NDIS Code of Conduct Training: What Workers Need (2025 Guide)

Every person working in the NDIS must understand their obligations under the Code of Conduct. However, knowing the rules exists in theory is very different from applying them in practice. That is precisely why NDIS code of conduct training is not optional — it is a fundamental part of every provider’s legal obligations.

This guide covers everything providers and workers need to know in 2025. It explains what training must cover, how to deliver it effectively, and how to document it for compliance purposes. Whether you are establishing a new training program or reviewing an existing one, this guide provides a practical roadmap.

What Is the NDIS Code of Conduct?

The NDIS Code of Conduct is a set of legally binding obligations that apply to all providers and workers delivering NDIS supports and services. It applies to registered and unregistered providers alike, as well as sole traders, contractors, and volunteers who work with NDIS participants.

The Code establishes seven core obligations. All workers must:

• Act with respect for participant rights to freedom of expression, self-determination, and decision-making
• Respect participant privacy
• Deliver supports in a safe and competent manner with care and skill
• Act with integrity, honesty, and transparency
• Promptly raise and act on concerns about safety and quality
• Take all reasonable steps to prevent and respond to violence, exploitation, neglect, and abuse
• Take all reasonable steps to prevent and respond to sexual misconduct

For a comprehensive breakdown of each obligation, see the Inficurex NDIS Code of Conduct complete guide for providers. The Code works alongside the NDIS Practice Standards, which set quality benchmarks for registered providers and inform the scope of training content.

Why NDIS Compliance Training Is Required

Legal Obligations for Providers

Providers have a direct obligation under the NDIS Act to ensure their workers understand and comply with the Code of Conduct. This obligation is not simply implied — the NDIS Practice Standards explicitly require that providers have systems in place to support worker performance, which necessarily includes training.

The Practice Standards require registered providers to demonstrate that workers are appropriately inducted, supervised, and supported. Auditors assess training records as part of every certification and verification audit. Providers without documented training programs consistently receive non-conformances during these audits.

Connection to the Practice Standards

Several Practice Standards modules directly require worker competence that can only be achieved through training. These include:

• Rights and Responsibilities: Workers must understand participant rights and how to support self-determination.
• Governance and Operational Management: Providers must ensure workers are aware of policies and procedures relevant to their roles.
• Support Provision Environment: Workers must be able to provide supports safely, which requires competency training.
• Safeguarding: Workers must know how to recognise and respond to abuse, neglect, and exploitation.

Failing to provide adequate NDIS compliance training leaves providers exposed during audits and increases the risk of a Code of Conduct breach. It also creates a higher risk of harm to participants, which is the issue the training system is ultimately designed to prevent.

What NDIS Code of Conduct Training Must Cover

Effective NDIS code of conduct training is not a single, generic session. It must address specific topic areas that are directly relevant to the obligations workers must meet. Below is a breakdown of the key content areas that every training program should include.

The Seven Code of Conduct Obligations

Workers need a clear, practical understanding of each obligation. Training should not simply read out the list. It should explain what each obligation means in a support worker’s daily role, using scenarios and examples that reflect real situations workers encounter.

For example, “acting with integrity and transparency” should be explained in terms of what workers must disclose to supervisors, what conflicts of interest look like, and what honesty means when a participant asks about their support budget.

Participant Rights and Self-Determination

Workers must understand that participants have the right to make decisions about their own lives — even decisions that workers might disagree with. Training must cover the concept of self-determination, how to support informed decision-making, and how to raise concerns about capacity without overriding a participant’s choices.

This topic directly intersects with the Practice Standards module on rights and responsibilities. Workers should leave training able to explain what they would do if a participant made a decision they believed was risky.

Recognising and Responding to Abuse, Neglect, and Exploitation

This is one of the most critical components of any code of conduct induction. Workers must be able to identify the signs of abuse, neglect, and exploitation — including financial abuse, emotional abuse, physical abuse, and sexual misconduct — and know exactly how to report what they observe.

Training should cover both reporting to the provider (internal escalation) and reporting to the NDIS Commission. Workers should understand that failure to report is itself a breach of the Code. For detailed reporting obligations, see the NDIS reportable incidents guide.

Privacy and Confidentiality

Workers handle sensitive personal information about participants every day. Training must cover what information is confidential, how it can be stored and shared, and what a privacy breach looks like. Workers should understand their obligations under the Privacy Act as well as the NDIS Code of Conduct.

