What is the NDIS Practice Standard on Rights and Responsibilities?

It is a mandatory standard within the NDIS Practice Standards framework that requires registered providers to actively uphold participant legal rights, support informed decision-making, respect individual dignity, and provide accessible complaints mechanisms. All registered NDIS providers must meet it, with SIL providers subject to heightened scrutiny.

How does the strengthened 2026 framework change what SIL providers must do?

The 2026 strengthened framework requires providers to produce evidence from participants themselves — not just internal documentation — that rights are upheld in practice. It also strengthens governance accountability, tightens the link between restrictive practice authorisation and rights assessments, and reinforces mandatory worker screening obligations.

What evidence will an auditor look for under this standard?

Auditors typically review your Rights and Responsibilities Policy, staff training records, service agreements (checking for rights-limiting clauses), complaints register and outcomes, participant communication formats, incident data, and restrictive practice authorisation documentation. They may also speak directly with participants and families.

Can a SIL provider restrict a participant's choices if there is a safety concern?

Supports must use the least restrictive alternative available. Any regulated restrictive practice requires state or territory authorisation and must be documented in a behaviour support plan prepared by a registered behaviour support practitioner. Restrictions cannot be applied informally or justified solely on provider convenience or perceived risk.

What happens if a provider fails the Rights and Responsibilities Standard at audit?

Depending on severity, the NDIS Commission may issue a corrective action plan, impose conditions on registration, issue a compliance notice, or — in serious cases involving abuse or exploitation — suspend or cancel registration and refer the matter to police. Systemic failures attract the most significant regulatory responses.

Do small or newly registered SIL providers need to meet the same standard as large organisations?

Yes. The Practice Standards apply equally regardless of organisation size. However, the 2026 mandatory registration changes mean some previously unregistered providers are encountering these obligations for the first time, making early gap-analysis and policy development particularly important for smaller operators.

NDIS Practice Standard: Rights and Responsibilities explained (2026)

What is the Rights and Responsibilities Practice Standard?

The Rights and Responsibilities Standard sits within the NDIS Practice Standards — the benchmark framework that all registered NDIS providers must meet. For Supported Independent Living (SIL) providers and other disability support organisations, this standard is far from a tick-box exercise. It represents a legally enforceable obligation to treat every participant as an autonomous person with full civic rights, not merely as a service recipient.

The standard is enforced by the NDIS Quality and Safeguards Commission (NDIS Commission). Under the strengthened framework progressively rolled out through 2024 and 2025, and now fully operative in 2026, the Commission applies heightened scrutiny to how providers translate rights language into daily practice. Audit findings that reveal a gap between a provider's written policy and what participants actually experience are treated as serious non-conformances.

Who must comply?

Every NDIS-registered provider is subject to the Practice Standards. However, the Rights and Responsibilities Standard has particular weight for organisations delivering:

Supported Independent Living (SIL)
Specialist Disability Accommodation (SDA) with co-located SIL
Residential and in-home personal care
Behaviour support and restrictive practice authorisation services
Early childhood and development supports where decision-making capacity considerations arise

The mandatory registration changes taking effect in 2026 have broadened the pool of providers subject to full registration — meaning many previously unregistered sole traders and small operators delivering higher-risk supports must now meet these standards for the first time.

Core requirements of the standard

The Rights and Responsibilities Standard encompasses several distinct obligations. Providers must be able to demonstrate all of these to an approved quality auditor.

1. Upholding legal and human rights

Providers must recognise that participants retain all legal rights under Australian law, including the right to privacy, freedom of movement, freedom from abuse or exploitation, and the right to make decisions about their own lives. Supports must be designed and delivered in a way that does not inadvertently — or deliberately — restrict these rights.

The Convention on the Rights of Persons with Disabilities (CRPD), to which Australia is a signatory, underpins much of this obligation. Providers are expected to be familiar with its principles, particularly around full and effective participation and inclusion in society.

2. Supported decision-making

A participant's right to make decisions — including decisions a provider may consider unwise — must be respected. The standard requires providers to support decision-making, not substitute it. In practice this means:

Giving participants information in accessible formats so they can make genuinely informed choices
Allowing adequate time for decisions without pressure
Documenting how decision-making support was offered and the outcome
Engaging a legal guardian or plan nominee only within the scope of their authorised role

3. Individual dignity and respect

Every interaction between a support worker and a participant must uphold the person's inherent dignity. This obligation extends beyond avoiding obvious abuse or neglect — it includes tone of voice, respecting personal space, not discussing a participant's circumstances in front of others, and honouring individual cultural, linguistic, and religious identity.

