National Disability Insurance Scheme (Restrictive Practices and Behaviour Support) Rules 2018

Three primary classes are regulated.

First, registered NDIS providers who deliver supports involving regulated restrictive practices to participants. This includes any provider whose registration groups encompass behaviour support or daily living supports where restrictive practices may arise. Their registration is conditioned on compliance with ss 8–15. Breach exposes them to civil penalty proceedings (note to s 7).

Second, specialist behaviour support providers—a sub-class of registered NDIS providers whose registration explicitly includes specialist behaviour support services. They are subject to the stricter Part 3 conditions (ss 17–24). Only they may develop plans containing regulated restrictive practices, and only through NDIS behaviour support practitioners (defined in s 5 as persons the Commissioner considers suitable to conduct functional behavioural assessments and draft plans).

Third, NDIS behaviour support practitioners themselves. While not directly registered, their suitability is determined by the Commissioner. They must perform functional behavioural assessments for comprehensive plans (s 20(5)), consult participants, families, guardians and other providers (s 20(3)–(4)), and ensure plans meet the detailed content requirements of s 21.

Participants with disability, their families, carers and guardians are not directly regulated but hold important rights to consultation in accessible formats (s 20(4)) and to have plans that prioritise positive strategies and community participation (s 21(4)). The Rules interact with State and Territory guardianship and mental health legislation; concurrent operation is preserved by s 4 and s 207 of the Act.

Transitioned RAC providers receive distinct treatment under s 30 because many entered the NDIS market with pre-existing restrictive practice regimes from aged care regulation. They are deemed registered NDIS providers under the Transitional Rules and must notify, seek authorisations and develop plans by fixed 2021 deadlines.

Duties on registered NDIS providers (Part 2):

• Cease use where prohibited (s 8(2)).
• Obtain and lodge authorisations (s 9(2)).
• Use only per behaviour support plan and notify specialists of changed circumstances (s 10(2)).
• Facilitate interim and comprehensive plans within statutory timelines where restrictive practices continue (ss 11–13).
• Monthly (or fortnightly) reporting in approved form (s 14).
• Maintain detailed written records for seven years covering rationale, less restrictive alternatives tried, impact, injuries, witnesses and post-incident actions (s 15).

Duties on specialist behaviour support providers (Part 3):

• Deliver services only through NDIS behaviour support practitioners (s 17).
• Develop plans only by qualified practitioners (s 18).
• Meet strict development timelines (s 19).
• Follow authorisation processes, reduce/eliminate use, consult stakeholders in accessible formats, undertake functional behavioural assessment for comprehensive plans (s 20).
• Ensure plans contain evidence-based proactive strategies, clearly identify the practice, justify it as last resort/least restrictive/proportionate/time-limited, and promote community participation (s 21).
• Review at least annually or on changed circumstances (s 22).
• Use approved form and lodge every plan (including reviewed plans) with the Commissioner (ss 23–24).

Rights and protections:

• Participants must be consulted and provided information in accessible formats before inclusion of a restrictive practice (s 20(4)).
• Plans must address the function of behaviour and prioritise positive supports (s 21(2)).
• The Commissioner can request evidence of compliance (ss 10(3), 11(3), 12(3), 13(3)) and issue notices terminating transitional relief (ss 26–28, 30).
• False or misleading information supplied to the Commissioner attracts Criminal Code Part 7.4 offences.

The Rules do not themselves create offences. Instead, breach of a registration condition is a civil penalty provision under s 73J of the Act. The Commissioner may impose pecuniary penalties or take other regulatory action (cancellation/suspension of registration under the Act).

Reporting failures or inadequate records may also constitute reportable incidents under the Incident Management and Reportable Incidents Rules 2018, triggering separate notification obligations (note to s 14(1)). Part 7.4 of the Criminal Code applies to statements or documents provided to the Commissioner (notes to ss 10–13, 28, 30).

Enforcement is supported by the Commissioner’s power to approve forms (ss 14(3), 23(2)), request compliance demonstrations, issue notices ending transitional relief, and monitor through lodged plans and monthly reports. The seven-year record retention period (s 15(3)) facilitates audits and investigations.

The Rules sit within a complex federal–state architecture. Section 4 expressly notes that obligations do not displace concurrent State or Territory laws (referencing s 207 of the Act). Where a State prohibits a practice, the NDIS provider is banned (s 8). Where a State has an authorisation process (e.g. guardianship board approval, senior practitioner authorisation), it must be followed and evidence lodged (ss 9, 11, 12, 20(2), 21(3)(b)).

Interaction with the NDIS Act is direct: conditions are imposed under s 73H, breach attracts s 73J penalties, plans relate to reportable incidents under s 73ZK(4) and the Incident Management Rules. The Provider Registration and Practice Standards Rules 2018 impose additional conditions; the Transitional Rules deem certain providers registered and define “transitioned RAC provider”.

State and Territory mental health, disability and aged care legislation continue to apply. For example, chemical restraint exclusions mirror mental health prescribing rules. Functional behavioural assessments must take account of previous assessments (s 20(3)(b)).

The Rules also interact with the NDIS Code of Conduct and NDIS Practice Standards, particularly the positive behaviour support standards. The Commissioner’s policies on suitability of NDIS behaviour support practitioners provide further administrative overlay.

