You didn’t start your NDIS business to become an insurance expert. You started it to make a difference, to support people with disability to live the lives they choose, and to build something meaningful in a sector that genuinely needs good operators.

So it’s understandable that insurance sits somewhere near the bottom of the to-do list, reviewed once a year at renewal time, ticked off, and forgotten about until something goes wrong.

The problem is that “something going wrong” in the disability sector looks very different to what a generic business insurance policy is designed to handle. And that gap, between what providers assume they’re covered for and what their policy actually covers, is where businesses get into serious trouble.

The generic policy problem

Most small to medium NDIS providers are running on insurance products that were designed for a cafe, a trades business, or a retail store. These policies cover the basics: public liability, property damage, maybe some business interruption cover. They are not built for an organisation that employs support workers, manages complex participant needs, operates across multiple locations, and is subject to oversight by the NDIS Quality and Safeguards Commission.

The disability sector carries a distinct risk profile. Participant vulnerability is higher. The regulatory environment is more demanding. The consequences of a complaint, an incident, or a claim can move quickly from operational to existential. Generic insurance was not written with any of that in mind.

So how do you know if your policy has the gaps that matter? Start by asking these five questions.

1. Does your policy include abuse and molestation cover?

This is one of the most commonly absent covers in standard business insurance, and one of the highest-risk exposures for any organisation supporting vulnerable people. Abuse and molestation cover responds to allegations of physical, sexual or emotional abuse by an employee or contractor toward a participant. Without it, the legal costs and damages from even a single allegation can be catastrophic. If you have not specifically checked for this cover, there is a reasonable chance you do not have it.

2. Are your support workers actually covered?

This is where providers are most often caught out. Whether your workforce is made up of employees, casual staff, independent contractors or sole traders, the coverage picture changes significantly depending on the arrangement. Many providers assume their public liability policy extends to everyone working under their banner. It frequently does not. Contractors in particular often fall into a grey zone, neither clearly covered by the provider’s policy nor holding adequate cover of their own. This needs to be explicitly checked, not assumed.

3. Does your cover reflect your NDIS registration status?

Registered and unregistered providers operate under different frameworks, carry different obligations, and are exposed to different risks. A registered provider delivering high intensity supports faces a fundamentally different risk profile to an unregistered provider offering social support. Your insurance should reflect that distinction. If your policy was taken out before you achieved registration, or before you expanded your service offering, it may no longer be fit for purpose.

4. What happens if a complaint goes to the NDIS Commission?

A Commission investigation or compliance action is not just a reputational event, it is a legal and administrative process that requires time, documentation and often professional representation. The costs involved in responding to a formal complaint or audit are rarely covered under a standard public liability policy. Regulatory defence cover is a separate and important consideration for any registered NDIS provider, and it is one that most generic policies simply do not include.

5. When did you last review your sum insured?

NDIS businesses grow. Participant numbers increase, staff rosters expand, and the scale of the operation changes year on year. But insurance policies often stay static. A sum insured that was appropriate when you had 10 participants and 3 staff may be dangerously inadequate when you have 60 participants and a team of 20. Annual renewal is not the same as annual review. The two need to happen together.

The bottom line

If you could not confidently answer all five of those questions, you are not alone. Most NDIS providers cannot. The sector deserves insurance that is built for it, not borrowed from an industry it has nothing in common with. Getting that right is not just good risk management. It is part of running a business that your participants, your staff and your community can rely on.