Allied health policies and procedures your practice needs for compliance
An NDIS audit gets booked for six weeks out, and the practice manager opens the shared drive to find the incident reporting policy is a single paragraph pasted from an association newsletter three years ago. That’s usually the moment an allied health practice discovers its policies were written to look compliant, not to survive an audit. SBAAS works with clinics through our allied health industry support, and the same handful of gaps shows up in almost every practice we sit down with.
This piece sets out the allied health policies and procedures a growing practice actually needs, where each one gets tested first, and why the generic checklist circulating between clinics rarely survives contact with an auditor.
The core allied health policies and procedures every practice needs
- Client consent and information sharing policy, covering what you collect, why, and who it’s shared with.
- Incident, near miss, and complaint management procedure, including reportable incident timeframes.
- Client record keeping, retention, and privacy policy, aligned to both privacy law and your professional board’s requirements.
- Clinical supervision and scope of practice policy, particularly where new graduates or allied health assistants are involved.
- Restrictive practices and behaviour support procedure, where the practice works with NDIS participants who may require them.
- Work health and safety and manual handling procedure, covering home visits and client transfers as much as the clinic itself.
- Staff and contractor code of conduct, covering conduct with clients, professional boundaries, and mandatory reporting obligations.
Miss two or three of these and a practice can usually still operate day to day. It’s the audit, the insurance claim, or the complaint that finds the gap.
A short case that shows the gap
One speech pathology clinic we worked with had an incident policy that read well and said nothing useful. A participant had a seizure during a session, and the therapist did the right thing by calling an ambulance and documenting it in the client file. What she hadn’t been told, because the policy didn’t say, was that certain incidents involving NDIS participants need to be reported to the NDIS Commission within strict timeframes, not just noted internally. The clinic found out three months later, at its next audit, when the assessor asked to see the reportable incident register and there wasn’t one. The corrective action plan took longer to close out than writing the policy properly would have taken in the first place.
What auditors actually check first
For registered NDIS providers, the NDIS Quality and Safeguards Commission’s practice standards are explicit about what auditors are looking for.
They’re checking whether frontline staff can describe the policy in their own words and produce records that back up what they’ve said, not whether a folder of documents exists on a shared drive.
A clinic can have a well written policy manual and still fail an audit if the physiotherapist doing the actual home visits has never read it, or reads it differently than the practice manager who wrote it.
Record keeping is the policy most practices get wrong
Every registered health practitioner has record keeping obligations that sit above whatever the clinic’s own policy says. AHPRA’s guidance on managing health records sets out what practitioners must keep, and it’s stricter than most clinics assume, particularly around how long records are retained after a client stops attending and who can access them. A clinic policy that contradicts a practitioner’s professional obligations puts the individual clinician at risk, not just the business, which is why this section needs more care than a copy and paste from a template.
Extra requirements by profession
A shared code of conduct covers most registered practitioners, but each National Board layers its own requirements on top, and a generic policy tends to miss them.
- Physiotherapists: manual handling and equipment risk assessments for home visits, particularly hoists and transfer boards.
- Speech pathologists: dysphagia and swallowing risk documentation, since a missed choking risk note carries different weight than a missed appointment note.
- Occupational therapists: home modification and equipment prescription records, often requested directly by NDIS plan reviewers.
- Podiatrists: sharps handling and infection control procedures specific to in-clinic wound care.
Multi-disciplinary practices carry extra risk
A clinic running physiotherapy, speech pathology, and occupational therapy under one roof has three sets of professional obligations layered under one shared code of conduct.
A single generic policy document tends to flatten all three into whichever profession happened to write the draft. An allied health assistant working under supervision has different documentation obligations than the practitioner supervising them, and a policy suite that doesn’t account for that either says too little to be useful for any one profession, or says too much and buries the real obligations in noise nobody reads.
When to write it yourself and when to bring in a professional writer
Practice managers often try to write these policies themselves between client bookings, and it shows. Sections get pasted in from three different sources over three different years, and by the third page the document contradicts itself on consent, on record retention, or on who’s responsible for reporting an incident.
SBAAS’s policy writing services exist for exactly this problem, turning what a practice actually does, and what its practitioners are professionally required to do, into one consistent set of documents that holds up when an auditor, an insurer, or a regulator asks to see it.
It’s usually cheaper than it sounds, too. A writer doesn’t start from nothing. They audit what the practice already has, keep whatever still matches current legislation and board guidance, and rewrite only the sections that have drifted.
A clinic with two or three policies that are mostly right and one incident register that doesn’t exist yet is a much smaller job than a full rewrite, and it’s worth saying so upfront rather than assuming a full suite is the only option.
What good implementation looks like day to day
A policy that works doesn’t live in a folder nobody opens. It shows up in the handover between shifts, in the way a new graduate is briefed before their first home visit, and in how quickly a practitioner can find the actual reporting timeframe when something goes wrong at five o’clock on a Friday. Practices that pass audits comfortably tend to do three things well: they walk new staff through the policy in person rather than emailing a PDF, they keep one register per obligation instead of scattering notes across email threads and paper diaries, and they put a date in the calendar to review each policy rather than waiting for an audit notice to remind them.
If your policy manual hasn’t been touched since the practice looked different than it does now, that’s the gap an auditor or an insurer will find first. Get in touch with SBAAS to talk through what your practice actually needs to meet, or call (07) 3916 9896 to book a callback with the team.
Frequently asked questions
Does a solo allied health practitioner need a full policy suite?
Yes, at a smaller scale. A sole practitioner still has consent, record keeping, and incident obligations under their professional board, even without staff to manage. The suite is shorter, but it isn’t optional.
How often should allied health policies be reviewed?
At least once a year, and immediately after any change to NDIS Practice Standards, your professional board’s code, or state privacy legislation that affects how you handle client information.
What happens if a practice fails an NDIS audit on policy grounds?
It can mean a corrective action plan, a shortened registration period, or in serious cases, suspension. Most failures come from staff not being able to demonstrate the policy in practice, not from the document itself being wrong.
Is a generic industry template enough for a growing practice?
It’s a starting point, not an ending point. A template written for a single-discipline solo practice rarely covers the supervision, multi-disciplinary, or NDIS-specific obligations a growing clinic picks up as it adds staff and services.
Sources
- NDIS Quality and Safeguards Commission. (2026). NDIS practice standards. https://www.ndiscommission.gov.au/rules-and-standards/ndis-practice-standards
- Australian Health Practitioner Regulation Agency. (2026). Managing health records. https://www.ahpra.gov.au/Resources/Managing-health-records.aspx
Eric Allgood is the Managing Director of SBAAS and brings over two decades of experience in corporate guidance, with a focus on governance and risk, crisis management, industrial relations, and sustainability.
He founded SBAAS in 2019 to extend his corporate strategies to small businesses, quickly becoming a vital support. His background in IR, governance and risk management, combined with his crisis management skills, has enabled businesses to navigate challenges effectively.
Eric’s commitment to sustainability shapes his approach to fostering inclusive and ethical practices within organisations. His strategic acumen and dedication to sustainable growth have positioned SBAAS as a leader in supporting small businesses through integrity and resilience.
Qualifications:
- Master of Business Law
- MBA (USA)
- Graduate Certificate of Business Administration
- Graduate Certificate of Training and Development
- Diploma of Psychology (University of Warwickshire)
- Bachelor of Applied Management
Memberships:
- Small Business Association of Australia –
International Think Tank Member and Sponsor - Australian Institute of Company Directors – MAICD
- Institute of Community Directors Australia – ICDA
- Australian Human Resource Institute – CAHRI
Our Consulting Services
Management Consulting
Compliance & Risk
Professional Writing Services
Consistency in Communication
Small Business Consulting
Sustainable Businesses
Start-ups
Set-up for Success
Further Reading

