AHCRA
Back to Blog
Regulatory

AHPRA Mandatory Reporting: What Healthcare Practitioners Must Know

Justine Coupland·25 March 2026·15 min read
AHPRA Mandatory Reporting: What Healthcare Practitioners Must Know

Most registered health practitioners in Australia know mandatory reporting exists. Far fewer could tell you exactly when it kicks in, what the four triggers are, or how the treating practitioner exemption actually works in their state. That gap between "vaguely aware" and "confident enough to act" is where real risk lives.

Get it wrong and you face disciplinary action yourself. Sit on a concern too long and a patient gets hurt. Report something that doesn't meet the threshold and you've strained a colleague relationship for nothing.

This guide cuts through the confusion. We'll cover your actual obligations under the National Law, the four reportable concerns, who reports what, state-by-state exemption differences, and what happens once a notification lands on AHPRA's desk.

What is mandatory reporting under the National Law?

Mandatory reporting in healthcare is a legal obligation, not a professional courtesy. Under the Health Practitioner Regulation National Law Act 2009 (the "National Law"), certain people must notify AHPRA when they form a reasonable belief that a registered health practitioner has behaved in a way that meets one of four specific thresholds.

The National Law applies to all 16 registered health professions in Australia. That includes doctors, nurses, dentists, pharmacists, psychologists, physiotherapists, and others regulated by AHPRA and the National Boards.

The obligation sits in Part 8, Division 2 of the National Law. It creates a mandatory notification scheme that operates alongside, but separately from, the voluntary notification process. The distinction matters. Mandatory notifications have specific triggers and carry penalties for non-compliance. Voluntary notifications are broader in scope and discretionary.

AHPRA's most recent annual report shows that mandatory notifications make up a relatively small proportion of total notifications received each year. But they tend to involve serious conduct, and they're the ones where failing to act carries the clearest personal consequences for the person who should have reported.

What are the four mandatory reporting requirements for AHPRA?

The National Law defines four types of notifiable conduct. A mandatory notification must be made when you have a reasonable belief that a registered practitioner has engaged in one or more of the following.

| Reportable concern | What it means | Example | |---|---|---| | Practised while intoxicated | The practitioner practised their profession while intoxicated by alcohol or drugs | A nurse administering medication while visibly affected by alcohol | | Sexual misconduct | The practitioner engaged in sexual misconduct in connection with their practice | A practitioner initiating a sexual relationship with a current patient | | Significant departure from accepted professional standards | The practitioner's practice represents a significant departure from accepted professional standards, placing the public at risk | A surgeon consistently failing to follow basic infection control protocols | | Impairment | The practitioner has an impairment that could place the public at substantial risk of harm | A doctor with an untreated substance use disorder affecting their clinical judgement |

The word "reasonable belief" is doing heavy lifting here. You don't need proof. You don't need to have witnessed the conduct yourself. But you do need more than gossip or a vague suspicion. A reasonable belief is one based on facts or circumstances that would lead a reasonable person in your position to believe the conduct occurred.

Note the thresholds are deliberately high. Not every instance of poor practice triggers a mandatory notification. The intoxication must be while practising. The departure from standards must be "significant" and place the public at risk. The impairment must create "substantial risk of harm." These qualifiers exist because Parliament intended mandatory reporting to capture serious risks, not everyday performance concerns.

Who must make mandatory notifications to AHPRA?

Three groups of people carry mandatory reporting obligations under the National Law.

Registered health practitioners. If you hold registration with AHPRA in any of the 16 professions, you have a mandatory notification obligation. This applies regardless of whether the practitioner you're concerned about works in the same profession, the same clinic, or even the same state. If you're a registered physiotherapist and you form a reasonable belief about a registered nurse's conduct, you must report.

Employers of registered health practitioners. This includes practice owners, clinic managers, hospital administrators, and anyone who engages a registered practitioner to provide health services. The employer obligation is slightly different. Employers must notify when they reasonably believe a practitioner has behaved in a way that constitutes notifiable conduct. They must also notify when they take action against a practitioner because of the practitioner's conduct, performance, or health.

