Is an HR policy mandatory for all registered NDIS providers?

Yes. The NDIS Practice Standards require all registered providers to meet the Human Resources standard. This means having documented policies covering recruitment, worker screening, induction, supervision, performance management, and training. The depth of evidence required at audit depends on your registration group and the types of supports you deliver.

Does a sole trader or small provider still need an HR policy?

Yes, though the policy can be proportionate to your size. Even a sole trader who engages subcontractors or casuals must have a documented approach to screening, induction, and supervision. At audit, simplicity is acceptable; absence is not.

What is the difference between the NDIS Worker Screening Check and a police check?

An NDIS Worker Screening Check is a nationally consistent check administered by each state or territory's screening unit. It is broader than a standard police check and considers a wider range of information including certain findings that would not appear on a basic criminal history check. For risk-assessed roles under the NDIS, the Worker Screening Check is the required clearance, not a general police check.

How often should we review our HR policy?

At minimum, annually. You should also trigger a review whenever the NDIS Commission updates its Practice Standards, Worker Screening guidance, or Code of Conduct; following a significant incident with a workforce component; or when your organisation's structure or service types change materially.

Can we use a generic HR policy from an HR software platform?

Generic policies can be a starting point but must be adapted to the NDIS context. They need to specifically reference the NDIS Code of Conduct, Worker Screening Check obligations, mandatory reporting of certain worker conduct, and the NDIS incident management framework. A generic employment policy that omits these elements will not satisfy an NDIS audit.

What evidence do auditors look for to confirm an HR policy is implemented?

Auditors typically request personnel files showing signed induction records, training completion logs, supervision notes, worker screening clearance records, and evidence that performance issues have been documented and followed up. They may also interview workers and ask them to describe how the policy works in practice.

Do you need an NDIS human resources policy? Provider requirements

Who needs an NDIS human resources policy?

If your organisation is a registered NDIS provider — particularly one delivering Supported Independent Living (SIL) or any other support under the registration groups that attract a full audit — you are required to have a documented human resources (HR) policy. This is not optional. The NDIS Commission's Practice Standards set out workforce-related requirements that can only be met if an organisation has a coherent, written HR framework underpinning its day-to-day operations.

Unregistered providers delivering lower-risk supports may not face the same formal audit obligations, but they are still bound by the NDIS Code of Conduct. A documented HR policy is the most practical way to demonstrate that your workers understand and uphold the Code.

For SIL providers specifically, the stakes are higher. SIL sits within the higher-intensity registration groups that require a certification audit by an NDIS-approved quality auditor. Auditors will actively look for evidence of a functioning HR system — not just a paper policy sitting in a drawer.

Why the NDIS Practice Standards require it

The NDIS Practice Standards create a framework of quality and safety obligations across several domains. The Human Resources standard is one of the core modules and applies to all registered providers. Under this standard, providers must demonstrate that they:

Employ or engage workers who are suitable, screened, and have the skills and experience to deliver safe and quality supports
Have documented processes for recruitment, selection, and induction of workers
Conduct and maintain NDIS Worker Screening Checks (or equivalent state/territory checks where transitional arrangements apply)
Provide ongoing supervision, professional development, and performance management
Manage poor performance and misconduct in a consistent and documented way
Keep accurate and up-to-date records of worker qualifications, training, and screening status

The strengthened NDIS Practice Standards, which came into effect progressively from late 2023 and continue to be embedded into the 2026 regulatory framework, place additional emphasis on worker capability and organisational culture. Auditors are now expected to probe deeper into how providers actually manage their workforce — not just whether policies exist, but whether workers can describe how they are applied in practice.

What your HR policy must cover

There is no single prescribed template from the NDIS Commission, but the following elements are consistently expected across audits:

1. Recruitment and selection

Your policy should describe how your organisation attracts and selects workers. This includes reference-checking processes, verification of qualifications, and how you assess a candidate's alignment with the NDIS Code of Conduct and your organisation's values.

