Why High Intensity Daily Personal Activities Attract Elevated Audit Scrutiny

High Intensity Daily Personal Activities (HIDPA) sits within Module 2A of the NDIS Practice Standards and represents one of the highest-risk support types a registered provider can deliver. Unlike standard daily personal activities, HIDPA covers complex health-related tasks — including but not limited to complex bowel care, urinary catheter management, enteral feeding, tracheostomy management, ventilator management, subcutaneous injections, and wound care beyond routine dressing changes.

Because errors in these tasks can result in serious injury, hospitalisation, or death, the NDIS Quality and Safeguards Commission applies a higher threshold of evidence during audits. Approved quality auditors examine not only whether a policy exists, but whether it is operationally embedded — meaning workers follow it, documentation proves it, and participants experience its protections.

Under the strengthened NDIS Practice Standards framework progressively rolling out through 2025 and 2026, expectations around clinical oversight, worker competency, and participant co-design have been raised considerably. Providers who treat HIDPA compliance as a paperwork exercise rather than a practice-quality discipline are the ones most commonly issued with non-conformities.

The Top 7 Non-Conformities Auditors Find in HIDPA

1. Worker Competency Not Verified Against the Specific Procedure

The Practice Standards require that workers delivering HIDPA have demonstrable skills and knowledge for the specific health support tasks they are performing for a specific participant. A generic certificate of completion for a training course — even an accredited one — does not satisfy this requirement on its own.

Auditors look for:

Common gap: Providers hold training certificates but cannot produce individualised, procedure-specific competency sign-off records. Certificates and completed competency records must be kept separately and cross-referenced to each worker's participant allocation.

2. Risk Management Plans Are Generic or Outdated

Every participant receiving HIDPA must have a documented, individualised risk management plan that reflects their current health status, known complications, and emergency protocols. Auditors regularly find that these plans:

Fix: Build a scheduled review cycle into your quality management system, triggered at minimum by any incident, hospitalisation, or treating practitioner recommendation. Date-stamp every revision and capture the reviewer's credentials.

3. Absent or Inadequate Clinical Governance Arrangements

The NDIS Practice Standards require that providers have governance arrangements in place to ensure HIDPA is delivered safely. In practice, this means the organisation must have access to suitably qualified clinical oversight — not merely as a theoretical resource but as an active, documented function.

Auditors look for evidence such as:

Common gap: Small providers often list a nurse contact in the staff directory but cannot demonstrate any structured clinical governance activity — no records of reviews, no sign-offs, no escalation logs.

4. Health Support Procedures Incomplete or Not Signed Off by a Health Professional

Each HIDPA must be underpinned by a written procedure that details how the support is to be delivered safely for that individual participant. These procedures should be developed or approved by a suitably qualified health practitioner — not authored solely by the support worker or care coordinator.

Non-conformities commonly arise when:

5. Incident Reporting Does Not Capture HIDPA-Specific Events

Providers are required to report certain incidents to the NDIS Commission, and the threshold for HIDPA-related incidents is significant. A procedure complication, near-miss, or equipment failure in the context of HIDPA typically meets the definition of a reportable incident and must be recorded and reported appropriately.

Auditors frequently identify:

6. Participant and Family Not Involved in Procedure Development or Review

The Practice Standards place participant choice and control at the centre of service delivery. For HIDPA, this means participants (and their nominees or families, where appropriate) should be involved in developing and reviewing their health support procedures — not simply presented with a document to sign.

Auditors look for evidence of genuine co-design: notes from planning conversations, participant confirmation that they understand and consent to the approach, and documentation that they were offered the opportunity to suggest modifications.

7. Equipment Maintenance Records Are Missing or Gaps Are Not Investigated

Where HIDPA involves equipment — suction machines, feeding pumps, ventilators — providers must maintain servicing and calibration records. Auditors also expect evidence that any equipment malfunction is treated as a safety event and investigated accordingly.

Common gap: Equipment log books are kept inconsistently, and there is no process for flagging when servicing intervals have lapsed.

Practical Steps to Close These Gaps Before Your Audit

  1. Map every participant receiving HIDPA to the specific procedure types being delivered and confirm a current, signed health support procedure exists for each.
  2. Pull each worker's competency file and confirm there is a procedure-specific competency assessment, not just a training certificate, cross-referenced to their current participant allocation.
  3. Audit your clinical governance documentation — produce a log showing when the clinical overseer last reviewed each participant's HIDPA plan and what actions resulted.
  4. Run an incident register filter for the past 12 months looking for any event involving HIDPA. Confirm each was classified correctly and, where reportable, lodged with the Commission within the required timeframe.
  5. Review equipment service records against the manufacturer's schedule and log any overdue items as corrective actions with an assigned owner and due date.
  6. Schedule a participant co-design review for every HIDPA plan, capturing the conversation and any updates that resulted.
  7. Version-control all HIDPA procedure documents and ensure the current version is the only one accessible to workers.

A Note on the Strengthened Practice Standards and 2026 Registration

The NDIS Commission has been progressively implementing strengthened Practice Standards and strengthened audit processes. Providers re-registering or applying for registration from 2025 onwards will be assessed against updated quality indicators that place greater emphasis on participant outcomes, clinical safety, and evidence of continuous improvement. For HIDPA specifically, the expectation is not merely that systems exist — auditors will probe whether those systems are alive in day-to-day practice.

Providers who have not conducted an internal gap analysis against the current Module 2A requirements are taking a significant risk entering an audit cycle. Gathering evidence of compliance retrospectively under audit pressure is considerably harder than building it into routine operations.

If your organisation needs a structured starting point, the 74-document audit-ready SIL compliance kit available at ndiscompliant.com.au covers HIDPA procedure templates, competency assessment frameworks, clinical governance policy, and incident classification tools — all formatted to align with current Commission requirements.

Summary: What Auditors Want to See

Requirement Area Evidence Auditors Seek
Worker competency Signed, procedure-specific competency assessment per participant
Risk management Individualised, dated plan with escalation triggers
Clinical governance Named overseer + records of active review activity
Health support procedures Health-professional-signed, version-controlled documents
Incident reporting Correct classification + Commission notification where required
Participant involvement Co-design notes, consent records, opportunity to review
Equipment maintenance Current service log, malfunction event records

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.