What information we can share

What type of information we can share

Protected information

We hold protected information about participants, prospective participants and providers to deliver the NDIS.

Protected information is anything about a person or organisation we may or may not have on record.

Protected information may include:

  • legal name or participants’ guardian or nominee
  • contact details
  • date of birth
  • citizenship status
  • information and evidence of disability
  • details on current supports
  • plan management type
  • Centrelink Customer Reference Number (CRN)
  • bank account details.

Other information we share

We publish a wide range of information about the NDIA on our website.

This is called our information publication scheme.

Who we can share information with

We sometimes receive requests for information about participants, people seeking disability support and providers from third parties.

In most cases, we need to have consent from the person the information is about to share the information.

We can only release information about participants, people seeking disability support and providers when the law says we can. This is also usually with the consent of the person the information is about.

Sometimes we may give information to third parties without consent. For example, for the purpose of law enforcement or child welfare.

In these cases, we need to know:

  • why they have not been able to get consent
  • why the information is needed
  • what the information will be used for.

We will then decide if we can lawfully share the information.

See the information sharing protocol for details:

Who can ask for information

Requests are typically made by:

  • NDIS participants
  • people seeking disability support
  • nominees
  • child representatives
  • providers
  • state and territory governments
  • third-party organisations.

How to ask for information

Participants

Participants and their authorised representatives can ask for information we have about them through the Participant Information Access (PIA) scheme.

Participants can submit a webform to ask for access to this information.

Participants, providers and organisations with consent can also ask for information in the following ways:

You can ask us for any document through a Freedom of Information (FOI) request.

This must be made in writing. There are some types of documents that may not be able to be released through FOI.

It usually takes up to 30 days to get a response. If you're asking for your own personal information, it's often faster and easier to use the PIA process.

You can email [email protected] for help with the best way to get information.

Governments and third-party organisations

State and territory governments can ask for information without consent by:

When making a request, you must explain:

  • why you have not been able to get consent
  • a detailed explanation about why the information is required and what it will be used for.
This page current as of
26 May 2026
Indicates required field
Was this page useful?*
Why?
Why not?