How to Give NDIS Families Visibility Into Daily Care Without Breaching Privacy

The Problem With How Most Providers Share Information With Families

Most NDIS providers share updates with families in one of three ways — and each creates problems:

• Phone calls. Time-consuming for staff, often happen only when something goes wrong, no written record.
• Email updates. Uncontrolled — once an email is sent, you cannot restrict who sees it or update the information. Creates privacy risk if sent to the wrong address.
• Family attends in person. Only works for participants in shared accommodation and is impractical for community-based supports.

None of these methods gives families ongoing, asynchronous visibility — the ability to check on their family member's day without requiring staff to stop and call them.

What a Family Portal Does

A family portal is a secure, access-controlled view of a specific participant's records — accessible to authorised family members or guardians without a staff login. The portal shows only what the administrator has permitted for that individual family member.

In CareIQ, family portal access is configured per participant and per family member. Permissions can include any combination of:

• Daily shift notes and observations
• Upcoming shifts and scheduled supports
• Medication administration records
• Vital signs readings
• Two-way messaging with the care team

What Families Cannot See

Privacy controls are as important as access. Family members should not be able to see:

• Other residents' records or names
• Clinical incident details beyond what is appropriate for their relationship
• Staff personal information or employment records
• Financial or billing information
• Any records for other participants in the organisation

CareIQ's family portal is isolated per participant and per family member. A guardian for one participant cannot see any data for other participants, even if they share a group home.

Two-Way Messaging — Benefits and Boundaries

Two-way messaging through the portal allows family members to ask questions and receive responses from the care team — without using personal mobile numbers or email addresses.

This creates several benefits:

• All communication is logged and linked to the participant record
• Staff respond from the system, not their personal devices
• Families receive a notification (email or app) when a message is sent
• Managers can see all communication — no off-channel conversations

When a family member sends a message through the portal, all care staff receive a push notification so no message goes unread.

Privacy Compliance — What to Consider

Before granting family portal access, confirm:

• The person requesting access is an authorised representative — family member, guardian, or nominee documented in the service agreement
• The participant has consented to that person having access (or the person holds legal authority)
• The level of access granted is proportionate to the relationship and the participant's wishes

For participants with decision-making capacity, access should be granted with their explicit consent. For those with a guardian or administrator appointed by VCAT or equivalent, confirm the scope of that appointment before granting access.