NDIS record keeping is one of the most common areas where providers experience audit findings and compliance action. Whether you are a new provider or an established organisation, understanding the NDIS record keeping requirements is essential for demonstrating safe, quality service delivery.
The NDIS Practice Standards require providers to maintain accurate, complete and secure records. These records show how supports are delivered, how risks are managed and how participants’ rights are protected. This guide explains what providers must store, how long records must be kept and how strong documentation supports audit readiness.
Why Record Keeping Matters Under the NDIS
Record keeping is a core requirement under the NDIS Practice Standards and is monitored by the NDIS Quality and Safeguards Commission.
Accurate records help demonstrate that supports are delivered safely, incidents are managed appropriately and participants are treated with dignity and respect. During audits, investigations or complaints, records are the primary evidence used to assess whether a provider is meeting its obligations.
Poor or incomplete documentation can result in audit non-conformances, corrective actions and, in serious cases, regulatory enforcement.
What the NDIS Means by Record Keeping
Under NDIS documentation rules, record keeping refers to the creation, storage, maintenance and protection of information related to participants, workers and service delivery.
Records may be paper-based or electronic. Regardless of format, they must be accurate, current, secure and able to be accessed when required by auditors or the NDIS Commission.
Providers are responsible for ensuring records reflect actual practice, not just policies or intentions.
Core Records NDIS Providers Must Keep
NDIS providers must keep records across several key areas to demonstrate compliance.
Participant Records
Providers must maintain records that relate directly to the participant and the supports they receive. These include participant details and NDIS number, consent and information-sharing permissions, service agreements, support delivery records and progress notes.
Records must also include any incidents or complaints involving the participant, along with actions taken and outcomes.
Service Delivery and Operational Records
Operational records show how supports are delivered and managed. These include rosters, staffing arrangements, risk assessments, safety plans, incident management documentation and complaints handling records.
Where restrictive practices are used, providers must keep detailed records of authorisation, behaviour support plans and usage data in line with NDIS requirements.
Worker and Workforce Records
Providers must keep workforce records that demonstrate workers are suitable and supported to deliver services safely. These include worker screening checks, training and competency records, induction documentation, supervision notes and role descriptions.
These records are critical for showing that workers meet suitability and capability requirements.
How Long Providers Must Keep NDIS Records
Record retention timeframes are a key part of NDIS record keeping requirements.
Minimum Retention Periods
Most NDIS-related records must be kept for at least 7 years. This includes participant records, incident reports, complaints records and workforce documentation.
For records involving children, providers must retain records until the child turns 25 years of age.
Incident, complaint and restrictive practice records must be kept for the required period even if the participant stops receiving services or a worker leaves the organisation.
Why Retention Periods Matter
The NDIS Commission may request records well after an incident occurs or services end. Providers must be able to produce records when requested.
Failure to retain records for the required timeframe can itself be a compliance breach.
Secure Storage and Privacy Obligations
NDIS providers must ensure records are stored securely and protected from unauthorised access, loss or misuse. This includes applying appropriate access controls, confidentiality measures and backup systems.
Privacy and confidentiality obligations apply to both physical and electronic records. Providers must ensure that only authorised people can access participant and worker information.
Secure record storage is an important part of protecting participant rights and maintaining trust.
Record Keeping and Provider Audit Preparation
Strong record keeping plays a critical role in provider audit preparation.
What Auditors Look For
Auditors assess whether records are complete, consistent and up to date. They look for evidence that policies and procedures are reflected in day-to-day practice.
Auditors also expect records to show how incidents, complaints and risks are identified, managed and reviewed.
Common Audit Gaps
Common audit findings include missing consent records, incomplete progress notes, inconsistent incident documentation and outdated worker training records.
Records that exist but cannot be easily retrieved during an audit also create compliance risk.
Record Keeping for Incidents, Complaints and Restrictive Practices
Incident, complaint and restrictive practice records are critical safeguards under the NDIS.
Providers must document what happened, who was involved, actions taken and outcomes achieved. Where reporting to the NDIS Commission is required, records must align with submitted notifications.
Accurate documentation supports transparency and accountability and helps demonstrate that participant safety is prioritised.
Practical Tips to Strengthen NDIS Record Keeping
Providers can strengthen record keeping by using standardised templates, training staff on documentation expectations and conducting regular internal file reviews.
Ensuring records align with policies, procedures and actual service delivery helps reduce audit risk. Reviewing record retention and storage practices annually can also help identify gaps early.
Conclusion: Strong Record Keeping Supports Compliance and Quality
NDIS record keeping requirements are not just administrative tasks. They are essential systems that protect participants, support compliance and demonstrate quality service delivery.
Providers who invest in strong documentation practices are better prepared for audits, complaints and regulatory reviews. Clear, accurate and secure records support confidence for participants, workers and regulators alike.
If you need support reviewing your documentation systems or preparing for audit, Labour Care works with NDIS providers to strengthen record keeping, improve compliance and build audit-ready practices with confidence.
FAQs about NDIS Record Keeping:
1. What happens if an NDIS provider cannot produce records during an audit?
If a provider cannot produce requested records, auditors may record a non-conformance, even if services were delivered correctly. Missing or inaccessible records can lead to corrective action requests, follow-up audits, or regulatory monitoring by the NDIS Commission.
2. Are progress notes mandatory under the NDIS?
Yes. While the NDIS does not prescribe a specific progress note template, providers must keep records that show what supports were delivered, when, by whom, and how they align with participant goals. Progress notes are a primary source of evidence during audits and investigations.
3. Can NDIS records be stored digitally instead of on paper?
Yes. NDIS records can be stored electronically as long as they are secure, accurate and complete, protected from unauthorised access and retrievable when requested. Digital record keeping is widely accepted and commonly used by compliant providers.
Share this article: