General
How the NDIS Commission Protects Participants: A Closer Look
The NDIS Commission sets the rules providers must follow to keep participants safe. Here is what those protections actually mean in practice.
31 May 2026 - 9 min read - by OpenWay editorial
The NDIS Quality and Safeguards Commission exists for one reason: to make sure that people with disability who use NDIS-funded supports are treated with dignity, safety, and respect. If you have ever wondered what sits behind the registration system, the complaints process, or the worker screening checks you hear about, this article unpacks all of it in plain language. Understanding how the Commission works helps you ask better questions, recognise warning signs, and feel more confident when choosing a provider.
Before diving in, it helps to know that finding and comparing providers is a separate task from the Commission's oversight role. Marketplaces like OpenWay exist to help participants, families, and support coordinators browse NDIS-registered providers in your area and shortlist options, while the Commission works in the background to set and enforce the standards those providers must meet.
What is the NDIS Commission and what does it actually do?
The NDIS Quality and Safeguards Commission is an independent government body. It is not the NDIA, which manages your plan and funding. It is not the NDIS Commission's job to approve your plan or pay providers. Its job is to regulate the quality and safety of NDIS supports and services across Australia.
In practical terms, the Commission:
- Registers providers and sets the conditions they must meet to stay registered
- Develops and enforces the NDIS Practice Standards
- Manages the Code of Conduct that applies to all NDIS providers and workers, registered or not
- Operates the complaints and incident management system
- Oversees the NDIS Worker Screening Check
- Takes action against providers or workers who breach the rules
One thing worth understanding early: the Commission's reach extends beyond registered providers. The Code of Conduct applies to every provider and worker delivering NDIS supports, even those who are not registered with the Commission. That means a participant using an unregistered provider still has recourse if something goes wrong.
The NDIS Practice Standards: what providers must actually demonstrate
When a provider applies for registration, they are assessed against the NDIS Practice Standards. These are not a checklist of good intentions. They are a structured framework covering everything from rights and responsibilities through to the safe delivery of high-intensity supports.
The core module
Every registered provider must meet the core module of the Practice Standards. It covers areas including:
- Rights and responsibilities - providers must actively support participants to understand and exercise their rights, including the right to make decisions about their own life
- Governance and operational management - the organisation must be run in a way that is transparent, accountable, and financially sound
- The provision of supports - services must be delivered in a way that is safe, responsive, and consistent with each participant's goals
- Support planning - plans must reflect what the participant actually wants, not what is easiest to deliver
- Feedback and complaints - providers must have a working complaints system and must not discourage participants from using it
Supplementary modules
Providers delivering more complex or specialised supports must also meet supplementary modules. A provider delivering specialist disability accommodation, for example, faces additional requirements compared to a provider delivering community access. This layered approach means the scrutiny is proportional to the risk involved in the service.
Understanding this structure matters when you are comparing providers. A provider who has been assessed against a supplementary module has gone through a more rigorous process than one who only holds core module registration. That is worth knowing before you shortlist anyone.
The Code of Conduct: a baseline for every worker
The NDIS Code of Conduct is one of the most important, and least understood, parts of the safeguarding system. It applies to every NDIS provider and every worker delivering NDIS supports, regardless of whether the provider is registered.
The Code requires providers and workers to:
- Act with respect for individual rights to freedom of expression, self-determination, and decision-making
- Respect the privacy of participants
- Provide supports and services in a safe and competent manner
- Act with integrity, honesty, and transparency
- Promptly take action to raise and act on concerns about matters that might affect the quality and safety of supports
- Take all reasonable steps to prevent and respond to all forms of violence, exploitation, neglect, and abuse
- Take all reasonable steps to prevent and respond to sexual misconduct
The Code is not aspirational language. Breaches can result in banning orders, conditions on registration, or referral to other authorities. Workers who seriously breach the Code can be banned from working in the NDIS sector entirely.
For participants and families, the Code gives you something concrete to point to if a provider's behaviour feels wrong. You do not need to prove a legal case yourself. You can raise a concern with the Commission and let the regulatory system do its work.
Incident management and the obligation to report
Registered providers are required to report certain incidents to the NDIS Commission. This is not optional. The reportable incidents framework covers serious events including:
- The death of a participant
- Serious injury of a participant
- Abuse or neglect of a participant
- Unlawful sexual or physical contact or assault
- Unauthorised use of restrictive practices
The purpose of mandatory reporting is not to punish providers for things that go wrong. It is to create a system-wide picture of where harm is occurring, so patterns can be identified and addressed. A provider who handles an incident well, reports it promptly, and takes corrective action is demonstrating exactly the kind of accountability the system is designed to encourage.
From a participant's perspective, it is worth asking any prospective provider how they handle incidents and complaints. A provider who can clearly explain their process is a provider who has thought seriously about it.
Worker screening: what it means and what it does not cover
The NDIS Worker Screening Check is a national check that assesses whether a person poses an unacceptable risk to people with disability. It is mandatory for workers in risk-assessed roles, which includes most direct support roles.
A cleared worker has been assessed against criminal history, misconduct findings, and other relevant information. The check is more thorough than a standard police check because it draws on a broader range of information sources.
