National Disability Insurance Scheme (Authorisations) Act 2019

Core statutory concepts are defined in the Act and determine how the administrative machinery operates.

• Restrictive practice. Defined in s7 as any practice or intervention that restricts rights or freedom of movement of a person with a disability, with an express list: seclusion, chemical, mechanical, physical and environmental restraint. The Act depends on the NDIS Rules for detailed definitions of those listed practices (s3 notes referring to rule 6 of the NDIS Rules).
• Behaviour support plan and interim behaviour support plan. Both are central prerequisites to any authorisation. A behaviour support plan must be developed by an NDIS behaviour support practitioner in accordance with the NDIS Rules and must describe strategies for supporting the participant’s behaviour (s3 definition). Interim behaviour support plans are referenced for interim authorisations.
• Authorisation and interim authorisation. An authorisation permits application of a restrictive practice under a behaviour support plan, and is normally effective for 12 months (s19(1)). An interim authorisation permits application under an interim plan and is normally effective for 6 months (s19(2)).
• Prohibited restrictive practices. The Act lists specific practices that cannot be authorised by the Senior Practitioner (s17). These include aversion, overcorrection, misuse of medication, denial of key needs, practices for harassment or vilification, limitations on community, culture and language (including denial of interpreters), seclusion for persons under 18, and any other practices prescribed by regulation (s17(a)-(h)).
• Denial of key needs. Defined at s6 as preventing access to basic needs or personal supports, with personal supports specifically including family, friends, peers, advocates and possessions (s6(1)-(2)).
• Senior Practitioner. A public sector employee appointed by the Minister (s9). The Senior Practitioner has functions to promote reduction and elimination of restrictive practices, protect participant rights, develop guidelines, disseminate information, foster sector relationships and provide high level clinical advice (s10). The holder may delegate powers to a public sector employee (s13).
• CEO and internal reviewer. The CEO has administrative responsibility for internal review appointments and decisions on internal review recommendations (s22-s27). The internal reviewer is a public sector employee tasked with reviewing a reviewable decision and making a recommendation to the CEO (s23, s25).
• Reviewable decision and affected persons. A reviewable decision includes the Senior Practitioner’s grant/refusal of an authorisation or interim authorisation, responses to alternative proposals, and revocations (s21(1)). Affected persons include applicants (the NDIS provider), the NDIS behaviour support practitioner, the participant and the participant’s guardian (s21(2)).
• Confidentiality and misleading information offences. Offences target reckless disclosure of confidential information obtained in administering the Act (s30) and knowing provision of misleading information to a person acting in an official capacity under the Act (s31). Both carry a maximum punishment of 200 penalty units or two years imprisonment (s30(1), s31(1)-(2)).

The statutory principles in s5 are designed to shape behaviour support and authorisation decisions. They require service delivery to aim to reduce and eliminate restrictive practices, to use restrictive practices only as a last resort and to ensure least restrictive practice for the shortest practical period (s5(2)(a)-(c)). Those principles create legally articulated evaluative standards that the Senior Practitioner must take into account at the authorisation stage via the substantive requirements in s16, which require consistency with the principles and the Senior Practitioner’s guidelines.

The Act deliberately links to Commonwealth instruments. It uses definitions and procedural expectations in the Commonwealth NDIS Rules and references the NDIS Act for terms such as NDIS provider and participant (s3). This cross-reference means the detailed operation of several concepts depends on documents external to the Territory Act.

The Act operates on a defined set of actors and imposes obligations, decision powers and potential liabilities on them.

Primary affected parties.

