NDIS Complaints Management Procedure: A Step-by-Step Guide

An NDIS complaints management procedure is the documented process your organisation follows to receive, acknowledge, manage and resolve complaints about the supports and services you provide. For registered providers it is not optional: having a complaints management and resolution system is a condition of registration, it sits inside the NDIS Practice Standards, and an approved quality auditor will test it directly at your certification and mid-term audits. This guide sets out a clear, step-by-step complaints management procedure you can adopt, and the exact obligations behind it.

The short answer to 'what does a compliant procedure need to do?' is this: let anyone raise a complaint easily and safely (including anonymously), acknowledge it promptly, manage it with procedural fairness for everyone involved, resolve it quickly and fairly, record it, and tell every participant they can also complain directly to the NDIS Quality and Safeguards Commission on 1800 035 544. Below we break that into a procedure you can put in your policy today, plus where the rules come from and what auditors look for.

Where complaints management sits in the NDIS Practice Standards

Feedback and complaints management is a named outcome in the NDIS Practice Standards Core Module, within the Rights and Responsibilities division. It flows from two instruments: the NDIS (Complaints Management and Resolution) Rules 2018, which set the obligations for handling complaints, and the NDIS (Provider Registration and Practice Standards) Rules 2018, which make the complaints system a registration requirement. Both are administered by the NDIS Quality and Safeguards Commission.

It helps to be clear on the structure. S1–S4 are the four divisions of the Core Module — S1 Rights and Responsibilities, S2 Governance and Operational Management, S3 Provision of Supports, and S4 Support Provision Environment. They are structural divisions of the standards, not incident-severity ratings. Complaints management lives in the Rights and Responsibilities (S1) division, because the right to complain and be heard — without fear of consequences — is a participant right the Standards protect. Our guide to Practice Standard S1 covers the full division in detail.

There is also a baseline that applies to everyone. The NDIS Code of Conduct requires all providers and workers — registered or not — to promptly take action when someone raises a concern about the quality or safety of supports. So even unregistered providers need a working way to handle complaints; the documented system is what registered providers must additionally prove at audit.

The NDIS complaints management procedure: step by step

The Rules describe outcomes, not a template, so the procedure below is a practical, audit-ready structure you can drop into your complaints policy. Adjust the scale to fit your organisation.

1. 1Make it easy and safe to complain. Offer multiple channels — in person, phone, email, a form, or through an advocate — allow anonymous complaints, and use accessible formats and languages so no participant is shut out.
2. 2Acknowledge the complaint promptly. Confirm receipt, explain what happens next and roughly how long it will take. Prompt acknowledgement is a core expectation of effective complaint handling.
3. 3Record it from the start. Log the complaint in your register with the date, who is affected, what happened and any immediate risk, so you can show a complete history at audit.
4. 4Assess and triage. Decide whether the matter is urgent, whether anyone is at risk, and whether it needs referring — to the police if a criminal offence may have occurred, or handled as a reportable incident if it meets that separate threshold.
5. 5Investigate with procedural fairness. Give the complainant a fair chance to explain, and give any worker who is the subject of the complaint notice and a genuine opportunity to respond before any adverse action is decided.
6. 6Resolve it, using the Four A's — acknowledgment, answers, action and an apology. Keep the participant informed and involved in the outcome rather than deciding for them.
7. 7Close the loop. Tell the complainant what you decided and why, confirm any actions taken, and note their right to escalate to the NDIS Commission if they are not satisfied.
8. 8Feed it into continuous improvement. Review complaint trends, capture the lessons in your quality register, and change your practice so the same issue does not recur.

What your complaints management and resolution system must include

Beyond the step-by-step flow, the NDIS Commission expects your system — the policies, procedures and records behind the procedure — to demonstrably do the following:

• Be suitable for the size of your organisation and the complexity of the supports you deliver — a sole trader's system will be simpler than a large SIL provider's, and that is expected.
• Support people with disability to complain and feel safe doing so, including the ability to submit a complaint anonymously.
• Use transparent, documented processes for submitting, managing and resolving complaints, in platforms, technology and languages that participants and staff can actually access.
• Keep the person who made the complaint and the affected participant involved in the resolution and updated on decisions and actions.
• Include a specific process for complaints about your CEO or most senior person, so those complaints are not judged by the person they concern.
• Refer complaints appropriately — for example to law enforcement where a criminal offence may have occurred.
• Record complaints and their outcomes so you have a complete, retrievable history.
• Train staff to follow the process, and clearly communicate to every participant how to complain to you or directly to the NDIS Commission.

One legal point providers sometimes miss: making threats or otherwise trying to stop someone from complaining — directly or indirectly — is against the law and can attract penalties. A procedure that discourages complaints is worse than none at all.