Education providers. Universities and other education providers approved by a National Board must notify AHPRA if they reasonably believe a student has an impairment that could place the public at substantial risk of harm during clinical placement.

What about non-registered staff?

Practice managers, receptionists, and other non-registered staff don't carry a mandatory reporting obligation under the National Law. But that doesn't mean they should stay silent. They can (and should) raise concerns through their employer, who does carry the obligation. Many clinics build internal escalation pathways for exactly this reason. If your practice doesn't have one, that's a gap worth closing. AHCRA's compliance platform includes policy templates that cover internal reporting procedures.

How does the treating practitioner exemption work?

This is where AHPRA mandatory reporting guidelines get genuinely complicated, and where most practitioners trip up.

The National Law includes an exemption for treating practitioners. If you learn about another practitioner's notifiable conduct solely through your therapeutic relationship with that practitioner (as their doctor, psychologist, or other treating health professional), you are generally exempt from mandatory reporting. The policy rationale is straightforward: if practitioners feared their own treating clinician would report them, they'd avoid seeking help, and that would create a bigger public safety problem.

But the exemption has limits and varies by jurisdiction.

State and territory differences

| Jurisdiction | Treating practitioner exemption | |---|---| | All states except WA and QLD | Exemption applies to treating practitioners. You are not required to make a mandatory notification about information gained solely through treating another practitioner. | | Western Australia | WA has its own version of the National Law. The treating practitioner exemption applies, but WA also has broader exemptions that reduce the mandatory reporting obligation in certain circumstances. | | Queensland | QLD operates under the Health Practitioner Regulation National Law (Queensland) and has historically had a broader treating practitioner exemption. QLD also has specific provisions around sexual misconduct that differ from other states. |

The critical word is "solely." If you learn about a colleague's impairment through treating them, you're exempt. If you learn about it through treating them and also through observing their behaviour at work, the exemption may not cover the work observation component. This is a genuinely grey area and one where seeking legal advice before deciding not to report is sensible.

What is the difference between voluntary and mandatory notifications?

This distinction trips up a lot of practitioners. Both are formal notifications to AHPRA, but they operate under different rules.

Mandatory notifications are required by law when you form a reasonable belief about one of the four notifiable conducts. Failing to make a mandatory notification when you should have is itself a potential breach. The threshold is high but the obligation is non-negotiable once met.

Voluntary notifications are discretionary. Any person, whether registered or not, can make a voluntary notification to AHPRA about a registered practitioner's health, conduct, or performance. The threshold is lower. You might make a voluntary notification about a practitioner whose performance concerns you but doesn't rise to the level of a "significant departure from accepted professional standards."

In practice, the line between the two can be blurry. If you're unsure whether your concern meets the mandatory threshold, you can still make a voluntary notification. AHPRA will assess it regardless. What you shouldn't do is talk yourself out of reporting a genuine concern because you're not sure which category it falls into.

For more on how AHPRA handles complaints and reviews generally, see our guide on what clinics need to know about the AHPRA complaints process.

How do you make a mandatory notification to AHPRA?

The actual process is more straightforward than most people expect. Here's what it looks like step by step.

Step 1: Form your reasonable belief. You observe conduct or receive information that leads you to reasonably believe a registered practitioner has engaged in notifiable conduct. Document what you've observed or been told, including dates, times, and any witnesses.

Step 2: Check the threshold. Does the conduct genuinely fit one of the four categories? Is there a reasonable belief, not just a suspicion? If you're uncertain, consider seeking confidential advice from your professional indemnity insurer or legal adviser. But don't let uncertainty become indefinite delay.

Step 3: Submit the notification. You can make a mandatory notification directly through AHPRA's online portal or by contacting AHPRA by phone. You'll need to provide your details (mandatory notifications cannot be made anonymously), details of the practitioner you're reporting, and a description of the conduct or concern.

Step 4: Provide supporting information. AHPRA may ask for additional details after your initial notification. Cooperate with any follow-up requests. Keep copies of everything you submit.

