Incidents & safeguarding
Is a Restrictive Practice Reportable to the NDIS Commission?
Yes — but only certain restrictive practices trigger a mandatory report to the NDIS Commission. Specifically, any unauthorised use of a regulated restrictive practice is a reportable incident. Authorised regulated restrictive practices must instead be reported monthly via the NDIS Commission Portal. Understanding the distinction is essential for every registered provider delivering SIL or behaviour support.
The short answer: authorised versus unauthorised is everything
Under the NDIS (Restrictive Practices and Behaviour Support) Rules 2018, the NDIS Quality and Safeguards Commission regulates five types of regulated restrictive practices:
- Chemical restraint — medication used primarily to control a person's behaviour, not to treat a diagnosed condition
- Mechanical restraint — using a device to restrict a person's free movement (for example, lap belts used to restrict movement rather than for postural support)
- Physical restraint — using part of your body to restrict a person's movement
- Seclusion — restricting a person's freedom of movement by confining them to a space alone
- Environmental restraint — restricting a person's access to parts of their environment, such as locking a cupboard or room
Whether a regulated restrictive practice is authorised or unauthorised determines which reporting pathway applies — and getting this wrong is one of the most common enforcement findings the Commission records against SIL and community-care providers.
What makes a restrictive practice "authorised"?
A regulated restrictive practice is authorised when all three of the following conditions are met:
- A registered NDIS behaviour support practitioner has developed a Behaviour Support Plan (BSP) for the participant that includes the practice.
- The relevant state or territory body has authorised the use of that specific practice for that specific participant. Note: the NDIS Commission does not authorise restrictive practices — authorisation is a state and territory function.
- Evidence of the authorisation has been uploaded to the NDIS Commission Portal by the implementing provider.
If any one of those three steps is missing, the practice is unauthorised — even if support workers believed they were acting in the participant's best interests, and even if a BSP exists but has not yet been formally authorised by the state or territory body.
Reportable incident obligations: the two-track system
| Situation | Reporting obligation | Timeframe |
|---|---|---|
| Unauthorised use of a regulated restrictive practice (no harm) | Notify the NDIS Commission as a reportable incident via the Commission Portal | Within 5 business days of becoming aware |
| Unauthorised use of a regulated restrictive practice that causes harm | Notify the NDIS Commission as a reportable incident | Within 24 hours of becoming aware |
| Authorised regulated restrictive practice (used in accordance with the BSP) | Monthly report via the NDIS Commission Portal — even if the practice was not used that month | Within 5 business days after the end of each reporting month |
The monthly reporting obligation applies to every regulated restrictive practice listed in a participant's BSP, regardless of whether it was actually used. Implementing providers access this through the Commission Portal using their PRODA account.
Why this matters for SIL providers heading into July 2026
From 1 July 2026, mandatory registration applies to all Supported Independent Living (SIL) providers. Providers who have not commenced a registration application by that date must stop delivering SIL. Providers who have not applied at all by 1 October 2026 must cease services.
The new SIL Practice Standards that accompany mandatory registration include specific obligations around restrictive practices: embedding positive behaviour support into daily routines, ensuring workers are trained and supervised to implement BSPs safely, and actively working to reduce the use of restrictive practices over time. During SIL audits, auditors will check for evidence across all of these areas.
If your organisation is currently unregistered and using any regulated restrictive practice, you are by definition using it without the full authorisation chain — and those incidents should have been reported as reportable incidents. Addressing this before you lodge a registration application is strongly advisable.
Worked example: what an auditor looks for
Consider this scenario: a SIL house uses a cupboard lock to prevent a participant from accessing kitchen knives unsupervised. The house manager considers this a safety measure, not a restriction.
Is it a regulated restrictive practice? Yes. Locking a cupboard to restrict access to part of the environment is environmental restraint — one of the five regulated types.
Is it authorised? That depends entirely on whether a BSP developed by a registered behaviour support practitioner includes this practice, and whether the relevant state or territory body has formally authorised it. Believing it is "just a safety measure" does not make it authorised.
What an auditor checks:
- Is the practice documented in a current, approved BSP?
- Is there evidence of state/territory authorisation uploaded in the Commission Portal?
- Have monthly reports been submitted on time for every month the participant was supported?
- Are incident reports filed for any period where the practice was used before authorisation was in place?
- Is there a documented reduction plan — evidence that the provider is actively working to eliminate or reduce the practice?
- Are support workers trained in the BSP and the specific conditions under which the practice may be used?
Quick-reference checklist for implementing providers
- Identify every regulated restrictive practice used across all participants in your service
- Confirm each has a current BSP authored by a registered behaviour support practitioner
- Confirm state/territory authorisation is current and uploaded to the Commission Portal
- Set a calendar reminder for monthly reporting (due within 5 business days of month-end)
- Review your incident register: any unauthorised use that was not reported should be addressed with your compliance lead
- Document worker training on each BSP and keep records available for audit
- Review your reduction plans and document progress
Get your SIL Readiness Pack
If you are preparing for SIL registration or your first audit under the new Practice Standards, our free SIL Readiness Pack sets out in plain English what the Commission expects from implementing providers — covering behaviour support documentation, restrictive practice authorisation, incident reporting, and worker training evidence. This is general information, not legal advice; for complex compliance questions, speak with a registered behaviour support practitioner or a compliance specialist.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.
Frequently asked questions
Does an authorised restrictive practice ever need to be reported as a reportable incident?
Generally no — if the practice is properly authorised (BSP in place, state/territory authorisation obtained, evidence uploaded to the Commission Portal) and used in accordance with the BSP, it is captured through monthly reporting, not as a reportable incident. However, if an authorised practice is used outside the conditions set in the BSP, or if it causes unexpected harm, it may trigger a separate reportable incident obligation. Always assess the specific circumstances.
What if a worker uses a restrictive practice in an emergency and no BSP exists?
Emergency or unplanned use of a regulated restrictive practice without an authorised BSP is still unauthorised use — and it is still a reportable incident that must be notified to the NDIS Commission, ordinarily within 5 business days (or 24 hours if harm resulted). Providers should document the circumstances, report promptly, and engage a registered behaviour support practitioner to develop a BSP that addresses the underlying behaviour of concern so the situation does not recur.
Are unregistered SIL providers currently exempt from these reporting obligations?
No. The reportable incident and behaviour support obligations under the NDIS Act and Rules apply to registered NDIS providers. If an unregistered provider is currently using regulated restrictive practices, they are doing so without the required authorisation chain — which means every instance is an unauthorised restrictive practice. From 1 July 2026, SIL providers must be registered, at which point full Commission oversight (including audits and incident reporting) applies.
Keep reading
- Is a Restrictive Practice Reportable to the NDIS Commission?
- How to document a restrictive practice in NDIS (template + steps)
- Is an Abuse or Neglect Allegation Reportable to the NDIS Commission?
- Is a Behaviour of Concern Reportable to the NDIS Commission?
- Is a Death of a Participant Reportable to the NDIS Commission?
Free: the SIL Readiness Pack
A checklist and a sample policy page, sent as a download. No sequence.