• NDIS providers. The Act applies in relation to NDIS providers who seek to apply restrictive practices to participants when delivering services (s4(1)). Providers are the applicants for authorisations (s14(1)), and they must supply particulars, the behaviour support plan, evidence of consultation with participant and their support network, and prior history of restrictive practices (s14(2)(b)(i)-(v)). Providers therefore bear the immediate compliance costs of application, documentation and consultation.
• Participants. Persons with disability who are NDIS participants are central to the scheme. Participants are entitled to be given written notice of decisions (s15(2), s27(1)), and are an "affected person" who may apply for internal review (s21(2)(c), s22(3) as qualified for authorisations). Participants are protected by the Act’s principles (s5) and by the prohibition on certain restrictive practices (s17). The Act also provides that participants (or guardians) may apply to NTCAT in relation to CEO decisions (s28(3)).
• NDIS behaviour support practitioners. These practitioners prepare behaviour support plans required as part of any authorisation (s3 definition, s14(2)(b)(ii)). They are named as potential affected persons with review standing (s21(2)(b)), so they can seek internal review of decisions that affect the behaviour support plan.
• Senior Practitioner. Appointed by the Minister and vested with the principal decision-making authority for authorisations, guidelines, inspections and legislative functions (s9-s13, s14(6)). The Senior Practitioner decides whether to grant, refuse or propose alternatives to restrictive practice applications (s15).
• CEO and internal reviewers. The CEO receives applications for internal review, appoints internal reviewers, receives recommendations and makes final internal review decisions (s22, s23, s25, s26). Internal reviewers are public sector employees required to have appropriate qualifications and to conduct review in accordance with natural justice and any regulations (s23, s25).

Other institutional actors.

• Minister. Appoints the Senior Practitioner and thus controls that political appointment power (s9(1)).
• NTCAT. Provides an external review avenue for Tribunal affected persons who seek review of the CEO’s decision under s26 (s28).
• The Administrator. May make regulations under s33, providing rule-making levers that could expand or limit aspects of the scheme (s33).

Those who pay. The immediate compliance costs fall on NDIS providers, who must prepare the required documentation, consult participants and respond within statutory timelines to requests for further information (s14(3)-(5)). Providers may also face operational adjustments if the Senior Practitioner proposes alternative restrictive practices (s15(1)(c), s18). The Territory state bears administrative costs to staff and support the Senior Practitioner, CEO review, internal reviewers and any tribunal proceedings, but the Act’s text does not quantify those costs.

Decisional concentration. The Senior Practitioner has broad substantive and procedural discretion in authorisations and the power to inspect settings where restrictive practices would be used (s11, s14(6)). The CEO controls the internal review process and is not bound by internal reviewer recommendations (s26(2)). These design features centralise decision authority within the public sector hierarchy.

The Act creates express duties, applicant obligations, duties on decision-makers and rights of affected persons.

Duties and obligations on NDIS providers.

• Application requirements. An NDIS provider must apply in the approved form and include specified particulars: the proposed restrictive practice, a copy of the behaviour support plan, evidence of consultation with the participant and their support persons, details of the provider applying the practice, history of prior restrictive practices within 12 months, and any other relevant information or information prescribed by regulation (s14(2)(a)-(b)(i)-(vii)).
• Response to information requests. Providers must provide further information requested by the Senior Practitioner within 28 days or the application lapses (s14(3)-(5)). This creates a strict procedural obligation with the sanction of lapse for non-compliance.
• Consultation. The application must include information demonstrating consultation with the participant and the participant’s family, carers, guardian or other relevant person about the proposed use of the restrictive practice (s14(2)(b)(iii)).
• Fidelity to behaviour support plans. Restrictive practices may be authorised only if they are in accordance with a behaviour support plan prepared by an NDIS behaviour support practitioner per the NDIS Rules (s3 definition, s14(2)(b)(ii), s16(a)-(b)). Providers therefore must ensure behaviour support plans meet NDIS Rules standards.

Duties and powers of the Senior Practitioner.

