Skip to main content
Open navigation menuClose navigation menu

29/07/2026

Aged Care Provider Requirements 2026: Rights, Complaints, SIRS and Notification Records

Map 2026 aged care provider requirements and ACQSC sector risk priorities to practical record owners for rights, safety, complaints, SIRS, governance, reporting, and notifications.

By CaresLink Editorial TeamReviewed General operational guide

The Aged Care Quality and Safety Commission Provider Handbook brings provider requirements into one operating view. It covers rights, conduct, governance, reporting, complaints, quality and safety, workforce responsibilities, incident management, and notifications.

A provider does not need another vague policy summary. It needs a clear map showing which local record supports each workflow, who owns it, and what triggers a review. This guide provides that operational starting point.

Provider requirements to record owners

Requirement areaExample operational recordsSuggested owner to confirm locally
Statement of RightsRights information issue record, participant communication note, accessible format logService or participant experience lead
Code of ConductInduction record, staff acknowledgement, concern and action recordWorkforce or governance lead
Governance and reportingResponsibility map, reporting calendar, meeting actions, evidence indexGoverning body delegate
Complaints and feedbackComplaint intake, acknowledgement, action, outcome, follow-up registerComplaints owner
Quality and safetyRisk review, improvement action, policy review, service monitoring recordQuality or operations lead
SIRS and incidentsIncident record, decision trail, notification record, follow-up actionIncident or quality lead
WorkforceRole checks, induction, training, supervision, competency reviewWorkforce lead
Change notificationsChange-of-circumstance record, due date, submission evidence, statusRegistration or governance owner

2026-27 sector risk priorities: owner and evidence map

On 18 August 2026, the Commission published four sector risk priorities for 2026-27. These are areas for additional regulatory attention, guidance, engagement, and sector support. They are not a new Act, a replacement for the Quality Standards, or the only compliance issues the Commission will oversee.

Providers are asked to consider how the priorities apply to their services and use them for self-reflection, risk management, and continuous improvement. The examples below are an internal evidence-map starting point, not a prescribed regulatory checklist.

Commission priorityRecord owner to confirm locallyExample evidence map starting points
Aged care rights in practiceParticipant experience, service, or quality leadAccessible rights information; choice and consent records; care-planning participation; complaint, feedback, and improvement links
Sexual safety and sexual rightsSafeguarding, clinical, service, or quality leadRights and consent guidance; safeguarding risk review; worker training; incident and SIRS decision records; support and follow-up actions
De-escalating changed behavioursClinical, care, behaviour-support, or service leadAssessment and review records; known triggers and preferences; de-escalation or behaviour-support instructions; staff briefing; incident trend and improvement review
Culturally safe care for Aboriginal and Torres Strait Islander people delivered by mainstream providersGoverning body delegate, First Nations engagement, service, or quality leadCommunity engagement or co-design record; individual cultural preferences; workforce learning; service-access review; feedback, outcomes, and improvement actions

Assign owners only after considering the provider's service type, workforce, governance, clinical, cultural-safety, privacy, and safeguarding arrangements. Do not create a standalone spreadsheet containing sensitive sexual-safety, health, cultural, complaint, or incident information; point the evidence map to approved controlled records.

The Commission says its approach remains proportionate, risk-based, and outcomes-focused. A priority label does not determine whether a provider is compliant or whether enforcement action will occur in a particular case.

Start with an evidence index

An evidence index is a short map. It should name the record, system or folder, owner, review date, and access boundary. It should not duplicate every complaint, incident, participant fact, or staff record.

Use one line for each record family, not each individual event.

Link to the approved system or controlled folder.

Name a primary owner and a backup reviewer.

Add the official source and the date it was checked.

Record the next review trigger, such as a rule change, incident trend, audit request, or role change.

Rights and participant communication records

Check how the team records that rights information was provided in an accessible way. Connect that record to service agreements, care planning, representative communication, feedback, and complaints.

Do not turn a rights record into a generic tick box. Leave space for the format used, questions raised, support requested, staff response, follow-up owner, and date.

Complaints, incidents, and SIRS should connect without becoming one form

A complaint, an incident, and a SIRS decision may relate to the same event, but they serve different purposes. Keep the records linked through a controlled reference rather than forcing every workflow into one large form.