However, it is important to be clear about what a clearance does not mean. It does not mean a worker has been assessed for their skills, communication style, cultural competency, or suitability for your specific situation. A cleared worker may still be a poor fit for you personally. The screening check is a floor, not a ceiling.
This is one reason why understanding how OpenWay approaches trust and safety matters when you are researching providers. Marketplace tools can help you look at factors beyond registration status, including the information providers choose to share about their workforce and their approach to service delivery.
The complaints system: using it without fear
The NDIS Commission operates a complaints system that is free to use and accessible to participants, families, carers, advocates, and others. You do not need a lawyer, a formal advocate, or a support coordinator to make a complaint. You can contact the Commission directly.
Complaints can be made about:
- The quality or safety of NDIS supports
- How a provider or worker has treated you
- A provider's failure to follow the NDIS Code of Conduct
- Concerns about restrictive practices
The Commission has powers to investigate, conciliate, and take regulatory action. In serious cases, it can impose conditions on a provider's registration, suspend registration, or issue banning orders against individual workers.
One practical point: you do not have to wait until something serious has happened to make a complaint. If a provider is behaving in a way that makes you uncomfortable, that is worth raising. The Commission can also refer you to other bodies if your concern falls outside its jurisdiction, such as state-based ombudsman offices or police.
Support coordinators play an important role here too. A good support coordinator will help participants understand their rights, document concerns, and navigate the complaints process if needed. If you are a coordinator looking for tools to help you do this work well, the support coordinator workspace on OpenWay is designed with exactly that kind of practical support in mind.
What the Commission cannot do
It is worth being honest about the limits of the regulatory system, because unrealistic expectations can lead to frustration.
The Commission is not a real-time monitoring service. It cannot watch every interaction between a participant and a worker. It relies on reports, complaints, and audits to identify problems. That means some issues go undetected until someone speaks up.
The Commission also cannot resolve every dispute quickly. Investigations take time, particularly complex ones. If you are in an urgent situation involving immediate safety risk, contact emergency services first. The Commission is a regulatory body, not a crisis response service.
Finally, the Commission does not resolve commercial disputes about pricing, hours, or service agreements. Those matters are governed by the terms of your service agreement and, in some cases, by consumer law. If you have a dispute about what a provider has charged you, you may need to seek advice from a different avenue.
Understanding these limits is not a reason to feel less safe. It is a reason to be proactive: ask questions before you sign a service agreement, keep records, and know how to raise a concern if you need to.
Frequently asked
Does the NDIS Code of Conduct apply to unregistered providers?
Yes. The Code of Conduct applies to all NDIS providers and workers, whether or not they are registered with the NDIS Commission. If you use a self-managed or plan-managed funding arrangement and engage an unregistered provider, that provider and their workers are still bound by the Code. You can make a complaint to the Commission about an unregistered provider's conduct.
What is the difference between the NDIS Commission and the NDIA?
The NDIA (National Disability Insurance Agency) manages the NDIS scheme, approves plans, and handles funding. The NDIS Commission is a separate body that regulates the quality and safety of supports. They have different roles and different powers. If you have a question about your plan or funding, that is an NDIA matter. If you have a concern about how a provider or worker has treated you, that is an NDIS Commission matter.
How do I know if a provider is registered with the NDIS Commission?
You can search the NDIS Commission's public register of providers. Registered providers will also typically display their registration status and registration groups on their profile. On OpenWay, providers can include this information in their listing, which makes it easier to filter and compare options when you are shortlisting. Browse providers and check their details to get started.
How OpenWay can help
Knowing your rights and understanding the regulatory system is an important first step. The next step is finding providers who meet your needs and align with your values. That is where OpenWay comes in.
OpenWay is a free marketplace for NDIS participants, families, and support coordinators. You can explore options for participants and families on the OpenWay platform to browse provider profiles, compare services, and send enquiries, all in one place. There is no cost to participants or families to use the platform.
If you are a support coordinator managing multiple participants, OpenWay gives you tools to shortlist providers, share options with the people you support, and keep track of enquiries. Visit the support coordinator section of OpenWay to see how it works.
OpenWay does not deliver supports, does not handle NDIS plan funds, and is not part of the NDIS or NDIA. It is simply a practical tool to help you find and compare providers with more confidence.
OpenWay is not part of the NDIS, NDIA or NDIS Commission. Final scope, pricing, travel, cancellation rules and non-face-to-face charges must be confirmed in a written service agreement between the participant (or their authorised support person) and the provider.
Keep reading
Choice and Control in the NDIS: What Participants Need to Know
Choice and control sits at the heart of the NDIS. This guide explains what the principle means, how it works day to day, and what you can do to make the most of it.
NDIS pricing transparency: what it really means for participants
NDIS pricing rules exist to protect participants, but they can still feel opaque. Here is what transparency actually means in practice and how to use it to your advantage.
Managing waitlists with empathy: a guide for NDIS providers
Waitlists are a reality for many NDIS providers. This guide covers fair processes, compassionate communication, and practical tools to manage demand without burning out your team.
This article was written by OpenWay editorial with AI assistance. We review for accuracy + tone but the framing rules of the NDIS apply: nothing here is medical, legal or financial advice. Always check the NDIS Commission and your plan for the latest rules.