Skip to content
← All Standards
2

Standard 2

The Organisation

Standard 2 sets what a provider’s governing body must do to deliver quality care: accountable leadership, a culture of safety and inclusion, effective risk and quality systems, a capable and supported workforce, and proper handling of feedback, complaints and incidents (including the Serious Incident Response Scheme).

2.1

Partnering with older people

What the Standard requires

The organisation builds meaningful, active partnerships with older people and uses what they say to shape its priorities, governance and continuous improvement. The strengthened elements require partnering directly with residents (not just about them), actively supporting them to take part, partnering on governance and strategic direction, and deliberately reflecting the diversity of people who use the service — including Aboriginal and Torres Strait Islander residents and others at higher risk of harm.

This is the first of Standard 2’s governance Outcomes, and it turns partnership from a courtesy into a board-level obligation. The governing body — the board or the owners — has to partner with older people when it sets the organisation’s priorities and strategic direction, and keep partnering with them through the design, delivery, evaluation and improvement of care. The guidance is specific about how: forums, meetings, surveys, feedback sessions, and in residential care a Consumer Advisory Body whose feedback the board must formally consider and answer in writing.

This sits above the bedside, but it shapes the ward I walk into. Where a facility genuinely partners with residents, clinical problems tend to surface earlier — pain that is not being managed, medication worries, the indignities around continence and mealtimes — because residents and families have a real channel to raise them. It is worth knowing those channels exist, because a Consumer Advisory Body or resident forum is a legitimate place to escalate a pattern I am seeing across several patients, say recurrent falls after a roster change or scripts that keep taking days to fill, instead of hoping the right message reaches whoever is on shift.

For families, the practical upshot is a seat at the table rather than another satisfaction survey. You can ask to take part, and the organisation is expected to actively make that possible: interpreters, accessible formats, support for someone living with dementia. In residential care you can expect a Consumer Advisory Body’s feedback to be documented, considered and answered in writing. The strengthened Standard is explicit that partnership has to reflect the diversity of the people the service looks after, including Aboriginal and Torres Strait Islander residents and those at higher risk of harm, so it cannot quietly default to the most confident, English-speaking families.

What an assessor will look for is evidence rather than intent: that older people genuinely shaped the strategic priorities (Action 2.1.1), that participation was supported and reflected the diversity of residents, including culturally safe engagement with Aboriginal and Torres Strait Islander people (2.1.2), and that partnership carried through the design, delivery, evaluation and improvement of care (2.1.3). The Standard does not spell this out, but in my view the weak point will almost always be the same: showing what actually changed because of what residents said. A partnership that never visibly moves a decision is theatre, and that is the first thing I would expect to be tested.

GP takeaway. Partnership here is a governance requirement, not a survey — and it is a legitimate channel for escalating clinical patterns you see across residents. Look for evidence that resident feedback actually changed something.
2.2

Quality and safety culture

What the Standard requires

The governing body actively leads a culture of safety, inclusion and quality — one focused on continuous improvement, that embraces diversity and puts the safety, health and wellbeing of both older people and the workforce first. The strengthened elements pull this into strategic and business planning, and require the specific needs of First Nations older people and people living with dementia to be planned for rather than left to chance.

Outcome 2.2 is about tone from the top. The governing body does not just have to value safety and quality; it has to lead them visibly and be able to show the culture genuinely exists on the floor. The strengthened Standard writes this into strategic and business planning: the safety, health and wellbeing of residents and workers has to be an explicit planning priority, alongside making care accessible and appropriate for people from diverse backgrounds, Aboriginal and Torres Strait Islander residents, and people living with dementia.

Culture is not abstract to me. It is the difference between a place where a carer feels safe ringing to tell me a resident has gone off their legs overnight, and one where that gets buried until it is an emergency at 2am. Good culture shows as early escalation, honest handover, someone willing to question a medication or a plan, and no one punished for owning a mistake. Where it is poor, you see defensiveness, falls and skin tears that never quite make it into an incident report, and a reluctance to call after hours. Because 2.2 hangs this on the board, persistent clinical safety problems become a governance failure, not just something to pin on the ward.

Families can take from this a reasonable expectation that the organisation treats safety and wellbeing as core business and plans specifically for diversity, First Nations residents and people living with dementia, rather than running everyone through the same template. Staff wellbeing is deliberately in scope too, for the unglamorous reason that exhausted, unsupported carers do not deliver safe care.

