Quick Answer:
A school board does not run compliance. Its job is to satisfy itself that someone does, and the way it does that is by asking better questions. The six that matter most: can we produce the evidence today, does every obligation have a named person, what has been reported since we last met, what is expiring, what did we do after the last incident, and what are we not being told? A board that asks those six consistently will find problems while they are still small.
In this guide
- Oversight is not management, and the difference matters
- Six school board compliance questions, and what a good answer sounds like
- What the board is actually accountable for
- The four reports a board should receive, and how often
- Reading the board compliance pack: what looks fine but is not
- What goes wrong when nobody asks
- Establishing a culture of care and accountability
- What to do at your next board meeting
- Where to go next on school governance and compliance
- Frequently asked questions about school board compliance
55%
of board time now spent on compliance in 2025, up from 24% a decade earlier (Productivity Commission)
767,712
students across 1,240 independent schools in Australia, 18.5% of all enrolments (Independent Schools Australia)
Independent school leadership has grown well beyond enrolment, academic standards and parent engagement.
Principals and executive teams now manage operational risk, meet legal obligations and are expected to evidence both. Every policy update, training record and incident report carries legal and reputational weight.
The load on governance is growing rather than steady. The Productivity Commission notes that a survey of company directors found boards were spending 55% of their time on compliance in 2025, up from 24% ten years earlier.
Independent Schools Australia reports 1,240 independent schools enrolling 767,712 students in 2025, 18.5% of all Australian enrolments, so this is a large sector absorbing that same shift.
This page is not written for them. It is written for the people they report to.
If you sit on a school board or a governance committee, you are not there to run compliance. You are there to be satisfied that it is being run, and to notice when it is not.
That is a different skill, and it comes down almost entirely to the quality of the questions you ask.
Effective school board compliance oversight is not about understanding every regulation.
It is about knowing which six questions expose whether the regulations are being met, and asking them consistently enough that the answers start improving.
This article is general information for Australian schools, not legal or governance advice. Obligations differ by state and territory, by school type, and by the legal structure of the entity. Independent schools operate under a range of structures, and duties vary accordingly.
Oversight Is Not Management, And The Difference Matters
The most common governance failure in schools is not neglect. It is a board that has confused receiving information with exercising oversight.
| Management does this | The board does this | |
|---|---|---|
| Policies | Writes them, updates them, distributes them | Asks when each was last reviewed and who has acknowledged the current version |
| Risk | Identifies risks, applies controls, reviews them | Asks which risks have no owner, and which controls have never been tested |
| Incidents | Receives reports, investigates, closes actions | Asks what has been reported since the last meeting and what changed as a result |
| Training | Assigns it, chases it, records completion | Asks for completion by campus and role, never as one number |
| Child safety | Runs the checks, keeps the register, responds to concerns | Asks whether it could be evidenced today, without notice |
| The system | Chooses it, configures it, uses it | Asks how long it takes to produce evidence, and whether that number is improving |
The one-sentence version
Management’s job is to do the work. The board’s job is to be able to tell, from where it sits, whether the work is being done. Those require completely different information, and most board packs are built for the first.
Six School Board Compliance Questions, And What A Good Answer Sounds Like
Ask these at every meeting. The value is not in any single answer but in whether the answers get better over time, and in how quickly they arrive.
Treat them as the standing agenda for school board compliance rather than an occasional deep dive.