Practical examples are important here. Training should address questions like: Can I discuss a participant’s situation with a family member? Can I take a photo of a participant for the file? What do I do if I accidentally share information with the wrong person?

Complaint Handling and Raising Concerns

Workers must know how to raise concerns about safety, quality, or their own conduct — and how to support participants who wish to make a complaint. Worker training requirements in this area include understanding the provider’s internal complaint process, the participant’s right to complain externally to the Commission, and the worker’s obligation to act on concerns promptly.

Training should make clear that raising concerns is not disloyalty. It is a legal obligation. Workers who witness a breach and fail to report it are themselves at risk of regulatory action.

Mandatory Reporting Obligations

Not every concerning situation must be reported to the NDIS Commission — but some absolutely must. Workers need to understand which incidents are reportable, what the timeframes are, and what happens if they fail to report.

Providers should link this training directly to their incident management procedures. Workers who understand how incidents flow through the system are more likely to report promptly and accurately.

Conflict of Interest and Boundaries

Workers in close support roles can develop strong relationships with participants. Training must address professional boundaries, what constitutes a conflict of interest, and how to manage situations where personal and professional interests overlap. This is especially relevant for workers who also act as informal supports in a participant’s life.

How to Deliver Effective NDIS Code of Conduct Training

The format of training matters as much as the content. Workers learn more effectively when training is engaging, relevant, and reinforced over time. Providers have considerable flexibility in how they deliver NDIS compliance training.

Training Delivery Methods

The NDIS Commission does not prescribe a specific delivery method. What matters is that training achieves its objective: workers who genuinely understand their obligations and can apply them in practice.

Using Scenarios and Case Studies

Abstract principles are difficult to retain. Training that uses realistic scenarios — situations workers actually encounter — is far more effective. Scenarios should reflect the specific types of supports your workers provide and the participant cohorts you work with.

For example, a support worker in a community access role should work through scenarios involving decision-making in public settings, managing risk when a participant wants to do something potentially unsafe, and how to respond if another member of the public makes an inappropriate comment to a participant.

Training Frequency

Code of conduct induction is the starting point. However, it is not sufficient on its own. Regular refresher training reinforces the key obligations and addresses any changes to policies, legislation, or Commission guidance.

Most providers conduct refresher training at least annually. Higher-risk roles — such as those involving overnight supports, behaviour support, or working with participants with complex needs — benefit from more frequent training, such as every six months.

Training During Induction vs Ongoing Training

The distinction between code of conduct induction training and ongoing refresher training is important. Both serve different purposes and should be structured differently.

Code of Conduct Induction Training

Induction training must be completed before a new worker begins delivering supports. It is the foundation of the worker’s understanding of their legal obligations. Induction training should cover all seven Code of Conduct obligations in detail, the provider’s specific policies and procedures, reporting obligations, and who to contact if a concern arises.

Induction is also the time to confirm that workers have completed their NDIS Worker Screening Check and that the result has been recorded. No risk-assessed worker should begin work before screening is confirmed. See the NDIS compliance checklist for a full list of induction requirements.

Key induction training components include:

• Code of Conduct obligations and what they mean in practice
• Participant rights and self-determination
• Abuse and neglect recognition and reporting
• Privacy and confidentiality requirements
• The provider’s complaint and feedback process
• Incident reporting obligations and procedures
• Who to contact for support or guidance

Ongoing and Refresher Training

Ongoing training reinforces the foundation established at induction. It also allows providers to address specific incidents, emerging risks, or changes in legislation. Refresher training should not simply repeat the induction session verbatim. Instead, it should build on workers’ existing knowledge and address any gaps identified through supervision or incidents.

Triggers for additional training outside the regular cycle include:

1. An incident involving a Code of Conduct obligation: If an incident reveals a gap in understanding, targeted training should follow promptly.
2. A change in legislation or NDIS Commission guidance: Workers must be updated when the rules change — even if the change seems minor.
3. A new type of support being introduced: If the provider begins delivering a new service type, relevant training must be provided before workers begin that work.
4. Individual performance concerns: Where supervision identifies that a worker is struggling with a specific obligation, targeted coaching or additional training should be provided.
5. Annual review cycle: All workers should complete a full refresher at least once per year, regardless of whether any specific trigger applies.

Documenting Training for NDIS Commission Audits

Training records are one of the most frequently requested documents during NDIS Commission audits. Strong documentation demonstrates that the provider takes its worker training requirements seriously and provides a defensible record in the event of a complaint or investigation.

