How to Conduct an Investigation in the NDIS: A Practical Guide for Providers
NDIS providers regularly receive complaints and incident reports involving worker conduct.
A participant or family member may allege that a support worker failed to provide required care. A manager may discover discrepancies between rosters and progress notes. There may be concerns about medication, inappropriate interactions with a participant, falsification of records, neglect, restrictive practices or workers failing to attend scheduled shifts.
When concerns of this kind arise, providers need to decide quickly what action is required.
That can be difficult because an NDIS matter may involve several processes at the same time. There may be an obligation to protect the participant immediately, notify the NDIS Quality and Safeguards Commission, manage a complaint, preserve evidence and conduct a procedurally fair workplace investigation. These processes overlap, but they are not the same. Understanding the distinction is important to conducting an investigation properly.
Not every complaint requires a formal investigation
The first question should be:
What actually needs to be established?
Some complaints can be dealt with through clarification, service improvement or informal resolution.
Others require a formal investigation because there is a factual dispute or because the allegations, if established, could result in disciplinary or regulatory consequences.
A formal investigation will often be appropriate where allegations concern matters such as:
abuse or neglect of a participant;
inappropriate physical or sexual conduct;
serious failures to provide required supports;
dishonesty or falsification of records;
workers arriving late, leaving early or failing to attend shifts;
workers concealing another worker's conduct;
medication errors or deliberate non-compliance with medication requirements;
unauthorised restrictive practices;
misuse of participant funds or property;
serious breaches of the NDIS Code of Conduct; or
repeated conduct suggesting a wider systems or supervision problem.
The seriousness of the alleged conduct is important, but so is whether there is a genuine factual dispute that needs to be resolved.
Step 1: Address participant safety first
An investigation should never delay action required to protect a participant.
Before deciding how the investigation will proceed, the provider should consider whether immediate safeguarding measures are required.
Depending upon the circumstances, that might include changing staffing arrangements, removing a worker from contact with a participant, arranging additional support, obtaining medical assistance or preserving relevant records.
The NDIS regulatory framework places significant emphasis on safeguarding people with disability and responding promptly to concerns affecting the quality and safety of supports.
The provider should therefore separate two questions:
What needs to happen immediately to protect the participant?
and
What needs to be investigated to establish what occurred?
Those questions often require different responses.
Step 2: Decide whether the matter is an incident or reportable incident
Registered NDIS providers are required to operate an incident management system.
An incident can include an act, omission, event or circumstance connected with the provision of NDIS supports that has caused, or could have caused, harm to a person with disability.
That category is broader than a reportable incident.
Certain serious incidents must be notified to the NDIS Quality and Safeguards Commission. These include:
death of a person with disability;
serious injury;
abuse or neglect;
unlawful sexual or physical contact or assault;
sexual misconduct, including grooming; and
unauthorised use of restrictive practices.
Most reportable incidents must be notified within 24 hours of the registered provider becoming aware of the incident. An unauthorised restrictive practice that has not caused harm is generally subject to a five-business-day notification period.
Importantly, a provider does not need to wait until an allegation has been substantiated.
The reportable incident regime applies to matters that have happened or are alleged to have happened in connection with the delivery of NDIS supports.
This means that regulatory notification and investigation should often occur in parallel.
Step 3: Work out exactly what is being alleged
Many investigations become unnecessarily complicated because the allegations are too broad.
For example:
“Workers have been neglecting participants.”
That may describe the concern, but it is not a workable allegation for a disciplinary investigation.
The investigator needs to identify the particular conduct said to have occurred.
For example:
It is alleged that on 4 August 2026, while rostered to provide support to Participant A between 2.00 pm and 10.00 pm, you left the participant's residence at approximately 8.45 pm and did not return before the conclusion of your shift.
A separate allegation might then address the records:
It is alleged that you recorded that you worked until 10.00 pm despite having left the participant's residence at approximately 8.45 pm.
If there is an allegation that workers were covering for one another, that should also be dealt with separately.
Breaking a complaint into clear allegations assists the respondent to understand the case against them and allows the investigator to make findings about each particular issue.
Step 4: Identify the applicable standards before interviewing anyone
An investigator needs to understand what the worker was actually required to do.
