Who needs an NDIS medication management policy?

The short answer is: if your service delivers supports where staff are likely to assist participants with medication — even occasionally — you need a documented medication management policy. This applies whether you are a large SIL operator running group homes, a sole-trader support worker providing daily personal activities, or a disability support organisation offering community nursing or allied health.

Under the NDIS Practice Standards, registered providers must demonstrate they have systems in place that keep participants safe. Medication assistance sits at the intersection of several Practice Standard modules, including the Core Module (specifically the provision of supports standard and the health and wellbeing standard) and, for providers of more intensive supports, the High Intensity Daily Personal Activities module.

The strengthened NDIS Quality and Safeguards framework — progressively coming into force through 2025 and 2026 — sharpens these expectations. Approved quality auditors now scrutinise not just whether a policy exists, but whether it is implemented, understood by staff, and reviewed regularly. A policy sitting in a filing drawer that frontline workers cannot describe is treated as a gap, not a safeguard.

What triggers the requirement: registration type and support class

Your registration groups determine which Practice Standard modules apply to your organisation. The key triggers for a medication management policy are:

Unregistered providers are not subject to audits, but the NDIS Code of Conduct imposes a duty to deliver supports safely and competently. Serious medication errors by unregistered providers can still result in NDIS Commission investigations and, in the most serious cases, prohibition orders or referrals to state and territory health regulators.

What your medication management policy must cover

The NDIS Commission does not prescribe a single mandatory template, but auditors assess your policy against the Practice Standards and the Commission's own guidance materials. A compliant policy should address all of the following areas:

1. Scope and roles

State clearly which supports and staff roles are covered by the policy, and which medication tasks staff are — and are not — authorised to perform. Role boundaries are a common non-conformance finding: a policy that says "staff assist with medication" without defining the boundary between prompting, assisting, and administering will not satisfy an auditor.

2. Consent and participant decision-making

The policy must affirm that medication assistance is only provided with the participant's informed consent or, where the participant lacks decision-making capacity for this matter, with the consent of an authorised decision-maker. This aligns with the NDIS Practice Standards' person-centred supports standard and the broader NDIS Act principle of individual autonomy.

3. Medication records and documentation

Your policy must specify what records are kept (medication charts, administration logs, incident records), who is responsible for maintaining them, and how they are stored and accessed. For SIL providers in particular, a clear medication administration record — signed and timestamped by the staff member who provided assistance — is a baseline expectation.

4. Safe storage and handling

Medications must be stored in accordance with the prescriber's and manufacturer's instructions and applicable state or territory legislation. Your policy should address locked storage, temperature-sensitive medications, controlled substances (Schedule 8 medicines), and what happens to medications when a participant moves, is hospitalised, or the support ends.

5. Staff training and competency

Staff who assist with medication must have documented, current training appropriate to the tasks they perform. For High Intensity supports, the Commission's guidelines specify particular competency requirements aligned to specific clinical tasks. Your policy should state the minimum training standard, how competency is assessed, and how often it is renewed. For everyday prompting and assisting tasks, completion of an appropriate medication assistance unit of competency (or equivalent employer-assessed training) is a widely accepted baseline.

6. Incident reporting

Medication errors — including incorrect dose, wrong medication, missed dose, and medication given to the wrong participant — are reportable events under the NDIS incident management framework. Your policy must describe how staff identify and report these events, the internal escalation pathway, and the obligation to report notifiable incidents to the NDIS Commission within required timeframes.

7. Restrictive practice considerations

Where medication is used in a way that could constitute a chemical restraint — for example, to manage behaviour rather than to treat a medical condition — additional requirements apply under the NDIS restrictive practices rules. Your policy should acknowledge this boundary and specify that any use of psychotropic or other behaviour-modifying medication for behaviour support purposes must be authorised under a behaviour support plan and comply with state or territory restrictive practices authorisation requirements.

8. Review cycle

Specify how often the policy is reviewed, who is responsible, and how changes are communicated to staff. An annual review cycle is standard practice; a policy that has not been updated in several years will attract scrutiny from auditors.

What auditors check — and common non-conformances

When an approved quality auditor assesses your organisation against the NDIS Practice Standards, they will typically review your medication management policy alongside your:

The most common non-conformances identified in audits include:

Consequences of not having a compliant policy

Operating without an adequate medication management policy exposes your organisation to several risks:

A practical starting point

If you are building or updating your medication management policy, work through each of the eight elements above and map them against your actual support delivery model. Generic templates that do not reflect your specific registration groups, participant cohort, or staffing structure are a recognised audit risk — auditors can quickly identify a policy that was not written with your organisation in mind.

For SIL and high-intensity support providers, the policy should be one document within a broader compliance framework that includes your incident management system, behaviour support procedures, and individualised participant support planning processes. If you are building that framework from scratch, the 74-document audit-ready SIL compliance kit available at ndiscompliant.com.au covers medication management alongside the full suite of policies, procedures, and templates that SIL providers need for registration and renewal.

The strongest position going into any audit is a policy that your staff can describe, your records demonstrate is followed, and your review log shows has been actively maintained. That combination — document, practice, evidence — is what the strengthened NDIS Practice Standards are designed to assess.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.