Get the kit — A$297

Incidents & safeguarding

Is a Restrictive Practice Reportable to the NDIS Commission?

Yes. NDIS registered providers must report any use of a regulated restrictive practice to the NDIS Commission as a reportable incident. This includes unauthorised use — that is, any restrictive practice applied without the required state or territory authorisation. Reports are made through the NDIS Commission Portal, and strict timeframes apply depending on the severity of the incident.

Who Needs to Understand This Requirement

If your organisation is a registered NDIS provider delivering Supported Independent Living (SIL) or any other support that involves direct personal care, you are bound by the NDIS (Restrictive Practices and Behaviour Support) Rules 2018 and the broader NDIS Practice Standards. These rules create mandatory reporting obligations every time a regulated restrictive practice is used — or misused — with a participant.

Compliance managers, behaviour support leads, team leaders, and frontline staff in SIL settings all play a role. Understanding the reporting chain is not optional: failure to meet these obligations can result in compliance action, suspension, or cancellation of registration.

What Counts as a Regulated Restrictive Practice

The NDIS Commission defines five categories of regulated restrictive practices:

  • Seclusion — confining a person alone in a space they cannot freely leave
  • Chemical restraint — using medication to control behaviour, not to treat a diagnosed condition
  • Mechanical restraint — using devices or equipment to restrict movement
  • Physical restraint — using body contact to restrict free movement
  • Environmental restraint — restricting access to parts of an environment or activities

If any of these are used in the delivery of NDIS supports, the incident must be reported to the NDIS Commission. This applies regardless of whether the practice was planned or unplanned, authorised or unauthorised.

Why Reporting Is Mandatory

Restrictive practices are, by their nature, a limitation on a participant's freedom. The NDIS Practice Standards treat their use as a serious human rights matter. The NDIS Commission's oversight role exists to:

  • Monitor trends across the sector and identify providers who may be over-relying on restrictive practices
  • Ensure that only practices that have gone through the correct state or territory authorisation process are used
  • Enforce the expectation that all use is transitional — working toward reduction and elimination
  • Protect participants from harm through independent oversight

The reporting obligation is not a bureaucratic formality. It is a safeguard that connects the Commission's regulatory function to what is actually happening on the floor of your SIL service.

The Two Reporting Streams You Must Know

1. Authorised Restrictive Practices

Even when a restrictive practice has been properly authorised under the relevant state or territory process — and is described in a behaviour support plan prepared by a registered behaviour support practitioner — providers must still report each use to the NDIS Commission. This reporting happens through the NDIS Commission Portal and must include details about the nature of the practice, the duration, and the participant involved.

2. Unauthorised Restrictive Practices

An unauthorised restrictive practice is one that is used without the required state or territory authorisation, or one that is used outside the scope of what has been authorised. This is a reportable incident in a more serious sense: it triggers the incident reporting framework under the NDIS (Incident Management and Reportable Incidents) Rules 2018.

Unauthorised use is treated as a reportable incident because it represents a potential violation of a participant's rights. Providers must report it using the incident notification pathway — not simply the restrictive practices data collection pathway.

Timeframes: What the Rules Require

The NDIS incident reporting rules establish different notification timeframes depending on the nature and severity of the incident:

Type of Incident Initial Notification Full Report
Unauthorised restrictive practice (serious — e.g. injury resulted) As soon as practicable, within 24 hours Within 5 days
Unauthorised restrictive practice (no immediate harm) Within 5 days Within 5 days
Authorised restrictive practice (routine reporting) Monthly data submission via portal Monthly

These timeframes are set out in the NDIS Rules and must be embedded in your incident management policy. Staff should know which pathway applies and be able to initiate the report without waiting for management approval — delays are a common compliance failure.

What the Report Must Contain

When lodging an incident report involving an unauthorised restrictive practice, the submission to the NDIS Commission must include:

  1. The name and NDIS number of the participant
  2. The date, time, and location of the incident
  3. A description of the restrictive practice used (type, method, duration)
  4. The circumstances that led to it being used
  5. The immediate impact on the participant
  6. Actions taken in response (including any medical attention provided)
  7. Whether a behaviour support plan was in place, and if so, whether this use was within scope
  8. The name of the staff member(s) involved

For authorised practice monthly reporting, the portal prompts specific data fields. Ensure whoever completes the monthly submission has accurate records from the floor — not estimates.

Consequences of Not Reporting

The NDIS Commission takes unreported restrictive practice incidents seriously. Consequences of non-compliance can include:

  • Compliance notices and directions requiring remediation
  • Conditions imposed on your registration
  • Banning orders against specific workers
  • In serious cases, suspension or cancellation of NDIS registration

There is also a reputational dimension. When auditors review your incident register and behaviour support records, unexplained gaps — where practices were clearly used but no report was filed — are treated as significant non-conformances against the Quality Indicators in the NDIS Practice Standards.

