Draft the shift note.
Turn the points a worker enters after a shift into a progress note in your format. List what is missing. Flag anything that may be an incident for a person to assess.
What AI could run / NDIS and community care
Let AI draft the shift notes. Your team approves every one.
Progress notes, draft rosters and audit evidence can be prepared by connected AI agents inside the systems your service already uses. A support coordinator or compliance lead reviews each output and decides. Privacy comes first: the NDIS Code of Conduct requires providers to respect participants' privacy.
Discuss your businessPotential implementation areas
Define the work.
Keep the decision.
Support the roster.
Propose a draft roster from worker availability and qualifications. A coordinator changes it and confirms it.
Keep the evidence.
Collect the records an auditor asks to see, and log what was drafted, who approved it and when.
Example / not a live deployment
AI prepares.
A person decides.
Illustrative example
Provider sets which tasks AI may do → Personal details removed first → Agent drafts → Coordinator reviews and edits → Named person approves → Record kept
A person reads every draft before it enters the record. Whether an incident is reportable is decided by the person your incident procedures name, not by the agent.
What the rules say
What the NDIS rules and the privacy law say
The NDIS Code of Conduct requires providers, and the people they employ or engage, to respect the privacy of people with disability when providing supports. Compliance with the Code is a civil penalty provision.
NDIS (Code of Conduct) Rules 2018, ss 5 and 6(1)(b)The Commission's February 2026 position statement covers behaviour support plans only. It says the Commission does not back or sign off on AI tools there, and that providers may use AI if they meet their legal obligations.
NDIS Commission position statement, February 2026, "What the NDIS Commission says"In that statement the Commission expects information to be de-identified and no participant personal information to be disclosed to AI systems. It warns that giving sensitive information to a third-party AI platform without safeguards may breach the Code's privacy rule.
NDIS Commission position statement, February 2026, "What providers must do" and "Why this position matters"The Practice Standards require each participant's information to be identifiable, accurately recorded, current and confidential.
NDIS Practice Standards Rules 2018, Sch 1 Core module, cl 12(1)The Practice Standards require participants' support needs to be met by workers who are competent in their role and hold relevant qualifications, expertise and experience.
NDIS Practice Standards Rules 2018, Sch 1 Core module, cl 15A provider's incident system must say how incidents are identified, recorded and reported, and who is responsible for reporting reportable incidents to the Commissioner. It must record whether each incident is reportable.
NDIS Incident Management and Reportable Incidents Rules 2018, ss 10(1) and 12(2)(b)The more serious reportable incidents must be notified to the Commissioner within 24 hours of the provider becoming aware. Other reportable incidents must be notified in writing within 5 business days.
NDIS Incident Management and Reportable Incidents Rules 2018, ss 20 and 21Records of reportable incidents must be kept for 7 years from the day notification is given.
NDIS Incident Management and Reportable Incidents Rules 2018, s 25A certification audit includes a desk audit of the provider's relevant documentation, an inspection of sites and services, and interviews.
NDIS Practice Standards Rules 2018, s 5(1)From 10 December 2026, an organisation covered by the Privacy Act must describe in its privacy policy the kinds of personal information, and the kinds of decisions, involved where a computer program makes or is directly related to a decision that could significantly affect someone's rights or interests.
Privacy and Other Legislation Amendment Act 2024, s 2 and Sch 1 Part 15 (new APP 1.7 to 1.9)The OAIC says a decision can be in scope even when a person reviews the program's output, and lists programs used to prioritise health or disability services as generally in scope.
OAIC, APP 1.7-1.9 Transparency Obligation Fact Sheet, September 2026, pp 1 to 2 and Appendix 1 Note 1The OAIC recommends not entering personal information, especially sensitive information, into publicly available generative AI tools, and says records should show where information came from an AI output.
OAIC, Guidance on privacy and the use of commercially available AI products
This page summarises the rules and is not legal advice. No regulator has assessed any Numaya setup. Read the sources and take your own advice.
Questions ndis and community care providers ask
Clarity before commitment.
Has the NDIS Commission said anything about AI and progress notes?
Not in anything we found. Its February 2026 position statement covers behaviour support plans only. The privacy rule it points to, section 6(b) of the Code of Conduct, applies to all supports and services, so it is a sensible starting point for any AI use. Check your own situation with your adviser.
What changes on 10 December 2026?
Organisations covered by the Privacy Act must describe in their privacy policy the kinds of personal information and decisions involved where a computer program makes, or is directly related to, a decision that could significantly affect someone. Whether your organisation is covered depends on its turnover and whether it provides a health service. The OAIC says human review does not on its own take a decision out of scope, so ask your adviser before you rely on a tool that prioritises participants.
Is this page about behaviour support plans?
No. It covers progress notes, rostering support and audit evidence. The Commission has its own position on AI in behaviour support plans and says it does not back or sign off on AI tools for them.
We also deliver aged care. Is that the same page?
No. Aged care providers work under a different law and regulator. See the page for aged care and home care providers at /ai-for-aged-care.
Related industries
Let's find your starting point
Which part of your business
would you improve first?
Tell us how your business works today and where you want AI to take on more of the work.
Discuss your business