NDIS Complaints Management: System Requirements for Providers

NDIS Complaints Management: What Providers Must Have

Every registered NDIS provider must operate a complaints management and resolution system, and auditors treat it as a window into your culture: how easy you make it to complain, what you record, and what changes as a result. Here is what the Rules require and how to run a system that stands up at Stage 2.

Last updated: 12 June 2026

The legal foundation

The NDIS (Complaints Management and Resolution) Rules 2018 require registered providers to have a system for managing and resolving complaints about the supports they deliver, proportionate to the provider's size and the complexity of its services. The system sits alongside, and feeds, your incident management system: a complaint can surface an incident, and vice versa, and your procedures should say how one triggers the other.

What the system must include

Accessible ways to complain. Anyone, participants, families, advocates, workers, must be able to raise a complaint easily and for free: verbally, in writing, anonymously if they choose, with interpreter and accessibility support where needed.
A documented procedure covering acknowledgment, assessment, resolution, escalation, and how complainants are kept informed throughout.
A complaints register recording each complaint, the issues, actions, outcomes, and communication with the complainant.
Protection from victimisation. Documented safeguards so no one suffers a detriment for complaining.
Clear signposting to the NDIS Commission. Participants can complain to the Commission at any time; your service agreement, easy-read materials, and procedure should all say so.
Review and improvement. Complaint data reviewed periodically, with changes fed into your continuous improvement plan.

A four-step handling flow that works

Acknowledge fast. Set a standard, for example, acknowledgment within 2 business days, and record it in the register. Slow acknowledgment is the most common way small providers turn minor complaints into Commission complaints.
Assess and involve. Talk to the complainant about the outcome they want. Assess severity: anything suggesting abuse, neglect, or a reportable incident moves into the incident process immediately.
Resolve and communicate. Document what you found, what you'll change, and tell the complainant. Most complainants accept imperfect outcomes that are clearly explained.
Close and learn. Register the outcome, log any corrective action, and roll recurring themes into training and policy reviews.

What auditors check

At Stage 2, expect the auditor to sample your register, trace complaints through your own procedure, and ask workers and participants how complaints are raised and handled. The recurring findings:

A register that doesn't show complainants being kept informed.
Service agreements and welcome packs that omit the right to complain to the Commission.
Workers who don't know the procedure exists, fatal in interviews, whatever the paperwork says.
No evidence complaint trends feed continuous improvement.

Where to get the documents

The complete complaints set, policy, procedure, complaint forms, register, easy-read participant information, and acknowledgment letter templates, is included in our 220+ document package, structured against the Practice Standards outcomes and delivered in editable Word format. The wider documentation picture is in NDIS policies and procedures.

Frequently Asked Questions

Can participants complain directly to the NDIS Commission?

Yes, at any time, about any NDIS provider, registered or not, and without using your internal process first. Your complaints procedure must tell participants this and must not discourage it. A provider whose paperwork or conduct suggests complaints should stay in-house is creating its own audit finding.

Do unregistered providers need a complaints process?

The Complaints Management and Resolution Rules bind registered providers, but the Code of Conduct, which covers all providers, requires acting with integrity and supporting people to raise concerns. Plan managers and coordinators routinely ask unregistered providers how complaints are handled, so a documented process is good business well before it's a legal obligation.

What must be in the complaints register?

Each complaint, who made it (noting anonymous complaints are allowed), the issues raised, the action taken, the outcome, and how the complainant was kept informed. Auditors sample the register and trace entries against your procedure, and they read an empty register at an established provider as a process people don't trust, not as perfect service.

Can a provider punish or drop a participant for complaining?

No. The Rules require providers to ensure complainants are not victimised, and your procedure needs to say how you protect people who complain. Retaliation against a complainant is itself conduct the Commission can act on.