Does every medication error need to be reported to the NDIS Commission?

No. Only medication errors that cause, or have the potential to cause, serious harm to an NDIS participant must be reported to the NDIS Commission as a reportable incident. However, all medication errors — including near misses — must be recorded in your internal incident management system, regardless of whether they reach the Commission reporting threshold.

How quickly must a SIL provider notify the NDIS Commission of a medication-related reportable incident?

For serious incidents involving injury, providers must notify the NDIS Commission as soon as practicable and within 24 hours of becoming aware of the incident. A full written report must follow within the additional timeframe specified in the NDIS (Incident Management and Reportable Incidents) Rules 2018. For other reportable incidents, the initial notification must be made within five days.

What if the medication error did not actually harm the participant — do I still need to report it?

Potentially yes. If the error had the reasonable potential to cause serious harm, it should be assessed as a reportable incident even where no actual harm resulted. Providers should document their severity assessment and the reasoning behind any decision not to report to the Commission.

Who counts as staff who can administer medication in a SIL setting?

Under the strengthened NDIS Practice Standards, staff who administer or assist with medication in high-intensity support contexts must hold documented competencies and, where required, specific qualifications. Providers must maintain evidence of these competencies and ensure only appropriately trained staff undertake medication administration tasks.

Does a missed medication dose count as a reportable incident?

A missed dose may be a reportable incident if it causes or could cause serious harm — for example, missing a dose of anticoagulation medication or insulin in a participant with significant health needs. Whether a missed dose is reportable depends on the medication involved, the participant's condition, and the clinical risk. Providers should assess each case individually and document their reasoning.

What must I tell the participant after a medication error?

The NDIS Code of Conduct and Practice Standards require providers to act with honesty and transparency. After a medication error, you must inform the participant — and, where appropriate, their support network, nominee, or guardian — about what happened, what impact it may have, and what steps you are taking in response. This open disclosure obligation applies regardless of whether the incident is reportable to the Commission.

Is a Medication Error Reportable to the NDIS Commission?

Who Needs to Know This

If you are a registered NDIS provider delivering Supported Independent Living (SIL), Specialist Disability Accommodation, or any other support that involves the administration of medication, medication errors are a direct compliance responsibility. Under the NDIS Quality and Safeguards Commission framework, your obligations cover not just what happens when an error occurs, but the systems you must have in place to prevent errors and respond appropriately.

With the strengthened NDIS Practice Standards progressively taking effect, scrutiny of medication management in SIL settings has intensified. Approved quality auditors are checking incident management systems, staff competency, and the completeness of reporting records. Getting this wrong carries real consequences — including compliance notices, registration conditions, or referral to the NDIS Commissioner for enforcement action.

What the Rules Say About Reportable Incidents

The NDIS (Incident Management and Reportable Incidents) Rules 2018 set out two categories of reportable incidents. The first category covers incidents that must be reported regardless of outcome. The second covers a broader set of incidents where the impact on the participant triggers the reporting obligation.

Medication errors fall into scope primarily because of the potential for harm. The Rules identify the following as a reportable incident:

The use of a restrictive practice that is not in accordance with an authorisation
The unexpected death of an NDIS participant
Serious injury of an NDIS participant
Abuse or neglect of an NDIS participant
Unlawful sexual or physical contact with, or assault of, an NDIS participant
Any other incident prescribed by the Rules

A medication error that causes serious injury — or that could reasonably have caused serious injury — sits squarely within this framework. Critically, you do not need to wait until harm actually occurs. Where the error had the potential to cause serious harm, it should be assessed as a reportable incident.

Even where a medication error does not meet the threshold for an NDIS Commission reportable incident, it must still be captured in your internal incident management system. The NDIS Practice Standards (Quality Indicator 2.7 — Incident Management) require registered providers to have a documented system that records, investigates, and acts on all incidents, including near misses.

Defining a Medication Error in This Context

A medication error can take many forms in a SIL setting. Common examples include:

Administering the wrong medication to a participant
Administering the correct medication at the wrong dose
Missing a scheduled dose entirely
Administering medication at the wrong time or via the wrong route
Failing to document administration correctly, leading to double dosing or missed doses
Using a medication that has expired or been stored incorrectly
Administering a medication that a participant has a documented allergy or contraindication to

Each of these errors carries different risk profiles. A missed vitamin supplement is categorically different from a missed blood thinner or an incorrect insulin dose. Your incident management system must include a documented process for assessing the severity of each error, including escalation to a medical professional where required.