Relevant material may include:
the NDIS Code of Conduct;
applicable NDIS Practice Standards;
Supported Independent Living Practice Standards, where relevant;
the provider's Code of Conduct;
participant support plans;
service agreements;
position descriptions;
medication procedures;
incident management procedures;
complaints procedures;
rostering and attendance policies;
behaviour support plans;
restrictive practice requirements; and
other operational policies relevant to the particular support.
This is particularly important because workplace misconduct in an NDIS environment can have both employment and regulatory consequences.
The NDIS Code of Conduct requires NDIS providers and workers, among other things, to provide supports safely and competently, act with integrity, honesty and transparency, promptly raise and act on quality and safety concerns and take reasonable steps to prevent and respond to violence, exploitation, neglect and abuse.
Step 5: Preserve and compare the records
NDIS investigations can be highly document-dependent.
Before interviewing witnesses, providers should identify and preserve potentially relevant records.
Depending upon the allegations, this might include:
rosters;
timesheets;
electronic clock-in and clock-out records;
progress notes and support logs;
medication administration records;
handover records;
incident reports;
text messages;
emails;
electronic system audit logs;
vehicle or GPS records where lawfully available;
access-control records;
invoices;
NDIS claims records; and
relevant CCTV where it exists and can lawfully be accessed.
The important step is often comparison.
For example, an investigation into workers leaving early may require comparison between:
the rostered hours → actual attendance → progress notes → timesheet → invoice → NDIS claim.
A discrepancy between one record and another does not automatically prove misconduct, but it identifies an issue requiring explanation.
Step 6: Keep the participant involved
An NDIS investigation should not become an employment process in which the participant effectively disappears.
The participant may be the complainant, the principal witness or the person most affected by the alleged conduct.
Registered providers' complaints systems are required to involve the person with disability appropriately in the resolution of complaints and keep them appropriately informed about progress and decisions.
Where an interview is required, the investigator should consider what communication adjustments the participant may need.
This may include:
simpler questions;
additional time;
breaks;
communication aids;
an interpreter;
an advocate or support person; or
another method of communication appropriate to the participant.
A participant's disability should not itself be treated as a reason to regard their evidence as unreliable.
Their evidence should be assessed in the same disciplined way as other evidence, having regard to matters such as opportunity to observe, consistency, contemporaneous records and corroborating evidence.
Step 7: Interview witnesses before the respondent where appropriate
There is no universal interview order, but in many workplace investigations it will make sense to obtain the complainant's account and relevant witness evidence before interviewing the respondent.
This allows the investigator to put sufficiently particularised allegations and relevant contradictory evidence to the respondent.
Interviews should generally begin with open questions before moving to more specific questions.
For example:
“Tell me what happened during the evening shift on 4 August.”
can provide much more reliable evidence than:
“John left at 8.45 pm, didn't he?”
The investigator should test important evidence rather than simply record competing versions.
Step 8: Give the worker procedural fairness
Procedural fairness is not simply good workplace investigation practice in the NDIS environment.
It is expressly incorporated into the NDIS complaints and incident management framework.
The NDIS (Complaints Management and Resolution) Rules 2018 require registered providers' complaint systems to afford procedural fairness.
The NDIS Procedural Fairness Guidelines specifically recognise that where a complaint alleges inappropriate behaviour by an identifiable worker, procedural fairness must be afforded to that worker.
The Incident Management Rules also require procedural fairness when registered providers deal with incidents.
In practical terms, a fair investigation should ordinarily ensure that the respondent:
understands the substance of the allegations;
is given sufficient particulars to respond meaningfully;
has an opportunity to provide their account;
can respond to significant adverse evidence where fairness requires it;
has relevant evidence genuinely considered; and
has the matter determined by an investigator who has not prejudged the outcome.
A provider should also consider whether the person investigating the matter has any actual or perceived conflict of interest.
Step 9: Separate fact-finding from disciplinary decisions
The investigator's role should be clear from the outset.
In many investigations, the investigator's task is to determine:
What happened?
and, where required:
Is the allegation substantiated on the balance of probabilities?
The investigator does not necessarily determine what disciplinary action should follow.