RecordMain purposeUseful link to keep
Complaint recordTrack the concern, response, outcome, and follow-upRelated service, incident, communication, or improvement reference
Incident recordCapture facts, immediate action, notifications, and reviewRelated complaint, progress note, risk, or SIRS decision reference
SIRS decision recordPreserve the decision path, submission details, and follow-upRelated incident record and responsible owner
Improvement actionTrack the change, owner, due date, test, and closureSource complaint, incident, audit, or trend

Make the complaints pathway easy to find and use

The Commission's first Let's talk about complaints newsletter says provider complaint systems should be simple and easy to use. Check that people can find accessible complaint information, staff know the provider's intake and escalation route, and a person can be directed to the current Commission contact pathway. When contacting the Commission, a person can choose whether to provide identifying information; do not turn that Commission choice into a promise that every provider process is anonymous or that information will never need to be shared under an authorised process.

Use controlled references to connect the concern, acknowledgement, response, any open-disclosure action, correction or refund decision, Commission or advocacy contact, and improvement follow-up. The newsletter's Support at Home budget and HELF examples are illustrations, not automatic findings or remedies for every complaint.

Change-of-circumstance and reporting calendar

The Commission's current guidance lists 9 types of change in circumstances that registered providers must notify within 14 days. The 9 types cover provider suitability; responsible-person suitability; who the responsible persons are; significant organisation or governance changes; significant changes in service scale; changes in service types; specified associated-provider changes; specified changes to an approved residential care home; and specified financial and prudential matters.

Notification checkRecord to keep
Awareness date and circumstancesWhen and how the provider first became aware of the change, because the notification period runs from awareness
Change typeWhich of the 9 official types applies and why it was selected
Nature, reason, impact, and riskA specific, organisation-level explanation of the change, why it occurred, its impact, and how risks are being managed
Current formsOne current Change in circumstance notification baseform plus every relevant change-specific subform
Supporting evidenceControlled document names, version, owner, evidence location, remediation, ongoing-compliance, and service-continuity records where relevant
Submission and follow-upForm start date, channel, submitted date, receipt or status, reviewer, further-information request, and follow-up action

The Commission says providers may include more than one change in a notification, but must complete the baseform and the subform or subforms specific to each change. Responses should be specific, truthful, verified, and organisation-specific rather than copied from a prefabricated or AI-generated answer. Download the current forms at the time of notification and do not rely on a saved CaresLink copy.

Keep the separate 14-day clocks distinct: notifying after awareness of certain prescribed changes, submitting all forms after starting the form, and responding to a Commission request for further information unless an extension is approved. The guidance is marked Version 1.0, updated 29 October 2025, and the separate form-submission instructions were last updated 23 July 2026. This is an existing obligation and resource reminder, not a new 26 August announcement.

Create a calendar that distinguishes recurring reports from event-based notifications. For each item, record the trigger, awareness date, internal owner, reviewer, official channel, due date rule, submission evidence, and status.

A 30-minute internal review

Pick one record family: rights, complaints, incidents, workforce, or notifications.

Ask the owner to show the current form, register, procedure, and storage location.

Check whether the official source and review date are visible.

Confirm how open actions, overdue items, and escalation are tracked.

Record one improvement action with an owner and next review date.

Frequently asked questions

Is this a complete list of aged care provider requirements?

No. It is a document-mapping starting point based on the official Provider Handbook themes. Providers should review the current official guidance for their own registration and service context.

Are the four 2026-27 sector risk priorities new legal requirements?

No. The Commission describes them as areas that will receive additional attention and support while it continues to oversee all obligations under the Aged Care Act. Use the current Act, Rules, Quality Standards, Commission guidance, and provider advice pathways for the requirements that apply.

Are the four priorities the only areas the Commission will review?

No. The Commission expressly says it will continue to oversee compliance with all obligations. The four priorities help providers focus self-reflection, risk management, and continuous improvement; they do not close off other risks or duties.

Should complaints, incidents, and SIRS use one form?

They can share references, but they have different purposes. Separate records with clear links are often easier to review and protect.

Does an evidence index contain personal information?

It should contain only the minimum metadata needed to locate controlled records. Do not copy sensitive participant, worker, complaint, or incident content into the index.

Is this legal or compliance advice?

No. CaresLink provides general operational resources only. This guide does not provide legal, compliance, clinical, medical, financial, or professional advice.

Does every change notification use only one form?

No. The Commission says to complete one current base form and the relevant subform or subforms. Use the current official forms and guidance for the specific change.

Disclaimer

These resources are provided for general operational documentation and educational purposes only. They do not constitute legal, clinical, medical, compliance, or professional advice. Organisations should review and adapt all documents according to their own policies, procedures, registration requirements, funding arrangements, and regulatory obligations.