Disability · Policy template

Worker screening policy template for Disability

A free NDIS worker screening policy template for registered NDIS providers, current to October 2026: risk-assessed roles, clearances, records and banning orders.

Obligations checked October 2026
On this page

As at October 2026, a registered NDIS provider's worker screening policy must make sure every worker in a risk-assessed role holds a current NDIS Worker Screening Clearance. It needs a written list of risk-assessed roles and a record of who fills them, the narrow supervised exception for a worker whose application is pending, checks for banning orders, screening records kept for 7 years, and how reportable incidents are notified. The clearance includes a national criminal history check, so the rules ask for no separate National Police Check (Nationally Coordinated Criminal History Check).

Download the template

The whole policy is on this page to read and copy. The Word version holds the same text, ready to edit.

Download the Word template

Stay current

We'll email you when we update this template, for example when a screening rule changes. No newsletter.

Optional. The full template is free above.

What the policy must cover (as of October 2026)

ObligationInstrumentSource
Only allow a worker to engage in a risk-assessed role if they hold a clearance that is current and operative, unless an exception applies.NDIS (Practice Standards - Worker Screening) Rules 2018, s 13legislation.gov.au
A risk-assessed role is a key personnel role, a role whose normal duties include the direct delivery of specified supports or services, or a role whose normal duties are likely to need more than incidental contact with a person with disability.Worker Screening Rules, ss 5, 6legislation.gov.au
Keep a written list of every risk-assessed role, and update it within 20 business days of creating or reclassifying a role.Worker Screening Rules, s 17legislation.gov.au
Keep a record of every worker in a risk-assessed role: name, date of birth, address, role, clearance details (application number, outcome, expiry), and any exception, suspension or exclusion and what you did about it.Worker Screening Rules, s 18legislation.gov.au
Keep screening records for 7 years from the date they are made, in a form that shows who was in a risk-assessed role on any day in that time.Worker Screening Rules, ss 20, 21legislation.gov.au
A worker whose application is in progress may work in a risk-assessed role only if supervised by a person with a clearance, under a written risk management plan, and where state or territory law allows it.Worker Screening Rules, ss 12, 14(1)(a), 14Alegislation.gov.au
A clearance is valid for up to 5 years from its date of issue unless cancelled or revoked, and is recognised in every state and territory.NDIS Quality and Safeguards Commissionndiscommission.gov.au
Link each worker to your organisation in the registered providers portal and check their clearance status in the NDIS Worker Screening Database.NDIS Quality and Safeguards Commission guidancendiscommission.gov.au
A standard Nationally Coordinated Criminal History Check is not sufficient for NDIS roles that need worker screening.Australian Criminal Intelligence Commissionacic.gov.au
The NDIS Code of Conduct applies to every NDIS provider, registered or not, and to the people they employ or engage.NDIS (Code of Conduct) Rules 2018; NDIS Act 2013, s 73Vndiscommission.gov.au
Workers of registered NDIS providers complete the mandatory NDIS worker orientation program as part of induction.NDIS (Quality Indicators for NDIS Practice Standards) Guidelines 2018, s 17(3)legislation.gov.au
The NDIS Commissioner can ban workers and key personnel, and banning orders are published on the NDIS Provider Register.NDIS Act 2013, ss 73ZN, 73ZDAndiscommission.gov.au
Notify the Commission of a reportable incident within 24 hours (death, serious injury, abuse or neglect, unlawful contact or assault, sexual misconduct), and other reportable incidents within 5 business days.NDIS (Incident Management and Reportable Incidents) Rules 2018, ss 20, 21legislation.gov.au
Providers of Supported Independent Living must be registered from 1 July 2026, which brings worker screening with it.NDIS (Provider Registration and Practice Standards) Rules 2018, s 7legislation.gov.au
Unregistered providers are not legally required to ask their workers for a clearance.NDIS Quality and Safeguards Commissionndiscommission.gov.au

Each obligation links to the primary source it was checked against in October 2026. The policy below puts each one into practice.