To satisfy the Standard a facility has to show the culture is real (Action 2.2.1) and that its strategic and business planning actually prioritised safety and wellbeing, diversity and accessibility, worker engagement, and the relevant legislation and risks (2.2.2). The catch — and this is my read, not a line in the Rules — is that "demonstrate the culture exists" is the easiest thing to fake with a values poster in the foyer and the hardest to prove. The real evidence is in the incident, complaint and Quality Indicator data, and in whether the staff making beds describe the same place the board does.

GP takeaway. Safety culture is a board accountability now. Under-reported falls, defensive handover and reluctance to escalate are governance failures, not just ward-level ones.
2.3

Accountability and quality systems

What the Standard requires

The governing body is accountable for the delivery of quality care and keeps oversight of the whole operation through a functioning quality system that drives continuous improvement, backed by current policies and procedures that actually guide how workers do their jobs. The strengthened elements require a defined quality system, investment to improve outcomes for older people, and regular reporting on how that system is performing.

This is the engine room. It calls for a genuine quality system: clear accountabilities for each role, strategic and operational expectations, and policies and procedures that are current and actually guide practice rather than gather dust. The part that matters most is that the system has to let the governing body watch performance using real inputs — feedback from families, carers and workers; analysis of risks, complaints and incidents and what is driving them; Quality Indicator data; and contemporary, evidence-based practice.

This is where the policies I depend on live: medication management, after-hours escalation, wound care, restrictive practices, infection control. When they are current and evidence-based, my instructions get carried out the same way every shift. When they are out of date or quietly ignored, the care plan falls over at the point of delivery no matter how carefully I wrote it. The requirement to dig into why an incident happened, rather than just tally it, is the piece I care about most: it is the gap between recording a fall and fixing the thing that caused it.

For residents and families, 2.3 is the basis for expecting the organisation to put money and effort into improvement, and to use complaint, incident and Quality Indicator data to change what it does rather than file it. Reporting on how the quality system itself is performing is now expected, not a nicety.

A facility needs to show a documented quality system that assigns accountabilities by role and feeds the board the data it needs to oversee performance (Action 2.3.1), plus evidence it has invested and reported on that system. Where I would expect scrutiny, and this is inference rather than black-letter requirement, is whether the loop closes: does the data lead to a documented change, and can staff point to something that got better because the system worked? A quality system that produces reports but never alters practice is the usual failure.

GP takeaway. Current, evidence-based policies are what make your care plan actually happen on the floor. Ask whether incident data drives root-cause fixes or just gets counted.
2.4

Risk management

What the Standard requires

The provider runs a risk management system that identifies, assesses, documents, manages and regularly reviews risks to residents, workers and operations — and puts real strategies in place to prevent, control, minimise or eliminate them. The strengthened elements require broad mitigation strategies, data analysis to understand risk, and engaging older people and workers so the risk picture reflects the front line.

Outcome 2.4 wants risk handled as a continuous discipline, not a register someone updates once a year. Providers have to identify, assess, document, manage and regularly review the risks to residents, workers and the organisation, and put real strategies in place to prevent or reduce them — informed by data and by talking to the people closest to the risk, meaning residents and the workers doing hands-on care.

The clinical risks here are the familiar ones: falls, pressure injuries, medication error, choking and aspiration, wandering, deterioration, restrictive practices. What is clinically useful in the strengthened wording is the insistence on analysing data and actually asking front-line staff, because the carer showering someone usually knows where the danger is well before it reaches a chart. The tension worth holding is with dignity of risk under Outcome 1.3. Managing risk is not the same as stripping it out by restricting people. Good practice mitigates the hazard while still letting a resident make the choices they are entitled to make, even ones others would call unwise; the two Outcomes are meant to be read together, not one traded off against the other.

So for families it means a relative’s risks should be identified, written down and actively managed, with mitigation you can actually see, rather than surfacing only after something goes wrong. You can also expect to be part of the conversation about the risks that affect your relative instead of having it settled over your head.

The evidence a facility needs is a working risk system (Action 2.4.1), concrete mitigation actions (2.4.2), data and engagement feeding the quality system (2.4.3), and regular review of whether any of it works (2.4.4). My own test, and I will flag it as opinion, is whether risk management and dignity of risk are reconciled in the notes. A place that controls risk mainly through bed rails, sedation or a blanket "nil by mouth" may be failing both this Outcome and Standard 1, and that balance is exactly where clinical judgement and clear documentation earn their place.

