Allied health policies and procedures your practice needs for compliance

An NDIS audit gets booked for six weeks out, and the practice manager opens the shared drive to find the incident reporting policy is a single paragraph pasted from an association newsletter three years ago. That’s usually the moment an allied health practice discovers its policies were written to look compliant, not to survive an audit. SBAAS works with clinics through our allied health industry support, and the same handful of gaps shows up in almost every practice we sit down with.

This piece sets out the allied health policies and procedures a growing practice actually needs, where each one gets tested first, and why the generic checklist circulating between clinics rarely survives contact with an auditor.

Business 1 1 1

The core allied health policies and procedures every practice needs

  • Client consent and information sharing policy, covering what you collect, why, and who it’s shared with.
  • Incident, near miss, and complaint management procedure, including reportable incident timeframes.
  • Client record keeping, retention, and privacy policy, aligned to both privacy law and your professional board’s requirements.
  • Clinical supervision and scope of practice policy, particularly where new graduates or allied health assistants are involved.
  • Restrictive practices and behaviour support procedure, where the practice works with NDIS participants who may require them.
  • Work health and safety and manual handling procedure, covering home visits and client transfers as much as the clinic itself.
  • Staff and contractor code of conduct, covering conduct with clients, professional boundaries, and mandatory reporting obligations.


Miss two or three of these and a practice can usually still operate day to day. It’s the audit, the insurance claim, or the complaint that finds the gap.

A short case that shows the gap

One speech pathology clinic we worked with had an incident policy that read well and said nothing useful. A participant had a seizure during a session, and the therapist did the right thing by calling an ambulance and documenting it in the client file. What she hadn’t been told, because the policy didn’t say, was that certain incidents involving NDIS participants need to be reported to the NDIS Commission within strict timeframes, not just noted internally. The clinic found out three months later, at its next audit, when the assessor asked to see the reportable incident register and there wasn’t one. The corrective action plan took longer to close out than writing the policy properly would have taken in the first place.

What auditors actually check first

For registered NDIS providers, the NDIS Quality and Safeguards Commission’s practice standards are explicit about what auditors are looking for. 

They’re checking whether frontline staff can describe the policy in their own words and produce records that back up what they’ve said, not whether a folder of documents exists on a shared drive. 

A clinic can have a well written policy manual and still fail an audit if the physiotherapist doing the actual home visits has never read it, or reads it differently than the practice manager who wrote it.

Record keeping is the policy most practices get wrong

Every registered health practitioner has record keeping obligations that sit above whatever the clinic’s own policy says. AHPRA’s guidance on managing health records sets out what practitioners must keep, and it’s stricter than most clinics assume, particularly around how long records are retained after a client stops attending and who can access them. A clinic policy that contradicts a practitioner’s professional obligations puts the individual clinician at risk, not just the business, which is why this section needs more care than a copy and paste from a template.

Extra requirements by profession

A shared code of conduct covers most registered practitioners, but each National Board layers its own requirements on top, and a generic policy tends to miss them.

  • Physiotherapists: manual handling and equipment risk assessments for home visits, particularly hoists and transfer boards.
  • Speech pathologists: dysphagia and swallowing risk documentation, since a missed choking risk note carries different weight than a missed appointment note.
  • Occupational therapists: home modification and equipment prescription records, often requested directly by NDIS plan reviewers.
  • Podiatrists: sharps handling and infection control procedures specific to in-clinic wound care.

Multi-disciplinary practices carry extra risk

A clinic running physiotherapy, speech pathology, and occupational therapy under one roof has three sets of professional obligations layered under one shared code of conduct. 

A single generic policy document tends to flatten all three into whichever profession happened to write the draft. An allied health assistant working under supervision has different documentation obligations than the practitioner supervising them, and a policy suite that doesn’t account for that either says too little to be useful for any one profession, or says too much and buries the real obligations in noise nobody reads.

When to write it yourself and when to bring in a professional writer

Practice managers often try to write these policies themselves between client bookings, and it shows. Sections get pasted in from three different sources over three different years, and by the third page the document contradicts itself on consent, on record retention, or on who’s responsible for reporting an incident. 

SBAAS’s policy writing services exist for exactly this problem, turning what a practice actually does, and what its practitioners are professionally required to do, into one consistent set of documents that holds up when an auditor, an insurer, or a regulator asks to see it.

It’s usually cheaper than it sounds, too. A writer doesn’t start from nothing. They audit what the practice already has, keep whatever still matches current legislation and board guidance, and rewrite only the sections that have drifted. 

