NDIS Policies and Procedures: When Purchased Templates Get an Application Refused

The short version: you can use a consultant, an advice service or purchased policies to prepare an NDIS registration application, but the NDIS Commission expects the result to be specific to your organisation and "not a direct copy of purchased documents". Applications that repeat the same material given to many providers can be refused, the Commission can impose a new certification audit as a condition, and false or misleading information is a civil penalty and a criminal offence. A template can be a starting point. Your policies and procedures have to end up describing how your service actually runs.

A disclosure before we start: we are a consultancy, and we write policies and procedures for providers. Everything below applies to our clients too.

What the Commission expects when you use help

The Commission's Apply for registration page has a section on using consultants, advice services or purchased policies. It starts plainly: "You are responsible for the content of your registration application." It then lists what the Commission expects if you had help:

• you were substantially involved in preparing the application and associated documents
• you understand what you have submitted and can explain the content if required
• your application is an accurate representation of your organisation and key personnel
• you can demonstrate the suitability of your organisation to deliver disability supports and not rely on the expertise of the consultancy or advice service
• the responses in your application are specific to your organisation and are not a direct copy of purchased documents
• your application and supporting documents accurately set out how your organisation complies with NDIS provider responsibilities
• the policies you provide must accurately reflect how your organisation will deliver NDIS supports

What happens when applications look alike

The Commission is direct about why this matters. It says consultants and advice services that provide the same or very similar information to multiple providers "may indicate a lack of understanding" of the Practice Standards by the organisation and its key personnel, and that providing the same or similar information "may subvert the quality audit process and suitability assessment functions" of the Commission. The consequences it lists:

• Refusal. Near-identical material increases the risk that an application contains false or misleading information, and the application may be refused.
• A new certification audit. The Commission can impose a condition requiring a new certification audit, Stage 1 and Stage 2, including a new self-assessment against the applicable Practice Standards.
• Penalties. Providing false or misleading information in a registration application contravenes section 73D of the NDIS Act 2013 and is punishable by civil penalty. It is also a criminal offence under section 137.1 of the Criminal Code Act 1995. Registered providers can have their registration suspended or revoked.

None of this means templates are banned. It means the Commission reads your documents as a statement of how your organisation operates, and holds you to it.

Why a template on its own fails at audit too

Even an application that gets through will be tested at audit. For each Practice Standards outcome, an audit looks for three things that agree: the policy that says what you do, the record that shows it was done for real participants on real dates, and a worker who can describe doing it. A purchased policy supplies only the first, and often describes a service that is not yours: roles you do not have, supports you do not deliver, escalation paths that do not exist. The gap between the document and the practice is where findings come from.

The quality indicators under each outcome are the best guide to what your policies need to cover. Our NDIS Practice Standards explainer sets out which modules apply, and the NDIS compliance checklist lists the evidence behind each Core Module area.

Seven signs your policies still read like a template

• Another organisation's name, or a placeholder, survives somewhere in the text.
• They describe supports or registration groups you are not applying for.
• They name roles you do not have, such as a quality manager in a five-person service.
• Responsibility sits with "the organisation" or "management" rather than a named position.
• Incident and complaints procedures do not match the forms and registers your team actually uses.
• There is no owner, approval date or next review date on each document.
• Your workers cannot describe the procedure without reading it.

Using a template properly

A template is useful for structure: it shows the headings a policy needs and reminds you of obligations you might miss. To turn it into your policy:

• Start from your service, not the document. Write down who does what, where, for which participants, before editing a word.
• Name positions and paths. Who receives an incident report, who decides whether it is reportable, who notifies the Commission, and the backup when they are away.
• Cut what does not apply. A shorter policy that matches practice beats a long one that does not.
• Match the records. Every procedure should point at the register, form or system where its evidence lives.
• Test it on your team. If a worker's description of the procedure differs from the document, change one of them before an audit does it for you.
• Be able to explain it. The Commission expects you to understand what you submitted. Key personnel should be able to talk through any policy in the application.

How Compliance Care helps

We build policies and procedures from how your service runs, with your key personnel involved throughout, so the documents are yours and you can explain them. We do not sell a document pack, and we will tell you if an existing set is close enough to fix rather than rewrite. See our policy development service, or book a discovery call to talk through what you have.