GP takeaway. Read 2.4 with dignity of risk (1.3): the goal is mitigated risk with autonomy intact, not risk eliminated by restriction. Restriction-by-default fails both Standards.
2.5

Incident management

What the Standard requires

The provider runs an incident management system that safeguards residents and ensures incidents — and near misses — are acknowledged, responded to promptly, managed and learned from. The strengthened elements require actively supporting residents, families and carers to report incidents, and clear incident responsibilities for the workforce. This operates alongside the mandatory Serious Incident Response Scheme (SIRS).

Outcome 2.5 requires a system that records, investigates, responds to and manages incidents and near misses, acts on them promptly, and — the point that matters — learns from them so they do not recur. The strengthened Standard adds an explicit duty to support and encourage residents, families and carers to report, and to back workers to recognise, respond to and report incidents themselves. For serious incidents it runs alongside the mandatory Serious Incident Response Scheme.

To me these are clinical events: medication errors, falls with injury, unexplained bruising or weight loss, resident-to-resident assaults, pressure injuries, and anything that looks like abuse or neglect. Two things are worth holding onto. Near misses count — a drug charted wrongly but caught before it reached the resident is a signal, not a non-event. And some incidents carry SIRS reporting timeframes that are tight, so if I see possible abuse, neglect or an unexplained serious deterioration, it needs to go into the facility’s incident system promptly and I need to document what I saw and what I did about it.

Families are entitled to be told when something has gone wrong — that is open disclosure — to be actively supported to raise concerns without any fear of reprisal, and to see incidents actually lead to change. The whole point of the strengthened wording is that reporting should be encouraged, not quietly smoothed over.

On paper a facility has to show an incident system that records, investigates, responds in time and prevents recurrence (Actions 2.5.1–2.5.2), active support for residents and workers to report (2.5.3–2.5.4), analysis of incident data fed back to residents, workers and the quality system (2.5.5), and regular review of the whole thing (2.5.6). What the Standard will not tell you, but experience will, is that the quiet failure here is under-reporting. A facility with suspiciously tidy incident numbers is more likely suppressing reports than genuinely safer, and I would treat that pattern as something to name rather than trust.

GP takeaway. Near misses count, and possible abuse, neglect or serious deterioration may trigger SIRS timeframes — document what you saw and escalate promptly. Suspiciously low incident numbers usually mean under-reporting, not safety.
2.6

Feedback and complaints management

What the Standard requires

Residents, workers and others are actively encouraged and supported to give feedback and make complaints without fear of reprisal, and those complaints are acknowledged, handled transparently and used to improve care. The strengthened elements require reporting the outcomes of feedback back to residents and workers, and monitoring whether the complaints process actually resolves things.

Outcome 2.6 requires a complaints system that receives, records, responds to and reports on complaints, and that genuinely encourages residents, families, carers and workers to speak up, with advocates and language services built in rather than bolted on. It wants timely resolution, open disclosure when something has gone wrong, and complaint data feeding back into improvement. The two strengthened additions are closing the loop — telling people what came of their feedback — and monitoring whether the complaints process actually resolves anything.

I treat complaints as clinical intelligence. A family that keeps raising that their mother is in pain, losing weight, over-sedated or not being turned is handing me a case-finding signal, not just an administrative grumble. Knowing there is a real complaints channel, and that using it cannot be held against them, means I can encourage families to put it in writing, which creates a documented trail and usually moves a problem faster than a quiet word ever does. Complaints about my own care should reach me too; a system that keeps clinicians insulated from feedback is not doing its job.

For residents and families that is a solid basis to complain without fear, to bring in an advocate or an interpreter, to get a timely response and an honest account when something has gone wrong, and now to be told what actually happened as a result. "We’ll look into it" followed by silence no longer clears the bar.

A facility has to show the complaints system itself (Action 2.6.1), active encouragement to raise concerns (2.6.2), access to advocates and language services (2.6.3), timely resolution with open disclosure (2.6.4), data analysed and reported to the board, residents and workers (2.6.5), and regular review of how well it works (2.6.6). Reading between the lines, and this is my interpretation, the new "report the outcome back" and "monitor resolution" duties are aimed squarely at the oldest complaint about complaints: that they disappear. Evidence that feedback changed something, and that the person who raised it was told, is what separates a working system from a suggestion box.