A clinic with two or three policies that are mostly right and one incident register that doesn’t exist yet is a much smaller job than a full rewrite, and it’s worth saying so upfront rather than assuming a full suite is the only option.

What good implementation looks like day to day

A policy that works doesn’t live in a folder nobody opens. It shows up in the handover between shifts, in the way a new graduate is briefed before their first home visit, and in how quickly a practitioner can find the actual reporting timeframe when something goes wrong at five o’clock on a Friday. Practices that pass audits comfortably tend to do three things well: they walk new staff through the policy in person rather than emailing a PDF, they keep one register per obligation instead of scattering notes across email threads and paper diaries, and they put a date in the calendar to review each policy rather than waiting for an audit notice to remind them.

If your policy manual hasn’t been touched since the practice looked different than it does now, that’s the gap an auditor or an insurer will find first. Get in touch with SBAAS to talk through what your practice actually needs to meet, or call (07) 3916 9896 to book a callback with the team.

Frequently asked questions

Does a solo allied health practitioner need a full policy suite?

Yes, at a smaller scale. A sole practitioner still has consent, record keeping, and incident obligations under their professional board, even without staff to manage. The suite is shorter, but it isn’t optional.

How often should allied health policies be reviewed?

At least once a year, and immediately after any change to NDIS Practice Standards, your professional board’s code, or state privacy legislation that affects how you handle client information.

What happens if a practice fails an NDIS audit on policy grounds?

It can mean a corrective action plan, a shortened registration period, or in serious cases, suspension. Most failures come from staff not being able to demonstrate the policy in practice, not from the document itself being wrong.

Is a generic industry template enough for a growing practice?

It’s a starting point, not an ending point. A template written for a single-discipline solo practice rarely covers the supervision, multi-disciplinary, or NDIS-specific obligations a growing clinic picks up as it adds staff and services.

Sources

0d9a8782 branding profiles

Eric Allgood is the Managing Director of SBAAS and brings over two decades of experience in corporate guidance, with a focus on governance and risk, crisis management, industrial relations, and sustainability.

He founded SBAAS in 2019 to extend his corporate strategies to small businesses, quickly becoming a vital support. His background in IR, governance and risk management, combined with his crisis management skills, has enabled businesses to navigate challenges effectively.

Eric’s commitment to sustainability shapes his approach to fostering inclusive and ethical practices within organisations. His strategic acumen and dedication to sustainable growth have positioned SBAAS as a leader in supporting small businesses through integrity and resilience.

Qualifications:

  • Master of Business Law
  • MBA (USA)
  • Graduate Certificate of Business Administration
  • Graduate Certificate of Training and Development
  • Diploma of Psychology (University of Warwickshire)
  • Bachelor of Applied Management

Memberships:

  • Small Business Association of Australia –
    International Think Tank Member and Sponsor
  • Australian Institute of Company Directors – MAICD
  • Institute of Community Directors Australia – ICDA
  • Australian Human Resource Institute – CAHRI

Our Consulting Services

Management Consulting

For larger companies, SBAAS transforms complexity into clarity with solutions that accelerate performance, growth and market resilience.

Compliance & Risk

From enterprise agreements to governance frameworks, SBAAS ensures compliance, reduces exposure and supports sustainable, risk-aware decision-making.
Learn more
sbaas financial management

Professional Writing Services

Content that elevates your message, builds credibility & drives impact across tenders, reports, policies and executive communications.

Consistency in Communication

Clear, plain-English documents that meet compliance standards, reduce risk, and protect reputation through accurate, accessible and professional communication.
Learn more

Small Business Consulting

For small businesses, tailored strategies in marketing, operations & growth that boost profitability and strengthen customer connections.

Sustainable Businesses

Expert guidance in compliance, HR, policies and financial systems that reduce risks and create a secure foundation for sustainable expansion.
Learn more

Start-ups

For start-ups, SBAAS provides everything needed to launch, from setting up your books to building websites and driving growth strategies.

Set-up for Success

From compliance requirements to business structure, SBAAS ensures new ventures start strong, minimise risks and build systems for lasting success.
Learn more

Further Reading

Whs policies what australian businesses are legally required to have

WHS Policies: What Australian Businesses Are Legally Required to Have (And What It Costs If You Don’t)

Every Australian business with workers must have specific WHS policies in place. This is a straightforward legal duty, but a widely misunderstood one. This article sets out exactly what WHS policies are legally required, how the rules apply across allied health, trades, professional services, not-for-profits and early education, and what happens when the paperwork does not exist.

Read More »

SBAAS Events

Skip to content