Who this guide is for
If your organisation delivers group or centre based activities — such as day programs, social and community participation groups, life skills centres, or supported employment settings — the NDIS Commission classifies you as a provider delivering supports under the Group and Centre Based Activities support category. From 2026, the strengthened NDIS Practice Standards and revised audit framework place heightened expectations on how you govern, document, and demonstrate participant safety. This guide explains exactly what an approved quality auditor looks for and how to get your organisation ready.
The 2026 audit landscape: what has changed
The NDIS Commission has progressively strengthened the Practice Standards since their introduction. The 2026 framework reinforces several areas that are directly relevant to group and centre based settings:
- Participant rights and dignity — stronger requirements to demonstrate active upholding of rights, not merely a written policy.
- Restrictive practices — tighter evidence obligations around behaviour support plans, authorisation pathways, and monitoring records for any regulated restrictive practice used in group settings.
- Incident management — clearer expectations around identifying, recording, investigating, and reporting incidents, including near-misses that occur in shared environments.
- Worker screening and training — renewed emphasis that all workers in group settings hold current NDIS Worker Screening Checks and have completed NDIS Worker Orientation Module requirements.
- Quality and safeguards governance — boards and executive leaders are expected to demonstrate active oversight of quality and safety, not passive receipt of reports.
The mandatory registration deadline for previously unregistered providers delivering certain supports in group contexts has been a key driver of audit demand. If this applies to you, act promptly — audits book out well in advance.
What an approved quality auditor checks: the core modules
Approved quality auditors assess your organisation against the NDIS Practice Standards. For group and centre based providers, the audit typically covers the following modules.
Core Module — Rights and responsibilities
Auditors examine whether your organisation can evidence that participants understand and actively exercise their rights. Expect file reviews, staff interviews, and participant or nominee interviews. Common non-conformances include rights documentation that is signed but not explained in accessible formats, and missing evidence that participants have received and understood their rights handbook.
Core Module — Governance and operational management
Your governance framework — policies, procedures, board oversight mechanisms, risk management, and complaints handling — is reviewed in depth. Auditors look for a live quality management system, not a folder of policies last updated three years ago. Non-conformances frequently arise from outdated policies, absent complaint register reviews, or governance minutes that show no discussion of safety indicators.
Core Module — Provision of supports
Every participant must have a current support plan aligned to their NDIS goals. In group settings, auditors check that individual plans are not replaced by a generic "group program description." Each participant's outcomes, adjustments, and preferences must be individually documented, even where the activity is delivered collectively.
Core Module — Support planning
Planning records must demonstrate person-centred practice. Auditors will sample files and look for evidence of participant (or nominee) involvement in setting goals, consent to supports, and regular review cycles.
Supplementary Module — Implementing behaviour support
This module is almost universally triggered for group and centre based providers. Any use of a regulated restrictive practice — including certain de-escalation techniques, environmental restrictions, or mechanical restraints — must be authorised under state or territory law, documented in a behaviour support plan developed by a registered behaviour support practitioner, and monitored with regular review. Auditors check the register of restrictive practices, authorisation documentation, and staff training records.
Step-by-step audit preparation plan
- Book your auditor early. Approved quality auditors can have significant lead times, particularly for desk audits and certification audits. Contact the NDIS Commission or check the list of approved quality auditors on the Commission website to identify your options and confirm timelines.
- Conduct an internal gap analysis. Map every Practice Standard indicator relevant to your registration groups against your current policies, procedures, and evidence. Use the NDIS Commission's self-assessment tool as your starting framework.
- Audit your participant files. Pull a representative sample — including participants with complex support needs — and check that each file contains a current support plan, signed consent, up-to-date risk assessment, and (where applicable) a behaviour support plan with current authorisation documentation.
- Verify worker compliance. Confirm that every worker, volunteer, or contractor with more than incidental contact with participants holds a valid NDIS Worker Screening Check and has completed required training. Keep a register with expiry dates and refresh reminders.
- Review your incident register. Check that all incidents (including near-misses and participant-reported concerns) are captured, categorised correctly under the Commission's reportable incident definitions, investigated, and closed with documented learnings. Any reportable incidents must have been notified within required timeframes.
- Test your complaints system. Can participants and families easily raise concerns? Is there an accessible format? Auditors will look for a functioning complaints register, evidence of timely responses, and demonstration that complaints drive improvement.
- Prepare your governance evidence pack. Collate board meeting minutes, quality and safety reports presented to leadership, and records of any corrective actions taken. This pack demonstrates active governance rather than passive compliance.
- Brief your team. Staff interviews are a core part of certification and verification audits. Ensure workers understand the organisation's rights-based approach, know how to report incidents and complaints, and can explain their role in restrictive-practice oversight.
- Address findings before audit day. Close any gaps identified in your internal review. Document what was wrong, what you did, and the outcome. Auditors view genuine pre-audit improvement positively.
Common non-conformances in group and centre based audits
| Non-conformance area | Typical finding | How to address it |
|---|---|---|
| Individualised support planning | Group program description substituted for individual plans | Create individual goal-aligned plans for every participant; reference the group activity as a delivery method, not the plan itself |
| Restrictive practices register | Register incomplete or not updated after reviews | Assign a named owner; set calendar-based review reminders; link register entries to authorisation documents |
| Incident reporting timeliness | Incidents recorded internally but not notified to the Commission within required windows | Build a notification checklist into your incident procedure; train team leaders on reportable categories |
| Worker screening currency | Expired checks not flagged; register not maintained | Maintain a live register with expiry dates; set alerts at least 90 days before expiry |
| Governance oversight evidence | Board minutes show no substantive safety or quality discussion | Add a standing safety and quality agenda item; include incident data, complaint trends, and corrective actions |
A practical policy excerpt template: participant rights in group settings
The following is a realistic example of the type of participant rights policy statement an auditor would expect to see. Adapt it to your organisation's voice and context.
Policy: Upholding participant rights in group and centre based activities
[Organisation name] recognises that each participant in a group setting retains full individual rights, including the right to make decisions about their own participation, to raise concerns without fear of retribution, and to receive supports that reflect their personal goals and preferences. Staff facilitating group activities are responsible for ensuring that group dynamics, scheduling, and activity choices do not inadvertently override individual participant choices. Where a participant indicates — verbally or through supported communication — that they do not wish to participate in a scheduled activity, staff will immediately offer an alternative and document the participant's preference in their support record. Participant rights are reviewed with each individual at least annually and whenever their circumstances change.
Pulling it together before audit day
Organisations that perform well in NDIS audits share a common characteristic: they treat compliance as a continuous operational discipline, not a pre-audit scramble. Your quality management system should be generating real evidence of improvement and participant outcomes on an ongoing basis, so that when an auditor arrives, you are sharing what you already do — not assembling a paper trail in a hurry.
If your team needs a structured starting point, ndiscompliant.com.au offers a 74-document audit-ready SIL and centre based compliance kit covering policies, registers, checklists, and templates aligned to the current Practice Standards — a practical foundation for providers building or rebuilding their quality system ahead of 2026 audits.
Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.