GP takeaway. Treat recurring family complaints as clinical case-finding, not admin noise. Facilities must now close the loop — "we’ll look into it" with no outcome reported back is a fail.
2.7

Information management

What the Standard requires

Records are identifiable, accurate, current and accessible to those who need them, and residents’ information is kept confidential and handled in line with their informed consent — including their right to access, correct, or withdraw consent to share it. The strengthened elements focus on timely access to the right information, the accuracy and completeness of records, and reviewing and improving the information system itself.

Outcome 2.7 calls for a secure information system where records are accurate, complete, current and available to the people who need them when they need them. It ties record-keeping to consent: providers have to seek informed consent to collect, use, store or disclose a resident’s information, including assessments, and residents have to understand their right to see or correct their records or withdraw consent to share.

For me this is squarely a clinical-safety issue. Everything I do rests on records that are accurate and current — medication charts, allergies, advance care directives, recent pathology, incident notes, specialist letters. When that information is scattered across systems or out of date, I am prescribing and deciding on a false picture. The line about integrating information from different sources is the practical heart of it: my notes, the facility’s care plan, the hospital discharge summary and the pharmacy’s list should reconcile, not contradict each other. Consent to share clinical information with other treating teams also lives here, which matters every time I refer or hand over.

Residents and families can expect confidentiality, accurate records, and a genuine say in who sees what. A resident can ask to see or correct their record and can withdraw consent to share it — rights that should be explained plainly, not buried in the admission paperwork.

The facility has to show a secure system (Action 2.7.1) that gives timely access, keeps information accurate and complete, runs on informed consent, honours the rights to access, correct and withdraw, and integrates across sources (2.7.2), and that gets reviewed and improved (2.7.3). The failure clinicians feel most, and I would call this observation rather than a written requirement, is currency and integration: a care plan that has not caught up with a medication change from two days ago is an information problem that turns into a clinical one. Reconciling the record at every transition is where this Outcome actually pays off.

GP takeaway. Accurate, current, integrated records are a clinical-safety issue — you prescribe on the picture the system gives you. Push for reconciliation at every transition.
2.8

Workforce planning

What the Standard requires

The provider understands and manages its workforce needs and plans for the future — deploying enough appropriately skilled workers, in the right mix, to deliver safe quality care. The strengthened elements require a documented workforce strategy, a satisfied and psychologically safe workforce, adequate supervision and resources, a preference for direct employment over contractors, and competency-based training.

Outcome 2.8 is about having the right people, in the right numbers, with the right skills, now and looking ahead. It requires a workforce strategy that identifies and monitors the number and mix of staff needed, meets minimum care requirements, brings workers into how rostering will deliver them, sets out the skills and qualifications each role needs, and plans for shortages. Notably, it leans providers towards directly employing staff and away from leaning on agency and independent contractors.

Workforce planning sits upstream of almost every clinical problem I meet in aged care. Understaffing and heavy agency use show up as missed repositioning and pressure injuries, slow escalation, medication errors, poor continence care and handovers that do not join up. The strengthened emphasis on a psychologically safe, supported workforce is not a soft touch — a frightened, burnt-out or unfamiliar workforce is itself a clinical risk. So when I see a run of care failures, the staffing model and skill mix are fair game to ask about, because 2.8 makes them the provider’s job to plan for.

The reasonable expectation for families is that enough suitably skilled staff are on when care needs peak — mornings, mealtimes, bedtime — and that the place values continuity over a revolving door of unfamiliar faces. The push towards direct employment is meant to support exactly that continuity.

A facility should be able to show a workforce strategy covering numbers and skill mix, minimum care requirements, role-specific competencies, engagement of suitably qualified staff, a bias to direct employment, and a plan for shortages (Action 2.8.1). The question I would actually ask, opinion rather than a clause, is whether the roster on a bad day looks anything like the strategy on paper. Plans that assume best-case staffing and quietly collapse into agency backfill under pressure are where residents get hurt, so minimum care minutes and continuity are the numbers worth watching.

GP takeaway. Understaffing and heavy agency use are upstream of pressure injuries, med errors and delayed escalation. Skill mix and roster reality are fair questions when care patterns slip.
2.9

Human resource management

What the Standard requires

Care is delivered by aged care workers who are skilled and competent, appropriately qualified and experienced for their roles, and who receive the training and supervision they need to perform them. The strengthened elements centre on pre-employment validation, adequate supervision and support, a responsive training system, mandatory competency-based training on core matters, and regular performance assessment.