That decision may properly sit with a manager, executive or other authorised decision-maker.
Separating those roles can reduce the risk that the investigation becomes outcome-driven.
Step 10: Consider whether the problem is bigger than one worker
NDIS providers should be particularly cautious about treating repeated worker conduct solely as an individual disciplinary issue.
Suppose an investigation establishes that several support workers regularly left a SIL residence before the end of their shifts.
There may be individual misconduct.
There may also be a governance problem.
Questions might include:
How long had the practice been occurring?
Did supervisors know?
Were rosters being checked?
Were participant records reviewed?
Did managers reconcile timesheets against service delivery?
Had participants or family members previously raised concerns?
Did workers believe the practice was informally permitted?
Were staffing levels adequate?
Were workers properly supervised?
This has become particularly significant in Supported Independent Living.
The specific SIL Practice Standards now apply to registered SIL providers and include requirements concerning safeguarding and practice governance. They contemplate active supervision and observation of workers, participant feedback and monitoring records and incidents for patterns that may indicate potential abuse or neglect.
An investigation may therefore identify both worker misconduct and shortcomings in the provider's systems.
Step 11: Consider whether NDIS funding is affected
Some investigations also raise questions about whether services that were recorded or claimed were actually delivered.
For example, if a support worker was rostered for eight hours but left after six, the investigator may need to establish:
what support was required;
what support was actually delivered;
what the worker recorded;
what the provider invoiced; and
what was ultimately claimed from the participant's NDIS funding.
Providers should avoid immediately describing discrepancies as “fraud”.
There may be an innocent mistake, administrative error, poor practice, deliberate employee misconduct or potentially dishonest claiming.
The investigation should establish the evidence first.
What should an investigation report contain?
A useful investigation report will generally include:
the background to the complaint;
the investigator's Terms of Reference;
the allegations investigated;
applicable policies, standards or conduct requirements;
witnesses interviewed;
documentary and other evidence considered;
each person's relevant evidence;
contradictory or disputed evidence;
analysis of the evidence;
findings on each allegation;
reasons for those findings; and
any systemic issues identified within the scope of the investigation.
Where the investigator identifies an immediate safeguarding or regulatory issue during the investigation, that should be raised with the provider rather than simply left until the final report.
When should a provider use an external investigator?
There is no requirement for every NDIS investigation to be conducted externally.
Many routine matters can appropriately be investigated internally.
An independent investigator should be considered where:
the allegations are serious;
senior staff or managers are implicated;
there are allegations of collusion;
the provider's own supervision or governance is under scrutiny;
abuse or neglect is alleged;
there may be criminal conduct;
multiple participants or workers are involved;
there is significant conflicting evidence;
credibility findings will be important;
the matter has already attracted regulatory attention; or
independence may later be questioned.
An external investigation can also be useful where the provider simply does not have employees with the time, experience or independence to conduct a procedurally fair investigation.
Five questions to ask when a serious complaint arrives
For providers who are uncertain where to begin, these five questions provide a useful starting point:
1. Is anyone currently at risk?
Take immediate safeguarding action where required.
2. Is this an incident or potentially a reportable incident?
Do not delay regulatory notification while waiting for an investigation outcome.
3. What exactly is alleged?
Turn broad concerns into clear factual issues capable of investigation.
4. What evidence needs to be secured now?
Records can disappear, CCTV can be overwritten and memories deteriorate.
5. Who should investigate it?
Consider competence, independence, complexity and the seriousness of the potential consequences.
Final thoughts
Investigating a complaint in an NDIS environment requires more than interviewing two employees and deciding whose account is preferred.
The investigator may need to consider the participant's evidence, safeguarding obligations, regulatory reporting requirements, NDIS conduct standards, worker records, service delivery records and potentially financial claims.
At the same time, the worker who is the subject of serious allegations is entitled to a fair investigation.
The most effective investigations therefore do three things well:
They protect the participant, establish the facts and provide procedural fairness to everyone involved.
A disciplined investigation also allows the provider to identify whether a complaint concerns the actions of an individual worker or reveals a broader problem with supervision, governance or service delivery.
For NDIS providers, getting that process right is an important part of both safeguarding participants and meeting their regulatory responsibilities.