The Compliance Problem NDIS Providers Actually Have
Running supports under the NDIS is a workforce compliance job wearing a scheduling job's clothes. The NDIS Quality and Safeguards Commission sets requirements on worker screening, incident reporting and staff qualifications, and the penalty for getting them wrong is not a fine. It is your registration.
Here is how it usually goes wrong, and it is almost never dramatic. A support coordinator fills a Saturday gap at 4pm on a Friday. The worker they grab is competent, experienced and well liked by the participant. Their Worker Screening clearance lapsed eleven days ago. Nobody noticed, because the clearance was issued in 2021 and five years is long enough that it fell out of everyone's working memory.
That is the shape of the risk. Not bad actors, just a renewal date nobody was watching while covering a shift under time pressure.
Generic scheduling tools cannot help with this, because they have no concept of a credential. They will let you publish that Saturday shift without a murmur. A calendar that sends push notifications is not compliance software, and NDIS providers who treat it as one are carrying risk they have not priced.
Worker Screening and the Credentials You Have to Watch
The NDIS Worker Screening Check assesses whether a person working with participants poses an unacceptable risk to their safety. Under the NDIS (Worker Screening) Act 2020, registered providers must ensure workers in risk-assessed roles hold a valid clearance before they start. That obligation sits with you, not the worker, which is the part providers most often misunderstand.
The reason manual tracking fails is not laziness. It is that credentials renew on completely unrelated cycles, so they never come up for review together.
| Credential | Typical validity | Why it lapses unnoticed |
|---|---|---|
| NDIS Worker Screening Check | 5 years | Renewal window is so long it leaves working memory entirely |
| First Aid certificate | 3 years | Never expires in the same year as screening, so reviews miss it |
| CPR certificate | 12 months | Renews annually while First Aid runs 3 years, so the two drift apart |
| Driver licence | Varies by state | Assumed current, rarely re-sighted after onboarding |
| Provider-specific training | Set by provider policy | Tracked in a separate system from everything above |
Five credentials, five different clocks, none of them synchronised. That is why the spreadsheet approach fails at around twenty staff, and why certificate and licence expiry tracking earns its place well before you think you need it.
One thing to be precise about, because it matters legally: software flags, it does not absolve. GetMyRoster stores each worker's clearance number and expiry date in one place, so the status is there to be checked before the roster goes out. Be clear about what that does and does not do: it removes the excuse that nobody could find the information. It does not watch the dates for you, so someone still has to look. It does not transfer your obligation under the Act to a vendor, and any provider treating a green tick in a roster tool as proof of compliance has misunderstood where the liability sits. Verify against the NDIS Worker Screening database, and note that a clearance can be suspended mid-term without the expiry date changing.
SCHADS Award Rules That Bite NDIS Rosters
Most NDIS support workers sit under the Social, Community, Home Care and Disability Services Industry Award (SCHADS, MA000100). It is arguably the most complex Modern Award in the country, and it is the single largest source of underpayment in the disability sector. Four provisions cause most of the damage.
Minimum engagement. Check which SCHADS stream your worker sits in before you assume a number. The minimum engagement period differs between the disability services, home care, and social and community services streams, and applying one stream's minimum across your whole workforce is a common and expensive error. This is the provision worth reading in the award text rather than taking from any blog, including this one. Our SCHADS Award rostering compliance guide works through the streams in detail.
Penalty rates. SCHADS applies penalties for evening and early morning work, Saturdays, Sundays and public holidays, with Saturday and Sunday rates well above ordinary time and public holidays higher again. For a provider rostering 24/7 supports, penalties are not an edge case in the labour budget, they are a large and predictable slice of it. Confirm current percentages against the award for the relevant financial year, since the Fair Work Commission adjusts rates annually.
Broken shifts. A worker doing a morning call and an afternoon call on the same day is on a broken shift and attracts an allowance. This is where in-home supports quietly leak money, because the two visits often get entered as unrelated shifts and the allowance never triggers.
Sleepovers. SCHADS treats a sleepover as a flat allowance for the overnight period plus ordinary rates for any active work performed during the night. If your rostering tool has no explicit sleepover shift type, someone is reconstructing this by hand every fortnight, and that person is making mistakes. Worth testing during any trial.
GetMyRoster calculates shift cost against SCHADS penalty rate and pay rate data so coordinators see a roster's real labour cost before publishing rather than discovering it in the pay run. Note that shift cost breakdowns sit on the paid plan, not the free tier. From there, approved hours export to Xero Payroll, or by CSV export to MYOB and QuickBooks with the penalty breakdown attached, which removes the re-keying step where underpayments are usually born.
Attendance Records That Survive an Audit
NDIS providers must keep records of supports delivered to each participant, including time, duration and nature of the support. Those records substantiate your claims and get examined during a Commission audit or after a complaint.
Paper timesheets do not hold up here. They are reconstructed from memory at the end of the week, they are trivially falsifiable, and retrieving eight months of them during an audit is its own small crisis. A GPS-verified time clock records the timestamp and location of each clock in and out against the scheduled site, and flags the mismatches, late starts, early finishes, wrong address, for coordinator review.
Two caveats worth stating plainly. GPS time clock is a paid feature, not part of the free plan. And GPS verification is not surveillance of your workforce, nor should it be sold to staff as such. It records shift boundaries at the participant's address, and the case you make to workers should be that it protects them too, because an accurate record defends a support worker against a disputed claim just as readily as it defends the provider.
Combined with credential tracking and rostered hours, that attendance data gives you a participant-level record of supports delivered that will stand up to scrutiny. Providers weighing options across the wider market can compare platforms in our guide to the best rostering software in Australia.
Setting This Up Without Turning It Into a Three-Month Project
Most providers stall here. The credential data lives in three places, nobody owns it, and the migration keeps getting deferred to next quarter. Four steps, in this order, and a small provider can be running inside a fortnight.
Audit the credentials before you touch the roster. Pull every worker's Worker Screening clearance number and expiry, First Aid, CPR and licence into one sheet. Do this first, because it is the step that surfaces the problem you did not know you had. Providers routinely discover two or three already-expired credentials during this pass. That discovery is the point, and it is better to find them on a Tuesday than during an audit.
Load the workers who are actually rostered. Not every name on the payroll. The casual who did four shifts in 2024 can wait. Get the active roster in, confirm the credential records are accurate, and expand from there.
Run one fortnight in parallel. Keep your existing process running alongside for a single pay cycle and reconcile the two at the end. Tedious, and worth it, because this is where you find out whether broken shifts and sleepovers are calculating the way you assumed. If the numbers match, you are done. If they do not, you would much rather learn that now.
Put a recurring review in the calendar and name who does it. A credential list nobody is accountable for is decoration. Decide who reviews expiries, how often, and how far ahead they act, thirty days out is a reasonable default for a five-year clearance. Write it into your policy rather than leaving it to whoever happens to see the notification.
The mistake worth avoiding: do not start with the most complex participant. Providers instinctively test new software against their hardest case, the 24/7 support with sleepovers, broken shifts and four workers rotating. It is the wrong first test. Start with a straightforward weekday roster, confirm the basics hold, and bring in the complex arrangements once you trust what the tool is telling you. For providers also running residential aged care supports, the same sequencing applies to compliant aged care and healthcare rostering.
Frequently Asked Questions
Try GetMyRoster Free
Built for Australian providers - keep Worker Screening clearances and credential expiry in one place, and roster against SCHADS rates. Certificate management is included free for up to 5 users at one location.
Start Free - No Credit Card