Does every unexplained bruise need to be reported to the NDIS Commission?

Any bruising, mark, or physical injury on a participant that cannot be satisfactorily explained should be treated as a reportable incident and notified to the NDIS Commission. Even minor-appearing injuries can indicate abuse or neglect, particularly in residential settings like SIL where participants may have limited capacity to communicate what happened. When in doubt, report.

What if the participant says they don't know how they got the injury?

A participant being unable to explain an injury is itself a factor that makes the injury unexplained and therefore reportable. You should not delay reporting while trying to gather more information. Submit the initial notification within 24 hours and include the investigation findings in your five-business-day full report.

Do we need to call the police as well as report to the NDIS Commission?

The NDIS Commission and police are separate reporting channels and one does not replace the other. If you have reasonable grounds to believe an assault has occurred — including where an unexplained injury may have been caused by another person — you should notify police. Your NDIS Commission incident report should also note whether police were contacted.

What happens if we report an unexplained injury late?

Late reporting is a breach of the reportable incident rules and can trigger compliance action by the Commission. If you discover you should have reported earlier, report as soon as you become aware and document the reason for the delay honestly. Attempting to conceal or minimise reporting failures is treated more seriously than a genuinely late but complete report.

Can we wait until our internal investigation is complete before reporting?

No. The 24-hour initial notification must go to the Commission before your internal investigation is complete. The two processes run in parallel. The initial notification is an alert, not a findings report — you provide investigation outcomes in the full report within five business days.

Are SIL providers held to a higher standard than other NDIS providers on unexplained injuries?

The legal reporting obligation is the same for all registered providers. However, in practice, the Commission applies closer scrutiny to residential and high-intensity support providers such as SIL, because participants in these settings may be more vulnerable and less able to self-report harm. Robust incident management systems are therefore especially critical for SIL organisations.

Is an Unexplained Injury Reportable to the NDIS Commission?

The Short Answer: Yes, and Time Matters

If an NDIS participant in your service experiences an injury that cannot be readily explained — including bruising, lacerations, fractures, or marks with no clear or documented cause — you are legally required to report it to the NDIS Quality and Safeguards Commission as a reportable incident. This obligation applies to all registered NDIS providers, including those delivering Supported Independent Living (SIL) and other residential supports where participants may be at heightened vulnerability.

Understanding exactly what qualifies, who must report, and how to do it correctly is not optional knowledge. Getting it wrong exposes participants to ongoing harm, and exposes your organisation to formal compliance action.

What Makes an Injury "Reportable"?

The NDIS (Incident Management and Reportable Incidents) Rules define the categories of incidents that registered providers must report to the Commission. Unexplained injuries fall under the category of abuse and neglect of a person with disability, and also intersect with categories relating to unexpected serious injury.

An injury is considered unexplained when:

No satisfactory explanation can be given for how the injury occurred
The explanation provided is inconsistent with the nature or location of the injury
The injury is discovered without any reported incident or fall having been documented
Multiple unexplained injuries are present, even if each individual mark appears minor
Staff or other participants cannot account for when or how the injury happened

In a SIL context — where participants live in shared accommodation and may have limited capacity to communicate what has happened to them — unexplained injuries carry a heightened presumption that something serious may have occurred. This is precisely why the Commission treats them as immediately reportable rather than something to investigate first and report later.

Who Must Report

The reporting obligation sits with the registered NDIS provider. Specifically, the provider's key personnel and incident management system must ensure the Commission is notified. In practice, this means:

The house manager, team leader, or on-call coordinator initiates the notification process as soon as the injury is identified
The registered provider (the legal entity) is ultimately responsible for the report being submitted correctly and on time
Support workers and direct care staff have an obligation to report immediately to their supervisor — the chain must not stall at any level

Unregistered providers do not use the Commission's reportable incident pathway, but registered providers supporting participants under SIL funding arrangements have no discretion: the obligation is mandatory.