Step 5: Maintain confidentiality. Don't discuss your notification with colleagues beyond what's necessary. The process is confidential, and broadcasting it can compromise the investigation and expose you to defamation risk.

The key thing to understand is that making a mandatory notification is not the same as making an accusation. You're flagging a concern for AHPRA to assess. The investigation and any resulting action are AHPRA's responsibility, not yours.

What happens after you make a mandatory report to AHPRA?

Once AHPRA receives your notification, a structured assessment process begins.

AHPRA first assesses whether the notification meets the threshold for further action. Not every notification proceeds to a full investigation. AHPRA may determine that the concern doesn't warrant further inquiry, or that it should be dealt with through a different pathway.

If the notification does proceed, AHPRA will typically notify the practitioner that a concern has been raised. The practitioner is given an opportunity to respond. AHPRA may also gather additional information from other sources.

Possible outcomes include no further action, conditions placed on the practitioner's registration, undertakings, suspension, or referral to a tribunal for more serious matters. In cases involving immediate risk, AHPRA can take interim action (such as suspension) before the full assessment is complete.

The process can take months. AHPRA has been criticised for lengthy timeframes, and they've made efforts to improve, but complex matters still take time. As the person who made the notification, you may or may not be kept informed of the outcome. AHPRA has limited obligations to update notifiers, which can be frustrating.

What protections exist for people who make mandatory reports?

The National Law provides specific protections for people who make notifications in good faith.

You are protected from civil liability (you can't be sued for making the notification), criminal liability, and administrative liability. Your notification cannot be used as grounds for dismissal or other adverse employment action. These protections apply to both mandatory and voluntary notifications, provided the notification was made in good faith.

"Good faith" means you genuinely believed the conduct occurred and you weren't motivated by malice or an intention to cause harm. If you report a colleague because you have a genuine concern about patient safety, you're protected. If you fabricate a report to settle a personal grudge, you're not.

These protections are robust on paper. In practice, making a notification about a colleague can still be professionally uncomfortable. Workplace dynamics don't always respect legal protections. This is one reason why having clear organisational policies and a culture that supports appropriate reporting matters. Staff compliance tracking systems can help by making reporting part of standard operating procedures rather than an individual burden.

What are the consequences of failing to make a mandatory notification?

Failing to make a mandatory notification when you had a reasonable belief that notifiable conduct occurred is itself a breach of the National Law. The consequences can include disciplinary action by your own National Board, conditions on your registration, or in serious cases, suspension or cancellation of registration.

In practice, disciplinary action for failure to report is relatively uncommon. But it does happen, particularly in high-profile cases where a pattern of non-reporting contributed to ongoing patient harm. The Medical Board of Australia's guidelines make clear that practitioners are expected to take their reporting obligations seriously.

For employers, the consequences can be even more significant. Employers who fail to report or who actively discourage reporting face potential regulatory action, and in some jurisdictions, may also face prosecution.

The practical risk goes beyond formal consequences. If a practitioner you should have reported goes on to harm a patient, and it comes out that you knew and didn't act, the reputational and professional fallout can be severe. Even if AHPRA doesn't take formal action against you, the coronial inquest or civil proceedings might paint a less forgiving picture.

Common scenarios: when should you report?

Theory is one thing. Real-world situations are messier. Here are some common scenarios and how to think through them.

A colleague smells of alcohol at work but is functioning normally. This alone may not meet the "practised while intoxicated" threshold. But it's a red flag. Document it. If it happens repeatedly, or if you observe any impact on their clinical work, the threshold is more likely met. Consider whether an employer notification or a voluntary notification is appropriate in the interim.

A patient tells you their previous practitioner made sexual comments during a consultation. If you form a reasonable belief based on the patient's account, this likely meets the sexual misconduct threshold. The fact that you didn't witness it personally doesn't matter. A reasonable belief based on a patient's disclosure is sufficient.

You notice a colleague consistently failing to document informed consent. Poor documentation is a performance concern, but is it a "significant departure from accepted professional standards" placing the public at risk? Possibly, depending on the clinical context. A surgeon not documenting consent for invasive procedures is different from a physiotherapist with incomplete admin notes. Consider the risk to patients and whether the departure is genuinely significant.

