Do you need an NDIS WHS policy? Provider requirements

Who needs an NDIS WHS policy?

If you are a registered NDIS provider, a documented work health and safety (WHS) policy is not optional — it is a core requirement under the NDIS Practice Standards. The NDIS Commission audits against these standards when you register and at every renewal, so the absence of a WHS policy is a direct pathway to non-conformance or, in serious cases, a compliance notice.

The obligation applies regardless of your organisation's size. A sole-trader support worker operating as a registered provider has the same Standards obligation as a large SIL operator with dozens of sites. What differs is the complexity and depth of documentation you will reasonably need.

Unregistered providers are technically outside NDIS Commission registration requirements, but they remain subject to:

• State and territory WHS legislation (harmonised Work Health and Safety Acts), which mandates a safe work environment for workers and other persons affected by your work — including participants.
• The NDIS Code of Conduct, which applies to all providers and workers regardless of registration status and requires that supports be delivered safely.
• The strengthened 2026 NDIS Practice Standards framework, which the NDIS Commission has progressively rolled out from late 2023, and which places heightened emphasis on governance, risk management, and documented safety systems.

In practice, any provider delivering SIL, SDA, or other higher-intensity supports should treat a WHS policy as non-negotiable — registered or not.

Why WHS sits inside the NDIS Practice Standards

The NDIS Practice Standards are structured around a core module that all registered providers must meet, plus supplementary modules for specific support types. The core module includes requirements under the headings of governance and operational management and provision of supports. Within those domains, you are required to demonstrate that:

• Your organisation has documented policies and procedures for managing risk, including risks to the health and safety of workers and participants.
• Workers receive induction, training, and supervision sufficient to work safely.
• Incidents — including near-misses and WHS incidents — are identified, reported, investigated, and used to drive improvement.
• The physical environments in which supports are delivered are safe and appropriate.

The NDIS Commission's approved quality auditors look for evidence that WHS is treated as a living system, not a shelf document. A policy written three years ago that no-one has reviewed and no staff have read will generate a finding even if its contents are technically correct.

What the strengthened 2026 framework adds

The NDIS Commission released strengthened Practice Standards and a revised Code of Conduct that came into effect progressively from late 2023 and continued through to 2025–2026 registration cycles. Key additions relevant to WHS include:

• Stronger governance expectations — providers must demonstrate that the governing body (board, directors, or sole trader) actively oversees safety, not just delegates it downward.
• Worker screening and suitability — enhanced requirements that intersect with WHS through the need to ensure workers are fit, screened, and supervised appropriately.
• Serious incident notification — the timeframes and categories for reportable incidents have been clarified; a WHS policy must align with these notification obligations.
• Continuous improvement — providers must show how safety data feeds back into policy and procedure review cycles.

If your WHS policy pre-dates 2023, it is worth reviewing against the current Standards to confirm alignment.

What your NDIS WHS policy must cover

While the NDIS Commission does not prescribe a single template, auditors look for the following elements. Use this as your content checklist:

Core elements

1. Statement of commitment — a clear declaration from leadership that the organisation is committed to maintaining a safe workplace for workers, participants, and visitors.
2. Scope — who and what the policy applies to (all workers including contractors, volunteers, and agency staff; all service environments including participant homes for SIL providers).
3. Legislative references — the relevant state/territory WHS Act, the NDIS Act 2013, and the Practice Standards.
4. Roles and responsibilities — what managers, supervisors, and workers are each responsible for in relation to safety.
5. Hazard identification and risk management — how hazards are reported, assessed, and controlled; reference to your risk register.
6. Incident reporting and investigation — the internal process for reporting WHS incidents, near-misses, and injuries, including timelines and who investigates.
7. NDIS reportable incident alignment — how WHS incidents that meet the Commission's reportable incident criteria are escalated and notified.
8. Worker health and safety obligations — what workers must do (e.g., report hazards, follow procedures, not attend work impaired).
9. Training and induction — how workers are trained on WHS on commencement and on an ongoing basis.
10. Review cycle — how often the policy is reviewed (annually is the accepted standard) and who is responsible for review.

Additional elements for SIL providers

Supported Independent Living environments introduce specific hazards that your WHS policy and supporting procedures should address:

• Manual tasks and personal care (participant transfers, repositioning)
• Lone worker safety (workers supporting participants without immediate colleagues present)
• Medication handling and storage
• Challenging behaviour and the intersection with restrictive practice authorisation
• Environmental hazards in participant-controlled homes (e.g., access to equipment, building maintenance responsibilities)

The consequences of not having one

At audit, a missing or inadequate WHS policy will typically result in a non-conformance against the relevant Practice Standards indicator. Depending on severity, this can mean:

Beyond audit risk, a missing WHS policy means workers and participants are more exposed to preventable harm — and the organisation has reduced defensibility if a workplace injury or participant safety incident occurs.

Practical steps to get your WHS policy audit-ready

1. Map your obligations — identify which NDIS Practice Standards modules apply to your registration group and pull the relevant indicators.
2. Review or draft the policy — use the elements listed above. If you already have a policy, compare it line by line against the current Standards and your state WHS legislation.
3. Link to supporting documents — a policy is strengthened by its associated procedures (hazard report form, incident register, induction checklist). Auditors want to see the system, not just the document.
4. Get sign-off from governance — the governing body should formally approve the policy. Record this in your board or management meeting minutes.
5. Communicate to workers — distribute the policy, record that workers have read it, and include it in induction.
6. Set a review date — add it to your document control register with an annual review reminder.
7. Test it against real incidents — after any WHS incident, check whether the policy and procedure were followed and update if gaps are found.

Getting documentation in order before your audit

SIL providers preparing for registration or renewal often find that a WHS policy is only one of many documents that need to be in place simultaneously. The NDIS Practice Standards touch governance, complaints, incident management, restrictive practices, worker screening, and participant rights — each requiring its own documented policy or procedure. Providers using ndiscompliant.com.au's 74-document audit-ready SIL compliance kit can address these requirements as a coordinated set rather than building each document from scratch.

Whether you build or buy your documentation, the key is to ensure every document reflects your actual practice, is dated, approved, and reviewed on schedule, and is accessible to the workers who need it.