NDIS Mandatory Registration 2027: What Providers Should Do Now

The next wave of mandatory registration is coming — here's what's actually confirmed

If you run a disability support business, you've probably absorbed one deadline already: from 1 July 2026, providers delivering Supported Independent Living (SIL) or operating an NDIS digital platform have needed to be registered with the NDIS Quality and Safeguards Commission, and delivering SIL without registration is now a serious offence. Understandably, a lot of providers assumed that was the end of it. It isn't. The government has been explicit that mandatory registration is expanding again from 1 July 2027, and it won't stop at SIL. This post sets out what's genuinely confirmed about that next wave, who it's likely to catch, and why the sensible move is to start preparing now rather than waiting for every detail to land.

What's already locked in: the 2027 expansion to "high risk" supports

According to the NDIS Commission's own announcement, the 2026-27 federal Budget funded an expansion of mandatory registration from 1 July 2027 covering "all high risk supports" — and the Commission's Regulatory Reform Roadmap names those higher-risk categories as personal care, daily living supports, and supports delivered in closed settings, with the rollout beginning from 1 July 2027 and full implementation targeted by the end of 2030 — a staged transition, not a single cut-over date.

The government's July 2026 provider FAQs on the NDIS changes firm up the end date: expanded registration requirements "will begin to be rolled out from 1 July 2027", and "all providers in scope will need to be registered by December 2030". The same document says the government will publish a list of the NDIS supports it considers high risk, and that providers will have time to work out whether the change applies to them before it starts.

The same announcement sits alongside a separate but related change: new obligations on the sale of NDIS businesses. Providers will need to notify the Commission as soon as they become aware a sale is going to happen, and a change of ownership or significant change to governance or operations can now trigger a fresh audit — a direct response to registered "cleanskin" businesses being bought and sold as a shortcut around registration. The government's stated goal for the reform overall is that 90% of NDIS payments eventually flow through registered providers, which gives a sense of how central registration status is becoming to the way the scheme operates, not just to any one provider's compliance obligations.

Who's likely affected — and who's on a different track

If your organisation delivers personal care, daily living support, or supports inside a closed or congregate setting, you're squarely inside the group the 2027 expansion is aimed at. If you have already registered, or applied to register, for SIL under the 2026 changes, much of your evidence base — policies, incident and complaints systems, worker screening records — will carry across; the 2027 wave is best read as widening the net around similar risk categories, not starting from zero. If you are unregistered today, our guide to what unregistered NDIS providers can do now sets out where you stand before 2027.

Support coordination is a useful example of why "mandatory registration" isn't one single rulebook. Standard support coordination has not been swept into the mandatory registration requirement — the NDIS Commission has paused mandatory registration for that group while the government considers broader reform. That's a genuinely different track to SIL, personal care, and daily living supports. The government's July 2026 provider FAQs set out the structural change instead: from 1 July 2028, the NDIA will appoint providers directly to deliver a new support coordination and connection service, and support coordination will no longer be funded individually in participant plans. Providers will be able to apply, with successful providers chosen through a merit-based process. If support coordination is part of your service mix, the 2027 registration dates are not your main question; that 2028 commissioning change is.

None of this happened in a vacuum. An independent, government-appointed taskforce reviewed provider and worker registration settings at length and delivered its advice to government on how registration should be risk-based and tiered rather than one-size-fits-all. The 2026 and 2027 waves are the government progressively implementing that direction — which is also why later waves have followed a similar shape: name the higher-risk categories, fund the transition, give providers a lead time before enforcement bites.

What isn't confirmed yet — and why that's worth saying plainly

Here's the honest part: the government has named the risk categories and the target dates, and has said it will publish a list of the supports it treats as high risk, but as at the time of writing it has not published that list or the fine-grained detail a provider needs to act on with certainty — which specific registration groups map to "personal care" and "daily living supports" for audit purposes, what the audit pathway will look like for newly captured categories, or the exact staging within the 2027–2030 window. The Commission's regulatory reform hub is the place this detail will land as it's confirmed, and its own framing is that guidance will be published progressively rather than all at once. We'd rather tell you that plainly than invent a precision the Commission hasn't published yet — treat any source claiming exact registration-group numbers or percentages for the 2027 wave with real scepticism unless it links straight back to ndis.gov.au, ndiscommission.gov.au, or legislation.gov.au.

