I've been in rooms with support workers who have been in the sector for five years and can't name a single obligation from the Code of Conduct beyond "treat people with respect." That's not their fault. Most inductions hand them a PDF, ask them to sign it, and move on. The orientation module gets ticked, the certificate goes in the file, and nobody comes back to it until something goes wrong.
The Code isn't complicated. Seven obligations, all of them grounded in things a decent person would do anyway. But understanding them well enough to make a decision at 8pm on a Friday shift, when the situation isn't in the procedure manual, that's a different thing entirely. That gap is where most Code of Conduct failures actually live.
What the NDIS Code of Conduct is and who it covers
The NDIS Code of Conduct is set by the NDIS Quality and Safeguards Commission under the NDIS (Code of Conduct) Rules 2018. It defines the conduct, behaviour, and culture expected of everyone who delivers NDIS supports and services.
It applies to:
- All registered NDIS providers and their key personnel.
- Every worker delivering NDIS supports, whether employed directly or engaged as a contractor.
- Unregistered providers, following the expansion of mandatory registration that took effect from 1 July 2026.
That last point matters. If you are running a small SIL service that only recently came under mandatory registration, your workers are now subject to the same Code obligations as a large registered provider. The rules are the same. The training expectation is the same.
Not just frontline workers
The Code applies to all workers, not only support workers on shift. Managers, team leaders, admin staff, and volunteers who interact with the people you support are all in scope. If someone's conduct could affect the quality or safety of a person's support, they fall under the Code.
The seven obligations, and what they mean in practice
The Code contains seven obligations. They read clearly enough on paper. The translation to a real shift is where providers need to do more work than a single orientation module provides.
| Obligation | What it looks like on the floor |
|---|---|
| Act with respect for individual rights to freedom of expression, self-determination, and decision-making | Supporting someone to make their own choices, even ones you'd make differently, and not overriding preferences because it's easier or faster |
| Respect the privacy of people with disability | Not discussing a person's situation in shared spaces, handling records carefully, and understanding what can and can't be shared with family members |
| Provide supports and services in a safe and competent manner with care and skill | Only delivering supports you are trained and competent to deliver, and telling your supervisor if something is outside your skill level |
| Act with integrity, honesty, and transparency | Accurate incident reporting, honest time records, disclosing conflicts of interest, telling the truth when something goes wrong |
| Promptly raise and act on concerns about quality and safety | Speaking up when you notice a risk, not waiting to see if it resolves itself, and knowing who to tell |
| Take all reasonable steps to prevent and respond to violence, exploitation, neglect, and abuse | Recognising signs of harm, reporting incidents to the right people, and not staying silent when something looks wrong |
| Take all reasonable steps to prevent and respond to sexual misconduct | Understanding what constitutes sexual misconduct in a support relationship, reporting obligations, and appropriate boundaries |
Obligation three is the one that generates the most audit findings, because it connects directly to your training records. "Safe and competent" means a worker can only deliver a support they've actually been prepared for. If someone is supporting a person with complex dysphagia and their training record shows they completed the orientation module and a generic induction, that is not evidence of competence. It is evidence of a gap.
The Worker Orientation Module: what it does and what it doesn't
The NDIS Worker Orientation Module, titled Quality, Safety and You, is the Commission's free, interactive online course covering a worker's obligations under the Code. Registered providers are required to include it in their induction process. It takes around 90 minutes, and the certificate is transferable between providers and does not expire.
A few things worth knowing:
- If a new worker did it at a previous employer, you don't need them to repeat it. Get a copy of the certificate and keep it on file.
- The module is foundational. It tells workers what the obligations are. It does not build the judgement to apply them when a situation is unclear, the person is escalating, and it's the end of a long shift.
- Completing the module is not, on its own, evidence that a worker is competent to deliver the supports in your service. The Practice Standards expect more than that.
Treat it as the starting line. Not the whole race.
How the Code connects to the Practice Standards
The Code and the NDIS Practice Standards work together. The Code sets the conduct obligations. The Practice Standards set the quality indicators your service has to meet. Both are assessed at audit, and your training program needs to address both.
