The NDIS Integrity and Safeguarding Act, explained
The NDIS Amendment (Integrity and Safeguarding) Act 2026 has passed Parliament and is now in force. It is the second tranche of NDIS reforms, and it significantly expands the powers of the NDIS Quality and Safeguards Commission while raising the consequences for non-compliance.
For providers doing the right thing, none of this changes the day-to-day. But it does raise the bar for being able to show it. Here is a plain-English rundown of what the Act does, and what it means for how you operate.
Tougher penalties for non-compliance
The headline change is a major increase in the financial consequences of getting it wrong. Civil penalties for serious contraventions of the NDIS Code of Conduct have risen substantially, up to more than $15 million in the most serious cases, such as where serious misconduct leads to death or serious injury.
The Act also introduces criminal offences, each carrying a maximum of five years imprisonment: providing supports that require registration without being registered, and failing to comply with a banning order.
A new focus on systemic patterns
The Act defines a “serious contravention” for the first time. It captures major departures from expected conduct, situations affecting multiple participants, and systemic patterns of non-compliance. The word that matters is systemic. A series of individually minor breaches can now be treated together as a single serious contravention if the Commission identifies a pattern. In practice, consistency across your records and processes matters more than ever.
Expanded banning orders and anti-promotion orders
The Commission's banning order powers have been broadened. They now reach beyond providers and workers to approved quality auditors, consultants and others who advise on or facilitate NDIS services, including registration applications.
The Act also introduces anti-promotion orders, which let the Commission restrict misleading or inappropriate promotion, advertising or marketing of NDIS supports. A breach can attract a civil penalty. For providers, the practical takeaway is simple: claims about your services need to be accurate and substantiated.
Faster intervention and stronger whistleblower protections
The Commission now has enhanced information-gathering powers and shorter timeframes to act where participant safety is at risk. The Act also strengthens whistleblower protections, closely aligned with the Aged Care Act, so it is worth reviewing your own whistleblower framework to make sure it holds up.
Operational changes to be aware of
Alongside the Commission's powers, the Act brings in some NDIA operational changes. Electronic claiming is set to become mandatory, and plan variations can now adjust total funding up or down. These are administrative rather than enforcement changes, but worth noting as you plan ahead.
What it means for providers
Read as a whole, the Act sends a clear signal: the regulatory risk of operating in the NDIS has risen, and the Commission has sharper tools to act. The systemic-pattern definition in particular rewards providers who keep their compliance consistent and can evidence it, rather than treating each obligation as a one-off.
That is where a quality management system does its quiet work. Centro QMS keeps your policies, required reading, incidents and audit evidence in one place and consistently maintained, so if the Commission ever looks, you can show a clear, unbroken record rather than a scramble. Book a demo to see how it works.
Source: NDIS Quality and Safeguards Commission and the National Disability Insurance Scheme Amendment (Integrity and Safeguarding) Act 2026. Penalty amounts are indicative and set in penalty units. This article is general information, not legal advice.
