Public Liability Insurance for Aged Care and Disability Support Providers

Public liability cover can help manage the financial consequences of a covered third-party claim. It does not replace safe service delivery, clinical governance or incident management. For aged care and disability support providers, those duties sit well before the point at which an insurer becomes involved. This guide explains where public liability fits, where other insurance may respond and how to assess a cover level without relying on an arbitrary figure.

Strengthened Quality Standards changed the operating expectations

The strengthened Quality Standards are part of the new Aged Care Act 2024 and applied from 1 November 2025. The Aged Care Quality and Safety Commission describes them as more detailed and measurable than the previous Quality Standards. Their intended outcome is care that is safe, meets the person’s needs and preferences, and upholds their rights.

That change followed a 2021 recommendation by the Royal Commission into Aged Care Quality and Safety for the government to urgently review and update the Quality Standards. The regulatory weight of the sector now comes through specific, operational duties rather than broad statements about the quality of care.

For operators, “more detailed and measurable” matters. Expectations are attached to systems and records. Providers need to show how they identify and manage risk, respond to incidents and near misses, maintain clinical governance and use information to improve care. A public liability policy cannot perform any of those functions.

Insurance is therefore a risk-management tool, not a compliance box. It may provide financial protection for covered third-party liability. It does not prove that an incident system works, that clinical governance is effective or that a service meets the strengthened Standards.

Caring for people with complex needs

Many older people who require clinical care services have multiple chronic co-morbidities and complex care needs. They may be experiencing sickness, frailty, disability, cognitive impairment or be nearing the end of their life.

That does not mean an adverse outcome will result in a claim. Nor does a participant’s health status establish negligence by itself. It does mean providers must be able to identify, assess and manage risk while continuing to provide respectful, individualised care.

Public liability becomes relevant when negligent conduct is alleged and a third party suffers loss covered by the policy. A fall, for example, may lead to an injury claim. The resulting claim may fall within the public-liability risk perimeter if it alleges that negligent conduct caused the injury. The policy wording and the legal facts will determine whether a particular claim can be responded to.

The same distinction applies across home and community settings. A person’s own home is not a reason to treat the service as though it were being delivered on provider-owned premises. The relevant questions include:

• What duty did the provider owe in the circumstances?
• What conduct is alleged to have caused the harm?
• Who owns the property or suffered the loss?
• Was the harm connected with the service being delivered?
• Is the allegation one of injury, property damage, professional error or another form of loss?

A participant may be the third party claiming injury. The participant or another owner may also be the third party claiming damage to property in the home. If negligent service delivery causes property damage, that is the kind of loss public liability may address. Whether the claim is covered depends on the policy and the circumstances; the location of the service alone does not answer that question.

Incidents and near misses must be managed as part of service delivery

All aged care providers need an incident management system to record and respond to reportable incidents. The system is expected to safeguard individuals and acknowledge, respond to, effectively manage and learn from incidents.

Under the strengthened incident management expectations, the system must record, investigate, respond to and manage both:

• incidents connected with the delivery of funded aged care services; and
• near misses connected with that delivery.

The provider must also take timely action and reduce or prevent incidents from recurring. Near misses matter because the purpose of incident management is not limited to repairing damage after harm occurs. Near-miss information can help identify what went wrong, what nearly went wrong and what should change to reduce recurrence.

This is a different system from an insurance claim process. Recording an event as an incident or near miss does not itself mean a third party has suffered a loss. It may also mean that no claim exists. The aged care obligation to record, investigate, learn and improve can apply without a compensable claim or an insurer response.

Residential services carry a continuing responsibility

Providers delivering aged care services in a residential care home have a 24-hour responsibility to manage incidents that occur. The 24-hour responsibility belongs to the residential aged care provider and concerns operational management. It is not a statement about when an insurer must be notified or how a claim will be covered.

Home and community services focus on service delivery

Providers delivering aged care services in a home or community setting have a responsibility to manage incidents that occur during the delivery of aged care services by the provider’s workers and associated providers.

This wording matters when assessing exposure in a participant’s home. An incident is not only a matter for a residential facility’s internal system, and it is not automatically excluded because it happened outside a provider-owned building. The connection between the event and the delivery of services is important.

The incident system should support reporting by individuals and their supporters. Providers must also encourage their involvement in identifying ways to reduce incidents from occurring. Participants and supporters may be able to identify hazards, workflow problems or changes that would otherwise be missed.

An effective process should therefore include more than collecting forms. It needs timely response, appropriate investigation, a record of what was learned and action that reduces recurrence. A policy may help with the financial consequences of covered liability, but it cannot substitute for any part of that process.

Clinical governance remains a governing-body responsibility

The Clinical Care Standard places overall responsibility on the governing body to ensure that a clinical governance framework is implemented. The governing body must also monitor whether that framework is effective in supporting aged care workers to deliver quality clinical care services.

Providers operationalise the framework and report on its performance. That division is important. The governing body is not merely receiving reports after something has gone wrong. It is responsible for oversight of whether the clinical governance system works.

The provider’s actions include:

• keeping records;
• analysing and reporting on internal and external clinical safety and quality data;
• considering feedback from older people and others involved in their care;
• using contemporary, evidence-based practice;
• identifying and managing clinical risk; and
• assessing and keeping improving the quality of clinical care services.

Incident management and public liability should be considered within that wider structure. Incident information may inform clinical risk oversight. Insurance may form part of an organisation’s financial risk treatment. Neither replaces the other.

A governing body should be able to connect the two without treating insurance as proof of quality. The question is not whether a policy exists. The question is whether the organisation identifies clinical risk, maintains usable information, reviews performance and acts on what the information shows.