| The question | A weak answer | A strong answer |
|---|---|---|
| 1. Can we produce the evidence today? Pick one staff member and one obligation. Ask for proof it was met, now, in the meeting. |
“We can pull that together for you.” | It appears on screen inside a few minutes, with the date and the version acknowledged |
| 2. Does every obligation have a named person? Not a department. A person. |
“Compliance handles all of that.” | A count, and it is zero. Or a count with a plan and a date attached |
| 3. What has been reported since we last met? Incidents, hazards, complaints and near misses. |
“Nothing significant.” | A number, a breakdown by type, and what changed as a result of each |
| 4. What is expiring in the next 90 days? Clearances, registrations, insurances, mandatory training. |
“We keep on top of that.” | A list, produced without a manual check, with owners against each line |
| 5. What did we do after the last incident? Not what happened. What changed. |
“It was investigated and closed.” | The control that was changed, the risk that was re-rated, and whether the cause had appeared before |
| 6. What are we not being told? Asked directly, of the executive, on the record. |
“Nothing.” | A genuine answer. The willingness to give one is the actual measure of the culture |
Question one is the whole thing in miniature
Asking for evidence in the meeting, without notice, tests the system, the records and the culture in a single request. If the answer is “we will send that through”, the evidence is being assembled rather than retrieved — and that is exactly the position a school does not want to be in when the person asking is a regulator rather than a board member.
What The Board Is Actually Accountable For
This varies by structure, and it is worth being precise rather than sweeping.
Most independent schools in Australia are registered charities, which brings a specific and published set of duties.
Others operate as companies limited by guarantee, incorporated associations, or within a diocesan structure, each with its own overlay.
| Where the duty comes from | What it asks of board members | Read it here |
|---|---|---|
| ACNC Governance Standards | Standard 5 sets duties for Responsible People: act with reasonable care and diligence, act in the charity’s best interests, manage financial affairs responsibly, disclose conflicts, and not misuse the position. Compliance is a condition of registration | ACNC Governance Standards · Standard 5 |
| Work health and safety law | Officers hold a due diligence duty that cannot be delegated. Board members frequently meet the definition of an officer, which makes this personal rather than institutional | Safe Work Australia |
| Child safety legislation | Child Safe Standards apply across Australia, built on the National Principles for Child Safe Organisations, with the detail set by each state and territory. Leadership and governance is one of the principles, not an exemption from them | AHRC National Principles |
| Privacy law | Student and staff data carries obligations, and a notifiable breach starts a clock from the moment the school becomes aware | OAIC · NDB scheme |
| Employment and records | Record-keeping obligations sit behind most enforcement action, and they are administrative rather than exotic | Fair Work Ombudsman |
The point of the table is not that a board should master five bodies of law. It is that each row generates questions, and a board that knows where its duties come from asks better ones.
The distinction worth holding onto
A board is rarely criticised for failing to prevent an incident. It is criticised for not having asked. The record of what was asked, what was answered and what followed is the board’s own evidence, and it lives in the minutes.
The Four Reports A Board Should Receive, And How Often
Most school board packs are long and reassuring. A useful compliance report is short and occasionally uncomfortable. Four are enough.
| Report | How often | What it must contain to be worth reading |
|---|---|---|
| Compliance status | Every meeting | Training completion by campus and role, policy acknowledgements by version, and clearances expiring in 30, 60 and 90 days |
| Incidents and actions | Every meeting | What was reported, what type, what changed as a result, and how many corrective actions closed on time. Include near misses, or the number is meaningless |
| Risk register movement | Each term | Not the whole register. What moved, what is newly rated, what has no owner, and which controls were actually tested |
| Regulatory horizon | Each term, or on change | What is changing, what it touches, who owns the response and by when |
If a report cannot end in a decision or a request, it is an update rather than a report. Updates stop being read, and a board that has stopped reading its compliance pack has stopped exercising oversight without noticing.
The version of this that actually works
The four reports above should be views of live data rather than documents assembled for the meeting. Where a school has real-time visibility of training completion, policy acknowledgements and incident management, the board pack becomes a snapshot of something already true rather than a reconstruction. That also removes the fortnight-old data problem: by the time a hand-built pack reaches a board, the position it describes has usually moved.
