Restrictive Practices Training for NDIS Workers: What the Rules Require

There are shifts where someone is hurting and the options feel narrow. There are also team leaders standing in front of an auditor trying to explain why the worker who used a physical hold that morning had never seen the behaviour support plan they were supposed to be implementing. Both of those situations are avoidable, and both of them come back to training, or the absence of it.

Restrictive practices training for NDIS workers isn't a nice-to-have. It's a legal obligation with specific rules attached to it, a reporting framework behind it, and an enforcement environment that has grown significantly harder over the past year. The Commission's own data shows enforcement actions in this area rose by 214 per cent year on year heading into 2025-26, and it named regulated restrictive practices as its single highest compliance priority. So let's go through what the rules actually say, who they apply to, and what your workers need to know before they walk into a shift where a restrictive practice might be used.

What counts as a regulated restrictive practice

Before you can train workers in restrictive practices, you need a clear picture of what the rules cover. The NDIS (Restrictive Practices and Behaviour Support) Rules 2018 define a restrictive practice as any practice or intervention that has the effect of restricting the rights or freedom of movement of a person with disability. There are five categories regulated under the rules:

All five require state or territory authorisation and a current behaviour support plan before they can be used. If your service touches any of these, even occasionally, your workers need specific training in what they are, what alternatives must be tried first, and exactly what conditions apply to any authorised practice in the plan they're working with.

Who the rules apply to: implementing providers

This is where a lot of providers trip up. People assume the restrictive practices rules only apply to specialist behaviour support providers, so they tune out the detail. They don't. The rules apply to any registered NDIS provider whose workers carry out regulated restrictive practices during support delivery. The Commission calls these implementing providers.

That means SIL providers. Day program operators. Community access providers. In-home support services. If your workers deliver supports to someone whose behaviour support plan includes an authorised restrictive practice, your service is an implementing provider, full stop, regardless of whether your primary registration group has anything to do with behaviour support. The obligations apply to the practice, not the registration category.

What the training obligation actually says

The NDIS Practice Standards supplementary module on implementing behaviour support sets the quality indicators implementing providers are audited against. One of those indicators is that relevant workers have access to appropriate training to build their skills in positive behaviour support and restrictive practices, and that workers are supported to develop and maintain the skills needed to consistently implement the strategies in each individual's behaviour support plan, consistent with the Positive Behaviour Support Capability Framework.

That last phrase matters. The training has to be consistent with the specific plan. Generic training is not enough on its own, and in enforcement findings, generic WHS or manual handling training alone has been explicitly called out as insufficient. What workers need to know before implementing a restrictive practice is:

• The specific practice they may be asked to use, and why it has been authorised for that person
• The positive and proactive strategies in the behaviour support plan that must be tried first
• The conditions under which the practice is authorised (triggers, duration, environment, de-escalation steps)
• How to document and report each use accurately, including if something goes wrong or the practice is used outside the authorised conditions
• The rights of the person being supported and how to minimise impact on dignity during and after

That is not a one-off induction point. It needs to be refreshed when the plan changes, when a person's circumstances change, and at a reasonable interval even when nothing changes, because staff change, memories fade, and plans get filed away and forgotten.

Authorisation and the plan: what has to exist before training even matters

Training workers in a restrictive practice that hasn't been properly authorised doesn't make it compliant. It makes it a trained-for unauthorised practice, which is arguably worse. The authorisation process runs parallel to training and both need to be in order.

Before any regulated restrictive practice can be used, the implementing provider must have a current behaviour support plan developed by an NDIS behaviour support practitioner, and authorisation from the relevant state or territory body. In most cases that means a guardianship tribunal or the person's guardian or nominee, depending on the practice type and the jurisdiction. Authorisation requirements vary by state and territory, which is one of the genuinely complicated parts of this, and it's worth knowing your jurisdiction's specifics rather than assuming a general rule applies everywhere.

