What courses 3, 4 and 5 actually cover
The advanced package was developed by the Australian Centre for Child Protection.
- Course 3, Creating child safe cultures through every practice. Moves from recognising harm to embedding safeguarding in daily practice, environments and interactions.
- Course 4, Responding to safeguarding concerns. Focuses on what to do when a concern arises, including decision-making and appropriate reporting.
- Course 5, Leading and governing child safety. Aimed at leadership and governance accountability rather than floor practice.
Where the foundation courses cover understanding child safety and identifying abuse and neglect, the advanced courses shift toward applying safeguarding principles through culture, decision-making and governance.
Who needs which course
This table will be valuable for your leadership team. Requirements are set by role as defined under the National Law, not by seniority or job title.
The PMC gap is the one most services will miss
Persons with management or control must complete course 5, but they are not required to complete courses 3 and 4.
This is counterintuitive, and it creates a specific administrative trap. If you build your tracking around "leadership does the advanced training," you will over-assign courses 3 and 4 to PMCs who do not need them, and more importantly you may under-assign course 5.
A person with management or control is anyone within or outside the approved provider who manages service delivery or has significant influence over the planning, direction or control of the service. Directors, board members and owners who never set foot on the floor can fall into this category. ACECQA publishes an information sheet on identifying PMCs, and it is worth checking your list against it rather than assuming.
There is a related nuance for larger providers. Some approved-provider employees who are not staff members of a service may fall outside the training requirement, unless they hold another relevant role such as a person with management or control. But if any of those people are a PMC, they must complete child safety training. For multi-site operators, the PMC list is where head office and service compliance overlap.
The deadlines
Advanced training, existing roles. Anyone holding a relevant role with their current provider before 30 September 2026 must complete advanced training by 31 March 2027.
Advanced training, new starters. Anyone who starts in a relevant role on or after 30 September 2026 must complete advanced training within three months of the date they are employed, engaged or appointed.
Refreshers. Both foundation and advanced training must be recompleted every two years.
Two things follow from this that are easy to miss.
First, you do not need to wait for course 5 to start. Courses 3 and 4 are live now, and the roles that need them are your largest group by headcount: every staff member who works directly with children. Starting courses 3 and 4 in August and September, then adding course 5 for the leadership group from October, spreads the load across two calendar years rather than compressing it into early 2027.
The funding position has changed, and it changes your scheduling
Two forms of government support exist for the cost of completing this training. Only one of them is currently open, and that has real consequences for how you schedule.
The professional development subsidy is closed for 2026-27. Round 1 ran from 28 April to 3 July 2026, prioritising small and medium providers operating fewer than 25 services on a first come, first served basis. The Department of Education has confirmed there will be no second round in 2026-27, with applications reopening in 2027-28. Providers that were successful can use funded hours up until 13 March 2027.
Providers that did not receive funding through the 2026–27 subsidy round should check the Department’s current support arrangements when planning training.
Service closures remain available. CCS-approved services can close for up to five hours per calendar year so staff can complete national child safety training, while continuing to claim Child Care Subsidy. The conditions are specific:
- Closures must not start earlier than 5 pm, and must finish by your normal closing time
- The five hours can be staged across multiple blocks rather than taken at once
- Closures are voluntary
- Families must continue to pay the gap fee during closure periods
- For family day care and In Home Care, the five-hour cap applies per individual educator, who can be unavailable from 5 pm until no later than midnight
Note that only one form of support can be claimed for the same training hours. Providers can only apply for the professional development subsidy for staff who do not complete training during a service closure period.
Geccko account mechanics that cause avoidable failures
The training is only recognised if completed in Geccko, the Department of Education’s online learning platform for the ECEC sector. Training delivered through any other provider or platform does not meet the requirement, regardless of how similar the content is.
Three practical points:
- Shared accounts are no longer permitted. Following the introduction of national child safety training, every user must have an individual Geccko account registered to a personal email address that only they can access. Services that previously used a shared centre account must re-register individually, and can request an account merge from the Geccko home page footer.
- Personal email addresses create an offboarding problem. Because accounts are tied to individual emails rather than to your service, completion records travel with the person, not with you. You cannot rely on the platform to be your compliance record.
- Keep the certificates. Staff receive a Certificate of Completion, and ACECQA advises this should be kept in your staff records. Regulatory authorities monitor and enforce compliance, and your records are what an authorised officer will ask to see.
That third point is where most services are exposed. A role-based training matrix, with expiry dates two years out, tracked across individually-owned platform accounts, is not something a spreadsheet handles well for long. Keeping training completions alongside qualifications, Working With Children Checks and first aid currency in one record per person is the difference between answering an assessment question in a minute and spending a week reconstructing evidence.
Western Australia and jurisdictional variation
Implementation arrangements may differ in Western Australia. WA providers should check the current position with their regulatory authority.
Separately, child safety training is not the same obligation as child protection training, and the two are frequently conflated. Child protection training requirements vary by state and territory, and several jurisdictions have specific arrangements:
- Victoria mandates the EC PROTECT module annually for nominated supervisors, persons in day-to-day charge, family day care coordinators, and staff and volunteers who work directly with children.
- Queensland recognises completion of the foundation child safety module for the purposes of its child protection training requirement.
- New South Wales retains its existing mandated child protection course requirements for nominated supervisors, persons in day-to-day charge and family day care coordinators.
- The ACT has mandated ACT child protection training for all staff, with a two-year currency period.
Because these requirements differ by jurisdiction, never assume that a national training completion satisfies a state-based child protection obligation. Check the approved training list for your state or territory, and confirm with your regulatory authority.
What non-compliance means
Approved providers have obligations to ensure required people complete the mandatory training within applicable timeframes, with regulatory authorities responsible for monitoring and enforcement..
Your next step
Pull up your current training register and ask one question: can you produce, for any named person, the list of child safety courses their current role requires and the completion date for each?
If that takes more than a minute per person, the 31 March 2027 deadline is going to be harder than it needs to be. The compliance obligation here is not really about training delivery, it’s about knowing, at any moment, who owes what.
QuickCare HR keeps role-based training requirements, credential expiry dates and qualification records in a single view per worker, with automated checks against current regulatory standards at the time of the transaction. If you would like to see how your register would hold up against a role-by-role audit, book a walkthrough with our team.
For background on the foundation courses and the 27 August 2026 deadline, see our earlier guide to Geccko child safety training and who needs to complete it.





