Step-by-step compliance how-to guides
Plain, numbered procedures for the compliance tasks your practice actually has to do. Each guide walks the steps in order, tells you what to record at each one, and explains what an assessor or regulator expects to see, then points you to the tool that does it for you.
NDIS
How NDIS Providers Can Use AI for Progress Notes Without Breaching the Code of Conduct
A nine-step procedure for NDIS providers using AI for progress notes, shift notes and reports: read what the NDIS Commission's February 2026 position statement says and what it leaves open, find the AI already switched on in your software, set the participant-information rule, tell participants and get consent they understand, approve one tool and get its answers in writing, write the support-worker rules, treat behaviour support plans as the strict case, review every AI draft before it becomes a record, and handle AI errors as incidents.
Follow the stepsHow to Check Your NDIS Therapy Line Items Before You Claim
A five-check procedure to run over every NDIS therapy claim line with the 2026-27 Support Catalogue open: confirm the discipline item for the participant's age band and budget, confirm the practitioner's credential was current on the date of service, confirm the suffix matches what was done, confirm the service date sits inside the item's start and end dates, and confirm the service agreement agreed that activity and price. From 24 September 2026 the Pricing Schedule price is also a legal maximum for NDIA-managed and plan-managed funding.
Follow the stepsHow to Register as an NDIS Provider, Step by Step
A step-by-step procedure for becoming a registered NDIS provider: work out your registration groups and audit pathway, set up your organisation in myID and PRODA with worker screening in place, apply through the NDIS Commission portal, engage an approved quality auditor and pass the audit, then receive your certificate and meet the ongoing conditions. Registration is a sequence with a long pole (the audit), so the order you do things in decides how fast and how cheaply you get there.
Follow the stepsHow to Set Up myID and RAM for the NDIS Commission Portals
A step-by-step procedure for setting up myID and RAM so your team can log in to the NDIS portals with myID instead of PRODA: create each person's myID with a personal email, reach the identity strength the role needs, link your business in RAM, authorise the right people at the right level, have each of them accept within the 7 day window, then log in and confirm access. Get the sequence right and the whole organisation is in; get it wrong and staff hit a wall at the login screen.
Follow the stepsRACGP & Accreditation
How to Build a Compliance Evidence Pack for Accreditation
A step-by-step procedure for assembling the evidence pack a surveyor actually reviews: map each indicator to the evidence it needs, gather the policy and the running records for each, fill the gaps and flag the evidence that only accumulates over time, organise it so an assessor can follow it, and keep it living between cycles. The pack is not busywork for survey week, it is the proof that your systems run.
Follow the stepsHow to Build a Practice Risk Register for RACGP Accreditation
A step-by-step procedure for building a practice risk register that works as a management tool, not an accreditation prop: set the columns and scope, identify risks across every category (not just clinical), rate each on a consistent matrix, assign controls and owners to the significant ones, then review it on a schedule so it stays live. This guide includes a worked example register you can copy.
Follow the stepsHow to Meet RACGP F11 (Artificial Intelligence): An Evidence Checklist per Indicator
A seven-step procedure for a general practice that uses AI, administrative AI included, to meet RACGP 6th edition criterion F11: inventory every tool, decide whether F11 applies, write the policy with an explicit authorisation for identified patient data, set up consent and the withdrawal pathway, train the team under F4, add an AI category to the CG7 incident process, and monitor use. Ends with what an assessor could ask to see for each of the nine indicators. F11 is not yet assessed: accreditation still runs on the 5th edition.
Follow the stepsHow to Run a Clinical Audit (PDSA Cycle) That Satisfies Assessors
A step-by-step procedure for running a clinical audit as a PDSA cycle that an accreditation surveyor will accept as quality-improvement evidence: pick a topic that matters and a measurable standard, measure your baseline, plan and make a change, re-measure to see if it improved, then document the loop as CQI evidence. The audit that satisfies assessors is the one that closes the loop, not the one that just collects a number.
Follow the stepsHow to Run a RACGP Self-Assessment (Traffic-Light Method)
A step-by-step procedure for self-assessing your general practice against the RACGP Standards before an accreditation survey, using the traffic-light method: rate every indicator green, amber, or red, gather the evidence as you go, prioritise the gaps with mandatory indicators first, and turn the result into an action plan. Done properly, the self-assessment is the single best predictor of how your survey will go.
Follow the stepsHow to Write a Compliant Policy and Procedure From Scratch
A step-by-step procedure for writing a policy and procedure that actually satisfies an accreditation standard: pin down the requirement it has to meet, start from a template instead of a blank page, separate the policy (what and why) from the procedure (who does what, in order), add version control and a review date, then implement it so the records prove it runs. A good policy is not the document, it is the system the document describes.
Follow the stepsPrivacy & Cyber Security
How to Assess an AI Scribe for Privacy Compliance
An eight-step procedure for a practice manager to run before the practice relies on an AI scribe: check whether it is a medical device under the TGA test, map where the audio, transcript and note go, read the training and secondary-use terms, apply APP 8 and the NSW and Victorian transfer rules, set retention, write the consent process, fix the contract, and update the privacy policy, collection notice, AI policy, PIA and training. The practice stays responsible for a vendor's tool, and the clinician for every note it drafts.
Follow the stepsHow to Deploy an AI Phone Receptionist Without Breaching Privacy
A seven-step procedure for a practice manager to run before an AI answers the practice phone: list every decision the tool makes, check the recording and interception law, write the APP 5 greeting with the 000 line first, test the tool against the 10 December 2026 automated decision-making duty, send anything clinical to a person and write it into the triage policy, get the vendor's data terms in writing, and train the team to log AI incidents. Includes a model greeting, a short refresher and a privacy policy paragraph to copy.
Follow the stepsHow to Respond to a Notifiable Data Breach: The First 72 Hours
A step-by-step procedure for the first 72 hours after you discover a data breach at your practice: contain it, stand up your response team, assess whether serious harm is likely, notify the OAIC and affected patients if it is, and prevent a recurrence. The law gives you up to 30 days to assess, but the practices that come through a breach well do the critical work fast and document every step.
Follow the stepsEmployment & Workplace
How to Audit Your Award Classifications
A step-by-step procedure for checking that every employee sits on the right award and the right classification level: confirm which award applies, build an evidence file for each person (qualification, experience, actual duties), map them against the award's classification definitions, compare the result to what you are paying, then rectify and document. This is the exercise the Fair Work Commission expects practices to complete before the new Health Professionals Award classification structure commences on 1 October 2026.
Follow the stepsHow to Onboard a New Staff Member Compliantly
A step-by-step procedure for onboarding a new staff member without leaving a compliance gap: verify identity, right to work, and qualifications; check registration and screening; set the employment basics correctly; induct them on policies, privacy, and safety; and record it all with the review points booked in. Done well, onboarding closes the risks that surface later as underpayment claims, registration lapses, or a failed audit.
Follow the stepsHow to Run a Monthly WHS Walkthrough
A step-by-step procedure for running a monthly work health and safety walkthrough of your practice: build a checklist that covers physical and psychosocial hazards, do the walk and record what you see, rate and prioritise the hazards, assign and close the actions, then file it as WHS evidence and book the next one. A walkthrough is the routine that turns your safety duty from a policy on the shelf into something you can prove you actually do.
Follow the stepsBe the practice the assessor compliments.
Choose your frameworks and work through the checklist. Walk into your next visit with your evidence linked and current, and nothing left to chase.