Lesson 25 of 26
Overview
We unpack how the NDIS Worker Screening Check differs from a basic police check, why it matters for participant safety, and which roles providers must treat as risk-assessed. The episode also covers clearance expiry, employer verification, state-by-state rules, and the compliance steps that stop workers slipping through the cracks.
Welcome to the show. Winter, here's the number I can't get past: five years. That's how long an NDIS Worker Screening clearance can last, and right now in 2026, a whole wave of clearances first issued in 2020 and 2021 is coming up to expiry. Which means if your hiring system is sloppy, the problem doesn't show up on day one -- it shows up five years later, right in the middle of service delivery. That "five years" thing is exactly what makes this sneaky, hey. Because people hear "screening check" and think, oh good, admin done, file it away. But this one is not just a police check, and I think that's where providers can get caught out. Exactly. The NDIS Worker Screening Check is a risk assessment about whether a person poses a threat to people with disability. Criminal history can be part of it, sure, but it's not the whole thing. That's the distinction that matters in recruitment: a police check tells you whether something appears on record; an NDIS Worker Screening Check goes further and asks what that history, context, and pattern might mean for participant safety. Wait -- "poses a threat to people with disability" is much sharper language than "has a criminal history." Those are not the same question. One is basically a document search. The other is, can this person be trusted in disability support? That's it. And if a provider treats screening like a generic HR tick-box, they've already misunderstood the point. In the NDIS, the person you're hiring may be in someone's home, helping with personal care, medication routines, transport, all sorts of intimate daily support. So the screening check is not paperwork after the real hiring decision. It IS part of the hiring decision. I always come back to that word "trust." Because in most industries, a weak recruitment process is messy or expensive. In disability support, a weak recruitment process can be unsafe. That's a very different standard. And registered providers carry a specific responsibility here: you have to identify which jobs in your organisation are risk-assessed roles. Direct support workers, obviously. But also workers with more than incidental contact with participants. And key personnel roles -- board members, executives, senior managers, decision-makers -- those are always risk-assessed. Board members too? That's the one some smaller providers miss, I reckon. They think "risk-assessed" means only the person doing personal care on shift. But you're saying the governance layer counts as well. Yes, and that's a crucial point. The rules don't stop at frontline delivery. If you're in key personnel -- executive, senior management, board-level decision-making -- you're in. So when a provider says, "We screen our support workers," my next question is, "Good. What about your key personnel register?" That's such an auditor question. It is, but auditors are asking it for a reason. In 2026, enforcement is tighter, workforce documentation is getting more scrutiny, and missing evidence around screening is exactly the sort of thing that makes a simple onboarding process look weak. Let me try to play this back. If a provider says, "We did a police check, so we're covered," that's actually the wrong frame. Because a police check and an NDIS Worker Screening clearance are not interchangeable, and if the role is risk-assessed, the screening clearance is the critical requirement. Correct. And one more practical detail: the clearance is national once granted, valid for up to five years, and recognised across NDIS employers and states while it's still valid. Workers don't need to reapply just because they change employers or move interstate. But they should only apply in one state or territory through that worker screening unit. National recognition for five years -- that's genuinely useful. But it also means if your internal records are rubbish, you can end up relying on assumptions. "Oh, I think she got cleared in Queensland ages ago." No. You need the clearance number, the status, and the expiry date in front of you. Exactly. Good providers don't hire on vibes. They hire on verified status, role mapping, and documented evidence. That's the first safeguard. So let's get into the bit that jams people up operationally, because this is where I hear confusion all the time. Who actually does what? Because providers sometimes act like they can "get a worker screened," and that's not really how it works. Right. The worker applies. The provider verifies. The Worker Screening Unit assesses. That's the split. The worker goes through their state or territory screening unit, pays the fee, and enters the employer ID from the registered provider. Then the provider has to jump into the NDIS Worker Screening Database and verify that application promptly. If you don't verify it, the