Reading The Board Compliance Pack: What Looks Fine But Is Not
School board compliance reporting is unusually good at looking healthy. These are the five patterns worth learning to spot, because each one reads as reassurance and is the opposite.
| What you are shown | Why it looks fine | What to ask |
|---|---|---|
| “Training completion: 94%” | A high number, organisation-wide | Show me by campus and by role. An average hides the one site that has stopped, and that site is where the problem is |
| Incident reports are down | Reads as improving safety | Has reporting become harder, or less worthwhile? A falling count more often means people stopped reporting than that less happened |
| “All policies are current” | Nothing is overdue | Current since when, and who has acknowledged the current version? A reviewed policy nobody has read is a document, not a control |
| Every corrective action closed | A clean sheet | Closed on time, or closed late and marked closed? And did the underlying risk get re-rated? |
| “No child safety concerns this term” | The best possible news | How would a concern have reached us? Ask about the pathway, not the count. A pathway nobody trusts produces exactly this report |
The pattern underneath all five
Each one is a number without a denominator, a segment, or a pathway. Whenever the pack gives you a single reassuring figure, the useful question is what it is hiding rather than whether it is accurate. It is usually accurate. That is what makes it effective.
What Goes Wrong When Nobody Asks
Every school starts with good intentions. Without defined processes and someone checking them, four things follow, and they compound.
| What happens | How it shows up at board level |
|---|---|
| 1. Student safety is compromised | Warning signs are missed because training lapsed, boundaries were never made explicit, or an incident was closed without follow-up. The board usually learns about it after somebody else does |
| 2. Reputation is damaged | A single adverse headline, a failed audit or a published complaint. Community trust and enrolments move together, and both move faster than they recover |
| 3. Leaders carry avoidable stress | Manual systems keep principals and executives firefighting, which pulls attention away from the strategic work the board actually appointed them to do |
| 4. Legal and financial consequences follow | Regulators expect complete and accurate records. Incomplete records can mean penalties, funding consequences or mandated governance change |
None of those begin as failures of intent. They begin as questions nobody asked in a meeting where everything looked fine.
The underlying discipline has a name. Governance is the structures and processes that hold the school accountable: policies, decision-making, oversight and reporting.
Risk management is identifying and addressing what could harm safety, wellbeing, operations or reputation.
Compliance is meeting the legal and regulatory mandates, from child protection law to work health and safety standards.
A board does not run any of the three, but school board compliance oversight fails the moment it stops being able to see all three at once.
Establishing A Culture Of Care And Accountability
Systems and reporting take a board only so far. The part that decides outcomes is whether people in the school believe that raising something will be met with action rather than blame.
That belief is set at the top, and it is visible in small things.
Whether the board thanks someone for a report that was uncomfortable. Whether an increase in reported incidents is treated as a system working or a problem worsening. Whether the executive is ever asked what they are worried about, and given room to answer honestly.
A board that only ever hears good news is not being protected. It is being managed.
The difference matters because psychosocial hazards now carry duties in every Australian jurisdiction, and a culture where concerns go unraised is itself a hazard the school is expected to control.
The question that changes the culture fastest
“What went wrong this term that we handled well?” It gives permission to report a problem by asking for the problem and the response together. Boards that ask it get told about issues while they are still small, which is the only time a board can usefully act on them.
What To Do At Your Next Board Meeting
Five things, none of which require a budget decision or a new system.
- Ask question one, unannounced: Pick a staff member and an obligation, and ask for the evidence during the meeting. Note how long it takes. That number is your baseline and it belongs in the minutes.
- Ask for the count of obligations with no named owner: If nobody can answer, that is the answer, and it is the most useful thing you will learn all year.
- Ask for training completion by campus and role rather than as one figure, from the next meeting onward. Make it a standing format change, not a one-off request.
- Ask what has been reported since the last meeting, including near misses, and what changed as a result of each.
- Put the six questions in the standing agenda: The value comes from asking them every time, because the trend is more informative than any single answer.
Do those five and the board pack will change shape within two meetings, because reporting adapts to what gets asked.
That is the entire mechanism by which a board improves compliance without ever managing it.
