Common Mistakes in an NDIS Conflict of Interest Policy

Why Your Conflict of Interest Policy Is a Priority in 2026

The NDIS Commission's strengthened Practice Standards, which began rolling out ahead of the mandatory re-registration cycle, place renewed emphasis on governance, transparency, and the management of conflicts of interest. For Supported Independent Living (SIL) providers and other registered organisations, a weak or poorly drafted conflict of interest policy is no longer a minor administrative gap — it is a non-conformance that auditors actively look for during certification and verification audits.

This article walks through the most common mistakes providers make in their conflict of interest policies, explains why each one creates compliance risk, and gives you the fix to apply right now.

Mistake 1: Defining "Conflict of Interest" Too Narrowly

Many providers draft policies that only address obvious financial conflicts — for example, a board member who owns shares in a supplier. In practice, the NDIS Commission's Code of Conduct and Practice Standards expect a much broader definition that captures:

• Personal relationships (family members employed by the organisation or receiving services)
• Secondary employment or consulting arrangements held by staff
• Gifts and benefits that could influence decision-making
• Political affiliations or community roles that could create bias in support planning
• Dual roles — for instance, a support coordinator employed by the same organisation that delivers the participant's SIL services

The fix: Broaden your definition section to cover actual, perceived, and potential conflicts. A perceived conflict — one where a reasonable observer might question independence, even if no actual bias exists — carries the same reputational and compliance weight as a real one.

Mistake 2: Treating Disclosure as a One-Time Event

A significant number of policies require workers and board members to declare conflicts only at induction or at the start of each calendar year. This fails to account for the reality that new conflicts can arise at any time — a staff member starts a relationship with a participant's family member, a director is appointed to the board of a related entity, or a senior manager begins a side business offering services similar to those the organisation provides.

The fix: Your policy must explicitly state that disclosure obligations are ongoing and immediate. Workers should be required to declare a conflict as soon as they become aware of it, not at the next scheduled review date. Build a simple standing agenda item into team meetings and board meetings to prompt fresh declarations.

Mistake 3: No Register — or a Register That Nobody Maintains

The NDIS Practice Standards on governance require that conflicts of interest be recorded, managed, and reviewed. Without a living register of declared conflicts, an auditor has no evidence that your policy is operational. Many providers have a template register but it contains only entries from the year the policy was first written.

The fix: Maintain a Conflict of Interest Register as a controlled document with a version history. Each entry should capture the date of disclosure, the name and role of the person declaring, the nature of the conflict, the decision made about management (recusal, monitoring, disclosure to participants), and the date of review. Update it every time a new conflict is declared or an existing one is resolved.

Mistake 4: Failing to Address Dual-Role and Supported Decision-Making Conflicts

SIL providers face a specific conflict risk that generic policies often miss: the same organisation may be providing support coordination, plan management, and direct SIL support to the same participant. The NDIS Commission has been explicit that this arrangement raises serious independence concerns. Where a participant's support coordinator is employed by the same entity delivering their SIL services, the coordinator's objectivity in recommending or reviewing those services is structurally compromised.

The fix: Your policy needs a dedicated section on dual-role conflicts. It should state clearly how the organisation identifies these situations, what steps are taken to protect participant choice and control, and whether the organisation maintains an operational separation between coordination and direct support functions. In some cases, the appropriate management strategy is referral to an independent support coordinator entirely.

Mistake 5: No Process for Managing a Declared Conflict

Many policies describe how conflicts must be declared but say almost nothing about what happens next. Disclosure without management is not compliance — it is just paperwork. The key question an auditor will ask is: once a conflict was declared, what did the organisation actually do about it?

The fix: Your policy must outline a tiered management framework. Common options include:

1. Recusal — the person with the conflict removes themselves from the relevant decision or process
2. Monitoring — the conflict is noted and a third party oversees the relevant activity
3. Disclosure to affected parties — participants or their nominees are informed so they can make an informed choice
4. Divestment or role change — for significant structural conflicts, the organisation may require a person to change roles or cease an external arrangement

The policy should specify who is responsible for deciding which management option applies and how that decision is documented.

Mistake 6: Leaving Participants Out of the Picture

The NDIS Code of Conduct requires providers and their workers to act with integrity, honesty, and transparency. This extends to being open with participants when a conflict exists that affects their services or supports. Many conflict of interest policies are written entirely in terms of internal governance, with no reference to participant notification or consent obligations.

The fix: Add a section that specifically addresses participant-facing transparency. Where a conflict of interest affects — or could reasonably be seen to affect — the supports a participant receives, the participant (and where appropriate their nominee or guardian) must be informed in plain language and given genuine opportunity to seek an alternative arrangement.

Mistake 7: The Policy Is Never Reviewed or Tested

Compliance frameworks require policies to be living documents. A conflict of interest policy that was drafted in 2021 and has never been revisited is not fit for purpose under the strengthened 2026 standards. Audit evidence will include version history, review dates, and records of staff training against the current policy.

The fix: Schedule an annual policy review as a board-level agenda item. After each review, update the version number and record what was considered and whether changes were made. Pair the review with a short staff briefing or attestation to demonstrate active implementation, not just a document sitting in a folder.

A Quick Self-Audit: Six Questions to Ask Right Now

Getting Your Policy Audit-Ready

A conflict of interest policy does not exist in isolation. It sits alongside your complaints management policy, incident management framework, governance charter, and worker screening obligations — all of which are reviewed together during a certification audit. Gaps in one document often expose gaps in related documents.

If you are working through a full SIL compliance uplift ahead of re-registration, the 74-document audit-ready SIL compliance kit at ndiscompliant.com.au includes a conflict of interest policy template, a conflict register, and all supporting governance documents structured to the current NDIS Practice Standards — which can significantly reduce the time needed to prepare for audit.

Whatever approach you take, the most important step is to stop treating conflict of interest management as a tick-box exercise. Under the strengthened framework, auditors are looking for genuine evidence that your organisation identifies, records, manages, and reviews conflicts in practice — not just on paper.