NDIS registration adds a separate layer of responsibility

Disability support operators should not treat NDIS obligations as an extension of aged care regulation alone. The NDIS Commission regulates registered providers and helps them improve the quality and safety of NDIS services and supports.

A broad cohort of providers must be registered with the NDIS Commission. Registration applies to providers that:

• provide specialist disability accommodation;
• provide supported independent living support;
• provide NDIS digital platform services;
• provide specialist behaviour support services;
• provide supports or services to NDIS participants with NDIA-managed funding;
• provide plan management services;
• plan to use regulated restrictive practices; or
• are registered aged care providers who support NDIS participants.

Registration is only one part of the provider’s responsibilities. Providers must comply with the Australian Consumer Law and meet the requirements of the Competition and Consumer Act 2010. The NDIS Commission regulates registered providers against the NDIS Practice Standards and the NDIS Code of Conduct.

Published provider responsibilities also extend to matters such as telling participants the price of NDIS supports before delivery, keeping full and accurate records and helping participants change providers under the NDIS Practice Standards. These duties sit alongside public liability insurance and may involve different regulatory or contractual consequences.

An operator working across aged care and disability support should not assume that registration in one area settles the compliance position in the other. The service type, participant cohort, funding arrangements and operating activities all matter when identifying the applicable responsibilities.

Public liability is only one part of the cover structure

The labels used for insurance reflect different legal claims and different losses. A complaint may contain allegations about negligent conduct, professional failure and the injury or loss suffered. The relevant insurance section needs to be assessed from the claimant’s legal position, not simply from the everyday description of the event.

Public liability

Public liability insurance covers a third party where negligence causes death, injury or property damage. Depending on the policy, cover may also respond to emotional distress, a recognised psychiatric illness or consequential loss.

Consequential loss is a distinct category. It can, for example, arise where negligence causes another business to lose expected revenue. It should not be assumed to be included simply because a policy includes public liability. The evidence of what the policy covers lies in its wording.

For aged care and disability support, a participant’s claim alleging injury from negligent service delivery may be a public-liability matter. So may a third-party claim alleging that negligent service delivery damaged property in a home. These are risk scenarios, not assurances that a particular claim will be covered.

Public liability is required for certain occupations in some states and territories. That legal requirement must be considered separately from any broader question about an appropriate policy limit.

Professional indemnity

Professional indemnity insurance helps cover the cost of legal action arising from claims about professional advice or services. It can cover mistakes, neglect or breaches of contract that result in a loss for the client.

That coverage is different from a claim focused on bodily injury or damage to a third party’s property. A dispute about the quality of a clinical service, an error in advice or a loss alleged to arise from a contractual failure may raise professional indemnity questions.

A matter can raise more than one category of allegation. For example, a complaint may include both personal injury and negligence in the provision of services. The allegations, evidence and policy terms must be considered together.

Workers compensation

Workers compensation insurance covers employees for work-related injuries and is required where a business has employees. It is a separate protection from public liability.

If an employee suffers a work-related injury, workers compensation is the relevant employee cover. It does not answer a claim by a participant alleging negligent injury caused by the provider’s service. Nor should it be treated as a substitute for public liability or professional indemnity.

Keeping the three forms of cover separate makes risk reporting clearer. It also helps ensure that the event reaches the correct decision-makers without assuming that every care-related complaint belongs under one policy.

No regulator sets a mandated public liability limit for this sector

There is no public liability limit mandated by a regulator for aged care or NDIS providers. Public liability may be required for certain occupations in some states and territories, but that should not be confused with a uniform sector-wide limit.

Professional advice is the correct route to determining what the law actually requires in a particular operation. A qualified adviser can assess the activities, occupations, locations and legal structure. A lawyer can assist where the legal requirement needs interpretation. An insurance broker can then advise on the available cover structure and placement.

An operator should not treat a familiar round figure as a compliance answer. A cover level should be tied to the actual risk profile and the wording of the relevant policy.

Build the exposure picture first

Start with the services being delivered, including:

• residential aged care;
• home and community aged care;
• disability accommodation or support;
• behaviour or other specialist support;
• services delivered in participant-owned homes; and
• activities involving employees, workers and associated providers.

Then identify the kinds of third-party loss that could arise. Participants may suffer injury. Property may be damaged during service delivery. Participants, supporters and other people may be involved in reporting and managing incidents. These are risk categories for assessment, not predictions that a claim will occur.

Also consider the record of incidents, near misses, complaints and claims. The purpose is not to infer a guaranteed future loss. It is to understand the operations, locations and failure points that the cover must reflect.

Check contracts and policy terms together

Contractual requirements can add to the regulatory position. The contract may identify insurance obligations or allocate risk, while the policy wording determines how the cover responds. These documents should be reviewed together rather than assumed to say the same thing.

Ask a broker to explain:

• the available public liability limit;
• which activities and locations the cover is intended to address;
• any exclusions or sublimits relevant to the operation;
• whether emotional distress or consequential loss is included;
• how the policy describes a third-party claim; and
• how claims and incidents must be notified.

The same questions should be asked for professional indemnity and workers compensation. Public liability, professional indemnity and workers compensation may all be relevant, but they respond to different parts of the risk.

Document the basis for the cover level

A defensible cover decision should connect the limit to the organisation’s legal requirements, service settings, participant needs, contractual position and policy wording. It should also be revisited when those factors change.

The strengthened Quality Standards require systems that identify risk, manage incidents and near misses, respond promptly and reduce recurrence. Clinical governance adds continuing oversight of safety and quality. Public liability insurance can help manage the financial consequences of covered third-party liability. It cannot carry that wider responsibility.

A policy is most useful when it sits inside a disciplined risk-management framework, not when it is used to stand in for one.