Who needs to read this?

If you are a registered NDIS provider delivering Supported Independent Living (SIL) or any other accommodation or personal-support service, this article is directly relevant to you. Unregistered providers are not subject to the NDIS Commission's incident-reporting framework, but they remain subject to state and territory police and emergency-services obligations. This explainer focuses on the obligations of registered providers under Commonwealth law.

Is a missing participant a reportable incident?

Yes, without question. The National Disability Insurance Scheme (Incident Management and Reportable Incidents) Rules 2018 (the Incident Rules) set out a defined list of reportable incidents. One of those categories is the unexpected death of a participant — but equally relevant is the category covering situations where the whereabouts of a participant are unknown and the provider is unable to confirm the participant's safety. This is treated by the NDIS Commission as a Priority 1 (P1) reportable incident requiring immediate action.

The Commission's operational guidance makes clear that "missing participant" scenarios engage two simultaneous obligations: your duty under the Incident Rules to notify the Commission, and your broader duty of care to the participant under the NDIS Code of Conduct and the Practice Standards.

What counts as a "missing participant" for reporting purposes?

Not every brief, unexplained absence triggers a reportable-incident notification. Providers must apply a reasonable judgement test. The following factors, taken together, indicate that a participant's absence has escalated to a missing-person incident requiring formal reporting:

A participant who regularly goes out independently and returns on a predictable schedule is a different situation from someone who becomes suddenly uncontactable and whose safety cannot be verified. The critical question is always: can you confirm this person is safe? If the answer is no, report.

Reporting timeframes you must meet

The Incident Rules establish a two-stage notification process for Priority 1 incidents, which includes a missing participant whose safety cannot be confirmed:

  1. Initial notification — within 24 hours. You must notify the NDIS Commission of the incident within 24 hours of the provider becoming aware of it. This is done through the Commission's online portal (NDIS Commission Portal). The initial notification does not need to be exhaustive, but it must include the nature of the incident, when it occurred or was discovered, and what immediate steps have been taken.
  2. Full written report — within five days. A complete written report must be submitted within five days of the incident occurring (not five days from the initial notification). This report must cover the full circumstances, the actions taken, the outcome for the participant, and the steps the provider is taking to prevent recurrence.

Missing these timeframes is itself a compliance failure. The Commission may take regulatory action — including conditions on registration, infringement notices, or civil penalties — for late or absent reporting, regardless of the outcome for the participant.

What must your internal incident response include?

The NDIS Practice Standards require registered providers to have a functioning incident management system. When a participant goes missing, that system must activate immediately. The following steps represent the minimum expected response:

  1. Immediate on-site search. Staff must conduct a prompt search of the premises and immediate surrounds and document the time and findings.
  2. Contact known locations and people. Call the participant's known contacts (family, friends, other service providers) and check locations the participant is known to frequent.
  3. Notify your supervisor or on-call manager. This should happen within minutes of staff confirming the participant cannot be located. The clock on your 24-hour Commission notification starts from when the provider — meaning any staff member — becomes aware.
  4. Notify police. For a participant whose safety cannot be confirmed and who has a vulnerability factor, contact police promptly. Do not wait until the 24-hour Commission window has nearly elapsed. In many cases this should happen within the first hour.
  5. Notify the participant's emergency contact or guardian. This is both a legal obligation and a care obligation. Document the time and content of this notification.
  6. Notify the NDIS Commission via the portal. Submit the P1 initial notification within 24 hours. If you are uncertain whether to report, report. The Commission has consistently said providers should err on the side of reporting.
  7. Continue welfare-checking and documenting. Maintain a running log of every action taken, by whom, and at what time. This record is essential for both the five-day written report and any subsequent Commission investigation.
  8. Submit the full written report within five days. This must include the chronology of events, all actions taken, the participant's outcome, and your corrective actions.

What the 2026 strengthened Practice Standards add

The strengthened NDIS Practice Standards, which the Commission has been progressively implementing leading into 2026, place heightened emphasis on proactive risk management and worker capability. For SIL providers specifically, this means:

Approved quality auditors assessing your organisation against the strengthened standards will specifically look for evidence that your incident management system has been tested, that staff have been trained, and that past incidents have informed policy updates.

Consequences of failing to report

The NDIS Quality and Safeguards Commission has broad powers under the National Disability Insurance Scheme Act 2013 and associated rules to take regulatory action against providers who fail to report incidents or who report them late. Consequences can include:

Failure type Possible Commission response
Late initial notification (beyond 24 hours) Compliance notice, infringement notice, or civil penalty
Late or incomplete five-day report Compliance notice, conditions on registration
Repeated or systemic failure to report Suspension or revocation of registration, banning orders on individuals
Failure to maintain an incident management system Non-conformance finding at audit, registration conditions

Beyond Commission action, providers may face scrutiny from state coroners, state police, or guardianship bodies. A failure to report promptly — and a failure to document the response — significantly increases a provider's exposure in any subsequent investigation or inquest.

A note on concurrent obligations

Notifying the NDIS Commission does not discharge your other obligations. A missing-participant incident will typically also require you to:

Managing these parallel obligations is one of the reasons SIL providers need a clearly written, regularly practised incident response procedure — not just a policy document sitting in a filing cabinet.

Is your incident management system audit-ready?

When a quality auditor assesses your incident management system, they will look for a written procedure that covers the missing-participant scenario specifically, evidence of staff training, records of past incidents and how they were handled, and documentation showing the system has been reviewed. If your policies have gaps in this area, or if you are working toward initial registration or re-registration in 2026, the 74-document audit-ready SIL compliance kit at ndiscompliant.com.au includes a missing-person response procedure, incident reporting templates, and staff training records designed to meet the strengthened Practice Standards.

Key takeaways

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.