A colleague confides in their GP (you) about a substance use problem. If you learned about this solely through the treating relationship, the treating practitioner exemption likely applies. But if the impairment is so severe that there is an immediate and serious risk to patients, you face a genuine ethical tension. Seek legal advice.

An employee tells you they saw a practitioner behaving inappropriately with a patient. As an employer, once you have this information, your obligation to assess and potentially report is triggered. Don't dismiss secondhand information without proper consideration.

Frequently asked questions about AHPRA mandatory reporting

Can I make a mandatory notification anonymously?

No. Mandatory notifications require you to identify yourself. This is different from voluntary notifications, where anonymous complaints can be submitted in some circumstances. The requirement to identify yourself exists so AHPRA can follow up with you for additional information if needed. Your identity is protected by the confidentiality provisions in the National Law.

Do I need to tell the practitioner I'm reporting them?

No. You are not required to inform the practitioner before or after making a mandatory notification. In fact, doing so could compromise the assessment process or, in serious cases, allow the practitioner to alter evidence or behaviour before AHPRA can act.

What if I'm wrong about the conduct?

The test is reasonable belief, not certainty. If you genuinely and reasonably believed the conduct occurred based on the information available to you, you're protected even if the subsequent investigation finds the concern unsubstantiated. The protections in the National Law are designed to encourage reporting, not punish honest mistakes.

Does mandatory reporting apply to retired practitioners?

The obligation to report applies when the practitioner you're concerned about holds current registration. If a practitioner has already surrendered or lost their registration, the mandatory notification provisions may not apply, but you can still make a voluntary notification if you believe there's a risk (for example, if the person might seek re-registration).

How long do I have to make a mandatory notification?

The National Law doesn't specify a strict timeframe, but the expectation is that you report promptly once you form a reasonable belief. Unnecessary delay can itself be viewed as a failure to meet your obligation, particularly if harm occurs during the delay.

Building a reporting culture in your practice

Individual obligation is one piece of the puzzle. The other is organisational culture. Clinics and practices that treat mandatory reporting as a shared responsibility, with clear policies, regular training, and confidential escalation pathways, handle these situations far better than those where practitioners are left to figure it out alone.

Practical steps for practice managers and clinic owners include maintaining up-to-date mandatory reporting policies, ensuring all registered staff complete annual training on their notification obligations, establishing a confidential internal escalation process, documenting all concerns and actions taken (even when you decide not to report), and regularly reviewing your compliance framework.

If you're looking for a structured way to manage staff compliance obligations and keep reporting policies current, AHCRA's compliance platform provides tracking tools and policy templates built specifically for Australian healthcare practices. Paired with our CPD courses, you can ensure your team stays across their obligations without the admin burden falling on one person.

Sources

  1. AHPRA, "Mandatory notifications," accessed March 2026. https://www.ahpra.gov.au/Notifications/mandatorynotifications/Mandatory-notifications.aspx

  2. AHPRA, "Making a mandatory notification," accessed March 2026. https://www.ahpra.gov.au/Notifications/mandatorynotifications.aspx

  3. Health Practitioner Regulation National Law Act 2009, Federal Register of Legislation. Part 8, Division 2.

  4. Medical Board of Australia, "Guidelines for mandatory notifications," Australian Health Practitioner Regulation Agency.

  5. AHPRA and National Boards, Annual Report 2024-25, notification statistics and outcomes data.


Need help keeping your team across their mandatory reporting and compliance obligations? Get in touch with AHCRA to see how our platform and training can support your practice.

JC

Justine Coupland

Founder & Healthcare Compliance Specialist

Justine Coupland is the founder of AHCRA (Australian Healthcare Compliance Regulatory Agency), helping Australian healthcare clinics navigate AHPRA, TGA, and privacy compliance.

Share this article

Want more compliance insights?

Browse our full library of articles on healthcare compliance, regulatory updates, and best practices.