Child Protection Obligations for Childcare Operators

Every childcare compliance line has a price. A weak lease, a soft occupancy month, an above-market wage bill — a buyer models them, discounts them, and moves on. Child protection obligations are the one exception. In a sale, a child-safety failure isn’t a number to negotiate; it’s a reason to walk. That single fact is why the duties below deserve more attention than any other item on an operator’s compliance list — and why they belong in a property and business conversation, not just a policy folder.

What “child protection obligations” actually means

Child protection is not one rule. It is a layered set of standing legal duties that sit on top of an approved provider every single day the doors are open. They come from three directions at once: the Education and Care Services National Law and Regulations that ACECQA and the state regulators enforce; state and territory child-protection and reportable-conduct legislation; and the national Child Safe Standards that grew out of the Royal Commission into Institutional Responses to Child Sexual Abuse.

The framework has tightened sharply in 2026. According to ACECQA, amendments to the National Law that took effect on 27 February 2026 introduced a statutory duty that the safety, rights and interests of children are the paramount consideration in the day-to-day operation of a service. NSW Department of Education guidance also confirms that “inappropriate conduct” toward a child — conduct a reasonable person would regard as inappropriate given the child’s age, the accepted care practice, and whether harm is likely — is now treated as an offence. In plain terms: the law no longer waits for abuse before it bites. The bar is now the ordinary standard of care, tested every day.

We won’t re-explain the training layer here — the mandatory national child safety course, its deadlines and penalties are covered in our guide to mandatory child safety training. This article is about the duties that sit underneath the training: the things a provider must actually do, on the floor, in perpetuity.

The four duties that never sleep

Think of child protection as four obligations that run continuously — not tasks you complete and file away.

1. Screen before, and keep screening after. A current Working with Children Check is required before anyone starts work in a service, in every jurisdiction. The obligation doesn’t stop at the front door. Under the 2026 changes, staff must tell the provider within 24 hours of any change to their Working with Children Check, teacher registration or equivalent status, and the provider must then notify the regulator within 24 hours (ACECQA). Screening is a live monitoring duty, not a one-off tick at induction.

2. Report what you’re required to report. Every educator is a mandatory reporter under their state’s child-protection law. Victoria, for example, requires nominated supervisors and staff who work directly with children to complete the Department of Education’s PROTECT module on mandatory reporting obligations. Separately, in states that operate a Reportable Conduct Scheme — such as New South Wales, through the Office of the Children’s Guardian — a provider carries its own duty to notify the scheme about allegations against workers. These are two different pipes, and an operator has to know which applies to them.

3. Notify fast. The National Law’s notification clock has shortened. According to ACECQA, from 1 September 2025 the time to notify the regulator of an incident or allegation of physical or sexual abuse of a child at the service fell from seven days to 24 hours (Regulation 176). The transaction and record-keeping implications of that shorter window are worth understanding in their own right, which we cover in our piece on the 2026 child safety reforms.

4. Embed the standards — don’t paper over them. The Child Safe Standards aren’t a poster on the wall. They ask that child safety is built into governance, recruitment, complaint handling, staff training and the physical environment — supervision and sightlines included, which is where child protection quietly overlaps with your staffing and ratio structure. A centre can hold every certificate on file and still fail this one if the day-to-day practice doesn’t match the paperwork.

Why this is a transaction issue, not just an operations one

Here is the part operators underestimate until they sell. In our transaction experience, child-safety compliance behaves differently from every other line in due diligence. Rent, wages, occupancy and maintenance are all price conversations — a buyer finds a problem, attaches a number, and adjusts the offer. A child-protection problem is a pass or fail conversation.

A buyer’s adviser will ask for the notification history, the Working with Children Check register, the complaints log and any regulator correspondence. A clean record is quietly one of the most valuable things a centre owns, because it can’t be manufactured in the weeks before a sale. A pattern of late notifications, a lapsed check that ran while someone was rostered on the floor, or an unresolved reportable-conduct matter doesn’t shave a few percent off the price — it can end the deal, or collapse the goodwill that most of the valuation rests on. This is why we treat child safety as a threshold item on every due diligence checklist, and why it sits close to the NQF rating in a buyer’s mind: both are read as evidence of how the place is actually run.

That cuts the other way for sellers. If you are even thinking about a sale in the next few years, your child-protection record is part of the asset you are building today — and there is no catch-up. An owner who wants an early, private sense of where their centre sits can start with our free online estimator before commissioning a formal appraisal, but the estimator only tells you the number; the clean compliance record is what lets you defend it.

What operators should do now

None of this requires a consultant. It requires a routine that assumes an inspector — or a buyer — could walk in tomorrow.

Keep a single, current register of every worker’s Working with Children Check and registration expiry, and treat a lapsed check as a rostering stop, not a reminder to chase later. Write down who notifies the regulator, and the scheme where one applies, so the 24-hour clock is never lost to “I thought you were doing it.” Run the mandatory reporting and child-safety training on schedule and keep the completion evidence with the roster, not in someone’s inbox. And once a quarter, walk your own floor as if you were the assessor: are sightlines clear, are the complaint and incident processes visibly in use, does daily practice match the policy folder? That habit is the same discipline we describe for a spot audit and an assessment and rating visit — and it is the cheapest form of value protection an operator has, sitting quietly inside the operating costs you already carry.

The regulatory investment behind all of this is real: the Australian Government committed $188.5 million over four years for safety and quality in early childhood, funding the National Early Childhood Worker Register, support for mandatory training, a national assessment of CCTV in services, and better transparency for families (Department of Education). The direction of travel is only one way — more scrutiny, faster reporting, less tolerance for gaps.

Key Takeaway

Child protection is the one obligation an operator can never treat as a box to tick, because it is the one obligation a buyer will never treat as a discount. Screen continuously, report and notify fast, and make sure daily practice matches the policy folder. Do that, and you are protecting children first — and, as a direct consequence, protecting the value of everything you have built.

Thinking about the value of your childcare centre and how your compliance record affects it? Talk to ChildcareLink for a confidential, specialist read. Visit childcarelink.com.au or contact our team directly.

Sources

• ACECQA — Reporting requirements about children; Notification types and timeframes; Child safety reforms and resource updates
• ACECQA / Education and Care Services National Regulations (Regulation 176) — 24-hour notification timeframe from 1 September 2025
• NSW Department of Education — Child safety reforms; Inappropriate conduct guidance; Notifications and reporting
• Victorian Government (earlylearning.vic.gov.au / vic.gov.au) — Child safety reforms and the PROTECT mandatory reporting module
• Colin Biggers & Paisley — Child safety compliance under the new National Law: a legal perspective for ECEC providers
• Australian Government Department of Education — National child safety training deadlines; $188.5 million safety and quality package; National Early Childhood Worker Register
• National Principles for Child Safe Organisations / Child Safe Standards

Disclaimer: The information provided in this article is for general informational purposes only and does not constitute financial, legal, or professional advice. ChildcareLink recommends seeking independent professional advice tailored to your specific circumstances before making any business or investment decisions.