Is a Medication Error Reportable to the NDIS Commission?

Who Needs to Know This

If you are a registered NDIS provider delivering Supported Independent Living (SIL), Specialist Disability Accommodation, or any other support that involves the administration of medication, medication errors are a direct compliance responsibility. Under the NDIS Quality and Safeguards Commission framework, your obligations cover not just what happens when an error occurs, but the systems you must have in place to prevent errors and respond appropriately.

With the strengthened NDIS Practice Standards progressively taking effect, scrutiny of medication management in SIL settings has intensified. Approved quality auditors are checking incident management systems, staff competency, and the completeness of reporting records. Getting this wrong carries real consequences — including compliance notices, registration conditions, or referral to the NDIS Commissioner for enforcement action.

What the Rules Say About Reportable Incidents

The NDIS (Incident Management and Reportable Incidents) Rules 2018 set out two categories of reportable incidents. The first category covers incidents that must be reported regardless of outcome. The second covers a broader set of incidents where the impact on the participant triggers the reporting obligation.

Medication errors fall into scope primarily because of the potential for harm. The Rules identify the following as a reportable incident:

• The use of a restrictive practice that is not in accordance with an authorisation
• The unexpected death of an NDIS participant
• Serious injury of an NDIS participant
• Abuse or neglect of an NDIS participant
• Unlawful sexual or physical contact with, or assault of, an NDIS participant
• Any other incident prescribed by the Rules

A medication error that causes serious injury — or that could reasonably have caused serious injury — sits squarely within this framework. Critically, you do not need to wait until harm actually occurs. Where the error had the potential to cause serious harm, it should be assessed as a reportable incident.

Even where a medication error does not meet the threshold for an NDIS Commission reportable incident, it must still be captured in your internal incident management system. The NDIS Practice Standards (Quality Indicator 2.7 — Incident Management) require registered providers to have a documented system that records, investigates, and acts on all incidents, including near misses.

Defining a Medication Error in This Context

A medication error can take many forms in a SIL setting. Common examples include:

• Administering the wrong medication to a participant
• Administering the correct medication at the wrong dose
• Missing a scheduled dose entirely
• Administering medication at the wrong time or via the wrong route
• Failing to document administration correctly, leading to double dosing or missed doses
• Using a medication that has expired or been stored incorrectly
• Administering a medication that a participant has a documented allergy or contraindication to

Each of these errors carries different risk profiles. A missed vitamin supplement is categorically different from a missed blood thinner or an incorrect insulin dose. Your incident management system must include a documented process for assessing the severity of each error, including escalation to a medical professional where required.

Timeframes: When Must You Report?

The NDIS Commission requires registered providers to notify the Commission of reportable incidents as soon as practicable, and within specific timeframes that depend on the nature and severity of the incident.

For the most serious incidents — including unexpected deaths and serious injuries — providers must notify the Commission within 24 hours of becoming aware of the incident. A written report with further detail must follow within a further period specified by the Rules. For other reportable incidents, providers must notify within five days.

This means your internal escalation process must be fast. If a support worker identifies a medication error during a shift handover at 10pm, your on-call management structure must be able to assess severity and initiate notification before the relevant window closes. A slow internal chain of command is a compliance risk in itself.

Step-by-Step: What Providers Must Do When a Medication Error Occurs

1. Ensure immediate safety. The first priority is the participant's health and wellbeing. If there is any risk of harm, call emergency services or arrange for urgent medical review before anything else.
2. Document the error in full. Record what happened, when it happened, who was involved, what medication was affected, and the participant's condition immediately following the error. Use your incident register.
3. Notify your supervisor or on-call manager. Your incident management policy should specify who must be told, and when. This should happen within hours, not the next business day.
4. Assess severity against your reportable incident threshold. Was there actual harm? Could there have been serious harm? Apply your documented criteria. If in doubt, treat it as potentially reportable and seek advice.
5. Notify the NDIS Commission if the threshold is met. Use the NDIS Commission portal to lodge the initial notification within the required timeframe. Include the nature of the incident, the participant affected (without identifying details in the initial report if required), and the immediate actions taken.
6. Notify the participant and/or their support network. Under the NDIS Practice Standards and the Code of Conduct, providers must be open and transparent with participants. Inform the participant — and where appropriate, their nominee, guardian, or family — of what occurred and what you are doing about it.
7. Investigate the root cause. Once immediate risks are managed, conduct a root cause analysis. Was this a one-off human error or a system failure? Were competency requirements met? Were medication protocols up to date?
8. Submit the full written report to the Commission within the required timeframe following the initial notification.
9. Implement corrective action and document the outcome. Your incident register must record what was done in response, including any changes to practice, training, or documentation systems. Close the loop in writing.

What the Strengthened Practice Standards Require

The strengthened NDIS Practice Standards, which the Commission has been progressively rolling out, place heightened obligations on SIL providers in particular. Medication management is addressed directly in the High Intensity Daily Personal Activities support category and in the overall framework for safe service delivery.

Key requirements that auditors check include:

• Written medication management policies and procedures that are current and accessible to staff
• Evidence that staff administering or assisting with medication hold the required competencies — including relevant training and, where required, specific qualifications
• Medication administration records that are accurate, complete, and consistently maintained
• A documented process for reviewing and updating medication plans when a participant's needs change
• Evidence that incidents involving medication are recorded, investigated, and acted on — with the participant informed

Auditors will also look at whether your reporting culture supports disclosure. A provider that has no medication-related incidents in its register over an extended period of high-intensity service delivery is as likely to attract scrutiny as one with frequent incidents — because a nil record can indicate under-reporting rather than excellent practice.

Consequences of Not Reporting

Failing to report a reportable incident to the NDIS Commission is a breach of your conditions of registration. The Commission has the power to investigate, issue compliance notices, impose conditions on your registration, suspend registration, or refer matters to the NDIS Commissioner. In serious cases, failures to report — particularly where they are seen as deliberate or systematic — can result in deregistration.

Beyond regulatory consequences, failure to report or properly manage medication incidents exposes providers to complaints, coronial inquiries where deaths are involved, and civil liability. The participant's rights to transparency and redress are embedded in both the Practice Standards and the NDIS Code of Conduct.

Practical Tip: Audit Your Systems Now

Do not wait for an incident to discover gaps in your medication management system. A proactive internal audit against the Practice Standards indicators — covering your policies, staff training records, medication administration records, and incident register — will identify vulnerabilities before an auditor does.

Providers building or upgrading their SIL compliance documentation may find it useful that ndiscompliant.com.au offers a 136-document SIL compliance kit, covering medication management, incident reporting, and the full range of Practice Standards requirements — designed specifically for the 2026 strengthened registration cycle.

Start with your incident management policy: does it define a medication error, specify escalation timeframes, and reference the NDIS Commission notification threshold explicitly? If not, that is your first corrective action.