NSQHS Standards: A Guide for Hospital Compliance Leads
Compliance
7 August 2026
A complete guide to NSQHS Standard for hospital compliance. Requirements, risk & how to best reduce admin burden while maintaining compliance.
If you're the person responsible for keeping your hospital accredited, you already know what NSQHS standards require on paper. What's harder is the gap between documented compliance and demonstrated compliance. That gap is where most hospitals lose points.
This guide cuts through the framework to focus on what matters most for hospital compliance leads, including what assessors are actually looking for, where organisations typically fall short, and what a third edition means for your planning horizon.
Key Insights
The NSQHS Standards (second edition) comprise 8 standards and 148 actions, assessed on a three-year cycle with no mid-cycle breaks
Only 36% of organisations assessed in 2024–25 met all actions at initial assessment, meaning nearly two-thirds required remediation before accreditation was awarded
Assessors look for embedded practice, not just documented policy
A third edition is in development, with draft standards expected for consultation in 2026 and finalisation in 2028
Compliance leads who treat the three-year cycle as ongoing evidence collection are better positioned at assessment time
What the NSQHS Standards Require
The NSQHS Standards are developed and governed by the Australian Commission on Safety and Quality in Health Care (ACSQHC). They apply to all public and private hospitals, day procedure services, and most public dental practices in Australia. Accreditation is mandatory.
The second edition, updated in May 2021, contains eight standards:
Clinical Governance: The structural foundation for all other standards; requires a clinical governance framework covering leadership, safety culture, performance monitoring, and workforce management
Partnering with Consumers: Mandates that patients, carers and families are genuine partners in both their own care and the organisation's governance
Preventing and Controlling Infections: Evidence-based infection prevention systems, including risk-based precautions and real-time identification of suspected or confirmed infection
Medication Safety: Safe prescribing, dispensing, administration and reconciliation across the full patient journey
Comprehensive Care: Person-centred care that accounts for the patient's clinical and psychosocial needs, with structured risk screening and care planning
Communicating for Safety: Structured clinical handover, patient identification at every point of care, and effective communication across the multidisciplinary team
Blood Management: Informed consent, appropriate management of patients' own blood, and safe use of blood products
Recognising and Responding to Acute Deterioration: Observation systems, escalation protocols, and rapid response processes for patients whose condition is worsening
Each standard contains specific actions (148 in total) that must be demonstrably met at assessment.
The Accreditation Process: What to Expect
Accreditation assessments run on a three-year cycle with no mid-cycle assessment option. Your organisation must schedule its assessment at least 4 months before the current accreditation award expires, leaving enough time for a 3-month remediation period if actions are rated "improvements required" at the initial assessment.
The assessment itself is conducted by an accredited agency under the Australian Health Service Safety and Quality Accreditation (AHSSQA) Scheme. Assessors review documentation, but they also talk directly with staff and observe workflows. A policy that exists in a folder but isn't embedded in daily practice won't be rated as met.
The significant risk provision is worth understanding clearly. If an assessor identifies a situation that could result in significant harm to patients, the Commission must be notified and the risk addressed within 48 hours. This reflects how seriously the framework treats live patient safety risks during assessment.
Where Hospitals Often Struggle
The most useful benchmark is available in the ACSQHC's own reporting. According to the ACSQHC Annual Report 2024–25, of the 568 organisations assessed in the 2024–25 financial year, only 206 (just 36%) met all actions at initial assessment. The remaining 64% required some level of remediation before accreditation was awarded.
That figure has real implications for compliance leads. It means most hospitals arrive at assessment with gaps, and managing the remediation process within the allowed timeframe adds significant pressure to what is already a demanding period.
Common failure patterns tend to cluster around a few areas:
Governance documentation that outpaces practice. Policies exist, but staff can't describe how they're applied day-to-day
Incomplete evidence trails. Actions are being performed, but not consistently recorded in a way that assessors can verify
Deterioration and escalation gaps. Observation systems that aren't consistently applied across all wards, or escalation protocols that staff haven't been trained on recently
Consumer partnership that's performative. Consumer representatives on paper, but limited evidence of their genuine involvement in governance decisions
This is why the missing layer in healthcare compliance often isn't knowledge but evidence capture. Compliance leads know what needs to happen. The challenge is creating systems that consistently prove it's happening between accreditation cycles.
Demonstrated Compliance vs Documented Compliance
The second edition of the NSQHS Standards made a deliberate shift toward demonstrated compliance.
An assessor reviewing your clinical governance framework under Standard 1 isn't just checking that you have a framework document; they're looking for evidence that the framework is actively used to identify risks, drive quality improvement, and hold leadership accountable. Your clinical governance framework needs to show up in meeting records, audit outcomes, incident reviews, and staff behaviour, not just in a policy library.
The same principle applies to incidents. Under Standard 1, organisations must have systems for reporting, reviewing, and learning from adverse events. An incident management software approach that captures events in real time and feeds into quality review processes is materially different from a manual reporting workflow that relies on staff remembering to log incidents after the fact.
The practical question for compliance leads is: If an assessor asked your ward staff about this process tomorrow, what would they say?
What a Third Edition Means for Your Planning Now
The ACSQHC is already working on the third edition of the NSQHS Standards. The first public consultation closed in September 2025, with a second consultation scheduled for 2026. Draft standards are expected to be finalised in 2028.
For hospitals currently in their accreditation cycle, this means:
The second edition remains in force. Don't let third edition discussions distract from current obligations.
The direction of travel is clear. Themes emerging from consultation (stronger consumer partnerships, climate and environmental risk, digital health integration, and learning-oriented governance) signal where additional focus areas are likely to appear.
Now is a good time to build systems that will transition. Organisations that invest in continuous compliance infrastructure now will carry that capability into the next edition with less disruption.
The audit readiness as advantage framing becomes most relevant here. Hospitals that treat accreditation preparation as a standing operational capability, rather than a periodic project, tend to find the process less disruptive and the outcomes better.
Reducing the Administrative Weight of Compliance
One of the most consistent pressures compliance leads report is the administrative burden of maintaining evidence across 148 actions while also managing day-to-day quality and safety functions. The workload is real, and it doesn't compress neatly into the months before assessment.
This is where reducing admin burden becomes a strategic priority, not just a workflow preference. When evidence collection is manual, fragmented, or dependent on individual staff initiative, it creates both a workload problem and a risk problem.
NSQHS compliance software that maps actions to evidence in real time, flags gaps before assessment, and links incident management to governance review removes the friction that makes sustained compliance harder than it needs to be.
Willow is built specifically for regulated care environments. If you're thinking about how to make NSQHS compliance more sustainable between cycles, explore what AI in regulated care can realistically offer, and reach out to see how Willow works in practice with a free demo.
Written by
James Driscoll
Writer
Community Manager for Willow , heywillow.ai. Helping healthcare, aged care, and NDIS providers ditch the compliance spreadsheets for AI-powered intelligence.
Latest Articles & Guides
Stay informed with the latest guides and news.
Ready to Move From Reactive to Continuous Compliance?
See how Willow supports structured governance, real-time monitoring, and audit-ready operations.