• Decision-making duties. Decide whether to grant, refuse, or propose alternative practices on the application (s15(1)), give written notice and reasons to the applicant and participant (s15(2)), and revoke authorisations at any time (s20(1)-(2)).
• Substantive test. May authorise only where the behaviour support plan is consistent with the Act’s principles and the Senior Practitioner’s guidelines, and where the restrictive practice is necessary to prevent harm and is the least restrictive reasonable approach (s16(a)-(d)).
• Inspection powers. May inspect the place where a restrictive practice is to be applied before deciding the application (s14(6)).
• Guideline-making. May make guidelines to support the Act and must consult relevant persons when developing guidelines (s12).

Duties and powers of the CEO and internal reviewer.

• Internal review. Affected persons may apply for internal review to the CEO, who may appoint an internal reviewer to recommend whether to affirm, vary or set aside and substitute a decision (s22-s26). The CEO is not bound by the internal reviewer’s recommendation (s26(2)).
• Procedural safeguards. Internal reviewers must comply with rules of natural justice and any prescribed matters or procedures (s25(1)(b)-(c)).

Rights of participants and affected persons.

• Notice and reasons. Participants and applicants are entitled to written notice of decisions and reasons (s15(2), s27(1)-(2)).
• Review rights. Affected persons (NDIS providers, behaviour support practitioners, participants and guardians) have internal review rights to the CEO (s22) and, following the CEO’s decision, the right to apply to NTCAT (s28). Participants or guardians may apply for internal review at any time during the period of an authorisation (s22(3)).
• Protections and prohibitions. The Act’s principles protect participant dignity and require least restrictive practice; certain practices are statutorily prohibited (s5, s17).

Offences and limits on rights.

• Confidentiality and misleading-information offences carry significant penalties and create criminal exposure for persons handling information under the scheme (s30, s31). Strict liability applies to the element in s30(1)(a) (s30(2)), and there is a consent defence for disclosure relating to a person (s30(3)).
• Protection from liability. Public officers acting in good faith as CEO, Senior Practitioner or internal reviewer are shielded from civil or criminal liability for acts done in good faith in the exercise or purported exercise of the relevant powers and functions (s29). This indemnity does not remove liability otherwise borne by the Territory (s29(2)).

The statutory architecture balances duties on providers to document and consult, discretionary decision-making by the Senior Practitioner, and rights of review and notice for participants and affected persons. The Act ties authorisation outcomes to the behaviour support plan regime under the NDIS Rules, thereby folding Commonwealth standards into the Territory decision-making process.

The Act creates a mix of administrative enforcement mechanisms, criminal offences and internal procedural sanctions. Enforcement operates through decision-makers’ powers, criminal sanctions for misuse of information and misleading conduct, and review processes.

Administrative enforcement and sanctions.

• Grant, refusal, alteration, revocation. The principal enforcement tools for the Senior Practitioner are the authority to refuse or impose conditions by proposing alternatives, and to revoke authorisations at any time (s15(1), s18, s20(1)). Revocations and alternative proposals must be notified in writing with reasons (s15(2), s18(3), s20(2)). These are administrative levers that directly affect providers’ operational entitlement to use restrictive practices.
• Inspections. The Senior Practitioner may inspect the place where the restrictive practice is to be applied before deciding (s14(6)), creating a compliance and oversight mechanism.
• Application lapse. If an applicant does not supply requested further information within 28 days, the application lapses (s14(4)-(5)). This procedural sanction effectively ends the application without merits decision where the provider fails to comply.

Criminal offences and penalties.

• Confidentiality offence. Under s30(1), a person commits an offence if they obtain information in administering the Act, where the information is confidential and the person is reckless in that circumstance, and then intentionally discloses it in a way not connected with administering the Act or to an otherwise entitled person, and is reckless in relation to the result. Maximum penalty: 200 penalty units or imprisonment for 2 years (s30(1)). Strict liability applies to subsection (1)(a) (s30(2)), meaning that the prosecution need not prove mens rea for that element. There is a defence where the person to whom the information relates has consented to disclosure (s30(3)).
• Misleading information offences. Section 31 creates criminal offences where a person intentionally gives misleading information to a person acting in an official capacity under the Act, or intentionally gives a document containing misleading information to such a person, and has knowledge of that circumstance. Maximum penalty: 200 penalty units or imprisonment for 2 years (s31(1)-(2)). There is a statutory defence for documents where the giver draws the misleading aspect to the recipient’s attention and provides remedial information to the extent reasonably possible (s31(3)).