How This Connects to Your Behaviour Support Obligations

Reporting does not sit in isolation. It is one strand of a broader set of behaviour support obligations that SIL providers carry:

  • Every participant for whom a restrictive practice is used must have a behaviour support plan in place, developed by a registered behaviour support practitioner
  • The plan must be reviewed regularly and must include strategies directed at reducing and eliminating the restrictive practice over time
  • Staff must be trained in the plan's contents and the provider's behaviour support policy before they can implement any authorised practice
  • The provider must have an internal incident management system that captures restrictive practice use and feeds into monthly reporting

If your SIL service does not yet have all of these elements documented and operational, the reporting obligation will be very difficult to meet consistently. The document trail — behaviour support plans, authorisation records, staff training logs, incident reports, and monthly portal submissions — is what auditors check.

Practical Steps for SIL Providers

  1. Map every regulated restrictive practice currently in use across your SIL service and confirm each has valid state or territory authorisation and a current behaviour support plan.
  2. Assign clear reporting ownership — one nominated person per service site is responsible for lodging portal submissions and incident notifications within timeframes.
  3. Build a simple decision tree for staff so that anyone witnessing a restrictive practice knows immediately: Was it authorised? Did anything go wrong? Who do I call?
  4. Audit your incident register monthly against your restrictive practice records to identify any gaps before the Commission does.
  5. Train all new starters on your behaviour support policy and the reporting pathway as part of induction — not as a once-off, but with a documented competency check.
  6. Review and update your behaviour support plans at least annually, or whenever there is a significant change in a participant's support needs or a critical incident.

Providers building out their SIL compliance documentation from scratch — or strengthening it ahead of the 2026 registration changes — may find it useful to know that ndiscompliant.com.au offers a 136-document SIL compliance kit, which includes a restrictive practice policy, incident report templates, and behaviour support plan checklists aligned to the strengthened NDIS Practice Standards.

The 2026 Strengthened Framework: What Changes

The NDIS Commission has been progressively implementing the strengthened NDIS Practice Standards. Under the strengthened framework, the scrutiny on behaviour support and restrictive practices is intensified. Providers should anticipate that auditors will look more deeply at whether restrictive practice use is genuinely transitional and whether reduction goals in behaviour support plans are being actively pursued — not just documented as a formality. Early preparation now means fewer surprises at your next audit.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.

Frequently asked questions

Do I need to report authorised restrictive practices, or only unauthorised ones?

Both. Authorised restrictive practices must be reported monthly through the NDIS Commission Portal as part of the data collection requirements. Unauthorised restrictive practices must also be reported as reportable incidents under the incident reporting rules, with stricter timeframes applying.

What happens if a staff member uses a restrictive practice in an emergency and it wasn't in the behaviour support plan?

This would be treated as an unauthorised restrictive practice and must be reported as a reportable incident. The NDIS Rules do acknowledge that restrictive practices can sometimes be used in emergencies, but this does not remove the reporting obligation. The incident must be documented and submitted to the NDIS Commission within the required timeframe.

Who is responsible for lodging the report — the support worker or the provider?

The registered provider holds the legal responsibility for reporting. In practice, providers should have an internal incident management system where frontline workers record incidents, which are then reviewed and submitted by a nominated compliance officer or manager within the required timeframe.

What is the difference between the restrictive practice monthly report and an incident notification?

The monthly report is a data collection exercise covering all authorised restrictive practice use during the month. An incident notification is a separate, time-sensitive report triggered specifically by unauthorised use or any incident involving a restrictive practice that causes harm. Both obligations exist independently and must be met.

Can environmental restraint really be a regulated restrictive practice — we just lock a gate for safety?

Yes. Environmental restraint is one of the five regulated categories under the NDIS Rules, and it includes restricting access to spaces or activities, even for safety reasons. If a participant cannot freely access parts of their environment because of a provider decision, it may meet the definition. Providers should seek guidance from a registered behaviour support practitioner to assess whether specific arrangements constitute environmental restraint.

How long do we need to keep records of restrictive practice incidents?

The NDIS Practice Standards require providers to maintain records in a way that supports ongoing quality and safety oversight. While the Rules do not specify a single universal retention period for all records, providers are generally expected to retain incident and behaviour support records for a minimum of seven years, consistent with broader Australian record-keeping obligations. Check your state or territory requirements, which may vary.

Keep reading

Free: the SIL Readiness Pack

A checklist and a sample policy page, sent as a download. No sequence.