What Records Must Be Kept

At minimum, providers should maintain the following training records for every worker:

• Name and date of training completed
• Topic areas covered in each training session
• Delivery method used (face-to-face, online, workshop, etc.)
• Name of the trainer or the training platform used
• Confirmation of worker comprehension (quiz results, sign-off, or supervisor observation record)
• Date of next scheduled refresher training

Records should be stored securely and must be accessible for audit purposes. Paper-based records are acceptable, but digital systems are far more reliable for ensuring records do not go missing and that expiry dates are tracked automatically.

Sign-Off and Attestation

Workers should sign or otherwise confirm that they have completed training and understand their obligations. Digital sign-off is acceptable. An attestation record — a written statement from the worker confirming they understand the Code of Conduct — provides additional evidence for auditors.

Linking Training Records to the Practice Standards

When preparing for a certification audit, map your training records to the specific Practice Standards modules they address. For example, safeguarding training maps to the module on preventing abuse and neglect. Rights training maps to the rights and responsibilities module. This makes the connection between your training activities and your Practice Standards compliance clear and compelling for auditors. See the NDIS Practice Standards guide for full module details.

Common Questions About Code of Conduct Training

How often should code of conduct training be done?

NDIS code of conduct training should be completed at induction before a worker begins delivering supports. After induction, refresher training is recommended at least annually. Some providers run half-yearly refreshers for higher-risk roles. Additional training should be provided whenever a relevant incident occurs, legislation changes, or individual performance concerns are identified.

Is code of conduct training mandatory?

Yes. Providers are legally required under the NDIS Code of Conduct and Practice Standards to ensure their workers understand and comply with the Code. This obligation implicitly requires training. Registered providers must demonstrate adequate worker training during NDIS Commission audits. Failure to provide training can result in non-conformance findings or, in more serious cases, regulatory action.

What is the difference between induction training and ongoing training?

Induction training covers all Code of Conduct obligations and provider policies before a new worker begins delivering supports. Ongoing training reinforces this knowledge through regular refreshers and targeted sessions. Both forms of training are necessary — induction alone is not sufficient for ongoing compliance.

Can online training satisfy the NDIS code of conduct training requirement?

Yes, provided the training covers all required content areas, is appropriate to the worker’s role, and completion is documented. Online modules must be engaging and scenario-based to be effective. A simple slide deck with no assessment is unlikely to demonstrate adequate training during an audit.

How Inficurex Helps Providers Manage Training

Managing NDIS compliance training across a workforce of any size requires systems that track completion, send reminders, and produce audit-ready reports at a moment’s notice. Manual spreadsheets and paper files create gaps, miss expiry dates, and consume significant administrative time.

Inficurex is built specifically for NDIS providers. The platform helps providers:

• Track training completion for every worker against required topics
• Set automatic reminders for annual refresher training due dates
• Store training records securely with digital sign-off functionality
• Generate training compliance reports for NDIS Commission audits
• Link training records to NDIS Practice Standards modules for audit mapping
• Monitor worker screening check expiry dates alongside training records

Combined with the platform’s incident management and compliance checklist tools, Inficurex gives providers a complete view of their compliance status at all times. For more detail on the full platform capabilities, visit the Inficurex NDIS software for providers page.

Providers can also benefit from the NDIS provider registration checklist 2025 to ensure training documentation meets all requirements before an upcoming audit.

Frequently Asked Questions

How often should code of conduct training be done?

Training should be completed at induction and refreshed at least annually. Higher-risk roles benefit from more frequent training, such as every six months. Additional training is required after incidents, legislation changes, or when individual performance concerns are identified.

Is code of conduct training mandatory?

Yes. The NDIS Practice Standards require providers to ensure workers understand and can comply with the Code of Conduct. This is assessed during NDIS Commission audits. Providers without documented training programs risk non-conformance findings.

What must NDIS code of conduct training cover?

Training must cover all seven Code of Conduct obligations, participant rights and self-determination, abuse and neglect recognition and reporting, privacy and confidentiality, complaint handling, mandatory reporting obligations, and how to raise concerns safely.

Does NDIS code of conduct training need to be face-to-face?

No. Training can be delivered face-to-face, online, through e-learning modules, group workshops, or blended formats. The NDIS Commission does not mandate a specific delivery method. What matters is that training is effective, documented, and appropriate to the worker’s role.

Who is responsible for providing NDIS code of conduct training?

Providers are responsible for ensuring their workers receive appropriate training. This applies to both registered and unregistered providers. Sole traders and self-employed support workers are also responsible for maintaining their own understanding of the Code.