One NDIS provider in Queensland found out the hard way what happens when a sale isn’t managed confidentially. News of the sale reached three support coordinators before a buyer had even been found. Those coordinators quietly redirected their participants to another provider and the business went to market at 15% less revenue than projected. The sale still happened, but the seller left a significant amount of money on the table.
That story isn’t unusual. NDIS businesses are built on trust between providers and participants, between coordinators and providers, between owners and staff. When a sale becomes public knowledge too early, that trust fractures before the new owner has a chance to rebuild it.
Here’s how to manage confidentiality properly throughout the sale process.
In most business sales, the main risk of a leak is that a competitor finds out. In an NDIS business, the risks are more layered:
Staff may start looking for other employment, destabilising the workforce exactly when a buyer is assessing it
Participants and their families may become anxious about continuity of care and begin exploring alternatives
Support coordinators and LACs who refer participants may redirect future referrals elsewhere as a precaution
Competitors may approach your participants, staff, or referrers directly once they know you’re exiting
All of these reduce the value of what a buyer is acquiring and reduce what they’re willing to pay.
Every confidential NDIS business sale starts with a teaser document: a short, anonymous profile that describes the business in enough detail to attract genuine interest, without identifying it.
Geographic region (state or broad metro/regional description, not suburb)
Service categories and registration groups (without naming the provider)
Approximate revenue and EBITDA range
High-level participant profile (approximate number, funding mix)
What it never includes: the business name, ABN, address, staff names, participant details, or any information that would allow a reader to identify the provider before signing a confidentiality agreement.
The teaser goes to a curated list of qualified, pre-screened buyers not to a public listing platform where anyone can read it.
Once a buyer expresses genuine interest based on the teaser, they sign a Non-Disclosure Agreement before receiving any further information.
An NDIS-specific NDA should include:
A definition of confidential information that explicitly covers participant data, staff details, financial records, and the fact of the sale itself
A restriction on the buyer using information for any purpose other than evaluating the acquisition
An obligation not to approach staff, participants, or referrers directly during the process
Generic NDA templates downloaded from the internet often miss the NDIS-specific elements particularly the prohibition on approaching participants or staff. That gap can be costly.
After the NDA is signed and the buyer is qualified as genuine and financially capable, they receive the Information Memorandum the detailed document that presents the full picture of the business.
Even at this stage, participant information should remain de-identified. The IM presents participant revenue and profiles in aggregate, not by name. Specific participant identities are only disclosed in a formal data room, under additional protections, after an offer has been accepted and due diligence formally opened.
Track every IM distributed. Keep a version-controlled register of who received each copy, when, and under which NDA. If information leaks, you need to know who had access.
When and How to Tell Your Staff
This is the question most sellers agonise over and there’s no single right answer. The timing depends on the size of the business, the role of key staff, and the deal structure.
Do not tell general staff until a heads of agreement is signed and due diligence is underway or complete
Tell key operational staff (managers, senior coordinators) under strict confidentiality obligations before settlement, so they can be part of the transition planning
Never tell staff while the business is still being actively marketed even one conversation can spread
If staff need to be involved in due diligence (for example, to provide operational information to the buyer), consider how to structure that engagement carefully ideally through the broker rather than direct buyer-to-staff contact.
The NDIS Commission is explicit: participant privacy must be maintained during a change of ownership, in accordance with the NDIS Practice Standard on Privacy and Dignity.
Participants and their families must be informed about the change of ownership but at the appropriate time, not during the sale process
Participant information cannot be shared with a buyer without appropriate protections in place
A change of ownership must be managed with integrity, honesty, and transparency toward participants
In practice, this means that participant notification happens post-settlement, as part of a structured transition plan not during marketing. De-identified participant data is shared with buyers during due diligence, with full identification only after the deal is complete.
When to Tell Your Referral Network
Support coordinators, LACs, and allied health referrers are a particular confidentiality risk. These relationships are often personal, and if a key referrer hears about the sale from anyone other than you or hears about it at all before settlement they may take precautionary action.
The general principle: referrers are informed after settlement, as part of a planned transition introduction between the outgoing and incoming owner. A well-structured handover period, where the seller actively introduces the new owner to key referrers, transfers relational goodwill in a way that minimises attrition.
If a key referrer needs to be told before settlement for example, because they hold a formal referral agreement that conversation should happen under confidentiality and as close to settlement as possible.
FAQs
Does a sale have to be kept confidential from everyone? Not forever but timing matters enormously. The goal is to control who knows, and when, so that trust relationships are not disrupted before a buyer is in place to sustain them. The NDIS Commission requires participants be informed of ownership changes at settlement, not during marketing.
What if a staff member finds out during the sale process? Address it immediately and directly. Acknowledge the situation with the staff member, affirm the business’s commitment to continuity, and bring them into the transition planning under a confidentiality obligation. Silence or evasion at this point makes things worse.
Can a buyer speak to participants or staff before settlement? Not without the seller’s explicit consent and a clear protocol. Any direct contact with staff or participants by a buyer before settlement should be agreed in writing and managed carefully usually by the broker to avoid disruption.
What happens to participant privacy obligations when the sale is complete? They transfer to the new owner. The incoming provider becomes the registered provider responsible for participant privacy, incident management, and all Practice Standard obligations from settlement day.
Do I need a lawyer to draft the NDA? Yes. An off-the-shelf NDA is unlikely to include the NDIS-specific protections that make it enforceable and effective in this context. A commercial lawyer with business sale experience should draft or review it before it goes to any buyer.
Managing confidentiality in an NDIS business sale is not a single document it’s a process that runs from first enquiry to post-settlement transition. At NDIS Business Brokers, we manage that process specifically for the NDIS sector, with protocols built around the relationship sensitivities that make this market different from any other.
Thinking about selling your NDIS business and want to do it without disrupting what you’ve built? Book a confidential meeting with our team today no obligation, just expert guidance from a team that understands what’s at stake.
References
https://www.benchmarkbusiness.com.au/how-to-sell-your-ndis-business
https://www.ndiscommission.gov.au/provider-registration/notify-us-changes-or-events/buying-or-selling-registered-ndis-business
https://www.lordlaw.com.au/business-confidentiality-agreement/
https://ndiscompliant.com.au/blog/common-mistakes-in-an-ndis-privacy-and-confidentiality-policy
https://sprintlaw.com.au/articles/what-is-an-information-memorandum-in-australia/
https://www.mirocapital.com.au/insights/information-memorandum-selling-business-australia/
https://legalvision.com.au/non-disclosure-agreements/
https://www.ndiscommission.gov.au/rules-and-standards/ndis-practice-standards
https://bsale.com.au/article-display/what-is-an-information-memorandum-in-a-business-sale,1662