NDIS Subcontractor Agreements For Support Providers

Priya runs a registered NDIS support provider in Melbourne. Her team is growing, and she wants to bring in a few independent support workers to cover weekends and specialist community access shifts.

The work itself is straightforward. The tricky part is making sure everyone knows who is responsible for participant safety, confidentiality, incident reporting, records, worker screening and service quality.

That's where an NDIS subcontractor agreement can do a lot of heavy lifting. When it's drafted properly, it isn't just a payment document, it's a practical compliance tool for your business.

If you're subcontracting NDIS services, your agreement should connect the day to day work with the NDIS Practice Standards, the NDIS Code of Conduct, privacy obligations and employment law risks.

Do You Need An NDIS Subcontractor Agreement?

Yes, if you're engaging an independent worker or another business to deliver supports on your behalf, you should have a written subcontractor agreement in place before they start, alongside any participant service agreement that governs the supports.

Without a written agreement, you may struggle to prove what the subcontractor agreed to do, what standards applied, who owns records, what happens if there's an incident, or whether the worker was really operating independently.

For NDIS providers, this matters because service delivery isn't just commercial. You're dealing with participants, support plans, sensitive information, health and safety, complaints, restrictive practices, and sometimes high risk personal care.

A good contractor agreement for NDIS services should cover:

• Scope of supports, including what the subcontractor is and isn't allowed to deliver
• NDIS compliance obligations, including the NDIS Code of Conduct and relevant Practice Standards
• Participant confidentiality and how personal information can be used or shared
• Incident and complaint reporting, including urgent timeframes
• Worker screening, qualifications and training
• Insurance and indemnities
• Payment, invoicing and cancellations
• Record keeping and handover notes
• Termination rights, especially for safety, compliance or misconduct issues

Templates often miss the parts that are specific to your registration groups, participants and service model. The agreement works best when it reflects how your business actually delivers supports.

Can You Subcontract NDIS Services?

You can often subcontract NDIS services, but you first need to check whether the support is in a class that requires registration and whether the subcontractor is appropriately registered, screened and approved to deliver that support. Since 1 July 2026, mandatory registration applies to certain support classes, including specialist disability accommodation, specialist behaviour support services, assistance with supported independent living, supports involving regulated restrictive practices and NDIS digital platform services.

This means you shouldn't assume subcontracting is always available just because the worker is experienced or has an ABN. If the support falls into a mandatory registration class, the subcontractor may need their own registration for that class, or another lawful basis to deliver the support as part of your registered provider arrangements. Your agreement should make this clear and require the subcontractor to tell you immediately if their registration, approval, screening or authority changes.

If you're a registered NDIS provider, the NDIS Quality and Safeguards Commission expects you to have systems that manage the workers and subcontractors who deliver supports for you. You can't simply hand the work to someone else and treat it as their problem.

Your obligations may include:

• checking the subcontractor is suitable, qualified and competent
• checking whether the subcontractor needs registration for the relevant support class
• making sure worker screening requirements are met
• training the subcontractor on your policies and participant needs
• monitoring service quality and participant feedback
• keeping proper records of supports delivered
• responding to complaints and incidents
• reporting certain incidents to the NDIS Commission

If you're an unregistered provider, you may still need strong subcontractor terms. You should also check whether the supports you deliver or subcontract are now in a class that requires registration. You may have obligations under the NDIS Code of Conduct, the Australian Consumer Law, privacy laws, workplace health and safety laws, and your service agreements with participants, plan managers or other providers.

Example Scenario

Say your business provides community participation supports in Sydney. You engage Sam, an independent support worker, to take a participant to weekly social activities.

Your agreement should make clear that Sam must follow the participant support plan, keep shift notes, tell you immediately if the participant is injured or distressed, protect the participant's personal information, and not offer extra services outside the approved scope without your consent.

That way, if something goes wrong, your business has a clear process to respond quickly and show that you had reasonable controls in place.

What Should An NDIS Subcontractor Agreement Include?

An NDIS subcontractor agreement should include the usual commercial terms, plus NDIS specific clauses that deal with care quality, safeguarding, records and compliance.