Timeframes: When Must You Report?

The NDIS Commission requires registered providers to notify the Commission of reportable incidents as soon as practicable, and within specific timeframes that depend on the nature and severity of the incident.

For the most serious incidents — including unexpected deaths and serious injuries — providers must notify the Commission within 24 hours of becoming aware of the incident. A written report with further detail must follow within a further period specified by the Rules. For other reportable incidents, providers must notify within five days.

This means your internal escalation process must be fast. If a support worker identifies a medication error during a shift handover at 10pm, your on-call management structure must be able to assess severity and initiate notification before the relevant window closes. A slow internal chain of command is a compliance risk in itself.

Step-by-Step: What Providers Must Do When a Medication Error Occurs

Ensure immediate safety. The first priority is the participant's health and wellbeing. If there is any risk of harm, call emergency services or arrange for urgent medical review before anything else.
Document the error in full. Record what happened, when it happened, who was involved, what medication was affected, and the participant's condition immediately following the error. Use your incident register.
Notify your supervisor or on-call manager. Your incident management policy should specify who must be told, and when. This should happen within hours, not the next business day.
Assess severity against your reportable incident threshold. Was there actual harm? Could there have been serious harm? Apply your documented criteria. If in doubt, treat it as potentially reportable and seek advice.
Notify the NDIS Commission if the threshold is met. Use the NDIS Commission portal to lodge the initial notification within the required timeframe. Include the nature of the incident, the participant affected (without identifying details in the initial report if required), and the immediate actions taken.
Notify the participant and/or their support network. Under the NDIS Practice Standards and the Code of Conduct, providers must be open and transparent with participants. Inform the participant — and where appropriate, their nominee, guardian, or family — of what occurred and what you are doing about it.
Investigate the root cause. Once immediate risks are managed, conduct a root cause analysis. Was this a one-off human error or a system failure? Were competency requirements met? Were medication protocols up to date?
Submit the full written report to the Commission within the required timeframe following the initial notification.
Implement corrective action and document the outcome. Your incident register must record what was done in response, including any changes to practice, training, or documentation systems. Close the loop in writing.

What the Strengthened Practice Standards Require

The strengthened NDIS Practice Standards, which the Commission has been progressively rolling out, place heightened obligations on SIL providers in particular. Medication management is addressed directly in the High Intensity Daily Personal Activities support category and in the overall framework for safe service delivery.

Key requirements that auditors check include:

Written medication management policies and procedures that are current and accessible to staff
Evidence that staff administering or assisting with medication hold the required competencies — including relevant training and, where required, specific qualifications
Medication administration records that are accurate, complete, and consistently maintained
A documented process for reviewing and updating medication plans when a participant's needs change
Evidence that incidents involving medication are recorded, investigated, and acted on — with the participant informed

Auditors will also look at whether your reporting culture supports disclosure. A provider that has no medication-related incidents in its register over an extended period of high-intensity service delivery is as likely to attract scrutiny as one with frequent incidents — because a nil record can indicate under-reporting rather than excellent practice.

Consequences of Not Reporting

Failing to report a reportable incident to the NDIS Commission is a breach of your conditions of registration. The Commission has the power to investigate, issue compliance notices, impose conditions on your registration, suspend registration, or refer matters to the NDIS Commissioner. In serious cases, failures to report — particularly where they are seen as deliberate or systematic — can result in deregistration.

Beyond regulatory consequences, failure to report or properly manage medication incidents exposes providers to complaints, coronial inquiries where deaths are involved, and civil liability. The participant's rights to transparency and redress are embedded in both the Practice Standards and the NDIS Code of Conduct.

Practical Tip: Audit Your Systems Now

Do not wait for an incident to discover gaps in your medication management system. A proactive internal audit against the Practice Standards indicators — covering your policies, staff training records, medication administration records, and incident register — will identify vulnerabilities before an auditor does.

Providers building or upgrading their SIL compliance documentation may find it useful that ndiscompliant.com.au offers a 74-document audit-ready SIL compliance kit, covering medication management, incident reporting, and the full range of Practice Standards requirements — designed specifically for the 2026 strengthened registration cycle.

Start with your incident management policy: does it define a medication error, specify escalation timeframes, and reference the NDIS Commission notification threshold explicitly? If not, that is your first corrective action.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.