Interaction with Criminal Code.

• Application of Part IIAA of the Criminal Code to offences under this Act is explicit (s8). That Part sets general principles of criminal responsibility, defences, and burden of proof, and therefore shapes prosecutorial standards and available defences for offences arising under the Act.

Judicial and tribunal oversight.

• Internal review to CEO. Affected persons may seek internal review, but internal reviewers may reject applications as frivolous or vexatious, late or where the matter is subject to court or tribunal proceedings (s24(2)-(3)). That gatekeeping can prevent needless duplicative review but may also limit access to merits consideration if the internal reviewer applies those limits strictly.
• External review to NTCAT. After CEO decision on internal review, Tribunal affected persons may apply to NTCAT for review of the CEO’s decision (s28). NTCAT therefore provides an external merits and judicial oversight route, subject to its own procedural rules.

Protections for decision-makers.

• The Act provides protection from liability for acts done in good faith by the CEO, Senior Practitioner and internal reviewers (s29(1)). This reduces the risk of personal civil or criminal exposure for public officials undertaking their functions, while preserving any liability the Territory would otherwise bear (s29(2)).

Enforcement costs and practical effects.

• The criminal offences attach significant maximum penalties, which signals the legislature’s intent to control information handling and the integrity of administrative processes. Providers and officials must therefore maintain robust records, careful communications and compliance systems to avoid exposure to these penalties. The Act sets out administrative mechanisms that are enforced through authorisation decisions, revocation powers and inspection, rather than creating an independent civil penalty regime for breaches of process.

The Act deliberately connects to and defers to several Commonwealth and Territory instruments. These relationships determine definitional content, procedural expectations and primacy where overlaps occur.

Linkages to Commonwealth NDIS instrument framework.

• NDIS Rules. The Act expressly references the National Disability Insurance Scheme (Restrictive Practices and Behaviour Support) Rules 2018 (Cth) for definitions and practitioner requirements. The definitions of chemical, mechanical, physical and environmental restraint are incorporated by reference to rule 6 of the NDIS Rules (s3 notes). The definition of NDIS behaviour support practitioner is also taken from rule 5 of the NDIS Rules (s3). Behaviour support plans must be developed by NDIS behaviour support practitioners in accordance with the NDIS Rules (s3 definition of behaviour support plan). This means the detailed content and professional standards for plans and restrictive practices are determined by the Commonwealth Rules rather than the Territory Act.
• NDIS Act. The Act uses terms defined in the National Disability Insurance Scheme Act 2013 (Cth), including participant and NDIS provider (s3). Those core statutory relationships tie the Territory’s authorisation architecture into the national NDIS framework.

Primacy over Territory legislation.

• Disability Services Act 1993. Section 4(2) states that where a participant is also a person to whom Part 4 of the Disability Services Act 1993 applies, this Act prevails. That clause creates statutory primacy for authorisations under this Act over the specified part of the Disability Services Act where there is overlap.

Criminal law overlay.

• Criminal Code. The Act makes Part IIAA of the Criminal Code applicable to offences under the Act (s8). This applies general criminal doctrines, defences and burden of proof to prosecutions for s30 and s31 offences, and frames obligations like recklessness and strict liability elements.

Administrative law and tribunal review.

