How to Complain to the NDIS Commission: Provider Guide

Most NDIS providers dread the word “complaint.” But here’s the shift worth making: a complaint handled well is one of the strongest quality signals you can show an auditor. It proves your organisation listens, responds, and improves – exactly what the NDIS Quality and Safeguards Commission expects from every registered provider.

This guide walks you through the full complaints management landscape – what the rules require, how participants can raise concerns, how you must respond as a provider, and how strong NDIS complaints management becomes a competitive and regulatory advantage. HCPA has supported more than 10,500 NDIS providers across Australia, and complaints management remains one of the most common areas where providers are found non-compliant at audit.

If your system isn’t airtight, this guide will help you fix it.

What Is the NDIS Complaints Management Requirement?

Every registered NDIS provider is legally required to have a functioning complaints management system. This isn’t optional, and it isn’t a box-tick exercise. The requirement flows directly from the National Disability Insurance Scheme (Complaints Management and Resolution) Rules 2018, which sit alongside the NDIS Act and are enforced by the NDIS Commission.

The rules require providers to have a clearly documented process for receiving, acknowledging, managing, and resolving complaints. Critically, the system must be accessible to all participants – including those with communication support needs, those from culturally and linguistically diverse backgrounds, and those who require assistance to make a complaint.

The NDIS Commission can receive complaints directly from participants, families, carers, advocates, or anyone acting on a participant’s behalf. Providers cannot prevent, discourage, or obstruct a person from making a complaint – doing so is a serious breach. Understanding NDIS consent and privacy obligations is also essential here, because how you handle personal information during a complaints process matters.

NDIS Practice Standards: Module 2B Complaints Management Requirements

The complaints management requirements are codified in Module 2B of the NDIS Practice Standards. This module applies to all registered providers delivering supports other than specialist disability accommodation (SDA). Understanding what Module 2B requires is the foundation of building a compliant system.

The NDIS Practice Standards under Module 2B set out the following core requirements for complaints management:

• Accessible complaints process: Participants and their representatives must be able to make complaints easily, without barriers. This includes written, verbal, and supported formats.
• Acknowledgement timeframes: Complaints must be acknowledged promptly. Best practice is within two business days of receipt, though your policy must specify your commitment.
• Documented investigation: Every complaint must be properly investigated. You need evidence of the steps taken, people consulted, and findings reached.
• Outcome notification: The complainant must be informed of the outcome and any actions taken as a result. If the complaint cannot be resolved to their satisfaction, they must be told of their right to escalate to the NDIS Commission.
• Continuous improvement: Complaints must feed into your quality improvement system. The data you collect should drive meaningful changes to practice.
• Workforce training: Staff must know how to receive a complaint, who to escalate it to, and how to support participants through the process without causing further harm.

Auditors assess Module 2B by reviewing your policy, interviewing staff, and examining complaint records. If any of these elements are missing or incomplete, you risk a non-conformity finding. This is one of the most frequently cited gaps in NDIS provider compliance assessments.

How Participants Can Complain About NDIS Providers

Participants have two primary avenues for raising concerns about an NDIS provider: directly with the provider, or directly with the NDIS Commission.

Complaining directly to the provider is the first and preferred pathway. Your complaints process must be clearly communicated to all participants at the start of service delivery and remain accessible throughout the relationship. Participants (or their representatives) can raise concerns verbally or in writing, and your system must capture both.

Complaining to the NDIS Commission is the escalation pathway. Participants can lodge a complaint with the Commission at any time – they do not need to complain to the provider first. The Commission accepts complaints via its online complaints portal, by phone (1800 035 544), in writing, or through a representative. The Commission can investigate, conciliate, and in serious cases take compliance action against providers.

Providers must not retaliate against, penalise, or disadvantage any participant, carer, or advocate who makes a complaint. Any evidence of retaliatory conduct will be treated as a serious compliance breach by the Commission.

Your participant handbook, service agreement, and welcome documentation should all reference the complaints process clearly. Participants should never have to search for this information.

How to Handle a Complaint as an NDIS Provider: Step-by-Step

When a complaint is received, your team needs a clear, documented process to follow. Here is the standard workflow that aligns with NDIS Commission expectations:

1. Receive and record: Log the complaint immediately. Capture the date, the complainant’s name (or note if anonymous), the nature of the concern, and how it was received (phone, in person, email, etc.). Assign a unique reference number.
2. Acknowledge receipt: Contact the complainant within your stated timeframe (best practice is two business days). Confirm you have received their complaint, provide the reference number, and outline the next steps.
3. Assess and triage: Determine the severity and nature of the complaint. Is this a minor service concern or a potential reportable incident? Complaints involving abuse, neglect, or exploitation must be escalated as reportable incidents under a separate process. Do not conflate the two.
4. Investigate: Gather relevant evidence, interview relevant staff, review records, and document your findings. Maintain a clear investigation trail. The complainant should be kept informed of progress during this stage.
5. Reach a finding and take action: Determine what happened, what should have happened differently, and what corrective action will be taken. Where appropriate, apologise. Where systemic issues are identified, update policies or procedures.
6. Communicate the outcome: Notify the complainant of the finding and any actions taken. If they remain dissatisfied, advise them of their right to escalate to the NDIS Commission.
7. Close and record: Close the complaint record, noting the outcome, resolution date, and any follow-up required. Feed findings into your quality improvement register.