Where To Go Next On School Governance And Compliance
| If you are asking | Go to |
|---|---|
| What would a school GRC system actually look like | Sentrient’s GRC system for schools |
| What do we have to evidence for child safety | Child safety compliance for Australian schools |
| What does the HR and compliance role actually involve | GRC for school leaders |
| How do we get off spreadsheets, and in what order | From spreadsheets to a GRC system |
| What is GRC, in plain terms | What is GRC? Governance, risk and compliance explained |
| What do we gain by joining governance, risk and compliance up | The benefits of integrating GRC |
| How do we build the risk assessment behind all this | How to build a risk assessment framework |
| What goes wrong when schools implement a system | Overcoming GRC implementation challenges |
| We need a child safety policy to start from | Child safety policy template |
For the executive rather than the board
If you are the person who has to answer these questions rather than ask them, the practical starting point is Sentrient’s GRC system for schools, which holds policies, child safety records, training, incidents and reporting in one place.
Book a free demo and bring question one with you.
Frequently Asked Questions About School Board Compliance
1. What is school board compliance oversight?
It is the board’s responsibility to satisfy itself that compliance is being managed, without managing it. In an Australian school that spans child protection, work health and safety, privacy, employment and records. The board does not write policies or run training. It asks for evidence that both are happening, and it records what it asked and what followed.
2. What should a school board ask about compliance?
Six questions, at every meeting. Can we produce the evidence today? Does every obligation have a named person? What has been reported since we last met? What is expiring in the next 90 days? What did we do after the last incident? And what are we not being told? The value is in the trend across meetings rather than in any single answer.
3. Is a school board responsible for compliance, or is management?
Management runs compliance. The board is responsible for satisfying itself that it is being run, and for noticing when it is not. Those need different information: management needs operational detail, the board needs evidence that the detail is being handled. Most board packs are built for the first and used for the second, which is where oversight quietly fails.
4. What are the duties of a school board member in Australia?
It depends on the legal structure, so it is worth confirming yours. Most independent schools are registered charities, which brings the ACNC Governance Standards, including Standard 5 duties for Responsible People: reasonable care and diligence, acting in the charity’s best interests, responsible financial management, disclosing conflicts, and not misusing the position. Separately, board members often meet the definition of an officer under work health and safety law, which carries a personal due diligence duty that cannot be delegated.
5. How often should a school board review compliance?
Compliance status and incidents at every meeting. Risk register movement and the regulatory horizon each term. Four reports is enough, provided each one ends in a decision or a request rather than simply being noted.
6. Our compliance reporting looks good. Should we still be worried?
Reporting that looks reassuring is worth more scrutiny than reporting that does not. Watch for a single organisation-wide training percentage, a falling incident count read as improving safety, ‘all policies current’ without acknowledgement data, and a clean sheet of closed corrective actions. Each is usually accurate, which is precisely what makes it effective at hiding a segment-level problem.
7. What does it mean if incident reports go down?
Most often that reporting has become harder or less worthwhile, not that fewer incidents occurred. The useful question is about the pathway rather than the count: how would a concern have reached us, and what happened to the last person who raised one? A pathway nobody trusts produces exactly the quiet report a board finds reassuring.
8. How long should it take to produce compliance evidence?
Minutes. Ask in the meeting, without notice, for proof that one named staff member met one obligation on a given date. If the answer is that it will be sent through afterwards, the evidence is being assembled rather than retrieved, and that is the same position the school would be in if a regulator asked.
9. Does the board need to understand the software?
No. It needs to understand what the software should be able to produce, and how quickly. A board that asks for evidence, owners, expiries and outcomes will get the right system bought without ever evaluating one.
Disclaimer: This article is general information for Australian schools, not legal or governance advice. Duties differ by state and territory, by school type, and by the legal structure of the entity. Confirm your school’s specific obligations with a qualified professional.
Sources
Productivity Commission – Regulating for growth (board time spent on compliance)
Independent Schools Australia – Characteristics of independent schools
ACNC – ACNC Governance Standards
ACNC – Governance Standard 5: Duties of Responsible People
Australian Human Rights Commission – National Principles for Child Safe Organisations
Safe Work Australia – Duties under WHS laws
Safe Work Australia – Psychosocial hazards
Safe Work Australia – Incident notification
OAIC – The Privacy Act
OAIC – Notifiable Data Breaches scheme
Fair Work Ombudsman – Record-keeping