• NTCAT oversight. The Act gives jurisdiction to the Northern Territory Civil and Administrative Tribunal to review CEO decisions made on internal review (s28). NTCAT’s inherent review powers and procedures will therefore intersect with this Act for merits review, remedies and any judicially reviewable errors arising in decision-making.
• Internal administrative law principles. Internal reviewers must comply with rules of natural justice when conducting reviews (s25(1)(c)). This imports procedural fairness obligations from administrative law norms into internal processes.

Regulatory rule-making.

• Regulations and approved forms. The Administrator may make regulations under s33. The CEO may approve forms under s32. Regulations can prescribe additional required information for applications under s14(2)(b)(vii) and matters to be taken into account by internal reviewers (s25(1)(a)). Thus, delegated instruments can materially change procedural burdens, timelines and information requirements without amending the primary Act.

Practical implications of these interactions.

• Reliance on Commonwealth norms. Because the Act requires behaviour support plans in accordance with the Commonwealth NDIS Rules and depends on Commonwealth definitions, Territory decision-makers will interpret and apply Territory provisions in light of those Commonwealth standards. In practice the Senior Practitioner must ensure compatibility with both the Act’s principles and the NDIS Rules (s16(a)-(b)).
• Fragmentation risk. The Act’s cross-references mean that providers and practitioners must comply with a mixture of Territory statutory requirements, Territory guidelines, Commonwealth NDIS Rules and NDIS Act definitions. This creates potential complexity for compliance, as forms, behavioural plan content and practitioner standards derive from different legal instruments.
• Overlap and primacy. The explicit prevails clause over Part 4 of the Disability Services Act 1993 (s4(2)) clarifies which territorial regime controls in overlapping situations, reducing legal uncertainty where a person is subject to both regimes.

The statutory text provided is the Act as in force on 1 July 2019 and the endnotes record the enactment and commencement details. The recorded legislative history in the Act’s endnotes is limited to enactment and commencement; the text contains no subsequent amendments.

Recorded legislative milestones.

• Act title and number. National Disability Insurance Scheme (Authorisations) Act 2019 (Act No. 15, 2019), as shown in the endnotes.
• Assent. The Act received assent on 27 May 2019, per the endnotes.
• Commencement. The Act commenced on 1 July 2019, with Gazette notice cited (Gaz S45, 26 June 2019), per the endnotes and the short commencement clause (s2).

No amending provisions are printed in the text provided. The endnotes include a key to abbreviations and a list of legislation entry that confirms the dates noted above. The Act contains a delegated legislation head of power at s33, permitting the Administrator to make regulations. The Act further provides for the CEO to approve forms (s32) and for the Senior Practitioner to make guidelines (s12). These delegated instruments (regulations, approved forms, guidelines) are mechanisms by which the substantive operation of the Act can be altered or clarified without formal amendment of the primary statute.

Practical reading.

• Because the Act’s text cross-refers to the Commonwealth NDIS Rules and the NDIS Act, changes to those Commonwealth instruments could materially affect how the Territory Act operates, even where the Territory Act itself is not amended. For example, definitions in the NDIS Rules and professional requirements for behaviour support practitioners are incorporated by reference (s3). Consequently, practitioners must monitor both Territory regulations and Commonwealth rule changes for practical amendments to the operational regime.
• The Act leaves some matters to be prescribed by regulation, such as additional application information (s14(2)(b)(vii)) and matters to be taken into account by the internal reviewer (s25(1)(a)). The Administrator’s regulatory power at s33 therefore represents a likely locus for future operational detail and incremental amendments by subordinate instrument.

Absence of recorded amendments in the provided text.

• The provided document does not list legislative amendments subsequent to commencement, nor does it include any schedules amending other Acts. The endnotes summarise only the original enactment and commencement information. Any later amendments, if made, are not included in the supplied text and therefore cannot be summarised here.

The Act as supplied contains no case law, judicial decisions or tribunal determinations. The text specifies the available review routes but does not cite judicial interpretation or reported litigation. The procedural design indicates where litigation or tribunal work could arise, but no litigation history is recorded in this document.

