Running an internal compliance audit is one of the most effective ways to identify risks, demonstrate accountability, and maintain standards across your childcare service. For approved providers and nominated supervisors, a structured audit process isn't just good practice—it's a critical safeguard under the Education and Care Services National Law and National Regulations.

This guide walks you through how to design, execute, and act on internal compliance audits tailored to your service.

Key Takeaways

What Is an Internal Compliance Audit for Childcare?

An internal compliance audit is a systematic, documented review of your childcare service's operations, policies, and practices against the National Quality Framework (NQF), the National Law, and the National Regulations. It's an independent assessment—ideally conducted by someone without day-to-day involvement in the area being audited—designed to verify that your service meets legal and quality obligations.

Unlike an external regulatory assessment by the Australian Children's Education and Care Quality Authority (ACECQA), an internal audit is owned and controlled by your service. It's a proactive tool, not a reactive one.

Why Run Internal Compliance Audits?

Risk Management. Audits expose gaps before they become complaints or regulatory findings. Addressing issues early is far cheaper than managing breaches.

Quality Improvement. Systematic review of your practices reveals where training, systems, or resources are falling short. This directly supports continuous improvement under the NQF.

Stakeholder Confidence. Parents, board members, and staff see that you take compliance seriously. Documentation of audits and actions demonstrates due diligence.

Regulatory Readiness. When ACECQA assesses your service, documented internal audits show you've been actively monitoring your own compliance. This builds credibility and may reduce regulatory burden.

Planning Your Internal Compliance Audit

Define the Scope

Decide what you're auditing. Options include:

Most services benefit from an annual full audit, supplemented by targeted audits on high-risk or problem areas every 3–6 months.

Select Your Auditor

The auditor should be:

Many services use a nominated supervisor or external compliance consultant. If you don't have in-house expertise, external auditors bring objectivity and deep knowledge of regulatory expectations.

Create an Audit Schedule

Plan when audits will occur—ideally linked to your continuous improvement cycle, upcoming regulatory visits, or known risk periods (e.g., winter, when infectious diseases and exclusion periods demand tighter management).

Building Your Audit Framework

A strong audit framework maps all your obligations and service practices against measurable criteria. It typically includes:

Legislative and Regulatory Requirements

Reference the specific Regulations relevant to your audit scope. For example:

NQS Quality Areas and Elements

The National Quality Framework organises childcare excellence into seven Quality Areas. Your audit should assess how your service is performing against elements within each area relevant to your scope. For example, Quality Area 2 (Children's Health and Safety) includes elements on injury prevention, safe practices, and illness management.

Service Policies and Procedures

Document all policies that should be in place (e.g., duty of care, enrolment, complaints, staff performance) and audit whether they exist, are current, and are being followed.

Supporting Records and Evidence

Identify what records you need to review—staff files, incident reports, parent communications, rosters, training certificates, etc.

Conducting the Audit: Step-by-Step

Step 1: Announce the Audit and Set Expectations

Brief your team on the audit's purpose (improvement, not punishment), scope, and timeline. Let staff know they may be interviewed or observed. Transparency builds cooperation.

Step 2: Review Documentation

Systematically collect and review relevant records: policies, rosters, training logs, incident reports, parent enrolment forms, staff performance reviews, etc. Check for completeness, currency, and accuracy.

Step 3: Interview Staff and Leadership

Conduct confidential interviews with nominated supervisors, educators, and support staff. Ask about their understanding of policies, their day-to-day practices, and any barriers they face. This reveals gaps between written policy and actual practice.

Step 4: Observe Practices

Where relevant, observe routines—drop-off and pick-up, meal times, nappy changing, sleep routines, supervision arrangements—to verify practices match documented procedures and regulatory requirements.

Step 5: Compare Findings Against Criteria

For each audit criterion, note whether it is:

Record evidence for each finding—quotes from interviews, specific policy gaps, observed incidents, missing records, etc.

Documenting and Reporting Findings

Create an audit report that includes:

Keep the tone professional and constructive. Frame findings as opportunities to strengthen quality and safety, not failures.

Creating and Tracking an Action Plan

For each non-compliance or gap, develop a corrective action:

Track progress in a simple spreadsheet or management system. Review the action plan at leadership meetings to maintain momentum.

Follow-Up and Continuous Improvement

Don't treat the audit as a one-off. Schedule a follow-up audit 3–6 months later to verify that actions have been completed and sustained. If gaps persist, dig deeper: Is training needed? Do systems need redesign? Are there cultural barriers to change?

Use audit findings to inform your continuous improvement plan under the NQF. Report key insights to your nominated supervisor, leadership team, and board. Share positive findings and progress with staff to celebrate improvement.

Frequently Asked Questions

How often should we conduct internal compliance audits?

At minimum, conduct a full audit annually. High-risk areas—such as health and safety practices, or areas where you've had previous findings—warrant targeted audits every 3–6 months. Some larger services audit continuously, rotating through Quality Areas each quarter.

Who can conduct an internal compliance audit?

A nominated supervisor, approved provider, or experienced staff member can lead an audit, provided they have knowledge of the National Law and Regulations. For objectivity and expertise, many services engage an external compliance consultant, especially for full audits. Training auditors in the National Quality Framework is worthwhile.

What should we do if the audit finds serious breaches?

Document the breach carefully, assess the risk to children, and take immediate action to rectify it—for example, removing a staff member from duty if a qualification is missing, or implementing enhanced supervision if a safety gap is identified. Consult your legal and insurance advisors if needed. Report to ACECQA only if the breach meets the threshold for notification under the National Law.

Can audit findings be used against us in a regulatory investigation?

Generally, documented audit findings and evidence of corrective actions strengthen your position. They show diligence and a commitment to improvement. However, audit reports are not protected by legal privilege unless created at the direction of legal counsel. If you're concerned about confidentiality, consult a lawyer about how to structure audit documentation.

How do we ensure staff take audit recommendations seriously?

Frame audits as quality improvement, not fault-finding. Involve staff in planning and action. Celebrate progress and improvements. Link audit findings to training and professional development. Have leadership publicly commit to supporting the action plan with resources and time. When staff see that audits lead to real change and better working conditions, buy-in increases.

Strengthen Your Compliance with the Right Tools

WIDEN Law's AI compliance research tool answers National Quality Framework questions in seconds, with citations to the National Law, Regulations, and NQS. Try it free for 14 days at widenlaw.com.au