Every step must be documented. “We resolved it verbally” is not sufficient evidence for an auditor. If it isn’t recorded, it didn’t happen.

Complaints Management Policy and Procedures: What You Need

A compliant complaints management system requires more than a generic policy document. Your documentation suite should include the following components:

• Complaints Management Policy: Sets out your organisation’s commitment to open, fair, and accessible complaints handling. Should reference the NDIS Practice Standards (Module 2B) and the Complaints Management Rules 2018.
• Complaints Procedure: Step-by-step instructions for staff on how to receive, log, investigate, and close complaints. Must include timeframes, escalation pathways, and confidentiality requirements.
• Complaints Register: A live log of all complaints received, with fields for date, nature of complaint, status, outcome, and improvement actions taken.
• Complaint Form (accessible versions): A structured form participants or their representatives can use to lodge a complaint. Should be available in plain English, Easy Read, and other formats as needed.
• Participant Information on Complaints: A plain-language summary of how to make a complaint, what to expect, and how to escalate – provided to all participants at commencement and available on request.
• Staff Training Records: Evidence that all relevant staff have been trained on the complaints procedure. Induction training and annual refreshers should be documented.

Policies that haven’t been reviewed in the past 12 months, that reference outdated legislation, or that are clearly not being followed in practice are all audit risks. Your documentation must reflect what your team actually does.

How Complaints Evidence Protects You at Audit

When an NDIS auditor assesses your complaints management system, they are looking for three things: that the system exists, that it is being used, and that it is driving improvement. A well-maintained complaints register is some of the strongest evidence you can provide.

Zero complaints on record is not a green flag – it often signals to auditors that complaints are not being captured, or that participants don’t feel safe raising concerns. A healthy complaints register shows a modest number of complaints handled transparently, with clear outcomes and improvement actions noted.

Providers who receive robust NDIS audit support ahead of their certification or verification audit are far better positioned to demonstrate this evidence trail. Preparation matters because auditors look beyond the policy document – they want to see that complaints handling is embedded in your organisational culture.

During an audit, expect to be asked:

• How many complaints did you receive in the past 12 months?
• Can you walk me through a complaint from receipt to resolution?
• What improvements did you make as a result of complaints received?
• How do participants know how to make a complaint?
• Have staff been trained on the complaints procedure?

Providers who can answer these questions with documentation, examples, and confidence consistently achieve stronger audit outcomes.

Complaints as a Regulatory Growth Tool

Here’s the perspective that separates high-performing NDIS providers from the rest: complaints are quality data. Every complaint your organisation receives is a direct signal from the people you support about where your service delivery can improve. Providers who treat complaints as threats miss this entirely.

The regulatory growth mindset reframes complaints as intelligence. When a participant raises a concern about communication, scheduling, or how a support worker handled a situation, they are giving you a roadmap. Act on it, document it, and your service improves. Over time, your complaints data tells a story about your organisation’s responsiveness – and that story becomes part of your regulatory track record.

Providers with strong complaints histories – meaning consistent handling, clear resolution, and documented improvement – are viewed more favourably by the NDIS Commission. They are also more attractive to participants and their families, who increasingly research providers before engaging services. A reputation for listening and improving is a genuine competitive advantage.

There’s a practical business case here too. Complaints caught and resolved internally cost far less – in time, money, and reputational risk – than complaints escalated to the Commission. A well-run complaints system reduces your regulatory exposure while simultaneously improving your service quality. That’s the definition of regulation as a growth advantage.

The providers who grow fastest in this sector are those who have systemised their compliance so thoroughly that regulatory requirements become embedded quality practices rather than administrative burdens. Complaints management is one of the clearest examples of this principle in action.

How HCPA Builds Your Complaints Management System

HCPA’s Regulatory Growth Consultants have built complaints management systems for more than 10,500 NDIS providers across Australia. We know exactly what the NDIS Commission looks for, what auditors ask, and where most providers fall short. Our approach is practical, documented, and designed to pass audit – while actually improving how your organisation handles concerns from the people you support.

When you work with HCPA on complaints management, we deliver:

• A fully compliant Complaints Management Policy and Procedure aligned to Module 2B of the NDIS Practice Standards and the Complaints Management Rules 2018
• A Complaints Register template configured for your organisation’s size and service types
• Accessible complaint forms in plain English and Easy Read formats
• Participant-facing information explaining how to complain, what to expect, and escalation rights
• Staff training resources on how to receive and manage complaints in line with your procedure
• Integration with your broader quality improvement and incident management systems

We don’t hand you a generic template and call it done. We work with your team to make sure the system reflects how your organisation actually operates – and that your staff can use it confidently on day one.

Whether you’re preparing for your first NDIS certification audit, addressing a non-conformity finding, or simply ready to lift your compliance standard, HCPA can help you build a complaints management system that works.

Book a free consultation with HCPA today and find out how we can strengthen your complaints management system – and turn regulatory compliance into a growth advantage for your organisation.