Reportable Conduct SchemeAustralia
Back to Intelligence
Compliance

Multi-Jurisdiction RCS Compliance Map for 2026: Deadlines, Regulators and Escalation Points Across NSW, VIC, WA, ACT and TAS

July 22, 2026 7 min read
Share
A compliance team around a large table comparing coloured jurisdictional folders, laptops open to workflow diagrams, with Australian map pins and neutral corporate setting, no text visible

Organisations operating across multiple Australian jurisdictions cannot treat reportable conduct compliance as a single, uniform process. While the core concept is similar across mature schemes in New South Wales, Victoria, Western Australia, the Australian Capital Territory and Tasmania, the deadlines, regulator interfaces and practical expectations differ in ways that can create real risk for safeguarding leaders, HR teams and boards. A 2026 compliance map should therefore do two things at once: standardise internal triage and escalation, while preserving the jurisdiction-specific steps that determine whether a notification is on time, complete and defensible.

1. Side-by-side compliance map: who regulates and when you must notify

For national or multi-site organisations, the most important operational distinction is the initial notification deadline. Internal incident management systems should be built to the shortest applicable timeframe, not the most convenient one.

New South Wales

In NSW, the scheme is established under the Children's Guardian Act 2019 and regulated by the Office of the Children's Guardian (OCG). It is a mature, fully operational scheme. The head of a relevant entity must provide an initial notification within 7 business days, and the final report is due within 30 calendar days.

Victoria

In Victoria, the scheme operates under the Child Wellbeing and Safety Act 2005. From 23 February 2026, responsibility sits with the Social Services Regulator (SSR). The initial notification must be made within 3 days using the SSR secure webform, and the final report must be given as soon as practicable. Victoria is especially important for group employers because the definition of “employee” has expanded to include labour-hire workers, secondees, and individual business directors or owners.

Western Australia

In WA, the scheme is under the Parliamentary Commissioner Act 1971 and regulated by Ombudsman WA. It commenced on 1 January 2023. Initial notification is required within 7 working days, and the final report is due on conclusion of the investigation.

Australian Capital Territory

In the ACT, the scheme sits under the Ombudsman Act 1989 and is regulated by the ACT Ombudsman. Initial notification is required within 7 business days, with the final report to follow as soon as practicable.

Tasmania

In Tasmania, the scheme is established under the Child and Youth Safe Organisations Act 2023 and regulated by the Office of the Independent Regulator (OIR). Initial notification is due within 3 business days, and the final report must be submitted on completion of the investigation. Tasmanian practice places particular emphasis on trauma-informed protocols where children are interviewed.

Practical compliance point

A national entity should not ask local business units to interpret these deadlines ad hoc. Instead, create a single internal trigger requiring legal, safeguarding and HR review immediately after an allegation is identified as potentially reportable. If your internal clock starts only after a full fact check, you may miss a 3-day notification window in Victoria or Tasmania.

2. What counts as reportable conduct and how to assess it

Across these operational schemes, reportable conduct generally includes allegations involving sexual offences or sexual misconduct, physical violence, significant emotional or psychological harm, and significant neglect of a child. The practical challenge is often not defining the category at a high level, but deciding whether the allegation is serious enough, connected enough to child-related work, and credible enough to trigger notification.

Compliance teams should remember that these schemes are not criminal processes. The applicable standard is the civil standard of proof, being the balance of probabilities, applied with regard to the Briginshaw principle where allegations are serious. That means organisations should not delay action on the basis that police have not charged anyone, or because conduct may be difficult to prove to a criminal standard.

An effective triage model usually asks:

  • is the subject a worker or volunteer covered by the scheme in that jurisdiction
  • does the allegation concern behaviour that may fall within reportable conduct categories
  • is there any current child safety risk requiring immediate management action
  • is there a separate mandatory reporting, police or child protection referral obligation
  • which regulator must be notified, and by when

This is where multi-jurisdiction organisations can make mistakes. A matter might be employment-related in one sense, child safety-related in another, and reputationally significant at board level even before the facts are settled. Early triage should therefore be structured, documented and led by personnel who understand both safeguarding and workplace process.

3. Regulator expectations: timeliness, procedural fairness and investigation quality

Although the schemes differ in mechanics, regulators expect broadly similar discipline: prompt notification, credible risk management, fair process and a properly reasoned investigation outcome.

Victoria stands out for its strong emphasis on procedural fairness. That should affect how allegations are framed, how information is put to the respondent, how conflicts are managed and how findings are recorded. A rushed process that meets the 3-day notification deadline but fails basic fairness may still expose the organisation to criticism.

Tasmania requires particular care where children are interviewed. A trauma-informed approach is not optional good practice; it should shape planning, support arrangements, question style, documentation and decisions about who conducts the interview.

In every jurisdiction, regulators are likely to expect the organisation to be able to explain:

  • why the allegation was or was not treated as reportable
  • when the entity first became aware of it
  • what immediate protective steps were taken
  • who investigated and why they were suitable
  • how findings were reached on the available evidence

Investigator capability matters. Internal employees are generally exempt from private investigator licensing requirements when acting within the scope of their employment. External or commercial investigators, however, may require a state-based licence. In NSW, an external investigator needs a Class 2E (Private Investigator) licence under the Security Industry Act 1997 (NSW). In WA, external investigators must be licensed under the Security and Related Activities (Control) Act 1996. Regulators also expect investigators to be appropriately qualified; a common benchmark is Certificate IV in Government Investigations combined with trauma-informed interviewing experience.

4. Board and executive escalation points for 2026

Boards do not investigate reportable conduct matters, but they should be clear about when executive escalation is mandatory. In a multi-jurisdiction setting, escalation criteria should be set before the next allegation arises.

Useful board-level escalation triggers include:

  • an allegation involving sexual misconduct or a serious child safety risk
  • any matter likely to require regulator notification in a 3-day jurisdiction
  • allegations concerning a senior leader, principal, director, owner or high-profile worker
  • potential systemic failures, including repeated incidents or weak supervision
  • matters attracting police interest, media attention or community concern
  • delays in notification, investigation or final reporting
  • use of an external investigator, especially across state borders
  • disagreement within management about whether conduct is reportable

Executive reporting should distinguish between oversight and interference. Boards should receive enough information to discharge governance duties, monitor risk and resource the response, while preserving procedural fairness and the integrity of the investigation.

For 2026 planning, organisations should also review whether their incident management platform captures the date of awareness, jurisdiction, regulator, notification due date, interim controls, investigator status and final report deadline. If those fields are not mandatory, compliance drift is likely.

Key takeaways

  • NSW, VIC, WA, ACT and TAS all operate reportable conduct schemes, but their deadlines are not uniform.
  • The shortest initial notification periods are in Victoria and Tasmania, at 3 days and 3 business days respectively.
  • NSW requires an initial notification within 7 business days and a final report within 30 calendar days.
  • WA requires notification within 7 working days; ACT within 7 business days.
  • Victoria’s scheme moved to the Social Services Regulator on 23 February 2026 and has an expanded concept of “employee”.
  • Regulators expect prompt notification, sound risk management, procedural fairness and appropriately qualified investigators.
  • External investigators may need private investigator licensing, particularly in NSW and WA.
  • Boards should adopt clear escalation triggers for serious allegations, short-deadline jurisdictions, senior respondent matters and any delay or systemic safeguarding concern.