5 Errors in Your Childcare First Aid Risk Assessment

You've ticked the box. Your HLTAID012 certificates are current, your first aid kit is stocked, and your emergency contacts are on the wall. So why would an ACECQA assessor still flag your service on first aid compliance?

The certificates are fine. The kit exists. But the document - the childcare first aid risk assessment that's supposed to tie all of it together - doesn't hold up under scrutiny.

Under Regulation 89 of the Education and Care Services National Regulations 2011, approved providers are required to conduct a risk assessment to determine their service's first aid requirements. It's supposed to be a living record of how your service actually operates - who's in your care, who's qualified to act, what equipment is available, and what risks exist on any given day.

The errors behind that gap aren't coming from negligent directors. They're coming from well-meaning educators who simply weren't told what "good" looks like. Here are the five most common errors in childcare first aid risk assessments across Queensland, along with a 10-point self-audit checklist to find out where yours stands.

What Is a Childcare First Aid Risk Assessment?

A childcare first aid risk assessment is a formal, documented evaluation that identifies the first aid needs of an early childhood service - including the hazards present, the children enrolled, and the qualified staff required to respond to a medical emergency. In Queensland, it is a regulatory requirement under the Education and Care Services National Regulations 2011 and a component of compliance with Quality Area 2 (Children's Health and Safety) of the National Quality Standard.

A compliant childcare first aid risk assessment must address:

• Who is in your care - ages, enrolment numbers, and any children with known medical conditions

• What hazards exist - indoor and outdoor environment risks specific to your service

• Who is qualified - which staff hold current HLTAID012, and whether ratios are met at all times

• What equipment is available - first aid kit, EpiPen auto-injectors, asthma spacers, AED access

• When it was last reviewed - updated whenever enrolments, staff, or environments change

What Queensland Regulations Actually Require From Your First Aid Risk Assessment

Before we get into where things go wrong, it helps to be clear on what the regulations actually ask for - because "have a first aid policy" and "meet your regulatory obligations" are not the same thing.

The Regulations Behind the Requirement

Three regulations sit at the center of first aid compliance for Queensland childcare services:

• Regulation 89 - approved providers must conduct a risk assessment to determine the first aid requirements of their service

• Regulation 136 - at least one educator holding an approved first aid qualification (HLTAID012 for childcare settings) must be present at all times when children are in attendance

• Regulation 137 - educators must also hold current asthma and anaphylaxis management training, in Queensland that means 22300VIC and 22556VIC

These are the baseline - and the first thing an ACECQA assessor will cross-reference with your compliance folder.

How ACECQA Measures This During an Assessment Visit

ACECQA evaluates first aid compliance under NQS Quality Area 2, Standard 2.1, Element 2.1.2. An assessor won't just check that a document exists - they'll check that it reflects your service as it operates today. That means reviewing the risk assessment, cross-referencing it against your enrolment records, and verifying every listed first aid officer holds a current, correct qualification.

A "Working Towards" or "Significant Improvement Required" rating under Quality Area 2 affects your center's overall NQS rating and can put your service approval at risk.

With that standard established, here's where most Queensland childcare services fall short - starting with the most common gap of all.

Error #1 - Your Risk Assessment Doesn't Reflect the Children Currently Enrolled

A director pulls out the compliance folder ahead of an ACECQA assessment visit. The risk assessment looks fine - typed up, signed, covers the basics. Then she notices it was last updated months ago. A child with a severe peanut allergy enrolled since then. The anaphylaxis action plan is on the wall. But the overarching risk assessment? Doesn't mention them at all.

That's a compliance gap - and it's one of the most common errors we see.

Why Enrolment Changes Must Trigger an Immediate Review

The risk assessment is a live document. Every time your enrolment picture changes in a way that affects your risk profile, the document needs to reflect that. The most common version of this gap: an individual anaphylaxis or asthma action plan gets created for a newly enrolled child, everyone does the right thing with the individual paperwork, but nobody carries that information back into the service-level risk assessment. An ACECQA assessor comparing your enrolment register to your risk assessment will spot that immediately.