At a minimum, consider including these clauses.

Services And Scope

Set out exactly what supports the subcontractor will provide. Be specific about support categories, location, roster expectations, participant needs, exclusions and approval processes.

You may also want the agreement to say the subcontractor can't change a support plan, accept direct private work from your participant, or provide high risk disability support services unless you have approved this in writing and any required registration, screening and competency checks are in place.

NDIS Practice Standards And Code Of Conduct

If your business is registered, your subcontractor terms should require the worker to comply with the parts of the NDIS Practice Standards that apply to the services they deliver.

This might include participant rights, person centred supports, risk management, incident management, complaints management, safe environments and worker competency.

Your agreement should also require the subcontractor to comply with the NDIS Code of Conduct. This covers conduct such as acting with respect, providing supports safely and competently, acting with integrity, and preventing and responding to violence, neglect, abuse and exploitation.

Worker Screening, Qualifications And Training

Your agreement should require the subcontractor to hold and maintain all checks, qualifications, registrations and licences needed for their role.

Depending on the work, this may include:

• an NDIS Worker Screening Check for risk assessed roles
• a Working With Children Check if they support children
• first aid or medication training
• manual handling training
• behaviour support or restrictive practice training
• professional registration for allied health services
• a valid driver's licence if transport is part of the support

You should also require the subcontractor to tell you immediately if a check, registration or approval is suspended, cancelled, expired or subject to conditions.

Payment, Cancellations And Invoicing

Set out the hourly rate or other fee, when invoices must be submitted, what records are needed, and when you'll pay.

For NDIS work, cancellation terms should align with the rules that apply to your service arrangements and pricing conditions. If your terms with participants or plan managers limit what you can claim, your subcontractor terms should match that risk.

Insurance And Liability

The subcontractor agreement should require appropriate insurance for the work they perform. This may include public liability, professional indemnity, workers compensation where required, and motor vehicle insurance if they transport participants.

Your agreement should also explain who is responsible if the subcontractor's conduct causes loss, harm, regulatory issues or a participant complaint.

How Should Your Agreement Deal With Participant Confidentiality?

Your agreement should treat participant confidentiality as a core obligation, not a throwaway clause.

NDIS providers often handle sensitive personal information, including disability, health, behaviour, medication, family, financial and support plan information. Many providers are covered by the Privacy Act 1988 and the Australian Privacy Principles, especially where health information is involved. Even where the Privacy Act doesn't apply to every small business, confidentiality should still be locked down contractually.

Your subcontractor agreement should say the subcontractor can only collect, use and disclose participant information for authorised support delivery and related reporting.

It should also cover:

• what information the subcontractor can access
• how shift notes and records must be stored
• whether personal devices can be used
• rules for messaging participants and families
• when information can be shared with support coordinators, plan managers, nominees or family members
• what to do if there's a suspected privacy breach
• return or deletion of participant information when the engagement ends

Be careful with informal communication. A subcontractor sending participant details through personal text messages, private email or social media can create real privacy and safeguarding issues for your business.

What Incident Reporting Clauses Do You Need?

Your agreement should require subcontractors to report incidents immediately, with clear steps for urgent situations and NDIS reportable incidents.

For registered providers, the NDIS Commission has specific reportable incident rules. Reportable incidents include death, serious injury, abuse or neglect, unlawful sexual or physical contact or assault, sexual misconduct and unauthorised use of a restrictive practice.

Some reportable incidents must be notified to the NDIS Commission within 24 hours. The 24 hour notification categories are death, serious injury, abuse or neglect, unlawful sexual or physical contact or assault, and sexual misconduct. Unauthorised restrictive practices are generally notified within 5 business days. However, if the same event also involves a 24 hour category, for example, serious injury, abuse or neglect, unlawful sexual or physical contact or assault, sexual misconduct, or death, the 24 hour notification requirement may also apply. The detailed follow up report process can also apply after the initial notification.

Your subcontractor can't manage those deadlines properly if they don't know what to report and who to call.