The policy

[Organisation name] worker screening policy (Disability)

Template from Koora, current to October 2026. Replace the text in square brackets, delete the options that do not apply, and check it against the current law and your own circumstances before you adopt it. It is general information, and Koora does not give legal advice. The latest version and the sources behind each obligation are at koora.care/resources/templates/worker-screening-policy/disability.

1. Purpose

This policy sets out how [Organisation name] screens the people who work with people with disability on its behalf, so that participants are supported by people who hold a current NDIS Worker Screening Clearance, and so that [Organisation name] meets its obligations as a registered NDIS provider under the NDIS (Practice Standards - Worker Screening) Rules 2018.

2. Scope

This policy applies to every worker of [Organisation name] in a risk-assessed role, however they are engaged. That includes:

  • employees, whether full-time, part-time or casual;
  • volunteers and students on placement;
  • contractors and subcontractors; and
  • people supplied by an agency or labour hire company. Where another business supplies the worker, our contract with it requires the clearance, and we take reasonable steps to check it.

A risk-assessed role is a key personnel role, a role whose normal duties include the direct delivery of specified supports or services to a person with disability, or a role whose normal duties are likely to need more than incidental contact with a person with disability. More than incidental contact includes physical contact, building rapport as an ordinary part of the role, and contact with several people with disability in specialist disability support or specialist disability accommodation.

A secondary school student on formal work experience may take part without a clearance while directly supervised by a person who holds one.

[Optional: [Organisation name] also asks workers in roles that are not risk-assessed to hold a clearance.]

3. Roles and responsibilities

  • The [board / governing body] approves this policy and makes sure it is resourced.
  • The [chief executive] is accountable for compliance with it.
  • The [people and culture lead] assesses which roles are risk-assessed, keeps the list of risk-assessed roles, runs the clearance checks, keeps the screening records and tracks expiry dates.
  • Managers and supervisors make sure nobody starts in a risk-assessed role without a clearance or an approved exception, and supervise anyone working under an exception.
  • Workers apply for and keep a current clearance, link it to [Organisation name], complete the NDIS worker orientation program, comply with the NDIS Code of Conduct, and tell [role] straight away if their clearance is suspended, revoked or they are excluded.
  • Agencies and contractors that supply workers screen them to this standard and give [Organisation name] evidence on request, as set out in their contract.

4. Pre-engagement checks

Before a person starts in a risk-assessed role, [Organisation name]:

  • confirms to the state or territory worker screening unit that the person is, or intends to be, our worker, so their application can proceed;
  • links the person to our organisation in the NDIS Commission's registered providers portal and checks that their clearance is current in the NDIS Worker Screening Database;
  • records the clearance number, outcome and expiry date;
  • checks banning orders on the NDIS Provider Register; and
  • checks the qualifications and other credentials the role needs, for example AHPRA registration for nurses and allied health professionals.

The NDIS Worker Screening Clearance includes a national criminal history check, so we do not ask for a separate National Police Check (Nationally Coordinated Criminal History Check). [Optional: [Organisation name] also asks for a National Police Check for [roles], as a matter of its own policy.]

Pending applications. A worker whose application is in progress may start in a risk-assessed role only where the law of the state or territory they work in allows it, they are supervised by a person with a clearance, and [role] has approved a written risk management plan for them. We record the exception, its start and end dates and the supervisor's name. [List the states and territories we work in and whether each allows working on application.]

5. Ongoing checks and expiry tracking

  • We record the expiry date of every clearance. A clearance is valid for up to 5 years, and a renewal can be lodged up to 90 days before it expires.
  • We remind each worker [90] days before their clearance expires, and again at [30] days.
  • A worker whose clearance has expired does not work in a risk-assessed role until it is renewed.
  • We check clearance status in the NDIS Worker Screening Database [monthly], and act on any notice of a suspension, interim bar or exclusion the same day.
  • We review the list of risk-assessed roles whenever a role is created or changed, within 20 business days, and at least every [12 months].