Where 2.8 plans the workforce, 2.9 runs it. Providers have to verify a worker’s qualifications, experience and suitability before they hire (pre-employment checks), deploy an appropriate number and mix of competent staff, give them supervision, escalation, support and resources, run and keep improving a training system, and assess and review performance regularly. Underpinning it all is mandatory competency-based training on a defined set of core matters.

That core-training list is the part I care about clinically, because it sets the floor of competence in the people who carry out my care plans. It covers person-centred, rights-based care; culturally safe, trauma-aware and healing-informed care; caring for people living with dementia; responding to medical emergencies; and the Code of Conduct, the Serious Incident Response Scheme and the Quality Standards. In practice it should mean the staff around me can spot deterioration, hold the fort in an emergency before I arrive, and manage the behaviours that come with dementia without reaching for restraint. Where that competence is not there, my instructions are only ever as good as the person carrying them out, and this Outcome makes that competence and supervision the provider’s documented responsibility.

Families can reasonably expect that the people doing hands-on care have been checked, trained, supervised and reviewed, not simply rostered on. Supervision and support also have to be accessible for workers whose first language is not English and be culturally sensitive, which cuts both ways as a safety measure.

The paperwork side is pre-employment and qualification records (Action 2.9.1), sensible deployment (2.9.2), accessible supervision and support (2.9.3), a training system that draws on residents’ experience and responds to feedback, complaints, incidents and risk (2.9.4–2.9.5), documented competency-based core training (2.9.6), and regular performance review (2.9.7). What I would want an assessor to look past, and I will mark this as my view, is the training register. A tick that someone "completed" dementia or medical-emergency training is not the same as being able to do it under pressure, and that gap is precisely where clinical harm tends to happen.

GP takeaway. Mandatory core training now includes recognising deterioration, medical emergencies, dementia care and SIRS. A training tick is not competence — the gap between the two is where harm happens.
2.10

Emergency and disaster management

What the Standard requires

The provider plans for, prepares for and can respond to emergencies and disasters in a way that considers and manages the risks to the health, safety and wellbeing of residents and workers. The strengthened elements require documented emergency and disaster management plans, active preparation and response strategies, engagement with residents and workers about the plans, and regular testing and review.

Outcome 2.10 requires emergency and disaster management plans that set out how the provider and its workers will respond and manage the risks to residents and staff, strategies to prepare for and respond to those events, engagement with residents, their supporters and workers about the plans, and regular testing and review. It is the Outcome that covers bushfire, flood, heatwave, pandemic, a long power or water outage, and evacuation.

For a frail, medically complex, often immobile population the clinical stakes are real. Heat and power failures threaten the medication cold chain, insulin included, along with oxygen concentrators and the thermoregulation of people who simply cannot compensate. Evacuation brings its own risks — interrupted medications, falls, delirium — and a pandemic layers on infection control and the prospect of the roster collapsing. I would want to know the plan actually covers continuity of essential medicines, clinical equipment and handover during an evacuation, and how the facility reaches treating GPs and pharmacies when the usual systems are down. In an Australian summer, heat and bushfire planning is a live clinical problem, not a filing exercise.

Families should expect a real, tested plan rather than a binder on a shelf — one built around residents’ individual needs for mobility, cognition and medical dependence, and one they have been consulted on. Testing it through drills is required, not optional.

The evidence is documented plans (Action 2.10.1), preparation and response strategies (2.10.2), engagement with residents, supporters and workers (2.10.3), and regular testing and review (2.10.4). The bit that decides whether any of it works, and this is judgement rather than a written clause, is whether the plan has been rehearsed against a realistic worst case for this particular cohort. A plan that assumes staff turn up, lifts work and transfers go smoothly is the one that fails on the day, and clinical continuity — medicines, equipment, records — is the part most often left thin.

GP takeaway. For a frail cohort, heat, power loss and evacuation are clinical threats — cold-chain, oxygen, medication continuity and delirium. Ask whether the plan has actually been drilled, not just written.

General information only, reflecting the interpretation of Umbrella Aged Care’s GPs. Not legal or compliance advice. Always rely on the official Standards and guidance from the Aged Care Quality and Safety Commission at agedcarequality.gov.au.

Enquire about care