Care Standards Checkerthe evidence desk for care standards

NDIS Practice Standards

Core module: governance and operational management

core-12.4 Information management: secure handling through to retention and destruction

Clause and reference core-12.4, our reference for this requirement in the NDIS Practice Standards and Quality Indicators

The requirement

Documents are handled through processes that cover their proper use, who may access them, how they are transferred, stored, kept secure, retrieved, retained, destroyed and disposed of, matched to what the supports involve and how complex they are.

Our wording of the requirement: our statement of what the clause asks, not the instrument verbatim. Source: NDIS Practice Standards on the compliance desk.

The evidence to bring

  • Records management and retention schedule
  • System access controls and user access reviews
  • Secure destruction certificates or disposal log
  • Data breach response procedure

What assessors commonly find

  • Shared logins to the client system
  • Paper files kept in unlocked areas of shared homes

What evidence do I need?

For core-12.4 Information management: secure handling through to retention and destruction, the evidence to bring is: Records management and retention schedule; System access controls and user access reviews. It sits under Core module: governance and operational management and our reference for it is core-12.4. Keep every record dated, signed and current, and name who owns it.

Answer the reviewer first

Show me records management and retention schedule, and tell me who owns it and when it was last reviewed.

That is the question a quality assessor opens with for this requirement. Have the record on the desk and the date it was last reviewed to hand.

Read your own evidence against this clause

Paste your policy or evidence pack and the reading marks, line by line, whether a phrase from this requirement appears and quotes your own words when it does. It is a reading of your text, not a compliance result; a quality assessor decides whether a requirement is met. Read your pack, free See the paid reading

All four frameworks · The questions providers ask.