The Employee Choice Pathway
The rules for casual conversion have flipped. Under the employee choice pathway, eligible casuals now tell you they want to go permanent, and you must respond in writing within 21 days. For early childhood centres that run on casuals, this changes how you roster and plan. Here is who is eligible, how to respond, and the few grounds on which you can say no.

Workplace Policies Expire. When Did You Last Check Yours?
Review your workplace policies at least once a year, and immediately when the law, your business, or your risks change. Since January 2025, employers have absorbed criminal wage theft laws, the right to disconnect and Payday Super, and new privacy policy rules starting on 10 December 2026. This guide covers how often to review, what triggers an early review and where to start.

You Just Screened Out Your Best Candidate. They Were 52.
A quarter of Australian employers now call a 52-year-old an older worker. AI screening tools are being sued in the United States for rejecting applicants over 40. Meanwhile, KPMG puts the value of getting more over-55s into work at $29 billion a year. Here is what age bias actually costs, and how to take it out of your hiring in 30 days.

Your Honest Ad Might Still Be Breaking the Law
You did not lie. You did not mean to mislead anyone. You believed every word. And you can still be on the wrong side of the law. That is the hard truth about advertising in Australia: good intentions are not a defence. What matters is the impression your words leave, not the honesty behind them. Here is how to stay on the right side of the line.

The Contractor on Your Books Might Now Be an Employee
Since August 2024, the paperwork no longer settles whether a worker is an employee or contractor. A new Fair Work test looks at the real substance of the relationship, not the label on the agreement. For allied health practices built on contractor clinicians, that change carries real risk. Here is what the test asks, and how to check your arrangements before an audit or a dispute does it for you.

Australia Is Offshoring Its Own Future Workforce
Telstra, NAB, Officeworks and Woolworths have all moved corporate roles offshore this year. Accounting firms have been doing it for a decade. The roles leaving are the ones that trained a generation, and youth unemployment now sits at more than double the national rate. Here is what the data shows, and what small businesses can do about it.