What to Document for Children With Anaphylaxis, Asthma, or Seizure Disorders

The risk assessment records the type and number of children with specific medical conditions - not identifying details. Those belong in individual health management plans. Your risk assessment should capture the number of children with anaphylaxis diagnoses, the number with diagnosed asthma, and any conditions requiring emergency medication. Those numbers directly inform your equipment and training requirements for 22556VIC and 22300VIC - and that link needs to be visible in the document.

"Your risk assessment should reflect your room as it exists today - not as it existed when you first opened."

Keeping your enrolment data current is one layer of compliance - but it only holds up if the staff listed as your first aid officers are actually qualified to act.

Error #2 - Your Listed First Aid Officers Hold Lapsed or Incorrect Qualifications

A staff member has worked at the center for years. She's reliable, competent, listed as a first aid officer on the risk assessment. Then during a routine compliance folder review, someone checks the actual certificate date. The certificate lapsed two months ago - and nobody noticed.

This happens in well-run centers. It's not a sign of a careless director. It's a sign that certificate tracking without a system is hard to maintain.

The 3-Year Rule and Where Centers Get Caught

HLTAID012 is valid for three years from completion. Two gaps catch services out repeatedly.

Gap #1 - The expiry creep. If the reminder is set for the expiry month and the folder check happens two months later, the window has already closed. A 60-day buffer is the difference between staying compliant and scrambling.

Gap #2 - The wrong qualification. A staff member holds HLTAID011 - standard first aid - and the certificate looks valid. But HLTAID011 does not satisfy ACECQA's childcare-specific requirement. Only HLTAID012 does. If your risk assessment lists that person as a first aid officer, the document is non-compliant regardless of certificate currency. HLTAID009 - CPR only - doesn't satisfy the requirement either.

Building a Certificate Expiry Tracking System That Actually Works

A simple spreadsheet or staff register with the right columns does the job:

If your center uses childcare management software - Xplor and Kinderm8 both have compliance tracking modules - that's worth setting up. Even a shared spreadsheet checked monthly is better than a folder that only gets opened before an ACECQA visit. Add a review trigger to the risk assessment itself that reads something like "to be reviewed when any first aid officer certificate approaches expiry."

Even when your staff qualifications are current, the document that records them can still fail you - especially if it was never built for your specific service in the first place.

Error #3 - You're Using a Generic Template That Doesn't Reflect Your Service

A generic template looks like a completed risk assessment. It has headings, sections, references to first aid kits and emergency contacts. A director downloads it, fills in the service name, gets a signature on it, and files it away. The problem isn't using a template - it's treating the template as finished.

A generic template was built to cover every possible childcare service, which means it actually reflects none of them.

What Generic Templates Always Miss

Generic templates cover the bare minimum: first aid kit location, nearest hospital, emergency contacts. For Queensland childcare services, these gaps typically go undocumented:

• Outdoor play area hazards - climbing equipment, sun exposure, insect and snake risk

• Split-shift and ratio gaps - if your qualified first aid officer leaves before the next arrives, that window is an unmanaged risk

• Excursion and incursion scenarios - first aid provisions change the moment children leave your premises

• Aquatic or water play areas - elevated drowning risk requires specific documentation

• Age cohort-specific risks - a service enrolling infants has a fundamentally different risk profile than one serving older children

The template gives you the structure. Your job is to fill it with the reality of your specific service.

How to Customize Your Risk Assessment for Your Specific Service

Walk the indoor environment. Walk the outdoor environment. Review your weekly program, enrolment register, and staff roster. For each hazard, link to a documented control and reference a trained staff member by role - not by name. Staff change. Roles are more stable. Regulation 89 requires the assessment to reflect "the nature of the education and care provided" - which is why a generic template alone will rarely be enough.

