Most "compliance trends" writing is vendor marketing wearing a regulatory costume. It describes a future in which providers need software, and it is usually published by someone who sells it. So it is worth separating two things: what has actually changed in the rules, and what is merely being said about them.
Here is the first list, with sources. The second list is at the bottom, and it is shorter than the marketing would suggest.
What actually changed
Claims now expire
Since 3 October 2025, claims must be submitted within two years of the support's start date, and the payment system rejects older ones automatically. There was a twelve-month grace period for historical claims and it has closed. The NDIA set this out when the time limit commenced.
The compliance consequence is not the deadline itself. It is that unclaimed work is now a permanent loss rather than a backlog, so any weakness in your service-delivery records becomes a direct revenue problem as well as an audit one. Providers who reconstruct records late were already exposed at audit; they are now exposed at the bank.
Fair pricing is an element of the Code of Conduct
An eighth element covering fair pricing was added to the NDIS Code of Conduct, and it is narrower than most summaries suggest: it concerns charging or advertising a higher price for goods to a participant than to anyone else, without reasonable justification. The Commission's fair pricing guidance sets out what it does and does not cover.
If you supply goods as well as supports, the practical requirement is documentary: be able to justify a price difference at the time you set it, not when you are asked about it. We have written up the whole Code of Conduct, element by element, including why it reaches unregistered providers too.
Registration is expanding, starting with SIL
The largest structural change is the move toward mandatory registration, and Supported Independent Living is first. The Commission maintains a reform hub with the current position and the sequence for other supports.
This one has dates attached and they are close. We have written separately about what unregistered SIL providers need to do and about how the wider registration wave is likely to land, rather than compress either into a paragraph here.
Enforcement is more visible
The Commission publishes its compliance and enforcement activity, including banning orders. Reading a few of them is more instructive than any trends article, because they show what the regulator actually acts on — and it is consistently the same things: incidents not reported, workers not screened, participants not safeguarded.
What did not change
The NDIS Practice Standards still test the same thing they always did: whether the evidence behind a specific participant, on a specific date, holds together. Audits still sample rather than read everything. Currency still matters more than volume. Staff interviews still compare what your policy says against what your team actually does.
Every genuine change above sits on top of that foundation. None of them replaces it, which is why a provider with disordered evidence gains nothing by chasing the new items first.
The trends that are marketing, not regulation
Three claims circulate every year and none of them is a regulatory requirement.
"AI can write your policies." It can produce a document. Whether that document describes what your organisation actually does is the entire question, and an auditor tests the second thing. A policy nobody follows is a non-conformity you paid for.
"Real-time compliance dashboards." A dashboard reports the state of your records. If the records are wrong, it reports that confidently and in colour. Digitising disorder produces findable, consistently formatted, still-wrong evidence.
"Predictive risk analysis." Risk in disability services is identified by people who know the participant, and it is escalated by people who know the threshold. No model supplies either. What software can do is make sure the escalation was recorded — useful, and considerably less than the word "predictive" implies.
We build compliance software, so treat that list as coming from an interested party and weigh it accordingly. It is the same advice we give on calls, which is why it is written here.
What to do about any of this
In order: confirm your claiming is inside the two-year window and that nothing is quietly ageing out; check whether registration reform reaches your supports and when; then go back to the ordinary work of evidence, because that is what an audit tests.
Our free NDIS compliance checklist covers the last of those, naming the evidence sampled against each obligation. If you would rather have someone read your evidence the way an auditor will, that is gap analysis, or book a thirty-minute call and we will tell you which you need — including when the answer is neither.
Get NDIS compliance updates
Practical guidance on registration, audits and the 2027 wave. No spam, unsubscribe in one click.