Procedural fairness: what it actually requires

Procedural fairness is the part of complaints handling auditors scrutinise most, because it protects both the complainant and any worker involved. In practice it means two things at once.

For the person making the complaint

They must have a reasonable opportunity to present their complaint, have it genuinely understood, and not have it dismissed because of details they were never asked about or could not have known. The process should feel accessible and fair, not defensive.

For a worker who is the subject of a complaint

They must be given notice of any adverse action being considered, and a real opportunity to respond before a decision is made. Decisions should be based on the facts raised, be impartial and unbiased, and be reflected in your written record. Skipping these steps is both unfair and an audit finding waiting to happen.

Complaints are not the same as reportable incidents

Providers frequently blur these two obligations, and auditors notice. A complaint is an expression of dissatisfaction about your supports or services. A reportable incident is a specific category of serious event — such as abuse, neglect, serious injury, unauthorised restrictive practice or death — that must be notified to the NDIS Commission within set timeframes (the 24-hour and 5-business-day notification windows). The same event can sometimes be both, but they are governed by different rules and run through different processes. Your complaints procedure should include a triage step that checks whether a complaint also meets the reportable incident threshold. Our guide to reportable vs non-reportable incidents explains where that line sits.

How complaints management is assessed at audit

At your certification audit, and again at your mid-term (surveillance) audit around 18 months into the three-year cycle, an approved quality auditor tests feedback and complaints management directly — checking that your procedure is real and used, not just written. Typical evidence includes:

• A current, version-controlled complaints management and resolution policy and procedure.
• A complaints register showing complaints received, how they were acknowledged, managed and resolved, and the timeframes involved.
• Evidence that participants are told, in accessible formats, how to complain to you and to the NDIS Commission.
• Records showing procedural fairness — that workers subject to complaints were given notice and a chance to respond.
• Proof that complaint themes feed your continuous improvement register and lead to real changes.
• Staff training records demonstrating workers know how to receive and escalate a complaint.

This is where day-to-day discipline pays off. A provider that keeps its register current can produce this evidence in minutes; one that treats complaints as a filing afterthought writes a corrective action plan after the audit. Keeping complaints and safeguarding evidence continuously organised is the same habit our participant safeguarding guide reinforces.

Common complaints management mistakes

• No anonymous channel. If the only way to complain is to a named manager, vulnerable participants often stay silent — and your system fails the accessibility test.
• Acknowledging late or not at all. A complaint that sits unacknowledged signals it is not being taken seriously and undermines trust.
• Skipping procedural fairness for workers. Taking adverse action without giving the worker notice and a chance to respond is unfair and an audit risk.
• No record of the outcome. If you cannot show what you decided and why, at audit it did not happen.
• Treating every complaint as closed once resolved. Without trend review, the same complaints keep coming back — and missing that a complaint may also be a reportable incident with its own notification timeframe.

Frequently asked questions

Do all NDIS providers need a complaints management procedure?

Registered providers must have a documented complaints management and resolution system as a condition of registration, assessed against the NDIS Practice Standards. Unregistered providers and workers are still bound by the NDIS Code of Conduct, which requires them to act promptly on complaints — so in practice every provider needs a working procedure, even if only registered providers must prove theirs at audit.

Can NDIS complaints be made anonymously?

Yes. Your system must allow people to submit complaints anonymously and to feel safe doing so. Trying to discourage or prevent someone from complaining is against the law and can result in penalties.

How do participants complain to the NDIS Commission directly?

Anyone can contact the NDIS Quality and Safeguards Commission on 1800 035 544, or through its website, to make a complaint about an NDIS provider. Your procedure must tell participants they have this option — complaining to you first is not a requirement.

What timeframe applies to acknowledging a complaint?

The Rules require prompt action rather than a single fixed statutory deadline for acknowledgement, and effective-handling guidance expects you to acknowledge quickly and resolve fairly. Set a clear internal standard (many providers acknowledge within a couple of business days) and apply it consistently. This is different from reportable incident notification, which does have hard 24-hour and 5-business-day timeframes.

The bottom line

A compliant NDIS complaints management procedure comes down to one principle: make it easy and safe for people to raise concerns, then handle them promptly, fairly and transparently — and prove it. Offer accessible and anonymous channels, acknowledge quickly, apply procedural fairness to everyone involved, record every step, and point participants to the NDIS Commission as well as to you. Because complaints management is tested at both certification and mid-term audits, your policy, register and records need to be current all year, not reconstructed the week before an auditor arrives.

AuditCore keeps that evidence continuously audit-ready — mapping your complaints policy, register and outcomes to the NDIS Practice Standards and flagging gaps before an auditor does, so you can focus on resolving complaints well rather than proving you did.