A service-specific risk assessment is only as strong as the equipment it documents - and equipment gaps are among the easiest errors for an ACECQA assessor to spot.

Error #4 - First Aid Equipment Isn't Documented, Checked, or Reflected in Your Assessment

An unannounced ACECQA visit. The assessor asks to see the anaphylaxis kit. The EpiPen has expired. Nobody checked. And the risk assessment has no record of when it was last audited.

That's a child safety failure - and it's entirely preventable.

What Equipment Must Appear in Your Risk Assessment

• First aid kit - contents listed, location specified, responsible officer named by role

• Anaphylaxis emergency kit - EpiPen or Anapen type, location, and expiry tracking documented

• Asthma emergency kit - reliever inhaler, spacer, and correct mask sizes for your enrolled age cohort

• AED - if held, location and last service date must be recorded

• Resuscitation face shield or CPR mask - location and condition

The failure pattern isn't usually that the equipment doesn't exist. It's that it exists and the risk assessment says nothing about it. An assessor expects the document and the kit to tell the same story.

"An EpiPen with an expired use-by date in your anaphylaxis kit is not a minor admin issue - it is a child safety failure. Your risk assessment should include a check schedule that prevents this."

Equipment Audit Frequency and Responsibility

First aid kit contents should be checked monthly at minimum, after any use, and at the start of each term. EpiPen and Anapen expiry dates should be checked monthly without exception. Name the responsible person by role - not individual name - so the document survives staff changes. A separate equipment checklist with dated sign-offs, attached to the risk assessment, gives an assessor a clear evidence trail.

You can have the right children documented, the right staff qualified, and the right equipment in place - and still fail compliance if your risk assessment has never been formally reviewed.

Error #5 - The Document Has No Review Date and Has Never Been Formally Reviewed

The risk assessment exists. It's reasonably detailed. It was written by someone who knew what they were doing. But it was written when the center opened and there's no record of it being looked at since. No review date. No version history. No sign-off.

An ACECQA assessor sees a single date from years ago. That's an immediate flag - a document with no review history can't credibly claim to reflect a service that has changed and grown.

How Often Should a Childcare First Aid Risk Assessment Be Reviewed?

ACECQA's expectation is at minimum annually. A review should also be triggered whenever a new child with a medical condition enrolls, a staff change affects first aid officer coverage, the physical environment changes, an incident involving first aid occurs, or relevant legislation changes.

Anchor your annual review to Term 1 - pair it with your start-of-year staff induction and enrolment review. It costs very little additional effort and keeps the document current.

How to Document Reviews So They Satisfy an Assessor

Every formal review should record the date, the name and role of the person conducting it, changes made or confirmation no changes were required, and a sign-off by the nominated supervisor or approved provider.

Keep previous versions on file. A clear version trail tells a story of an active, maintained compliance system - exactly what supports a "Meeting" or "Exceeding" rating under NQS Quality Area 2.

The good news is that every one of these errors is fixable - and the checklist below will tell you exactly where to start.

Your Next Steps

Step 1 - Run the Audit Use the 10-point checklist above to identify gaps in your current risk assessment.

Step 2 - Fix the Training Gap If any staff certificates have lapsed or are incorrect, book HLTAID012 training. Weekend public sessions and on-site group training are available across Queensland.

Step 3 - Schedule Your Next Review Set a calendar reminder for 11 months from today.

A childcare first aid risk assessment isn't just a document you need to have. It's the record that shows an assessor - and shows yourself - that the safety of the children in your care is backed by something more than good intentions. The five errors here are fixable, and most take less than an hour to address once you know what to look for.

Your enrolment data, staff qualifications, equipment, environment, and review history aren't separate compliance boxes. They're connected. A risk assessment that holds up under scrutiny is one where all of those pieces are current, accurate, and visible in a single document that gets reviewed and updated when things change.

Your team is already doing the hard work every day. The paperwork should reflect that. Pull out your compliance folder, work through the checklist, and fix what needs fixing - before an assessor does it for you.