Unexplained Injury: NDIS Notification Timeframes

What Is an Unexplained Injury in the NDIS Context?

An unexplained injury is any physical harm sustained by an NDIS participant where the cause is not immediately apparent or cannot be adequately accounted for by the participant's support history, medical record, or incident documentation. This includes bruising, lacerations, fractures, burns, or other wounds where no corresponding incident report exists or where the explanation offered does not align with the observable injury.

For Supported Independent Living (SIL) providers and other registered NDIS supports, unexplained injuries are treated with heightened seriousness because they may indicate neglect, abuse, restrictive practice misuse, or a breakdown in the duty of care. The NDIS Commission's strengthened framework, progressively rolled out ahead of the 2026 mandatory registration changes, places unexplained injuries firmly within the category of reportable incidents — carrying mandatory notification obligations and potential audit consequences.

Who Must Report?

The obligation to report sits with the registered NDIS provider responsible for delivering the supports at the time the injury is identified. This includes:

• SIL providers managing group homes or individual living arrangements
• Support coordination providers where the coordinator becomes aware of an injury to a participant they support
• Any registered provider whose workers identify an unexplained injury during service delivery

Workers themselves do not report directly to the NDIS Commission — they escalate internally to the provider, who then carries the notification obligation. This is why having a clearly documented internal escalation pathway is an audit requirement under the NDIS Practice Standards (Support Provision Environment and High Intensity Daily Personal Activities standards).

Unregistered providers do not have a direct Commission reporting obligation but may be subject to obligations through the participant's plan manager, registered coordinator, or other registered parties involved in the supports.

NDIS Notification Timeframes for Unexplained Injuries

The NDIS (Incident Management and Reportable Incidents) Rules 2018 set out the framework governing when and how providers must notify the Commission. Unexplained injuries that meet the threshold of a reportable incident trigger a two-stage notification process.

Stage 1: Initial Notification (within 24 hours)

Where an unexplained injury is identified as a serious incident — particularly where it involves significant harm, hospitalisation, or where abuse or neglect is suspected — providers must lodge an initial notification with the NDIS Commission within 24 hours of first becoming aware of the incident.

This initial report does not need to be fully complete. Its purpose is to alert the Commission promptly so that appropriate oversight, safeguarding, or investigation can be initiated. Providers submit initial notifications through the myNDIS Commission portal.

Stage 2: Full Written Report (within five business days)

Following the initial notification, providers must lodge a comprehensive written report within five business days. This report must include:

1. A detailed description of the injury, including location on the body, estimated age of the wound or marking, and how and by whom it was discovered
2. The names and roles of all workers who had contact with the participant in the relevant period
3. A chronological account of the participant's supports and activities in the period prior to discovery
4. Any medical assessment or treatment obtained, including the name of the treating practitioner and findings
5. Steps taken by the provider to ensure the participant's immediate safety and wellbeing
6. Actions taken to preserve evidence and cooperate with any required investigation
7. An initial assessment of whether the incident may involve a criminal act, requiring police notification

Where the investigation is ongoing at the five-business-day point, providers are still required to lodge what they know, and should indicate that the report is preliminary with a further update to follow.

Ongoing Reporting Obligations

Providers must continue to update the Commission as new information comes to light — for example, if a medical opinion is obtained that suggests a cause inconsistent with a known fall, or if a worker makes disclosures during an internal investigation. There is no single closing date for an incident file until the Commission is satisfied the matter has been appropriately managed.

What the NDIS Commission Assesses

When reviewing an unexplained injury notification, the Commission considers:

• Whether the initial notification was lodged within the required timeframe
• Whether the provider's incident management system identified the injury as a reportable incident — or whether it was under-classified
• Whether the provider has a compliant incident management policy and procedure as required by the NDIS Practice Standards
• Whether appropriate clinical or medical assessment was sought promptly
• Whether workers involved in the participant's care have current training in abuse and neglect identification, mandatory reporting (where applicable by state or territory law), and the provider's incident escalation procedures
• Whether restrictive practices were in place and whether injury may be connected to those practices

Consequences of Late or Missing Notification

Failing to notify the NDIS Commission within the required timeframes is a direct breach of the NDIS (Incident Management and Reportable Incidents) Rules 2018 and can constitute a breach of the NDIS Code of Conduct. Consequences include:

• Compliance notice — formal direction from the Commission requiring immediate remediation
• Enforceable undertaking — legally binding agreement to implement systemic changes
• Banning order — applied to individual workers where personal culpability is identified
• Civil penalty proceedings — the Commission may seek financial penalties through the Federal Court
• Registration suspension or cancellation — the most serious outcome, which can result in providers ceasing to operate
• Referral to police or state/territory child or adult safeguarding authorities — where the injury may constitute abuse or neglect

The 2026 mandatory registration changes extend these obligations to a broader cohort of providers, including those previously operating as unregistered sole traders delivering certain high-risk supports. SIL is among the support types subject to mandatory registration under the strengthened framework.

Practical Steps for SIL Providers

To remain compliant, SIL providers should embed the following into their incident management systems:

1. Train all workers to identify and immediately escalate any unexplained injury — on the same shift it is discovered, not the following day
2. Designate a responsible officer (often the Incident Coordinator or Compliance Lead) who is the single point of contact for Commission notifications
3. Document the discovery precisely — time, who found it, participant's account if given, photographs with consent where clinically appropriate
4. Seek medical assessment promptly and retain written records from the treating practitioner
5. Log the incident in your incident register the same day, flagging it for reportable incident classification review
6. Lodge the initial Commission notification within 24 hours via the myNDIS Commission portal — do not wait for the investigation to conclude
7. Prepare the full written report and lodge it before the five-business-day deadline, even if preliminary
8. Conduct a post-incident review and document corrective actions in writing

Intersection with Restrictive Practices

Where a participant is subject to behaviour support plans that include regulated restrictive practices, any unexplained injury must also be reviewed for a possible connection to those practices. Providers are required to notify the Commission separately where restrictive practices may have caused harm. Behaviour support practitioners involved in the participant's plan should be notified immediately as part of the internal response.

Strengthened Framework: What Changes in 2026

The strengthened NDIS Practice Standards and Quality Indicators being introduced progressively through 2025 and 2026 increase the specificity of what providers must demonstrate at audit in relation to incident management. Auditors will look for evidence that incident classification tools are calibrated to correctly identify unexplained injuries as reportable, that staff training records are current, and that post-incident reviews lead to documented systemic improvements rather than one-off responses.

Providers building their compliance documentation for the 2026 registration cycle should ensure their incident management policy, reportable incidents procedure, and associated worker training modules are aligned with the latest Commission guidelines. The ndiscompliant.com.au 74-document audit-ready SIL compliance kit includes a compliant incident management policy, reportable incidents register, and worker training checklists aligned to the strengthened framework — a practical starting point for providers updating their systems ahead of the 2026 changes.