6. Ban registers

[Organisation name] checks banning orders on the NDIS Provider Register before engaging a person and [monthly] after that. [If we also deliver aged care: we check the Aged Care Quality and Safety Commission's register of banning orders too.]

If a person is subject to a banning order, they are not engaged in the banned activity, or are stood down from it immediately, and [role] records what was found and what we did.

7. Records and retention

[Organisation name] keeps:

  • a written list of every risk-assessed role, with its title, why it is risk-assessed, a description, the date it was assessed and the name and title of the person who assessed it;
  • for every worker in a risk-assessed role: their full name, date of birth, address, role, and either their clearance details (application number, outcome and expiry) or the exception that applies, its dates and their supervisor; and
  • records of any interim bar, suspension or exclusion, misconduct allegation, and what we did in response.

We keep each record for 7 years from the date it is made, in a form that shows who was in a risk-assessed role on any day in that time, including after a worker is unlinked in the portal.

Records are stored securely in [system], access is limited to [roles], and personal information is handled under our privacy policy and the Australian Privacy Principles.

8. Breaches and reporting

  • A worker without a current clearance or an approved exception is removed from risk-assessed work until it is in place.
  • A worker whose clearance is suspended or who is excluded stops working in risk-assessed roles immediately.
  • Workers report incidents to [role] straight away. [Role] notifies the NDIS Commission of reportable incidents within 24 hours, or within 5 business days for other reportable incidents, as the Incident Management and Reportable Incidents Rules require.
  • A breach of this policy by a worker may lead to disciplinary action, up to and including ending their engagement.

9. Review

[Organisation name] reviews this policy at least every 12 months, and sooner when the law changes, for example a change to the registration requirements or the national worker screening check for the care and support economy.

Approved by: [name and role]. Date approved: [date]. Next review: [date]. Version: [number].

Running the policy in Koora

Koora is Australia's first bureau for the care workforce. One record per worker, checked once and kept current.

The compliance engine checks each worker's records against what their role needs and shows the gaps, on every plan. See what each role needs. Expiry dates are tracked for every credential. Workers are screened against the NDIS and aged care banning orders, and Koora keeps monitoring those registers. Your team reviews each credential in Koora, or Crew does it for you. The provider keeps the legal responsibility for who they engage.

Frequently asked questions

Do NDIS workers need a National Police Check as well as a clearance?

Not under the NDIS Worker Screening Rules, which ask for the clearance. The clearance includes a national criminal history check, and the ACIC says a standard National Police Check is not sufficient for NDIS roles that need worker screening. A provider can still ask for a National Police Check as a matter of its own policy.

Which NDIS roles need a worker screening clearance?

Risk-assessed roles: key personnel, roles whose normal duties include the direct delivery of specified supports or services, and roles likely to need more than incidental contact with a person with disability. A registered provider decides which of its roles meet that test and keeps a written list.

Can an NDIS worker start before their clearance comes through?

Only where the state or territory allows working on application, the worker is supervised by a person with a clearance, and the provider is implementing a written risk management plan for them. Some states do not allow it at all.

Do unregistered NDIS providers need worker screening?

Not by law as at October 2026. The NDIS Commission says unregistered providers are not legally required to ask their workers for a clearance, though they can choose to. Supported Independent Living providers must be registered from 1 July 2026.

Sources

This is general information, not compliance advice. Always confirm requirements with the relevant regulator, and remember that providers keep the legal responsibility to sight credentials and decide who can work.

We work hard to keep everything accurate, and our compliance engine keeps up with the rules as they change. Even so, we might get a detail slightly wrong or miss something. No one's perfect. If you think something here needs updating, email us at resources@koora.care. We would genuinely rather know, because we all do better when we help each other get it right.

Put your own records to the test.

Bring a workforce CSV. AI helps match the data, then the compliance engine shows gaps in the records you supplied. Free, with no account needed.

Try the free workforce audit