NDIS Practice Standards
Core module: governance and operational management
core-12.2 Information management: participants told about storage, access, correction and withdrawal
Clause and reference core-12.2, our reference for this requirement in the NDIS Practice Standards and Quality Indicators
The requirement
Each participant is told how their information is stored and used, and when and how they can access or correct it and withdraw or change consent they gave earlier.
Our wording of the requirement: our statement of what the clause asks, not the instrument verbatim. Source: NDIS Practice Standards on the compliance desk.
The evidence to bring
- Privacy statement or handbook explaining access, correction and withdrawal
- Register of access or correction requests and responses
- Records of consent withdrawals and the actions taken
What assessors commonly find
- No process for a participant to see their own file
- Withdrawn consent not flagged in the client system
What evidence do I need?
For core-12.2 Information management: participants told about storage, access, correction and withdrawal, the evidence to bring is: Privacy statement or handbook explaining access, correction and withdrawal. It sits under Core module: governance and operational management and our reference for it is core-12.2. Keep every record dated, signed and current, and name who owns it.
Answer the reviewer first
Show me privacy statement or handbook explaining access, correction and withdrawal, and tell me who owns it and when it was last reviewed.
That is the question a quality assessor opens with for this requirement. Have the record on the desk and the date it was last reviewed to hand.
Read your own evidence against this clause
Paste your policy or evidence pack and the reading marks, line by line, whether a phrase from this requirement appears and quotes your own words when it does. It is a reading of your text, not a compliance result; a quality assessor decides whether a requirement is met. Read your pack, free See the paid reading