The NDIS Code of Conduct: Eight Elements, and the One That Decides Cases

Of everything that governs an NDIS provider, the Code of Conduct is the shortest document and the most commonly misjudged. It is eight sentences. It applies whether or not you are registered. And it is the instrument the Commission most often reaches for when it acts against a provider or bans a worker.

Most providers treat it as background principle and concentrate on the Practice Standards instead. That is a reasonable-sounding mistake, and here is why it is a mistake.

The eight elements, and where the last one came from

The Code requires providers and workers to:

1. Act with respect for individual rights to freedom of expression, self-determination and decision-making, in accordance with relevant laws and conventions.
2. Respect the privacy of people with disability.
3. Provide supports and services in a safe and competent manner, with care and skill.
4. Act with integrity, honesty and transparency.
5. Promptly take steps to raise and act on concerns about matters that might have an impact on the quality and safety of supports.
6. Take all reasonable steps to prevent and respond to all forms of violence against, exploitation, neglect and abuse of people with disability.
7. Take all reasonable steps to prevent and respond to sexual misconduct.
8. Not charge or represent higher prices for the supply of goods for NDIS participants without a reasonable justification.

The Code sits in section 6 of the National Disability Insurance Scheme (Code of Conduct) Rules 2018. The eighth element — fair pricing — was added later, and it is the one most often described inaccurately.

Fair pricing is narrower than the summaries suggest

Read the wording: it concerns the supply of goods, and it prohibits charging or representing a higher price to a participant without a reasonable justification. It is not a rule that your services must cost the same as everyone else's, and it is not a price cap.

What it does mean is that a price difference has to be justifiable, and the justification needs to exist at the time you set the price rather than at the time you are asked about it. If you supply equipment, consumables or aids alongside supports, that is a documentary habit worth building now: what the price is, what a non-participant would pay, and why any difference exists. The Commission's fair pricing guidance is the primary source, and it is short.

It binds unregistered providers too

This is the part providers most often get wrong, and the consequences are the most severe.

The Practice Standards apply to registered providers. The Code of Conduct applies to everyone delivering NDIS supports — registered, unregistered, and individual workers personally. An unregistered provider who has correctly concluded that the Practice Standards do not yet apply to them has not thereby escaped regulation; they remain fully within reach of the Code, and the Commission's compliance and enforcement powers, including banning orders against named individuals.

If that describes you, our post on what the Commission actually enforces against unregistered providers goes into what that looks like in practice.

Element five is the one that decides cases

"Promptly take steps to raise and act on concerns" reads as the mildest item on the list. In enforcement terms it is the sharpest, because almost every serious failure includes it.

Someone usually knew. A support worker noticed something, or a family member said something, and the concern went into an inbox, or into a conversation, and no further. The original issue may have been survivable; the failure to act on it rarely is. It converts an incident into a pattern, and a pattern is what a banning order is written about.

The practical test is not whether you have a complaints policy. It is whether a support worker on a Saturday night knows who to tell and believes something will happen. Reportable incidents carry hard timeframes on top of this — with the exception of unauthorised use of a restrictive practice, they must be notified within 24 hours of your organisation becoming aware, per the reportable incidents guidance.

How an auditor tests a document this short

They do not ask whether you have adopted the Code. They ask your staff what they would do, and then look for the record of the last time somebody did it.

That is why "we display the Code in the office" is not evidence. Evidence is a complaint that arrived and can be followed to a resolution; a concern raised by a worker with a dated response; a price difference with the justification recorded beside it. Each element of the Code should be traceable to something that happened.

What to do this week

Three things, none of which need a budget:

1. Read the eight elements aloud in a team meeting and ask, for each, "what would we point at?" The silences are your gaps.
2. Check that every worker can name who they tell and how quickly — including the ones who work alone and after hours.
3. If you supply goods, write down the justification for any participant price difference now.

For the wider picture of what has and has not changed recently, see what actually changed in NDIS compliance. Our free NDIS compliance checklist covers the evidence side, and if you would rather have someone read your evidence the way an auditor will, that is gap analysis — or book a thirty-minute call and we will tell you which you need.