Documented review avenues that could generate litigation.

• Internal review and CEO decision. Section 22-26 set out an internal review mechanism culminating in a CEO decision on the internal reviewer’s recommendation. That CEO decision is subject to NTCAT review (s28). Any contested decisions, particularly those turning on interpretation of the Act’s principles (s5) or the substantive authorisation tests (s16), could be the subject of NTCAT merits review, and potentially judicial review applications to superior courts on questions of law arising from tribunal determinations.
• NTCAT jurisdiction. The Act grants NTCAT jurisdiction to review CEO decisions (s28(1)). Tribunal affected persons include the applicant under s22 and any other person who could have applied for internal review (s28(2)). NTCAT decisions may, depending on statutory scheme and judicial access, generate judicial review litigation on jurisdictional or procedural fairness grounds, but the Act text does not provide examples.
• Criminal prosecutions. The Act creates offences for disclosure of confidential information and misleading information (s30, s31). Criminal prosecutions under these provisions would invoke Part IIAA of the Criminal Code (s8) and may lead to court decisions on issues such as recklessness, strict liability elements and available defences. The supplied text does not record any prosecuted matters.

Implications of absence of recorded litigation.

• Practitioners and agencies should note that the Act’s operation will be informed by future NTCAT determinations and any court judgments addressing tribunal decisions or offences under the Act. Because none are recorded in the supplied statutory text, there is no judicial guidance on interpretation of key concepts such as "necessary to prevent harm", "least restrictive approach", or the application of the strict liability element in s30(2). That lack of precedent increases the importance of administrative guidance, the Senior Practitioner’s guidelines and any regulations that clarify operational standards.

Note on available procedural protections.

• Although the Act does not report litigation history, it requires internal reviewers to comply with rules of natural justice (s25(1)(c)) and mandates written reasons for decisions and notices to affected persons (s15(2), s27(1)-(2)). Those procedural requirements will be relevant in any future legal challenges about procedural fairness, adequacy of reasons and administrative law compliance.

This section highlights non-obvious risks, traps and friction points in the Act as drafted, grounded in the statutory text.

Cross-references create operational dependence.

• The Act relies on the Commonwealth NDIS Rules for definitions of several restrictive practices and for the identity and role of the NDIS behaviour support practitioner (s3 notes). Practitioners and providers must therefore look beyond the Territory Act to the NDIS Rules for crucial definitions and professional standards. Failure to align behaviour support plans to the NDIS Rules may render an application inconsistent with s16(a) and (b).

Strict procedural timing and lapse risk.

• If the Senior Practitioner requests further information, the provider has 28 days to supply it or the application lapses (s14(3)-(5)). Providers who miss this deadline lose their application and must reapply, with no stay. Similarly, an NDIS provider has 28 days to respond to a proposed alternative restrictive practice (s18(1)). These fixed windows require tight administrative workflows.

No stay on operation during internal review.

• The making of an application for internal review does not stay the operation of the reviewable decision (s22(5)). A participant or provider seeking review must therefore manage the risk that an authorisation continues to be in force and restrictive practices may be applied while the review proceeds, unless the Senior Practitioner or CEO takes separate action to stay or revoke.

Broad discretion with limited statutory guidance on evidentiary standards.

• The Senior Practitioner may grant authorisations if the behaviour support plan is "consistent with the principles" and "consistent with the guidelines", and where the restrictive practice is "necessary to prevent harm" and is "the least restrictive approach reasonably available" (s16). Those standards are evaluative and will require clinical and administrative judgement. The Act leaves significant content of what constitutes "consistent" to the Senior Practitioner’s guidelines and to the NDIS Rules. Where guidelines or rules are silent, decision-making discretion widens, increasing uncertainty for providers.

Prohibited practices are extensive and specific.

