NDIS Conflict of Interest Policy: What Auditors Look For in 2026

Why Conflict of Interest Is a Priority Focus in NDIS Audits

Conflict of interest (COI) sits at the intersection of governance, safeguarding, and the NDIS Code of Conduct. For Supported Independent Living providers, the risk is especially acute: workers and managers often have long-term relationships with participants, influence over spending decisions, and access to personal and financial information. When those relationships are not managed transparently, participant choice and control is compromised.

The NDIS Commission's strengthened Practice Standards framework, progressively implemented from 2023 and reinforced through 2026 mandatory registration requirements, explicitly requires registered providers to demonstrate how they identify and address conflicts of interest at the organisational, management, and individual worker level. Approved quality auditors are trained to probe beyond the policy document and assess whether COI controls are genuinely embedded in operations.

What the NDIS Practice Standards Require

The NDIS Practice Standards are grouped into core and supplementary modules. Conflict of interest obligations arise primarily from:

• Governance and Operational Management (Core module) — providers must have systems to manage risks to participants, including those arising from actual or perceived conflicts involving staff or the organisation.
• The NDIS Code of Conduct — workers must act with integrity, avoid actual and potential conflicts of interest, and disclose those conflicts to their employer. Providers must implement and enforce the Code across their workforce.
• Human Resources (Core module) — screening, supervision, and performance management processes must include mechanisms for identifying worker conduct risks, including undisclosed secondary employment or personal relationships with participants.
• High Intensity Daily Activities and SIL Supplementary Module — for SIL specifically, governance requirements extend to how support coordination, housing decisions, and rostering are managed to ensure they serve participant goals rather than provider convenience or financial interest.

Exactly What an Approved Quality Auditor Checks

Auditors work from the NDIS Practice Standards Quality Indicators and corroborate policy claims against observable evidence. For conflict of interest, expect scrutiny across the following areas:

1. Policy Existence and Currency

Auditors verify that a written COI policy exists, is version-controlled, and has been reviewed within the provider's stated review cycle (typically annually). A policy that has not been updated since registration was first granted — or that references outdated legislative instruments — is a common finding.

2. Scope and Coverage

The policy must cover all relevant persons: board or governing body members, executive management, direct support workers, contractors, and volunteers. Auditors will ask whether the policy applies only to "employees" and probe whether contractor arrangements are separately addressed.

3. The Conflict of Interest Register

Most non-conformances in this area involve the absence or inadequate maintenance of a COI register. Auditors look for:

• A current register with named disclosures, dates, and the nature of each conflict
• Evidence that disclosed conflicts have been assessed and a management decision recorded
• Signatures or acknowledgements from the disclosing person and the authorising officer
• Entries reviewed at least annually, with nil-return declarations where applicable

4. Disclosure Obligations and Procedures

The policy must specify how and to whom workers disclose an actual, potential, or perceived conflict. Auditors look for clarity on escalation pathways — particularly where the conflict involves a senior leader or the governing body. If the CEO is the designated disclosure recipient but the CEO is the subject of the conflict, the policy must name an alternative (such as the Board Chair or a governance committee).

5. Management Actions and Recusal

Identifying a conflict is only the first step. Auditors assess whether the provider records what action was taken — recusal from a decision, reallocation of a role, or a documented determination that the risk is low and monitored. Policies that describe disclosure without specifying management responses are consistently flagged.

6. Staff Training and Awareness

Auditors request training records showing workers have received COI awareness training as part of induction and at least periodically thereafter. They may interview a sample of workers to test understanding of what constitutes a conflict, the disclosure process, and the consequences of non-disclosure.

7. Application to Specific SIL Scenarios

For SIL providers, auditors pay attention to scenarios such as:

• Workers recommending or facilitating the purchase of goods or services from connected businesses
• Providers who also act as support coordinators for participants they house (a structural conflict requiring explicit governance controls)
• Rostering decisions that favour particular workers for financial or relationship reasons rather than participant need
• Involvement of family members or close associates of management in participant decision-making

Common Non-Conformances Found During Audits

What a Robust Conflict of Interest Policy Must Include

Auditors use quality indicators as a benchmark. A policy that is likely to achieve conformance will include, at minimum:

1. Purpose and scope — who the policy applies to and why it exists
2. Definition of conflict of interest — covering actual, potential, and perceived conflicts, with examples relevant to disability support
3. Disclosure obligations — when and how to disclose, including timeliness requirements
4. The disclosure recipient and escalation path — including an alternative where the primary recipient is the subject
5. Register requirements — format, retention period, and review frequency
6. Management responses — types of action that may be taken and how decisions are recorded
7. Consequences of non-disclosure — linked to the Code of Conduct and HR/disciplinary policy
8. Review cycle and version control — who owns the policy and when it was last updated

Practical Steps Before Your Next Audit

1. Pull your current COI policy and check the review date against today.
2. Open your COI register and verify every entry from the past 12 months has a recorded management decision — not just a disclosure date.
3. Check that your contractor service agreements contain a COI clause and a disclosure obligation.
4. Run a spot-check: ask two or three support workers what they would do if they realised a family member was supplying goods to a participant they support. Their answer reveals training effectiveness.
5. Confirm the escalation path is documented for conflicts involving the CEO, director, or governing body members.
6. Schedule and document your next policy review before the audit window opens.

SIL providers preparing for initial registration or re-registration under the 2026 mandatory framework often find that COI governance is one of several interlocking document gaps. The ndiscompliant.com.au 74-document audit-ready SIL compliance kit includes a ready-to-customise conflict of interest policy, a COI register template, and the supporting governance suite — built to the current Practice Standards quality indicators.

Key Takeaway

An NDIS conflict of interest policy that satisfies auditors is not a single document — it is a system of disclosure, recording, decision-making, and training that can be evidenced in real time. Auditors are looking for proof the system works, not proof that you wrote a policy. The register is your primary evidence. Keep it current, keep it complete, and make sure every worker knows how to use it.