Building an NDIS Complaints Management System
NDIS complaints management explained: what the 2018 Rules require, how to handle a complaint step by step, records auditors check, and common mistakes.
What the law actually requires
Registered vs unregistered: who needs a formal system
What your system must let people do
Complaint, feedback or reportable incident?
How to handle a complaint, step by step
Timeframes: what 'promptly' means
When a complaint is also a reportable incident
Records, retention and what auditors check
Complaints made straight to the NDIS Commission
Common mistakes providers make
Building it small, scaling it up
Your next step
Frequently asked questions
Do unregistered NDIS providers need a complaints management system?
The NDIS (Complaints Management and Resolution) Rules 2018 formally apply to registered providers, so the documented system is a registration obligation. But unregistered providers are still bound by the NDIS Code of Conduct, which requires you to raise and act on concerns, and participants can complain about you to the NDIS Commission regardless. With mandatory registration expanding to high-risk supports from 1 July 2027, most providers delivering personal care or daily living supports should build a compliant system now.
How quickly must I respond to an NDIS complaint?
The Rules require complaints to be resolved as soon as practicable rather than setting a fixed deadline, so you set and meet your own service standards. A defensible baseline is to acknowledge within one to two business days and resolve straightforward complaints within about 21 days, telling the person why and giving an expected date if it will take longer. Record the acknowledgement and resolution dates so you can prove you met your timeframes at audit.
What is the difference between a complaint and a reportable incident?
A complaint is an expression of dissatisfaction about supports, a worker or your conduct, handled through your complaints system. A reportable incident involves serious harm or alleged harm — such as abuse, neglect, serious injury or an unlawful restrictive practice — and must be notified to the NDIS Commission within the required timeframe through your incident management system. One conversation can be both at once, and the notification obligation does not disappear just because you also opened a complaint file.
What records do NDIS auditors check for complaints management?
Auditors typically ask for your complaints policy, your complaints register, and two or three closed complaint files they can trace from receipt to resolution. They check that timeframes were met, that procedural fairness was applied, that any incident was escalated, and that you reviewed complaints for patterns. An empty register is usually treated as a sign that complaints are handled verbally and never recorded, which is itself a non-conformity.
Can I stop providing supports to a participant who complains?
No — treating someone adversely for making a complaint is a reprisal, and can breach both the complaints rules and the NDIS Code of Conduct. Ending or reducing a complainant's supports because they complained is one of the fastest ways to turn a minor issue into a serious compliance finding. If a genuine service issue means you cannot continue safely, follow your service agreement's exit process and document the legitimate reason clearly.