• The Act bars several practices outright (s17), including seclusion for persons under 18 (s17(g)), misuse of medication (s17(c)), and denial of key needs (s17(d)). The definition of denial of key needs includes access to family, friends and advocates (s6(2)), so practices that restrict these supports could be prohibited even if superficially justified as behavioural management. Providers must scrutinise behaviour support plans for any measure that could be framed as limiting personal supports or possessions.

Criminal liability for information handling.

• Section 30 applies strict liability to the element of obtaining information in the course of performing administrative functions (s30(2)). The maximum penalty is substantial: 200 penalty units or two years imprisonment (s30(1)). The combination of strict liability on the obtaining element and recklessness for confidentiality and disclosure elements increases legal risk for staff handling information. The defence of consent is available where the disclosure relates to the person and they have consented to disclosure (s30(3)), but reliance on consent requires careful proof.

Potential for application mismatch with NDIS Rules.

• Behaviour support plans must be developed by NDIS behaviour support practitioners per the Commonwealth Rules (s3). If a plan does not meet the Commonwealth criteria, the Senior Practitioner may find an application inconsistent with s16(a)-(b) and refuse authorisation. Because the Act imposes a local authorisation requirement but offloads professional standards to federal rules, a provider may find its carefully documented plan rejected for failing to match a Commonwealth template or standard not expressly reproduced in the Territory Act.

Internal review rejection grounds.

• The internal reviewer may reject an internal review application if frivolous, vexatious, late or if the matter is before a court or tribunal (s24(2)-(3)). The definition of frivolous or vexatious includes overlapping applications by different persons where a decision has already been made (s24(4)). Affected persons should coordinate to avoid multiple overlapping challenges that risk rejection for procedural reasons rather than merits.

Delegation and appointment qualifications.

• Both the Senior Practitioner (s13) and internal reviewers (s23) must be satisfied that delegates have the necessary qualifications, clinical experience and personal qualities. Those subjective statutory criteria could be a point of dispute if parties challenge the competence of a delegate, particularly where clinical judgements are central to an authorisation or review decision.

NTCAT review but no statutory timelines.

• While the Act provides a route to NTCAT (s28), it does not specify timelines or procedural stays associated with NTCAT applications. Parties must therefore understand and plan for tribunal processes and timeframes outside the Act’s text.

Limited liability protection scope.

• The Act immunises public officials acting in good faith (s29(1)). That immunity does not extend to other actors, such as providers or individual practitioners. Providers should therefore maintain professional indemnity and risk management, as the Act’s protective clause does not shield private sector actors from civil or criminal exposure.

This section sets out concrete, statute-grounded steps and controls for NDIS providers, behaviour support practitioners and legal advisers to operationalise compliance.

1. Ensure correct actor identity and scope.

• Confirm that the service and the practitioner are within the Act’s application: the scheme applies to NDIS providers seeking to apply restrictive practices to participants (s4(1)). Where the participant is also subject to Part 4 of the Territory Disability Services Act 1993, treat the Territory Act as prevailing (s4(2)).

2. Prepare behaviour support plans to NDIS Rules standards.

• Use an NDIS behaviour support practitioner to develop the behaviour support plan in accordance with the Commonwealth NDIS Rules (s3 definition). Document how the plan integrates strategies intended to reduce or eliminate restrictive practices, consistent with the Act’s principles (s5) and the Senior Practitioner’s guidelines (s12, s16(b)).

3. Complete the approved form and required particulars.

• Apply to the Senior Practitioner using the approved form (s14(1)-(2)(a)). Include all particulars: the restrictive practice proposed (s14(2)(b)(i)), a copy of the behaviour support plan (s14(2)(b)(ii)), evidence of consultation with the participant and support persons (s14(2)(b)(iii)), details of the applying provider (s14(2)(b)(iv)), particulars of any restrictive practice applied in the prior 12 months (s14(2)(b)(v)), and any other relevant information or information prescribed by regulation (s14(2)(b)(vi)-(vii)).

