Commercial operators may be barred from future involvement in a state's acute hospitals after a toddler's death at a controversial privately run facility.