NDIS compliance actions tracker
What the NDIS Commission actually enforces
Every compliance notice, banning order, revocation and refusal the Commission published for August 2025 to July 2026, counted by type and reason. Most of it isn't about care at all. It's about audits that weren't done on time.
Source: NDIS Commission open data, release of 3 August 2026. Counts by Compliance Care. No provider is named on this page.
98%
of 2,070 compliance notices were about a required audit not engaged, started or completed on time
69%
of 148 revocations and refusals to re-register cited an audit that wasn't completed
2,525
compliance actions published in 12 months, August 2025 to July 2026
What this means for a registered provider: the most common reason the Commission acts is administrative, not clinical. Registration comes with audits on a schedule, and a missed one is the single largest cause of compliance notices and of lost registrations in the data. Diarise every audit your registration requires, and engage an auditor well before it’s due.
The numbers in two minutes
1 — Actions by type
What the Commission used, and how often.
| Action | August 2025 to July 2026 | All published |
|---|---|---|
| Compliance notices | 2,070 | 2,367 |
| Banning orders | 296 | 807 |
| Revocations of registration | 58 | 345 |
| Refusals to re-register | 90 | 139 |
| Suspensions of registration | 10 | 41 |
| Enforceable undertakings | 1 | 5 |
| Total | 2,525 | 3,704 |
2,137 of the 3,704 published actions were still in force at the release date. “All published” covers everything on the register since the Commission began, including actions dated after the 12-month window.
2 — Why compliance notices are issued
98% were about an audit.
In the data, notices arrive in large batches, hundreds in a single month. The wording is usually one of two forms: a failure “to commence a conditional audit three months after service delivery has commenced”, or a requirement “to engage an approved quality auditor to complete” a mid-term or condition audit by a set date.
- Required audit not engaged, started or completed on time2,025 (98%)
- Other Practice Standards failings14 (1%)
- Restrictive practices or behaviour support12 (1%)
- Incident management or reportable incidents9 (<1%)
- Other or not stated6 (<1%)
- NDIS Code of Conduct3 (<1%)
- Worker screening1 (<1%)
3 — Why registrations end
Most lost registrations trace back to an audit that never happened.
58 revocations and 90 refusals to re-register in August 2025 to July 2026. A refusal usually reads: the provider has not “been assessed by an approved quality auditor as meeting the applicable standards”, because it didn’t complete a re-registration audit.
- Required audit not completed102 (69%)
- Audit found major non-conformities4 (3%)
- Other grounds42 (28%)
“Other grounds” covers decisions that cite a section of the Act without stating the facts in the published entry, plus suitability findings. We only count a reason when the entry states it.
Registration groups held by providers who lost or were refused registration
Of the 144 entries that list registration groups. This reflects how common each group is as much as any risk: the Commission doesn’t publish how many providers hold each group, so these can’t be read as rates.
| Group | Providers |
|---|---|
| 0120 Household tasks | 88 (61%) |
| 0125 Participation in community, social and civic activities | 86 (60%) |
| 0107 Assistance with daily personal activities | 80 (56%) |
| 0108 Assistance with travel/transport arrangements | 79 (55%) |
| 0106 Assistance in coordinating or managing life stages, transitions and supports | 71 (49%) |
| 0117 Development of daily living and life skills | 71 (49%) |
| 0115 Assistance with daily life tasks in a group or shared living arrangement | 67 (47%) |
| 0116 Innovative community participation | 64 (44%) |
Group names as the Commission records them. See the full NDIS registration groups list.
4 — The trend
Enforcement activity by year.
By the date each action took effect. 2026 runs to July 2026.
| Year | Notices | Bans | Revocations | Refusals | Total |
|---|---|---|---|---|---|
| 2019 | 1 | 7 | 1 | 3 | 15 |
| 2020 | 8 | 15 | 4 | 1 | 30 |
| 2021 | 15 | 23 | 1 | 0 | 40 |
| 2022 | 10 | 54 | 7 | 1 | 79 |
| 2023 | 25 | 105 | 24 | 1 | 169 |
| 2024 | 46 | 134 | 177 | 0 | 362 |
| 2025 | 1,105 | 280 | 91 | 48 | 1,533 |
| 2026 (to Jul) | 1,156 | 185 | 30 | 85 | 1,461 |
Suspensions and enforceable undertakings are counted in the total. From 2024 to 2025, compliance notices went from 46 to 1,105, almost all of them batched audit notices. Banning orders also rose, from 134 to 280.