2. Worker screening

You must have a clear policy on NDIS Worker Screening Checks. This should specify which roles are subject to a Worker Screening Check (risk-assessed roles and roles involving direct delivery to people with disability), how you verify and record clearance outcomes, and what happens when a clearance is pending or refused. Workers in risk-assessed roles must not commence until a clearance is obtained or an interim approval is in place.

3. Induction

New workers must be inducted before they deliver supports independently. Your policy should detail what induction covers — including the NDIS Code of Conduct, your obligations around reportable incidents and restrictive practices, participant rights, and emergency procedures.

4. Supervision and performance management

Regular and documented supervision is a standard audit expectation for SIL providers. Your policy should set out the frequency and format of supervision, how performance issues are identified and managed, and how disciplinary processes are documented and applied consistently.

5. Training and professional development

Workers must have access to ongoing training relevant to the supports they deliver. The policy should describe how training needs are identified (including from supervision records or incident reviews), how mandatory training — such as restrictive practices authorisation, manual handling, or first aid — is tracked and renewed, and how records are kept.

6. Managing worker conduct and misconduct

Your HR policy must describe how you respond to allegations of worker misconduct. This connects directly to your obligations under the NDIS (Incidents and Complaints) rules, which require key personnel and certain other workers to be reported to the Commission in specified circumstances. Workers who are investigated for conduct that may have harmed a participant may need to be stood down pending investigation — your policy should address this.

7. Records management

The policy should specify what HR records are kept, how long they are retained, who can access them, and how they are stored securely. Auditors may request personnel files, training logs, and screening records as evidence.

Practical steps to build or review your HR policy

Map your workforce. List every role category — employed, contracted, and volunteer — and identify which roles are risk-assessed under the NDIS Worker Screening legislation.
Audit your current documents. Check what policies already exist and identify gaps against the Practice Standards Human Resources module.
Draft or update the policy. Write in plain language that your workers will actually read. Use the NDIS Practice Standards and the Worker Screening guidance from the Commission as your checklist.
Link to related policies. Your HR policy rarely stands alone. Cross-reference your incident management policy, Code of Conduct, complaints policy, and any restrictive practices framework.
Test it with staff. Ask a frontline worker and a team leader to walk you through what they would do in common scenarios. If they cannot, the policy is not embedded.
Set a review cycle. Regulatory requirements change. Build in an annual review at minimum, and trigger an unscheduled review whenever the Commission updates its rules or guidance, or following a significant incident.
Store evidence of implementation. A policy that exists but cannot be evidenced is treated the same as no policy at audit. Keep signed induction acknowledgements, supervision records, and training completion logs.

What happens if you do not have one

At a certification or verification audit, the absence of an HR policy — or a policy that cannot be evidenced through worker records — will result in a non-conformance finding. Depending on severity, this may be classified as a major or minor non-conformance. Major non-conformances must be corrected before certification is granted or renewed. Persistent or systemic failures in workforce management can lead the NDIS Commission to impose conditions on your registration, require a corrective action plan, or — in serious cases — move to suspend or cancel your registration.

Beyond audit outcomes, a poorly managed workforce is one of the most common contributing factors in serious incidents involving NDIS participants. The Commission's regulatory approach increasingly treats workforce governance failures as systemic risk, not isolated administrative shortcomings.

Template snippet: what a policy clause might look like

Worker Screening — Policy Statement

[Organisation Name] will not allow a worker to commence, or continue, in a risk-assessed role
unless a valid NDIS Worker Screening clearance is held or, where permitted, an interim approval
is in place. The People and Culture team is responsible for verifying and recording screening
status prior to a worker's start date and at each renewal. Screening records will be retained
for a minimum of seven years after the employment relationship ends. Any worker whose clearance
is refused or revoked will be removed from risk-assessed duties immediately and the matter
escalated to the relevant manager and the NDIS Quality and Safeguards Commission.

A note on your compliance document library

The HR policy is one component of a larger document set that registered providers — particularly SIL providers — are expected to maintain. If you are building or overhauling your compliance library ahead of an audit, the 74-document audit-ready SIL compliance kit available from ndiscompliant.com.au includes an HR policy template alongside incident management, restrictive practices, complaints, and governance documents, all aligned to the current NDIS Practice Standards framework.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.