Rights to Consent & Privacy: Practical “Ask, Choose, Agree”

1) Consent & privacy in plain English (what “must happen”)

Consent means you have a real say in what happens to you and your supports. Privacy means your personal information (like your health details, NDIS plan info, supports notes, and contact details) is handled in a way that protects you. For consent to be valid, you must understand what you’re being asked, be able to ask questions, and be able to choose what happens next. You can also say “no” or “not yet” without it affecting your rights.

In practice, providers and support workers must use an “ask, choose, agree” approach. They should explain the support in plain English, tell you about options, and confirm your choice before they start. If something changes (like a new service, a different staff member, or a change in how often supports happen), they must ask again. If you use a plan manager, your provider may still need to get your consent for what they do—plan management (such as MyMoney NDIS) manages payment processes, not your right to consent.

Your privacy must also be protected. This includes keeping your information secure, only sharing it with people who need to know (and only with your permission where required), and explaining why information is being collected. If a provider wants to collect or share information for something unrelated to your supports, they must discuss it with you and get your consent. If you’re unsure, you can request to see what information is held about you and ask how it will be used. You can compare providers with My Care Finders to help you choose services that respect consent and privacy.

Key takeaway: If it’s your body, your information, or your support—then you should be asked first, you should be able to choose, and nothing should happen without your agreement (unless a legal exception applies).

• You have the right to ask questions before any support starts.
• You can change your mind later—tell the provider immediately.
• Information should be shared only when needed, and usually with your permission.
• My Care Finders can help you compare providers’ approaches to rights, consent, and privacy.