
In the ever-evolving NDIS landscape, maintaining compliance is one of the most significant challenges for registered providers. Nowhere is this more evident than in NDIS Module 2a: Implementing Behaviour Support Plans, a section that guides organisations on how to safeguard participant rights when restrictive practices are used. Despite its importance, this module consistently records high non-conformity rates during audits. Improve your compliance by understanding the NDIS Module 2a (Implement Restrictive Practice) – Common Non-conformities and how to fix gaps in authorisation, BSPs, reporting, and review.
Understanding NDIS Module 2a
Module 2a applies to providers delivering supports that involve implementing a restrictive practice authorised under relevant state or territory laws. A restrictive practice is any intervention that limits the rights or freedom of movement of a person with disability, such as seclusion, physical, or chemical restraint. While these practices are sometimes necessary to prevent harm, they must be used within strict legal and ethical boundaries.
Compliance with Module 2a confirms that a provider has policies, procedures, and evidence-based strategies in place to implement restrictive practices safely and lawfully, always prioritising the participant’s dignity and human rights.
Common Non-conformities Found in Module 2a Audits
- Insufficient Authorisation Documentation
A frequent non-conformity occurs when providers cannot demonstrate that restrictive practices are properly authorised under state or territory legislation. Missing or outdated approval letters or unclear documentation from behaviour support practitioners can lead to serious compliance breaches.
- Incomplete Behaviour Support Plans (BSPs)
Many non-conformities stem from gaps in BSPs. Some plans fail to reflect current strategies or omit measurable outcomes. Others are missing key components such as proactive and reactive strategies, emergency procedures, or signatures acknowledging participant involvement.
- Lack of Staff Training and Competency Evidence
Staff responsible for implementing restrictive practices must receive training specific to the practice, as well as ongoing competency assessments. Auditors often find records lacking detail about when training occurred or which staff members have been trained.
- Failure to Record and Report Use of Restrictive Practices
Providers sometimes fall short in maintaining accurate incident logs or in reporting the use of restrictive practices to the NDIS Commission. This gap creates compliance risks and undermines transparency.
- Poor Monitoring and Review Systems
Restrictive practices must be regularly reviewed to ensure they remain necessary and proportionate. Some providers fail to maintain scheduled reviews or document the outcomes of each review, leading to avoidable non-conformities.
Strengthening Provider Compliance
NDIS providers can reduce compliance risks by embedding a culture of accountability and continuous improvement. This begins with robust governance, clear policies, accessible templates, and routine internal audits. Regular training refreshers ensure that staff understand consent, authorisation requirements, and human rights obligations in daily practice.
Partnering with experienced behaviour support practitioners and maintaining strong communication with participants and their families also ensures practices remain person-centred and compliant. Digital tools, such as compliance management systems, can further simplify recordkeeping and reporting.
Final Thoughts
Compliance with Module 2a is not about avoiding penalties but about protecting the rights and well-being of participants. By addressing these common non-conformities early, providers demonstrate professionalism, accountability, and a commitment to the principles of the NDIS.
When restrictive practices are implemented lawfully, monitored closely, and reviewed regularly, providers not only meet audit expectations but build trust with participants and regulators alike.

