern over time. Reference the role of the Behaviour Support Practitioner as distinct from your support workers.

Mistake 3: Conflating Restrictive Practices with Behaviour Support Generally

Providers frequently produce a single document that blurs the line between behaviour support broadly and restrictive practices specifically. The NDIS Commission draws a sharp distinction. Restrictive practices — defined in the NDIS (Restrictive Practices and Behaviour Support) Rules 2018 — are subject to separate, mandatory authorisation requirements that vary by state and territory. Failing to address this distinction in your policy creates both a compliance gap and a genuine participant safety risk.

The fix: Dedicate a separate section of your policy to restrictive practices. That section must:

• Define what constitutes a restrictive practice under the relevant Rules
• State your organisation's commitment to reducing and eliminating restrictive practices over time
• Describe the state or territory authorisation process that must be followed before any regulated restrictive practice is used
• Specify that unauthorised use of a restrictive practice must be reported to the NDIS Commission as a reportable incident
• Identify who in your organisation holds responsibility for oversight of any approved restrictive practice

Mistake 4: Vague or Absent Role Assignments

Policies frequently state that "staff will implement behaviour support strategies" without specifying which staff, in which circumstances, with what level of training, and under whose supervision. Auditors testing the Quality Indicator for this Practice Standard will ask support workers to describe their responsibilities — and a disconnect between the written policy and what staff actually understand is a common finding.

The fix: Map responsibilities explicitly by role. A simple table works well:

Mistake 5: No Link to Individual Behaviour Support Plans

An organisational behaviour support policy sets the framework; individual Behaviour Support Plans (BSPs) set the participant-specific strategies. Many providers fail to make this relationship explicit. The result is a policy that sits in a folder while staff rely on informal handover notes or nothing at all when supporting a participant with complex needs.

The fix: Your policy must state clearly that every participant who presents behaviours of concern will have an individual BSP developed by a registered Behaviour Support Practitioner. The policy should describe how the BSP is stored, how staff access it, how consent is documented, and how often it is reviewed with the participant and their support network. Include the participant's right to be involved in the development of their own plan.

Mistake 6: Ignoring the Rights and Dignity Framework

The NDIS Code of Conduct and the strengthened Practice Standards place participant rights — including the right to dignity, autonomy, and freedom from abuse — at the centre of every support activity. Behaviour support policies that focus entirely on staff procedures without articulating how participant rights are protected throughout the behaviour support process are missing a foundational element.

The fix: Add an explicit Rights and Dignity section. This should affirm that behaviour support strategies will never be used as punishment, that any restriction on a participant's freedom is the least restrictive option available, and that participants retain the right to raise complaints about how behaviour support is being delivered. Cross-reference your complaints management policy here.

Mistake 7: No Incident-to-Policy Feedback Loop

When a behaviour-related incident occurs, the NDIS Commission expects that providers learn from it. Behaviour support policies that do not describe how incident data informs policy and plan updates are missing a key element of continuous improvement — itself a Quality Indicator under the Core Module of the Practice Standards.

The fix: Include a section describing how reportable incidents involving behaviour support or restrictive practices are reviewed, what triggers a policy or plan update, and how lessons learned are fed back to staff. This closes the loop between your incident management system and your behaviour support framework, which auditors will look for.

A Note on the 2026 Registration Environment

Providers applying for or renewing registration under the strengthened framework should be aware that the NDIS Commission has signalled closer scrutiny of behaviour support documentation, particularly for SIL providers. Quality auditors will now examine not just whether a policy exists, but whether staff can demonstrate they understand it, whether individual plans are current, and whether restrictive practices are being properly authorised and reported.

If you are building or overhauling your compliance document suite, the 74-document audit-ready SIL compliance kit available at ndiscompliant.com.au includes a structured behaviour support policy template, a restrictive practices register, and aligned incident and complaints policies — designed to work together as an integrated system rather than standalone documents.

Quick Self-Audit Checklist

1. Does the policy have a review date and a named reviewer?
2. Is PBS described operationally, not just mentioned by name?
3. Is there a separate, specific section on restrictive practices and state/territory authorisation?
4. Are roles and responsibilities mapped by position title?
5. Does the policy explain how individual BSPs are developed, accessed, and reviewed?
6. Are participant rights explicitly protected throughout the document?
7. Is there a documented feedback loop from incidents to policy updates?

If you cannot answer yes to all seven, your policy has a gap that an approved quality auditor is likely to find.