The practical overlap looks like this: the Code says workers must act with care and skill. The Practice Standards say your organisation must ensure workers have the skills and knowledge to deliver the supports in your service. So your training needs to cover the obligations themselves, and the specific capability each worker needs for the people they actually support.
That's the piece most services underinvest in. A generic induction ticks the orientation module box. It does not tick the "workers are competent for this person's specific needs" box, and auditors know the difference.
What ndis code of conduct training actually needs to cover
Good Code of Conduct training does three things. First, it makes the obligations concrete so workers can recognise them in real situations, not just recite them. Second, it builds the judgement to act on them when the situation is ambiguous. Third, it connects workers to your organisation's own reporting processes, so they know exactly what to do and who to tell when they see something.
For registered providers, that means your training program should include:
- The orientation module at induction, with the certificate recorded.
- Organisation-specific content covering your incident reporting pathway, your escalation process, and your approach to safeguarding.
- Condition-specific and role-specific training tied to the people each worker supports, so that "safe and competent" is evidenced by more than a one-size-fits-all module.
- Refresher training when guidance changes, when a worker's role changes, or when an incident or near-miss reveals a gap.
None of that requires a complicated system. It requires a deliberate plan, and records that show you followed it.
What auditors actually check
At a compliance audit, the Code of Conduct comes up in two places. The first is induction: did every worker complete the orientation module before or shortly after starting? The second is broader: does your organisation have processes that operationalise the seven obligations? That means incident management, reporting pathways, complaint handling, and worker conduct policies that reflect the Code, not just reference it.
The most common finding isn't that a provider doesn't know the Code exists. It's that the training stopped at the orientation module and the policy documents, and nobody built the bridge between "here's what the Code says" and "here's what that looks like on your shift, at this service, with these people." That bridge is what separates compliance from capability.
Map your team's training in two minutes
Tell the Pathway Builder who your workers support, and it maps the courses they need from CORA's NDIS-aligned library. Covers Code of Conduct foundations through to role-specific capability. Free, no sign-up required.
Try the Pathway Builder Browse the libraryCommon questions
Who does the NDIS Code of Conduct apply to?
The Code applies to all registered NDIS providers, their key personnel, and every worker delivering NDIS supports and services. Since July 2026, it also applies to unregistered providers following the expansion of mandatory registration. Frontline support workers, managers, admin staff, and volunteers who interact with the people a service supports are all in scope.
What is the NDIS Worker Orientation Module and is it mandatory?
Quality, Safety and You is the Commission's free online course covering a worker's obligations under the Code. Registered providers are required to include it in their induction process. It takes around 90 minutes. The certificate does not expire and is transferable between providers, so if a worker did it at a previous employer, you don't need them to repeat it. Just get a copy of the certificate.
What are the seven obligations of the NDIS Code of Conduct?
The seven obligations are: (1) act with respect for individual rights to freedom of expression, self-determination, and decision-making; (2) respect the privacy of people with disability; (3) provide supports in a safe and competent manner with care and skill; (4) act with integrity, honesty, and transparency; (5) promptly raise and act on concerns about quality and safety; (6) take all reasonable steps to prevent and respond to violence, exploitation, neglect, and abuse; and (7) take all reasonable steps to prevent and respond to sexual misconduct.
How does a provider demonstrate Code of Conduct compliance at audit?
At audit, you need records showing every worker completed the orientation module, evidence that your induction and ongoing training covers the seven obligations, and clear processes for raising concerns, responding to incidents, and managing worker conduct. Training records should link each worker to their completion date and the specific supports they deliver. The Practice Standards sit above the Code, so your evidence should connect to both.
Sources and further reading
- NDIS Code of Conduct, NDIS Quality and Safeguards Commission
- NDIS Code of Conduct Guidance for NDIS Providers (April 2024), NDIS Quality and Safeguards Commission
- NDIS Code of Conduct Guidance for Workers (April 2024), NDIS Quality and Safeguards Commission
- Worker training modules (Quality, Safety and You), NDIS Quality and Safeguards Commission
- NDIS Practice Standards, NDIS Quality and Safeguards Commission
This guide is general information for NDIS providers, not legal or compliance advice. Always check the current requirements directly with the NDIS Quality and Safeguards Commission, because the detail does change.
← Back to all guides