The Two-Stage Reporting Timeline

The NDIS incident reporting framework uses a two-stage notification model that all SIL providers must have embedded in their incident management procedures:

Initial notification — within 24 hours: The provider must notify the NDIS Commission of the incident as soon as practicable and no later than 24 hours after becoming aware of it. This is submitted through the Commission's online portal. The initial notification does not need to be a complete investigation — it is a prompt alert that a reportable event has occurred.
Full written report — within five business days: A detailed report must follow within five business days of the initial notification. This report must include the known facts, what actions were taken to support the participant, what steps have been taken to prevent recurrence, and any referrals made (for example, to police or a medical practitioner).

The five-business-day report is where many providers fall short. It is not sufficient to submit the initial notification and consider the obligation met. The Commission actively monitors whether full reports are received.

What Your Report Must Cover

When submitting the full incident report for an unexplained injury, your documentation should address the following:

The date, time, and location the injury was first noticed
A physical description of the injury (type, location on the body, size, severity)
Who discovered the injury and in what circumstances
What explanations, if any, were offered by staff, participants, or witnesses
Whether medical attention was sought and the outcome of any assessment
Whether police were notified (for injuries where assault is reasonably suspected)
Immediate actions taken to support the participant's safety and wellbeing
Whether the participant's family, guardian, or nominee was informed (and if not, why)
Any review of staffing patterns, CCTV footage, or other information relevant to understanding how the injury occurred
Preliminary steps taken to reduce recurrence risk

Consequences of Not Reporting

Failure to report a reportable incident — including an unexplained injury — is a breach of the NDIS Practice Standards and the conditions of your registration. The NDIS Commission has a range of compliance and enforcement powers it can exercise in response, including:

Issuing a compliance notice requiring the provider to take specific action
Accepting an enforceable undertaking
Imposing conditions on the provider's registration
Suspending or revoking registration
Referring matters to relevant authorities including police or state-based adult safeguarding agencies

Beyond regulatory consequences, failing to report unexplained injuries exposes participants to continued risk if the root cause — whether it involves another participant, a staff member, or an environmental hazard — is never identified and addressed.

Internal Incident Management Obligations Run in Parallel

Reporting to the Commission is only one part of your obligation. The NDIS Practice Standards require registered providers to maintain a robust internal incident management system. For unexplained injuries, this means your internal system must:

Capture the incident at the point of discovery, not retrospectively
Trigger an internal investigation that is separate from, but aligned with, the Commission notification process
Ensure the participant receives appropriate medical care and emotional support promptly
Identify whether a staff member, another participant, or any other party may have been involved
Review whether your risk assessments, behaviour support plans, or staffing ratios require updating
Demonstrate learning and continuous improvement in your quality management documentation

During an audit, an approved quality auditor will look for evidence that unexplained injuries were captured, escalated, reported externally, investigated internally, and that the investigation led to a documented improvement action. A single unexplained injury with no corresponding internal investigation record is a common non-conformance finding.

Practical Steps for SIL Providers

Identify the injury — document it in writing immediately, with photographs where appropriate and the participant's consent
Seek medical assessment — arrange medical review before any assumption is made about cause
Notify the Commission — submit the initial notification through the Commission portal within 24 hours
Inform the participant's support network — notify family, guardian, or nominee unless there is a documented reason not to
Preserve evidence — secure any relevant CCTV footage, staff rosters, and contemporaneous records before they are overwritten or lost
Consider whether police notification is required — if assault is reasonably suspected, involve police without delay
Complete the full written report — submit to the Commission within five business days with all required details
Conduct and document the internal investigation — separate from the Commission report but equally important for your audit trail
Review and improve — implement any identified changes and document them as a quality improvement action

The 2026 Strengthened Framework Context

The strengthened NDIS Practice Standards that have been progressively implemented place greater emphasis on provider governance, proactive risk management, and participant safety culture. For SIL providers in particular, the Commission's oversight of incident reporting compliance has sharpened. Providers who demonstrate a pattern of late, incomplete, or absent incident reports for unexplained injuries are likely to face closer scrutiny during registration renewal and audit cycles.

If you are preparing your SIL organisation for the 2026 registration requirements and want to make sure your incident management system, policy suite, and audit documentation are audit-ready, ndiscompliant.com.au offers a 74-document SIL compliance kit built around the current and strengthened Practice Standards — a practical starting point for providers who need to close gaps quickly.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.