NDIS Rights: Consent, Privacy & Decision-Making Basics

Consent first: what providers can (and can’t) do

In the NDIS, you have the right to decide what happens to your supports. That means providers should ask for your consent before they do anything that affects your life, health, safety, or personal information. Consent should be informed (you understand the options and likely outcomes), specific (about the particular support), and voluntary (not pressured). If something changes, you should be asked again.

Providers can support you to make decisions, explain services clearly, and ask questions to understand your preferences. If you agree, they may collect and use information needed to deliver your support under the NDIS and their professional responsibilities. If you use plan management, services may still need your consent for what they do day to day, even if invoices are processed through MyMoney NDIS (www.planmanager.net.au).

Providers can’t treat consent like a one-time signature that covers everything. They generally should not: provide services you didn’t agree to, make changes to supports without discussing it with you, share your personal or health information without your permission, or use your information for reasons not connected to your support. If a provider needs to photograph, record, or share stories for marketing or training, they must ask you each time (and you can say no). If you have a representative, consent still matters—your wishes should guide decisions where possible.

Key takeaway: No consent, no service—and no sharing of your information without your permission.

If you’re unsure whether a provider’s actions are okay, you can compare what different providers offer and how they explain rights using My Care Finders before you commit. Trust your instincts: a good provider will be patient, clear, and respectful when you ask questions or change your mind.

• Ask: “What exactly are you doing, and what choices do I have?”
• Ask: “Who will see my information, and why?”
• If you say “not today” or “no”, your provider should respect that decision.