Once authorisation exists and a behaviour support plan is in place, the implementing provider must lodge evidence of that authorisation with the NDIS Commission through the Commission portal. The plan also has to include a documented pathway for reducing or eliminating the restrictive practice over time. That's not optional, and auditors check for it.

Reporting: what you have to tell the Commission and when

Two reporting obligations apply to implementing providers, and both are easy to miss if you haven't built them into your incident management system from the start.

The first is monthly reporting. Every implementing provider must submit data through the Commission's portal tracking which regulated restrictive practices were used during the month, which individuals were involved, and the authorisation status of each practice. This is due even in months when no practices were used, and that zero return still has to be submitted.

The second is incident reporting. If a regulated restrictive practice is used without current authorisation, that's a reportable incident under the NDIS (Incident Management and Reportable Incidents) Rules 2018. You have five business days from becoming aware of it to report to the Commission. Five days sounds reasonable until a weekend and a public holiday eat into it and you realise you needed a process, not a good intention.

Workers need to understand both of these obligations, not just managers. If a support worker doesn't know that using a physical hold outside the conditions in the plan needs to be flagged immediately to their team leader, the five-day clock starts ticking without anyone knowing it has started.

What this means for your training program (practically)

This is where we get to what a provider actually needs to build rather than just what the rules say. Most of the obligations above point back to the same gap: workers who know a practice exists but don't know what the plan actually says about when and how to use it, what to try first, or what to do after. That's a training design problem as much as it is a policy problem.

A few things that tend to make the difference in practice:

• Plan-specific briefing before a worker starts with someone new. The induction to a support role should include time with the behaviour support plan, not just a copy handed over to read alone. Walk through it. Check comprehension.
• Regular refreshers that don't wait for incidents. Annual at minimum, and immediately after any plan review that changes strategies or practices. Don't wait for something to go wrong to find out a worker hadn't read the updated plan.
• Foundation-level knowledge across the whole team. Even workers who may never implement a restrictive practice need enough understanding of what the five practices are, why they're regulated, and what rights are engaged. That's where online learning fits genuinely well, building the conceptual foundation so that plan-specific training can go faster and land more deeply.
• Clear reporting pathways that workers can actually use at 10pm on a Saturday. A policy in a folder doesn't help a worker who used more force than the plan authorises and doesn't know who to call. Make the process simple and make it known.

CORA's behaviour support and crisis stream covers the foundational knowledge piece: what restrictive practices are, the rights framework they sit within, de-escalation principles, and how to read and implement a behaviour support plan. The courses are built to NDIS Practice Standards mapping, they run under an hour, and they work on a phone between shifts. That's not a substitute for plan-specific training and it's not a substitute for supervised skill-building where hands-on competency matters. It's the knowledge layer that makes the rest of your training more effective rather than starting from zero every time.

The thing compliance doesn't measure

Here's the honest version: you can have all of this in order, the authorisation, the plan, the training records, the monthly reports submitted on time, and still have workers who don't really understand why the strategies in a plan work the way they do, or who can't read the early signs that someone is escalating before a practice becomes relevant at all. Compliance is the floor. It tells you the minimum was met. It doesn't tell you the worker could keep the situation from getting there in the first place.

The providers who do this best aren't the ones with the thickest policy folders. They're the ones where team leaders can explain the reason behind the strategies, not just the steps, and where workers feel confident enough in their own skills that the regulated practice really is a last resort rather than a first response. That's a training quality question, and the Practice Standards framework is what gives you the structure to build toward it.

Sources and further reading

• Behaviour support and restrictive practices, NDIS Quality and Safeguards Commission
• Rules for implementing providers, NDIS Quality and Safeguards Commission
• Supplementary module: implementing behaviour support plans, NDIS Practice Standards
• National Disability Insurance Scheme (Restrictive Practices and Behaviour Support) Rules 2018, Federal Register of Legislation
• Positive Behaviour Support Capability Framework, NDIS Quality and Safeguards Commission

This guide is general information for NDIS providers, not legal or compliance advice. Always check the current requirements directly with the NDIS Quality and Safeguards Commission, because the detail does change.