Managing reportable incidents: defensible triage workflows
A defensible NDIS incident triage workflow answers five questions in order, and records the answer to each: is the person safe, when did we become aware, is it reportable and in which category, which clock applies, and who has been told. The NDIS Commission counts its timeframes from when the provider becomes aware: 24 hours for most reportable incidents and 5 business days for an unauthorised restrictive practice.
Key takeaways
- Reportable incidents are notified through the NDIS Commission Portal: an Immediate Notification Form within the timeframe, then a 5 Day Form.
- Timeframes run from when the provider becomes aware, so record that time.
- The Commission’s incident management steps are: identify, support the person straight away, record, report and assess, investigate where needed, and use the learnings.
- A triage decision is easier to defend when the record shows what was known, when, who decided and why. That is NoteGate’s view of good practice.
What is a triage workflow for reportable incidents?
It is the fixed sequence a worker or supervisor follows from the moment something happens to the moment the Commission is notified or the decision not to notify is recorded. The Commission expects a registered provider to have an incident management system. Its steps are to identify the incident, support the impacted person straight away, record it, report and assess it, investigate where needed, and use the learnings.
What are the steps?
- Make the person safe. Support the person first. Everything else follows.
- Record when and how you became aware. The timeframes are counted from awareness.
- Classify. Is it a reportable incident, and which category?
- Set the clock. Use the table below.
- Escalate. A worker who is unsure whether something is reportable should escalate to the person responsible in the provider’s procedure.
- Notify. Log in to the NDIS Commission Portal and submit the Immediate Notification Form, then the 5 Day Form with additional information and actions taken.
- Investigate and learn. Record the outcome, and keep the record: 7 years for an incident record, and 7 years from the day the Commission is notified for a reportable incident record.
| Reportable incident | Notify within |
|---|---|
| Death, serious injury, abuse or neglect, unlawful sexual or physical contact or assault, sexual misconduct | 24 hours of becoming aware |
| Use of a restrictive practice that is unauthorised, or does not follow a behaviour support plan | 5 business days (the 5 Day Form only, if there is no immediate harm) |
What makes a triage decision defensible?
The Commission does not use that word, so this is NoteGate’s view: a decision is easier to defend when the record shows the awareness time, what was known at that time, who decided, what category and clock they chose, the time of notification and the actions taken. The record should be made when the events happen, not rebuilt afterwards.
Fictional example. No real participant data.
Resident had a fall. Bruise on arm. Supervisor told.
Aware 2:15 pm when the worker saw the fall. Bruise about 5 cm on the left forearm, no other injury visible, participant alert. First aid at 2:18 pm. Supervisor phoned 2:25 pm. Supervisor assessed at 2:40 pm: not a serious injury, not reportable, reason recorded, entered in the incident system.
What happens if a timeframe is missed?
The Commission states that failing to report within the timeframes might result in an infringement notice or other compliance actions.
Where does NoteGate help?
NoteGate Incident Reporting (IRA) gives workers a structured way to record an incident, links it to the related shift note and the risk register, and keeps the history. It supports the provider’s documentation. Classifying the incident and notifying the Commission through the Portal remain the provider’s responsibility. See NDIS incident triage software and the reportable incidents guide.
Frequently asked questions
When does the 24-hour reportable incident clock start?
When the provider becomes aware of the incident, not when it happened. The NDIS Commission calculates timeframes from awareness, so record when the provider learned of it.
What forms are used to notify the NDIS Commission?
The Immediate Notification Form, due within the timeframe, and the 5 Day Form with additional information and actions taken, both via the NDIS Commission Portal. For an unauthorised restrictive practice with no immediate harm, only the 5 Day Form is needed.
What if a worker is unsure whether an incident is reportable?
The Commission says the worker should escalate to the person responsible in the provider’s procedure.
How long must incident records be kept?
An incident record for 7 years from the day it is made, and a reportable incident record for 7 years from the day the Commission is notified, under the Incident Management and Reportable Incidents Rules 2018.
Sources
- Reportable incidents (NDIS Quality and Safeguards Commission, retrieved 25 September 2026)
- NDIS (Incident Management and Reportable Incidents) Rules 2018, sections 12 and 25 (Federal Register of Legislation, retrieved 25 September 2026)
- NDIS (Restrictive Practices and Behaviour Support) Rules 2018, section 15 Record keeping (Federal Register of Legislation, retrieved 25 September 2026)
Related
Record an incident so the timeline holds up
See how NoteGate Incident Reporting links an incident to the shift note and risk register.
Book a 20-minute walkthroughChoose a plan