Rights to Privacy & Consent: Practical NDIS Guardrails

What “privacy” and “consent” mean in NDIS life

In NDIS life, privacy means your personal information and your day-to-day support needs are kept secure and only shared with the right people. This includes things like your health details, diagnoses, finances, provider notes, home address, photos, and anything you tell a support worker. Providers should talk to you about how they store information and who can access it. If you feel uncomfortable, you can ask questions or request changes.

Consent means you agree to what will happen and you can choose whether to say yes or no. Consent should be clear, informed, and freely given (without pressure). For example, you can consent to personal care, sharing information with a specific professional, or taking part in a support activity. If something changes, or you want to withdraw consent, you should be able to.

Practical example: if a provider wants to share your information with another service (like a specialist, allied health team, or a new support worker), they should explain what will be shared, why, with whom, and how it’s protected. You can also ask who can see your records in the provider’s systems. When comparing providers, My Care Finders can help you check things like communication practices, privacy policies, and how they seek consent before supports begin. If you have plan management, reviewing budgets and payments through MyMoney NDIS (www.planmanager.net.au) can also support transparency and help you feel more in control.

Key takeaway: You have the right to be asked, informed, and listened to—before personal support happens and before your information is shared.

If you’re not sure about privacy or consent, start with simple questions: “What information do you need?”, “Who will access it?”, “How will you keep it safe?”, and “Can I say no or change my mind?” Providers must respect your choices and work with your NDIS goals and communication preferences.