How to write an NDIS WHS policy (2026 template + example)

Why every registered NDIS provider needs a WHS policy

A Work Health and Safety (WHS) policy is not optional for registered NDIS providers. The NDIS Practice Standards — which all registered providers must meet — require organisations to maintain a safe environment for both workers and participants. Under the strengthened 2026 framework, which brings tighter obligations for providers delivering higher-risk supports including Supported Independent Living (SIL), quality auditors pay particular attention to whether safety systems are documented, implemented, and actively maintained.

Beyond NDIS Commission requirements, registered providers must also comply with their state or territory WHS legislation (for example, the Work Health and Safety Act 2011 at the Commonwealth level, or equivalent state laws). Your NDIS WHS policy is the document that bridges those obligations and demonstrates to auditors, workers, participants, and their families that your organisation takes safety seriously.

What auditors look for in 2026

When an approved quality auditor reviews your WHS policy, they assess it against the NDIS Practice Standards — specifically the core module on Operational Management and, for SIL and other higher-risk supports, the relevant supplementary modules. Key indicators auditors check include:

• A clearly stated commitment to providing a safe workplace for workers, participants, and visitors
• Defined roles and responsibilities — who is accountable for WHS at the governance, management, and frontline levels
• A documented process for identifying, assessing, and controlling hazards and risks
• Procedures for reporting, investigating, and learning from WHS incidents
• Emergency and evacuation procedures referenced within or attached to the policy
• Evidence that workers have been consulted in developing and reviewing safety practices
• A review cycle (at minimum annually, or after any serious incident)
• Version control — date of last review, next review date, and the name of the approving officer

The strengthened NDIS Practice Standards, progressively rolled out from 2024 into 2026, place greater emphasis on continuous improvement and worker wellbeing. A policy that was adequate in earlier years may now be considered insufficient if it does not reflect current obligations or show evidence of being actively used.

Step-by-step: how to write your NDIS WHS policy

1. Start with your purpose and scope statement. Open the policy with a brief paragraph explaining why the policy exists, which legislation it aligns with (state/territory WHS Act plus the NDIS Act 2013), and which parts of your organisation it covers — including all workers, volunteers, contractors, and participants at your service locations.
2. State your WHS commitment. Write a commitment statement from the CEO or Board. This does not need to be lengthy, but it must be genuine and signed. The statement should confirm your organisation's duty to eliminate or minimise risks so far as is reasonably practicable.
3. Assign roles and responsibilities. Use a table or bullet list to specify who is responsible for what. At minimum, cover: the governing body (accountability), the CEO or Operations Manager (implementation), Team Leaders or House Supervisors (day-to-day hazard management), and individual workers (duty to take reasonable care of themselves and others).
4. Describe your hazard and risk management process. Explain how hazards are identified (regular walkthroughs, participant behaviour support assessments, worker reporting), how they are assessed for likelihood and consequence, and how controls are selected and implemented using the hierarchy of controls (eliminate, substitute, isolate, engineer, administer, PPE).
5. Include incident reporting and investigation procedures. Define what constitutes a WHS incident, how workers report it (form, verbal escalation pathway), who investigates, and how findings feed into corrective actions. Cross-reference your NDIS incident management policy, because many WHS incidents are also reportable to the NDIS Commission as incidents under the NDIS (Incident Management and Reportable Incidents) Rules 2018.
6. Address worker health and wellbeing. The 2026 strengthened standards explicitly call out worker wellbeing as a practice standard element. Your policy should note how you support workers dealing with psychological risks, fatigue, and challenging support environments — this is particularly relevant in SIL settings where workers may deal with complex behaviour support needs.
7. Reference emergency procedures. You do not need to reproduce your full emergency evacuation plan in the WHS policy, but you must reference it and state where it is located.
8. State your consultation commitment. WHS legislation and the NDIS Practice Standards both require meaningful worker consultation on safety matters. Briefly describe how you consult with workers — for example, through regular team meetings, a WHS representative, or a safety committee.
9. Set a review schedule. State that the policy will be reviewed at least annually and after any serious WHS incident or significant operational change. Include the current version number, date approved, and next review date in a footer or version control table.

Example policy excerpt (filled-in template)

The following is a realistic example of how a SIL provider might write the purpose and commitment sections. Adapt it to your organisation's name, size, and specific supports.

Common mistakes to avoid

• Generic downloaded templates that are not customised. Auditors can identify a policy that has never been adapted to your service context. Fill in all placeholders, reference your actual sites and support types, and make sure the language reflects how you actually operate.
• No evidence of implementation. A policy document alone is not sufficient. You need to show training records, completed incident reports, meeting minutes referencing WHS discussions, and hazard registers to demonstrate the policy is being followed.
• Missing worker consultation evidence. Both WHS legislation and the NDIS Practice Standards require consultation. If you cannot show workers were involved in developing or reviewing the policy, this is a non-conformance.
• Outdated review dates. A WHS policy with a review date more than twelve months past raises an immediate flag with auditors. Always keep version control current.
• Failing to cross-reference NDIS incident reporting obligations. Many WHS events are also reportable NDIS incidents. Your policy should acknowledge this link and direct workers to the correct reporting pathway.

Linking your WHS policy to the broader compliance document suite

Your WHS policy sits within a larger ecosystem of required NDIS compliance documents. It should cross-reference your incident management policy, your behaviour support policy (especially relevant in SIL settings), your emergency management plan, your risk register, and your worker training and induction records. Auditors assess whether these documents form a coherent, integrated system — not whether each document exists in isolation.

If you are building or overhauling your SIL compliance document suite ahead of 2026 registration, the 136-document SIL compliance kit at ndiscompliant.com.au includes a pre-built, customisable WHS policy alongside all other core and supplementary module documents — saving significant time in the documentation phase.

Whether you use a pre-built kit or draft from scratch, the most important principle remains the same: your WHS policy must reflect what your organisation actually does, and you must be able to evidence that it is being followed every day.