SDA worker screening: A provider checklist for risk-assessed roles

The NDIS Commission says registered providers need to make sure key personnel and workers in risk-assessed roles have an NDIS worker screening clearance. It also says registered providers are responsible for identifying and keeping records of risk-assessed roles. For SDA teams, that means the control cannot stop at a generic employee list.

A role may become operationally sensitive because it is connected to an enrolled dwelling, participant communication, access to a participant's home, maintenance decisions, vacancy inspections, incident follow-up or contractor coordination. The Commission's risk-assessed role guidance includes roles likely to require more than incidental contact with people with disability, including contact with multiple people as part of direct delivery in a specialist disability accommodation setting.

The practical risk is simple: a provider can have a current worker clearance somewhere in the portal but still be unable to prove which role was assessed, who made the assessment, whether a contractor was checked, whether an expiry was monitored, or whether the evidence was available when an incident, complaint, audit or urgent repair occurred.

SDA providers should review roles by workflow, not only by job title. A maintenance coordinator who never enters a home may have a different screening profile from a staff member who attends inspections, speaks with residents, supports vacancy tours or handles resident concerns. A director, chief executive, board member or senior manager may also be key personnel even if they are not providing hands-on support.

Use practical categories: key personnel, property and tenancy operations, participant-facing vacancy or referral staff, maintenance attendance, emergency access, contractor coordination, complaints and incidents, owner-facing staff with participant data access, and external contractors. Each category should say whether the role is risk-assessed, why, who decided, and when it was reviewed.

This is especially important where the SDA provider works with SIL partners or related service providers. The SDA provider needs to keep its own records clear without absorbing another provider's workforce file or assuming a support provider's roster proves SDA compliance.

The checklist should be simple enough for property and operations teams to use before work happens, but structured enough for compliance to rely on after the fact.

SDA providers often rely on contractors for repairs, modifications, cleaning, gardening, security, fire systems, assistive technology, lifts, access systems and emergency works. Not every contractor interaction will be a risk-assessed role, but the decision needs to be made deliberately before the contractor is given access to a participant's home or expected to interact with residents.

The Commission guidance says registered providers that engage contractors in risk-assessed roles need to identify those roles, communicate this to the contractor, enter into an appropriate contract, take reasonable steps to check clearance and keep records. That creates an operations problem as much as a procurement problem: the property team needs the answer before the contractor arrives.

A practical contractor record should show the contractor organisation, individual worker where known, dwelling, job type, participant-contact expectation, clearance decision, supervision requirement, visit date, approving manager and evidence link. This prevents urgent maintenance from becoming a weak compliance file later.

An NDIS worker screening check is valid for 5 years, and linked providers receive portal notifications when a worker's check is expiring soon. That is useful, but it is not a complete operating system. SDA providers should also expose expiry risk where scheduling, property access, incident response and compliance reviews happen.

Useful states include clearance current, expiry approaching, renewal requested, worker unlinked, portal status unclear, contractor evidence pending, supervision required, working-on-application check required by jurisdiction, access paused and no dwelling access. These labels let operations keep moving without guessing.

Be careful with exceptions. The Commission describes limited circumstances where a worker in a risk-assessed role may work without a clearance, including state or territory rules about working on application. Providers need to check the applicable jurisdiction, maintain a risk management plan where allowed, supervise the worker as required and record the details rather than treating the exception as informal permission.

The record-keeping guidance is specific. Registered providers must keep written records of risk-assessed roles and up-to-date written records for each worker engaged in those roles. The worker record needs to exist after portal unlinking, be kept for 7 years, and be organised, accessible and legible.

For SDA, that evidence should connect to the operating context. If a complaint, incident, emergency repair, vacancy tour, housemate concern or tenancy issue involves a worker or contractor, the provider should be able to see whether the person was cleared, what role they were performing, who approved access, what supervision applied and whether any follow-up action was taken.

The NDIS Code of Conduct also matters here. Screening is not the whole safeguard. Providers and workers need to respect rights and privacy, provide supports and services safely and competently, act with integrity, raise concerns, and take reasonable steps to prevent and respond to violence, exploitation, neglect, abuse and sexual misconduct. Screening records should support those controls rather than replace them.

StepFree SDA should help providers move worker screening out of scattered spreadsheets and into the operating record: role assessments, contractor evidence, expiry queues, dwelling access decisions, incident links, audit files and privacy-safe owner boundaries.

The practical benefit is less reconstruction. When a provider can see who is allowed to do what, where, under which evidence and until when, worker screening becomes a live SDA operations control instead of a compliance scramble before audit or after an incident.