Why Your Medication Management Policy Is Under the Microscope in 2026

With the NDIS Commission's strengthened Practice Standards taking full effect for the 2026 mandatory registration cycle, medication management has moved from a box-ticking exercise to a genuine quality and safety priority. Approved quality auditors are examining policies more critically than ever, and providers — particularly those delivering Supported Independent Living (SIL) — are finding that policies written years ago no longer pass scrutiny.

Medication management sits across multiple Practice Standards obligations: the rights and dignity of participants, safe and competent workforce, risk management, and high intensity daily activities. Getting the policy wrong does not just create audit risk — it creates real harm risk for the people your organisation supports.

Below are the seven most common mistakes found in NDIS medication management policies, along with practical guidance on how to fix each one.

Mistake 1: Treating the Policy as a Generic Template Without Contextualising It to Your Service

Many providers download a generic medication management policy and publish it without adapting it to the types of supports they actually deliver. A policy for a community access service looks very different from one covering a 24-hour SIL house where workers administer complex medications — including those requiring high intensity support skills.

The fix: Your policy must reflect the actual medication-related tasks your workers carry out. If your workers are doing anything beyond prompting — such as administering oral medications, applying patches, or managing PRN (as-needed) medications — your policy must reference the High Intensity Support Skills Descriptors from the NDIS Practice Standards and document how staff competency is verified for those specific tasks.

Mistake 2: No Clear Statement on Participant Rights and Self-Medication

NDIS participants have the right to make decisions about their own health, including how their medications are managed. Many policies focus entirely on what staff do, and say nothing about the participant's right to self-administer, to refuse medication, or to be involved in decisions about their medication regimen. This is a direct gap against the person-centred and rights-based requirements embedded in the NDIS Practice Standards and the NDIS Code of Conduct.

The fix: Include an explicit section addressing:

Mistake 3: Vague or Missing Staff Competency Requirements

A policy that states workers "must be trained in medication management" without specifying what training, at what level, verified by whom, and how often, is unlikely to satisfy an auditor. The strengthened Practice Standards place particular emphasis on demonstrating that workers have the skills and knowledge to deliver the supports safely — not just that they attended a training session.

The fix: Your policy should specify:

Mistake 4: Incomplete Incident Reporting Triggers

Medication errors — including missed doses, wrong doses, wrong time, wrong route, or adverse reactions — are reportable incidents under the NDIS (Incident Management and Reportable Incidents) Rules. Yet many policies either omit medication errors entirely from their incident trigger list or only mention "serious" errors without defining what that means in practice.

The fix: Your policy should cross-reference your incident management policy and explicitly list medication-related events that must be recorded internally and those that may meet the threshold for notification to the NDIS Commission. This includes near-misses, not just actual harm events. Where an incident involves a restrictive practice (such as covert medication), the policy must reflect that this triggers a separate restrictive practices reporting obligation.

Mistake 5: No Mention of Medication as a Potential Restrictive Practice

This is one of the most significant and commonly overlooked gaps. Covert medication — administering medication without the participant's knowledge or consent, such as crushing it into food — is a regulated restrictive practice under the NDIS framework. Yet many medication management policies make no reference to restrictive practices at all.

The fix: Your policy must explicitly state that covert medication is a regulated restrictive practice, that it requires authorisation under applicable state or territory law and NDIS Commission requirements, and that it must be reported to the Commission. A best-practice policy will also address what steps the organisation takes to explore alternatives before any restrictive practice is considered.

Mistake 6: No Process for Medication Reviews, Reconciliation, or Handovers

A policy that covers how workers administer medication but says nothing about what happens when a participant is discharged from hospital, transitions between services, or when their medication regimen changes is missing critical continuity-of-care content. Medication reconciliation failures are a well-documented source of serious harm in care settings.

The fix: Include documented processes for:

Mistake 7: Treating the Policy as a Static Document

Regulatory requirements change. Participants' needs change. Clinical practice evolves. A policy that was reviewed once at sign-off and not touched since is a red flag for auditors and a genuine risk for participants.

The fix: Your policy must include a defined review cycle — typically annually at minimum, or following a significant incident, a change in the regulatory framework, or a change in the participant cohort you support. The policy should also name a responsible position (not just a person's name, which becomes outdated) for overseeing medication management and ensuring the policy remains current.

A Quick Self-Check: Common Audit Findings at a Glance

Common Gap Practice Standards Link Fix Priority
No participant rights statement Module 1 — Rights and Responsibilities High
Vague staff competency requirements Module 1 — High Intensity Daily Activities; Workforce Capability High
Restrictive practices not addressed Module 2E — Behaviour Support Critical
Incomplete incident triggers Module 1 — Incident Management High
No transition/handover process Module 1 — Continuity of Supports Medium
No review cycle All Modules — Quality Management Medium

Putting It Together: What a Compliant Policy Looks Like

A medication management policy that will hold up under a 2026 audit is not a long document — it is a precise one. It clearly scopes which medication tasks the organisation delivers, names the Practice Standards it is designed to meet, sets out staff competency requirements with specifics, protects participant rights explicitly, cross-references incident and restrictive practice obligations, and has a scheduled review date tied to a named position.

If you are in the process of building or rebuilding your policy suite ahead of mandatory registration, ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit that includes a medication management policy template aligned to the current and strengthened Practice Standards — alongside incident management, behaviour support, consent, and the full range of documents auditors expect to see.

The goal is not a perfect policy sitting in a folder — it is a living system your team actually uses, understands, and can demonstrate to an auditor on the day.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.