Skip to content
OneForce Care
Browse NDIS resources

NDIS basics

The NDIS Code of Conduct

The Code's elements, and what they ask of workers and providers.

Last updated · 16 October 2026


Key facts

  • The NDIS Code of Conduct sets behaviour standards for all providers and workers delivering NDIS supports.
  • It includes respect, privacy, safe practice, integrity, action on concerns, prevention of harm and sexual misconduct, and fair pricing.
  • The NDIS Quality and Safeguards Commission enforces the Code and can take action against those who breach it.

What the Code is

The NDIS Code of Conduct is a set of behaviour standards created under the National Disability Insurance Scheme (Code of Conduct) Rules 2018 official source (opens in a new tab). It specifies how providers and workers must behave when delivering supports and services to NDIS participants. The Code exists to promote safe and ethical practice across the scheme and to give participants confidence that the people working with them are held to a consistent standard.

The Code complements the NDIS Practice Standards, which set out what good service delivery looks like at an organisational level. Where the Practice Standards address systems and processes, the Code addresses the individual conduct of every person delivering supports.

Who it applies to

The Code applies to all NDIS providers and their workers, regardless of whether the provider is registered or unregistered official source (opens in a new tab). This means that a sole trader support worker operating as an unregistered provider is bound by the Code in the same way as a large registered organisation.

The term “worker” is broad. It includes employees, contractors, subcontractors, volunteers, and students on placement who deliver NDIS supports. Providers are responsible for ensuring their workers understand and comply with the Code, and for taking action when a worker’s conduct falls short.

Good to know

Registered providers must also meet the NDIS Practice Standards and are subject to audits. Unregistered providers are not audited against the Practice Standards, but the Code still applies to them and their workers in full.

The elements of the Code

The Commission’s current guidance includes eight requirements. In plain language, providers and workers must respect rights and privacy, deliver safely and competently, act honestly, raise safety concerns promptly, prevent and respond to abuse and neglect, prevent and respond to sexual misconduct, and avoid unjustified higher goods prices for NDIS participants official source (opens in a new tab).

These are summaries, not the legislative wording. Use the Commission’s linked rules and current guidance for staff training. Complaints processes support these duties, but are not a substitute for any of them.

What it means in practice

Day to day, the Code shapes how workers engage with participants in every interaction. Greeting a participant by their preferred name, supporting them to make decisions about their own routine, keeping their personal information private, and reporting a safety concern without delay: each of these is an expression of a Code element in practice.

For providers, the Code creates organisational obligations. Providers must induct workers into the Code, have clear processes for raising and responding to concerns, and maintain records that demonstrate compliance. When a complaint is made, the Commission may ask the provider to show how it has embedded the Code into its operations.

The Code also shapes recruitment. A worker who has had a previous finding against them under the Code, or whose conduct raises a concern, may not pass worker screening. This is one reason providers should check screening status before a worker begins delivering supports.

Reporting a concern

Anyone can report a concern about a provider or worker to the NDIS Commission, including participants, families, carers, and other providers official source (opens in a new tab). Reports can be made online, by phone, or in writing. The Commission will assess the concern and decide on the appropriate response, which can range from providing guidance to the provider through to formal investigation and compliance action.

Providers themselves have a duty to report certain events to the Commission under the reportable incidents framework. These include events involving serious injury to a participant, alleged or suspected abuse or neglect, and the death of a participant while receiving supports. Reporting obligations sit alongside, not instead of, any obligations to contact emergency services or the police when a participant is in danger.

If a worker has concerns about the conduct of a colleague or their employer, they can report directly to the Commission without going through their employer first. Whistle-blower protections apply in certain circumstances.