process stalls. That "employer ID" detail is the bit people forget. It's not enough to tell the applicant, "Yep, go sort your check." They need your organisation's employer ID, and then you need to verify them in the database. Otherwise everyone's waiting on a check that hasn't really started moving. Exactly. And because people always ask about cost, the fees vary. In 2026 it's $105 in New South Wales, $131 in Victoria, $147 in Queensland, and $145 in WA. Processing is usually around three to four weeks now, but more complex risk assessments can stretch out to eight to twelve weeks, especially in July and August. Three to four weeks I can plan around. Eight to twelve weeks in July and August... that's not a minor delay, that's basically a whole rostering headache. So this is where that no-clearance-no-start rule really bites, yeah? It does. The baseline rule is simple: if it's a risk-assessed role, the worker cannot start delivering supports until the clearance is confirmed. Full stop. Now -- and this is nuance, not legal advice -- some jurisdictions are work-on-application jurisdictions. The Northern Territory is one example. There, a worker may be able to start while the application is being processed, but only if the application is complete, paid, verified by the employer, the employer agrees, risk controls are documented, and supervision is in place by someone who already holds a clearance. I really want to underline the NT example there. Complete, paid, verified, supervised. That's four separate conditions, not a vague "she's applied so she'll be right." If you're going to rely on work on application, you need the paper trail and the supervision plan. Yes -- and because the rules vary by state and territory, providers should check their jurisdiction before allowing anyone to commence. This is one of those areas where getting casual can create serious compliance exposure. And then there's the second wave of failure, which happens after you've made a good hire. The clearance expires. The Working With Children Check expires. The first aid certificate lapses. Somebody forgets to upload the orientation certificate. Suddenly a perfectly decent worker becomes a compliance problem because your system's asleep. That's why the register matters so much in 2026. You must maintain a live workforce compliance register. At minimum: worker screening clearance number and expiry date, Working With Children Check if they support anyone under 18, orientation completion date, infection control and PPE training dates and refreshers, first aid and CPR expiry, right-to-work evidence and visa expiry where relevant, plus role-specific qualifications or registrations. The under-18 point is a big one: if a worker supports participants under 18, a Working With Children Check is mandatory as well as the NDIS screening check. And that check isn't neatly national the way the NDIS clearance is. New South Wales has Working With Children Check through Service NSW, Victoria has its own system, Queensland calls it the Blue Card -- so if people move states, they may need a new one. That's right. And on training, the one module that is actually mandatory for all registered providers is the NDIS Worker Orientation Module -- Quality, Safety and You. It's free, online, takes about 90 minutes, and workers need to complete it before they provide supports. Save the certificate immediately. Auditors do ask for it. Ninety minutes. It's always the cheap, simple, ninety-minute thing that somehow goes missing from the file. Every time. Then you've got infection control and PPE training before direct support begins, with refreshers after that -- annual is the common-sense standard many compliance people recommend. First aid and CPR are not universally mandated in one blanket sentence, but most employers require them, and the practical point is they need in-person assessment under HLTAID units. Not online-only. That in-person bit matters. If somebody tells you they did first aid entirely online, that's the wrong credential for this purpose. And then right to work -- no one starts before that's verified either. Passport, citizenship evidence, visa conditions, expiry dates. Basic, but absolutely mandatory. Yep. Identity and right-to-work records have to stay on file. And one more 2026 admin wrinkle: if your organisation is still using PRODA for portal access, the transition to myID and RAM is due by 30 September 2026. That's not a hiring check, but if you can't get into the systems you need, your verification workflow gets messy fast. I think that's the real takeaway for me. Strong hiring in the NDIS doesn't look flashy. It looks like reminders, expiry dates, certificates, verified IDs, and somebody actually checking the register before a roster goes live. Boring systems... protecting real people. And honestly, that's what good providers signal. Not "we hired fast." Not "we filled the shift." They signal that trust in their organisation is built on evidence. In this sector, your onboarding system says what you believe about safety long before your marketing ever does. That's a good place to leave it. See you next time.