The Rules were made in 2018 to coincide with full scheme rollout. Significant amendments occurred via the 2020 transitional provisions for RAC providers (s 30), reflecting the delayed transition of aged care participants into the NDIS. These inserted fixed dates (1 December 2020 start, staggered plan and authorisation deadlines through June 2021) to manage the large cohort of aged care residents with pre-existing restrictive practices.

Further minor updates have clarified reporting frequencies for short-term approvals (s 14(1)(b)) and reinforced lodgement obligations regardless of State authorisation status (s 24(2)). These changes respond to implementation experience: early data showed high volumes of unregulated use during transition, necessitating tighter notification and plan development timelines.

The changes reflect the policy drive to close loopholes during jurisdictional transitions while maintaining the overarching goal of reduction and elimination. No fundamental rewrite of the core Part 2 or 3 obligations has occurred; amendments have been surgical.

To date there has been limited reported litigation directly testing the Rules. Most disputes arise in administrative review of Commissioner decisions (e.g. registration conditions, practitioner suitability) before the Administrative Appeals Tribunal. Key controversies have centred on:

• The interaction between NDIS restrictive practice authorisations and State senior practitioner regimes, particularly where State processes are slower or more onerous.
• Whether “environmental restraint” is over-broadly interpreted (e.g. locked doors on shared homes).
• Adequacy of consultation with participants who have communication impairments—s 20(4) requires “appropriately accessible format” but disputes arise over what satisfies this.
• Use of chemical restraint in aged care settings during transition, where psychiatric prescribing may blur the treatment-versus-behavioural-purpose line (see s 6(b) exclusion).

In one notable Federal Court matter concerning reporting obligations, the Court confirmed that monthly reports must capture every instance even if authorised under State law, reinforcing the national monitoring purpose (grounded in ss 14 and 24(2)). Tribunals have emphasised that s 21(3) “last resort” and “least restrictive” tests require documented evidence of exhausted positive strategies; mere assertion is insufficient.

Controversies also exist in the disability sector about the Commissioner’s practitioner suitability criteria remaining unpublished in full, creating transparency concerns. Stakeholders argue the 12-month transitional relief periods have sometimes been used to delay genuine reduction efforts.

Most practitioners miss that transitional relief is not automatic—providers must actively notify within strict windows (3 months for s 26, 1 month for s 28, 1 January 2021 for RAC under s 30) using the Commissioner’s exact form. Failure ends the relief period immediately. Many RAC providers discovered too late that pre-existing aged care authorisations did not satisfy NDIS lodgement requirements.

Another trap is the “single emergency use” carve-out in s 9(2)(a). It applies only to the first unplanned use; any subsequent use, even if similar, triggers full authorisation and plan obligations. Providers have been penalised for treating repeated “emergencies” as exempt.

The distinction between interim and comprehensive plans is frequently misunderstood. An interim plan can authorise continued use but must still meet consultation, least-restrictive and proportionality requirements (ss 20–21 apply to both). Commissioners have rejected plans that simply “park” the issue for six months.

Record-keeping under s 15 is exhaustive; omission of “less restrictive options considered” has led to compliance notices. The seven-year retention applies even if the provider later exits the NDIS market.

Finally, State authorisation does not excuse NDIS lodgement (s 24(2)). Providers who obtain State approval but fail to lodge the plan with the Commissioner remain non-compliant. This dual-reporting obligation surprises providers operating across borders.

Compliance requires a systemised approach.

1. Map jurisdictional rules: Maintain a register of each State/Territory’s authorisation processes, prohibited practices and senior practitioner regimes. Update whenever local legislation changes.

2. Practitioner accreditation: Only engage practitioners the Commissioner has assessed as suitable. Retain evidence of this assessment.

3. Incident response protocol: On any use of a regulated restrictive practice, immediately:

   • Record all s 15 elements contemporaneously.
   • Determine whether State authorisation is required and obtain it.
   • Notify specialist behaviour support provider.
   • If the use is a reportable incident, comply with separate incident Rules within 24 hours.

4. Plan development pathway:

   • Engage specialist provider within days.
   • Ensure functional behavioural assessment occurs before comprehensive plan.
   • Document evidence of consultation in accessible formats, consideration of previous assessments, environmental changes, and exhaustion of positive strategies.
   • Draft in Commissioner-approved form.
   • Lodge within “as soon as practicable” (target <7 days).

5. Reporting cadence: Implement automated monthly extracts from incident records. For short-term approvals, calendar fortnightly reports. Retain copies of all approved forms and Commissioner correspondence.

6. Governance and audit: Conduct internal audits against ss 10–13 decision tree at least quarterly. Review every comprehensive plan annually (s 22). Train staff on the narrow physical restraint exclusion (reflexive guiding only).

7. Transitional management: For new market entrants or RAC providers, trigger notification obligations immediately upon transition date. Track plan development against statutory deadlines; apply for Commissioner extensions only where genuinely justified.

8. Documentation culture: Every decision to use a practice must reference the current plan section authorising it, the risk of harm prevented, proportionality, and duration. “Why this was the least restrictive option” must be explicit.

Organisations that integrate these steps into electronic client management systems, maintain a dedicated positive behaviour support lead, and conduct annual mock Commissioner audits achieve sustained compliance. The Commissioner’s guidance materials on plan templates and reporting portals should be treated as mandatory reading, not optional. Regular legal review of updated State authorisation processes is essential to avoid inadvertent breach of condition s 9.