By state, August 2025 to July 2026
Counts follow where providers are based, so they track how many providers each state has. They aren’t rates.
- NSW818
- VIC783
- QLD403
- WA211
- SA202
- NT49
- ACT37
- TAS20
5 — If you’ve received a compliance notice
Five steps, in order.
- 1
Read the deliverables and the due date
The notice states what the Commission believes is non-compliant, what it requires, and by when. Write each requirement down as a separate task with an owner.
- 2
If it's about an audit, engage an approved quality auditor now
You choose the auditor and contract them directly. Get the engagement in writing with a scheduled date: that is the evidence the notice usually asks for. Auditor availability is the usual bottleneck, so don't wait for your documents to be perfect before booking.
- 3
Keep a record of every step
Dates you contacted auditors, the signed engagement, correspondence with the Commission. If the deadline is at risk, you want to show steady action, not silence.
- 4
Talk to the Commission before the deadline, not after
The published data shows the Commission varying notices, including extending due dates for deliverables. A variation is a decision for the Commission, so ask early and give reasons.
- 5
Fix the cause, not just the notice
Put every audit your registration requires into a calendar with a booking reminder months ahead. Your registration certificate and its conditions set out what is due.
For what the Commission’s enforcement tools are and how they escalate, read NDIS Commission enforcement explained. If an audit is coming up, the NDIS compliance checklist covers the evidence for each Practice Standard.
6 — Method
How we counted.
- Source: the NDIS Quality and Safeguards Commission’s NDIS Commission Compliance Actions - 03.08.2026 on data.gov.au, the open-data copy of Part 2 of the NDIS Provider Register. Released 3 August 2026.
- Window: the 12 full months before the release, August 2025 to July 2026, by the date each action took effect. Actions dated after the window are counted only in “All published”.
- Reasons: read from the Commission’s own wording in each entry. A notice counts as audit-related when it requires the provider to engage, commence, complete or undertake an audit. Entries that don’t state a reason are counted as “other”, not guessed.
- People and organisations: an action counts as against an organisation when the name carries a company, trust or trading form. Sole traders trading under their own name count as individuals.
- Names: we never publish them. The register is the place to look up a specific provider.
We refresh this page when the Commission publishes a new release. Spotted an error? Email info@compliancecare.com.au.
Citing these figures
You’re welcome to quote them. Please link to this page and credit the Commission’s data, for example:
Compliance Care, “NDIS compliance actions tracker”, counts from NDIS Commission open data released 3 August 2026. https://compliancecare.com.au/ndis-compliance-actions
Common questions
What is an NDIS compliance notice?
A written notice from the NDIS Quality and Safeguards Commission under section 73ZM of the NDIS Act. It tells a provider what the Commission believes is non-compliant, what must be done to fix it, and by when. The Commission's Compliance Notices Policy describes it as a non-punitive tool for resolving a matter without going to court. Not acting on a notice is what escalates it.
Why do most NDIS providers get compliance notices?
In the Commission's published data for August 2025 to July 2026, 2,025 of 2,070 compliance notices (98%) required the provider to engage an approved quality auditor, or to start or complete a required audit (such as a mid-term or conditional audit). Notices about service quality, incidents, restrictive practices or worker conduct were a small minority.
Can I lose NDIS registration for not completing an audit?
Yes. Of the 148 revocations and refusals to re-register in August 2025 to July 2026, 102 (69%) cited a required audit that was not completed, most often a re-registration audit. A provider that cannot show an auditor has assessed it against the Practice Standards does not meet the test for registration.
Where can I see every NDIS compliance action?
On the NDIS Provider Register (Part 2, compliance and enforcement actions) on the Commission's website, and as a downloadable file on data.gov.au. This page counts that data. It does not name anyone.
Who can receive a banning order?
Registered providers, unregistered providers and individual workers. In August 2025 to July 2026, 264 of 296 banning orders named an individual rather than an organisation.
Facing an audit or a notice? Book a free 30-minute call and we’ll work out what’s due and when.
Know which audit is due next.
Audit-readiness support for registered providers, at a fixed price quoted before work starts.
Book a discovery callPeace of mind, by design.