4. Maintain and document consultation.

• The application must show the provider engaged in consultation with the participant and their family, carers, guardian or other relevant person about the proposed use of the restrictive practice (s14(2)(b)(iii)). Keep records of meetings, communications and consent processes to satisfy inspection or review requests.

5. Monitor timelines and respond promptly.

• If the Senior Practitioner requests further information, provide it within 28 days to avoid lapse of application (s14(3)-(5)). If the Senior Practitioner proposes an alternative restrictive practice, respond to the proposal within 28 days (s18(1)). Implement internal processes to track these statutory windows.

6. Design restrictive practice options to meet the statutory gates.

• Ensure any proposed restrictive practice is demonstrably necessary to prevent harm to the participant or others, and is the least restrictive approach reasonably available (s16(c)-(d)). Align the plan with the Act’s principles: least restriction, last resort, least time practical, and regular review (s5(2)(a)-(c), s5(3)).

7. Avoid prohibited practices.

• Do not seek authorisation for practices expressly prohibited by s17, including aversion, overcorrection, misuse of medication, denial of key needs (as defined at s6), practices for harassment or vilification or those that limit access to community, culture and language including interpreters (s17(a)-(f)). For persons under 18, do not request seclusion (s17(g)).

8. Prepare for inspection and oversight.

• The Senior Practitioner may inspect the place where the restrictive practice is to be applied before deciding (s14(6)). Ensure facilities, records and staff training are inspection-ready and consistent with the behaviour support plan and submitted particulars.

9. Manage information securely and lawfully.

• Implement data-handling protocols recognising s30’s confidentiality offence. Train staff on what information may be disclosed, the limited exceptions for disclosure connected to administration or to persons otherwise entitled, and the strict liability element in s30(2). Obtain clear, documented consent where disclosure relates to a person and consent could be a defence (s30(3)).

10. Avoid providing misleading information.

• Under s31, do not intentionally provide misleading information to persons acting in an official capacity under the Act. For documents that may contain errors, proactively flag misleading aspects to the recipient and supply corrective information where reasonably possible to rely on the statutory defence in s31(3).

11. Prepare for review and appeal.

• If a decision is adverse, affected persons may apply for internal review to the CEO within 28 days of notice (s22(2)), noting participants and guardians have a broader right to seek review during an authorisation period where a decision authorised a restrictive practice (s22(3)). Internal reviewers must follow natural justice (s25(1)(c)), and the CEO may affirm, vary or substitute a decision, not being bound by the internal reviewer’s recommendation (s26). Plan appeals to NTCAT where appropriate (s28). Keep a clear record trail of procedures followed, clinical reasoning and consultations to support review.

12. Train governance and clinical staff.

• Ensure the Senior Practitioner’s guidelines (when issued under s12) are adopted into provider practice. Train staff on legislative principles (s5), the required content of behaviour support plans (s3), prohibited practices (s17), and the least-restrictive requirement (s16). Ensure that delegated clinical decisions or authorisation-related tasks are carried out by persons with the requisite qualifications and experience, consistent with s13 and s23.

13. Maintain indemnity and compliance policies.

• Since s29 limits liability for certain public officials only, providers should maintain professional indemnity insurance and internal compliance policies that align with the Act. Consider regular audits of behaviour support plans, restrictive practice use, consultation records and incident reporting.

14. Monitor delegated and regulatory changes.

• Because the Act contemplates guidelines, approved forms and regulations (s12, s32, s33) and references Commonwealth instruments, design compliance processes to monitor updates in Senior Practitioner guidelines, approved forms issued by the CEO, Territory regulations and relevant Commonwealth NDIS Rules. Update plans and organisational practice promptly when those instruments change.

Following these concrete steps will align provider practice with the statutory architecture of the Act. The critical practical controls are documentation, timely responses to information requests, adherence to NDIS Rules standards for behaviour support plans, avoidance of prohibited practices, and robust handling of confidential information.