Is a Behaviour of Concern Reportable to the NDIS Commission?

Understanding Behaviours of Concern Under the NDIS Framework

One of the most common compliance questions from SIL and disability support providers is whether a behaviour of concern — sometimes called a "challenging behaviour" — must be reported to the NDIS Quality and Safeguards Commission. The short answer is nuanced: the behaviour itself does not automatically trigger a reportable incident, but the circumstances surrounding it very often do.

This article explains who needs to understand this distinction, why it matters, and exactly what reporting obligations apply to providers operating under the NDIS Practice Standards in 2026.

Who Needs to Understand This

This requirement applies to any NDIS registered provider delivering supports where participants may exhibit behaviours of concern. This includes:

• SIL (Supported Independent Living) providers
• Specialist disability accommodation operators where SIL supports co-occur
• Day program, community participation, and respite providers
• Any provider whose registration group includes behaviour support or personal activities (high intensity)

Even if your service does not employ a behaviour support practitioner directly, you remain responsible for understanding when incidents connected to behaviours of concern must be reported.

What Is a Behaviour of Concern?

The NDIS Commission's materials define behaviours of concern broadly as behaviours that are of concern to the person themselves, their support network, or others around them — and that may require a tailored response. Examples include self-injurious behaviour, physical aggression towards others, property destruction, and absconding.

Importantly, the NDIS Practice Standards (specifically the Specialist Behaviour Support module and the High Intensity Daily Personal Activities module) require providers to have systems in place to prevent, reduce, and respond to behaviours of concern — but the mere occurrence of a behaviour of concern is not by itself a reportable incident under the NDIS (Incident Management and Reportable Incidents) Rules.

When Does a Behaviour of Concern Become Reportable?

A reportable incident arises when specific defined events occur. The Reportable Incidents Rules set out the categories of events that must be reported to the NDIS Commission. In the context of behaviours of concern, the most relevant categories are:

1. Use of a Regulated Restrictive Practice

This is the most common reporting trigger in SIL and specialist settings. A regulated restrictive practice includes physical restraint, chemical restraint, mechanical restraint, environmental restraint, and seclusion. If a behaviour of concern leads to any of these responses — even briefly — that use must be reported to the NDIS Commission, regardless of whether it was planned or unplanned.

Under the Behaviour Support and Restrictive Practices reporting requirements, providers must also report the use of any restrictive practice that is not authorised in the participant's NDIS behaviour support plan, or that occurs before a plan is in place. These are sometimes called "unauthorised" or "emergency" restrictive practices, and they carry heightened reporting obligations.

2. Serious Injury to a Participant

If a behaviour of concern results in physical injury to the participant that requires medical attention beyond first aid, this constitutes a reportable incident. This includes self-injury escalating to hospitalisation, lacerations, fractures, or other significant harm.

3. Abuse or Neglect

Where a response to a behaviour of concern involves — or itself constitutes — abuse, neglect, or exploitation, providers must report this to the NDIS Commission. A disproportionate or harmful staff response to a behaviour of concern can fall within this category.

4. Death of a Participant

Any death of a participant while receiving NDIS supports is a reportable incident, including circumstances where the death is connected to or preceded by a behaviour of concern episode.

5. Unlawful Assault

Physical assault — whether by a staff member, another participant, or a visitor — is reportable. If a behaviour of concern episode involves one participant assaulting another, the provider must report the assault to the NDIS Commission and is also required to consider obligations under state or territory law.

The Reporting Timeframe

The NDIS Commission applies different timeframes depending on the category of incident:

Providers must also submit a full written report within a specified follow-up period, describing the incident, the response taken, the outcome for the participant, and actions taken to prevent recurrence.

Internal Incident Management Is Also Mandatory

Even where a behaviour of concern episode does not trigger a reportable incident to the NDIS Commission, providers are still required under the Practice Standards to manage incidents internally. The Incident Management module of the NDIS Practice Standards requires providers to:

1. Record every incident, near-miss, and complaint in an incident register
2. Investigate incidents proportionate to severity
3. Take corrective action and document the outcome
4. Review patterns of incidents to inform risk management and behaviour support planning
5. Make incident records available to quality auditors on request

During a verification or certification audit, assessors will review your incident register — including behaviour of concern incidents that were not reported externally — to assess whether your internal systems are functioning appropriately.

The 2026 Strengthened Practice Standards Context

The NDIS Commission's strengthened Practice Standards, which have progressively increased expectations on providers, place greater emphasis on early identification of behaviours of concern and the use of evidence-based, least-restrictive responses. Providers operating SIL supports are now expected to demonstrate not just compliance with incident reporting rules, but a proactive approach to reducing the need for restrictive practices over time.

Behaviour support plans prepared by registered NDIS behaviour support practitioners must be in place before any restrictive practice can be considered authorised. Where a plan does not exist or has not been approved by the relevant state or territory oversight body, any restrictive practice used — even in an emergency — is treated as unauthorised and must be reported.

Common Mistakes Providers Make

• Assuming only "serious" incidents need reporting: Providers sometimes delay or avoid reporting restrictive practice use because the incident seemed minor. The obligation applies regardless of perceived severity.
• Not recognising an "emergency" restrictive practice: A staff member physically guiding a participant away from danger using a restraint hold — even briefly — can constitute a regulated restrictive practice if it involves restricting movement.
• Reporting to the wrong body: Police reports, mandatory reports to child protection, or notifications to guardianship authorities do not replace the obligation to report to the NDIS Commission.
• Incomplete documentation: An incident report that lacks a clear description of the behaviour of concern, the response used, the outcome, and follow-up actions is likely to be flagged in an audit as non-conformant.
• Delayed behaviour support planning: Where a participant exhibits ongoing behaviours of concern and no behaviour support plan has been commissioned or is in progress, this is a significant compliance risk — not just a reporting risk.

Practical Steps for SIL Providers

1. Ensure your incident management policy clearly defines which behaviour of concern episodes must be reported externally versus managed internally.
2. Train all direct support workers on the difference between a behaviour of concern and a reportable incident, and what to do in the first 24 hours after a serious event.
3. Maintain an up-to-date behaviour support plan for every participant where regulated restrictive practices may be used. Review plans at least annually or after significant incidents.
4. Report unauthorised restrictive practice use promptly — the 5 business day window moves quickly in a residential SIL context.
5. Conduct post-incident debriefs and document them. Auditors look for evidence of continuous improvement, not just initial reporting.

Providers building or reviewing their incident and behaviour support documentation as part of the 2026 registration and re-registration cycle may find the 74-document audit-ready SIL compliance kit at ndiscompliant.com.au a practical starting point — it includes incident management templates, behaviour support plan frameworks, and reportable incident checklists aligned to the strengthened Practice Standards.