Your agreement should require the subcontractor to:

• take immediate steps to protect the participant and others from further harm
• call emergency services where needed
• notify your nominated contact straight away
• complete incident records promptly and accurately
• preserve relevant evidence, notes and communications
• cooperate with your internal review and any NDIS Commission process
• avoid contacting the participant or family in a way that conflicts with your incident response plan

You should also match the contract with your internal policies. If the agreement says one thing and your incident policy says another, workers can get confused at exactly the time you need a calm and consistent response.

Are Your Support Workers Contractors Or Employees?

It depends on the real working relationship, not just the label in your contract.

Calling someone an independent contractor in a support worker contractor contract doesn't automatically make them a contractor. Under the Fair Work Act 2009, the question looks at the real substance and practical reality of the relationship, including the written contract and how the arrangement operates in practice.

This area has been especially important since the Fair Work changes that took effect from 26 August 2024, which shifted the employee and contractor assessment away from a narrow contract only approach for many workplace laws.

Factors that can point towards employment include:

• you control the worker's hours, uniform, methods and roster
• the worker can't refuse shifts in practice
• the worker is presented as part of your business
• the worker uses your tools, systems and email address
• the worker is paid by the hour and doesn't run their own business
• the worker can't delegate or subcontract the work
• the relationship is ongoing and exclusive

Factors that can support an independent contracting model include:

• the subcontractor operates their own business with an ABN
• they can accept or reject work
• they can work for other providers
• they invoice you for services
• they provide their own equipment where appropriate
• they carry their own insurance
• they have genuine control over how they deliver the agreed outcome, subject to participant safety and NDIS requirements

NDIS work can sit in a tricky middle ground because you may need strong controls for safeguarding and compliance. Those controls are necessary, but too much operational control can increase classification risk.

If a worker is really an employee, your business may need to deal with minimum wages, leave, superannuation, workers compensation and other employment obligations. Sham contracting can also lead to penalties, especially if a worker is misrepresented as a contractor to avoid employment entitlements.

The safest approach is to get the structure right before the worker starts. Your agreement should support the intended relationship, but your day to day practices need to match it.

How Do You Protect Your Business When Subcontracting NDIS Services?

You protect your business by combining a clear agreement with practical onboarding, supervision and record keeping.

The contract is only one part of the picture. NDIS compliance depends on what happens before, during and after each shift.

Before The Subcontractor Starts

• confirm their ABN, business details and contact information
• check screening, qualifications, licences, registrations and insurance
• give them your relevant policies, including incidents, complaints, privacy, safeguarding and support and maintenance procedures
• confirm what participant information they can access
• make sure they understand support plans, risks and communication protocols
• have the subcontractor agreement signed before work begins

During The Engagement

• monitor feedback from participants and families
• review shift notes and service records
• keep training, screening and registration records up to date
• document incidents, complaints and near misses
• review whether the contractor arrangement still reflects reality

When The Engagement Ends

• cancel access to systems and participant files
• collect or delete confidential information
• finalise invoices and records
• remind the subcontractor about ongoing confidentiality obligations
• manage participant handover carefully so support continuity isn't affected

These steps are simple, but they can make a big difference if you're audited, a participant raises a complaint, or a subcontractor relationship breaks down.

Key Takeaways

• An NDIS subcontractor agreement should do more than set rates. It should allocate NDIS compliance, service quality, confidentiality and incident reporting responsibilities.
• Before subcontracting, check whether the support is in a mandatory registration class and whether the subcontractor is properly registered, screened and approved.
• Your agreement should require compliance with the NDIS Code of Conduct, relevant NDIS Practice Standards, screening requirements and your internal policies.
• Participant confidentiality needs practical rules around records, devices, messaging, information sharing and privacy breaches.
• Incident reporting clauses should reflect NDIS Commission timeframes, including 24 hour notification categories and the 5 business day timeframe that generally applies to unauthorised restrictive practices.
• Worker classification matters. A support worker isn't automatically a contractor just because the agreement says so.

If you'd like help with your NDIS subcontractor agreements, participant confidentiality terms, incident reporting clauses or contractor classification checks, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.