Most reportable incidents are first seen by the person on shift. The support worker in the house. The nurse at the bedside. Whether that incident reaches the NDIS Commission on time comes down to whether your team recognises it and acts within hours, not days. Miss the window and you have a compliance breach sitting on top of the original harm.
This is a plain-English guide to what counts as a reportable incident, the reporting timeframes, and where providers most often trip up. It is current as of August 2026; always confirm the detail against the NDIS Commission before you rely on it.
What is a reportable incident?
A reportable incident is a serious act or event that happened, or is alleged to have happened, in connection with providing NDIS supports or services. “Alleged” matters: you do not wait for proof. If it is reported to you or you reasonably suspect it, the clock starts.
Registered NDIS providers must notify the Commission of all reportable incidents. This is separate from your internal incident management system, which has to record and respond to a much wider range of incidents, including plenty that never meet the reportable threshold.
The reportable incident types
Under the NDIS Act, the following must be reported to the Commission:
| Reportable incident | Report by |
|---|---|
| Death of a person with disability | 24 hours |
| Serious injury of a person with disability | 24 hours |
| Abuse or neglect of a person with disability | 24 hours |
| Unlawful sexual or physical contact with, or assault of, a person with disability | 24 hours |
| Sexual misconduct committed against, or in the presence of, a person with disability, including grooming | 24 hours |
| Use of a restrictive practice that is not authorised, or not used in accordance with a behaviour support plan | See below |
The two timeframes that matter
Within 24 hours: the default
Almost every reportable incident must be notified to the Commission within 24 hours of your organisation becoming aware of it. That includes all five categories in the table above.
Within 5 business days: the restrictive practice exception
There is one exception. The unauthorised use of a restrictive practice that has not resulted in serious injury can be notified within five business days. But if that same incident caused harm to the person, it reverts to the 24-hour rule. When in doubt, treat it as 24 hours.
The 5-day form: additional detail
After your initial notification, you must provide fuller detail through the Commission’s 5-day notification form within five business days of becoming aware of the incident. The first report gets it on the record quickly; the 5-day form captures what happened, who was involved, and what you are doing about it.
“Becoming aware”: when the clock actually starts
The countdown begins when your organisation becomes aware of the incident, not when a manager gets around to reviewing it. A disclosure to a support worker on a Friday night is the organisation becoming aware. That is why frontline recognition and a clear after-hours escalation path matter more than any policy document sitting in a drawer.
Where providers most often trip up
- Treating “alleged” as “unproven, so not yet reportable.” Allegations are reportable. Reporting is not a finding of guilt.
- Confusing internal incident management with Commission notification. Logging it in your system is not the same as notifying the Commission.
- Losing hours to internal sign-off. If approval chains eat your 24 hours, the process is the problem.
- Frontline staff who can’t recognise the threshold. Workers can only escalate what they can identify, so this is a training gap, not an attitude problem.
What good preparation looks like
Have a written escalation path that works at 9pm on a weekend. Make sure every worker can name what a reportable incident is and who they call. Keep your notification and 5-day form records together, so an audit can follow the trail. And build recognition into induction and refresher training, not just your policy manual.
Build reporting confidence into your team
Our Safeguarding and Reportable Incidents course walks support workers and care teams through recognising harm, responding well, and reporting to the right people within the right timeframe. Every completion leaves a dated record you can keep for your NDIS Practice Standards evidence. It is built by AHPRA-registered clinicians and mapped to the NDIS Practice Standards.