4. Complaints and feedback rights

Participants must be informed of their right to make complaints without fear of reprisal, and providers must maintain an accessible, easy-to-use complaints mechanism. The NDIS Commission's Code of Conduct reinforces this, and auditors will assess whether the complaints process is genuinely participant-facing or buried in internal-only documentation.

5. Privacy and confidentiality

Participants have the right to have their personal and sensitive information handled in accordance with the Privacy Act 1988 (Cth) and relevant NDIS rules. Providers must have a current privacy policy, train staff on its application, and be able to demonstrate how participant information is stored, shared, and disposed of.

How the 2026 strengthened framework changes the bar

The NDIS Commission's strengthened Practice Standards, implemented as part of the broader NDIS legislative reforms, introduce several material changes for SIL providers:

Increased auditor scrutiny of lived experience: Auditors are now specifically required to seek evidence from participants themselves — not just from provider documentation — about whether rights are being upheld in practice.
Explicit links to restrictive practice authorisation: Any use of a regulated restrictive practice must be connected back to a rights assessment. Providers cannot rely on a behaviour support plan alone; they must demonstrate that the least restrictive alternative has genuinely been considered and documented.
Stronger governance obligations: Providers' governing bodies (boards, management committees, owners) bear direct accountability for rights-based culture. Auditors may review board minutes, training records, and incident data to assess whether leadership is driving compliance or merely signing off on policies.
Mandatory worker screening obligations reinforced: All SIL workers must hold a current NDIS Worker Screening clearance. The connection to rights is direct — employing an uncleared worker is treated as a failure to protect participant rights, not merely an administrative breach.

Practical steps for SIL providers

Translating the standard into auditable evidence requires systematic work across multiple areas of your organisation. The following steps reflect what approved quality auditors expect to see:

Review and update your Rights and Responsibilities Policy to reference the 2026 Practice Standards iteration, the CRPD, and your state or territory's restrictive practice authorisation framework.
Map each participant's communication needs and document how information — particularly about rights, complaints, and decision-making — is provided in their preferred format (Easy Read, Auslan, translated materials, verbal with support).
Conduct a rights audit of all active service agreements. Ensure the agreement language does not inadvertently ask participants to waive or limit rights in exchange for accommodation.
Train all staff and support workers on the practical application of rights-based support — not a one-off induction module, but regular, scenario-based refreshers documented in your training register.
Test your complaints mechanism from a participant's perspective. Can someone with limited literacy or no phone access make a complaint? Is the NDIS Commission's contact information displayed accessibly in every service location?
Review incident data for patterns that may indicate systemic rights concerns — for example, repeated incidents at a specific house or with a specific staff member.
Check restrictive practice authorisations are current, that behaviour support practitioners hold the required registration, and that every regulated practice is documented, reviewed, and reduced over time.

Consequences of non-compliance

The NDIS Commission has a range of enforcement powers when providers fail to meet the Rights and Responsibilities Standard. These escalate depending on the severity and whether issues are systemic or isolated:

Finding type	Possible Commission response
Minor non-conformance (documentation gaps)	Corrective action plan, follow-up audit
Major non-conformance (systemic rights failures)	Compliance notice, conditions on registration
Serious or repeated breaches	Banning order, suspension or cancellation of registration, civil penalties
Abuse, neglect, or exploitation	Immediate regulatory action, referral to police or other authorities

Beyond formal enforcement, a poor audit outcome can trigger reputational damage with Local Area Coordinators and Support Coordinators who refer participants to SIL vacancies — a significant commercial risk for any provider dependent on referral-driven occupancy.

Getting audit-ready

For SIL providers approaching their next certification or verification audit, the Rights and Responsibilities Standard should be treated as a priority gap-analysis area. Organisations that maintain a living evidence portfolio — rather than scrambling to produce documents in the weeks before an audit — consistently achieve better outcomes and spend less on remediation.

If your team needs a structured starting point, the 74-document audit-ready SIL compliance kit at ndiscompliant.com.au covers the Rights and Responsibilities Standard alongside all other applicable Practice Standards, with editable templates mapped directly to auditor evidence requirements.

Ultimately, rights-based practice is not just a compliance obligation — it is the foundation of quality support. Participants who feel their rights are genuinely upheld are more engaged, experience better outcomes, and are less likely to raise complaints or escalate concerns to the Commission. The investment in getting this right pays dividends well beyond audit day.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.