Registration is not the only change: four dates providers mix up

The same July 2026 provider FAQs list several changes that are separate from registration but land on the same providers. They are easy to conflate, so here they are side by side.

• 1 December 2026: 90 days to claim. The time to make a claim for supports under a participant's plan drops from 2 years to 90 days. This one arrives before any 2027 change.
• 1 July 2027: NDIA provider enrolment. Most providers will need to enrol with the NDIA, with basic identifying information and a validated bank account, so they can be paid directly. The FAQs are explicit that enrolment "is a separate process to being a registered NDIS provider". Enrolling does not register you, and registering does not enrol you.
• Records kept for 7 years. Providers will need to keep records of payment and receipt of NDIS funds for 7 years, and the FAQs say failure to retain them will result in a civil penalty. Claims over a threshold will also need supporting documentation.
• 1 October 2027: plan management panel. The NDIA will set up a panel of plan management providers, and only providers on the panel will be allowed to deliver plan management, after an initial 6-month transition.

For a provider in a newly captured category, the practical sequence is: tighten claiming to the 90-day window now, set up 7-year record keeping, enrol with the NDIA when enrolment opens, and register with the NDIS Commission once your supports appear on the high-risk list.

Why prepare now, even with some detail still pending

It's tempting to wait until the Commission publishes the fine print. There are three reasons not to.

• The 2026 SIL wave showed how the lead time actually plays out. Providers who treated the deadline as distant found themselves compressing months of evidence-building, policy work, and worker screening into a matter of weeks once the date was locked in. If your organisation touches personal care, daily living supports, or closed-setting supports, the practical evidence work — policies that match practice, a functioning incident register, a genuine complaints process — takes real time to build properly, not to fake convincingly.
• The foundations are the same regardless of the final category boundaries. Whichever registration group your services eventually sit under, the NDIS Practice Standards you'll be assessed against cover the same territory: governance, risk management, incident management, complaints handling, and — for personal care and closed-setting supports specifically — safeguarding, dignity of risk, and participant choice and control. Building genuine competence against those standards now isn't wasted effort even if the exact 2027 boundaries shift before commencement.
• Registration status is becoming commercially material. With participants, families, and support coordinators increasingly asking about registration status ahead of the payment and enrolment changes, being ahead of a requirement — rather than scrambling to meet it — is itself a market position, not just a compliance one.

If your organisation went through the 2026 SIL registration process already, or is watching a colleague who did, our piece on what to do if you missed the SIL registration deadline is a useful read on how the Commission has actually handled providers who ran out of runway — it's a fair preview of how a compressed timeline tends to go wrong, and what recovering from it looks like.

A practical starting point, whichever category you fall into

Before anything else, get a clear-eyed view of where your evidence base actually stands against the Practice Standards relevant to your services — not where you assume it stands. That gap analysis is the same first step whether you're already registered and widening your scope, or approaching registration for the first time under a newly mandatory category. Our SIL registration checklist is built around the SIL registration group specifically, but the method — mapping your current policies, records, and worker screening against each Practice Standard module, then prioritising the genuine gaps — applies just as well if personal care or daily living supports turn out to be your category under the 2027 wave.

If you're new to the registration process altogether, our registration roadmap walks through the certification pathway for your own situation in seven questions, including the audit stages most higher-risk categories go through — useful context before you're facing a live deadline rather than a signalled one.

How Compliance Care helps

We help providers build genuine, evidenced competence against the NDIS Practice Standards — the policies, records, worker screening, and governance that hold up under an independent auditor's review, because they reflect how your organisation actually operates, not because of any relationship with the auditor. Audits are conducted by independent approved quality auditors from the Commission's own list; only your organisation's real practice determines the outcome, and our job is to make sure that practice is genuinely audit-ready before the date arrives, not to influence what happens on the day.

Our registration services cover the full pathway — gap analysis against the relevant Practice Standards, policy and procedure development, evidence-base build-out, and support through your chosen auditor's certification or verification process — and we structure the work so it's genuinely reusable if your registration scope widens under a later mandatory wave, rather than a one-off exercise you repeat from scratch each time. If you're not yet sure whether the 2027 changes apply to your services, or you know they will and want a realistic view of the work involved before the Commission's guidance narrows the timeline, Book a discovery call and we'll help you map out where you actually stand.