One of the most significant, and least understood, changes introduced by the NDIS Amendment (Integrity and Safeguarding) Act 2026 is the creation of a new category of noncompliance: the serious contravention.
If you’re a registered NDIS provider, this matters. Understanding what a serious contravention is, how it differs from ordinary noncompliance, and what consequences it carries will shape how you manage risk in your business.
The Old Framework: What Came Before
Under the previous NDIS regulatory framework, noncompliance broadly fell into two categories:
- Compliance notices and audits, administrative action where the NDIS Commission identified a problem and required remediation
- Registration suspension or cancellation, for more serious or repeated failures
The system was largely reactive and tiered. Penalties existed, but the pathways to serious consequences were slow, and the threshold for escalation was high.
For providers doing the wrong thing deliberately, this created space to continue operating while appeals and processes played out. The 2026 Act closes that space.
What Is a Serious Contravention?
The NDIS Amendment Act introduces the concept of a serious contravention as a distinct and elevated category of breach, attracting civil penalties significantly higher than standard compliance failures.
While the full definition is set out in the Act, a serious contravention generally involves:
Deliberate or Reckless Conduct
Noncompliance that was intentional or where a provider took risks they knew were unreasonable, for example, knowingly billing for supports not delivered, or continuing to operate outside the scope of registration while aware of the obligation.
Significant Harm or Risk to Participants
Where a provider’s actions or failures created real risk of harm to NDIS participants, including financial, physical, or psychological harm. This includes exploitation of vulnerable participants and failure to implement required safeguarding measures.
Systemic Failure Despite Warning
Where a provider has received compliance notices, audit findings, or other regulatory communications flagging an issue, and has failed to remediate it. Repeated or continuing noncompliance after being put on notice is a key indicator of a serious contravention.
Operating Without Required Registration
From 1 July 2026, delivering Supported Independent Living (SIL) supports or operating as a platform provider without registration is both a criminal offence and capable of constituting a serious contravention for civil penalty purposes.
How Does It Differ from Ordinary Noncompliance?
The key distinctions are:
| Factor | Ordinary Noncompliance | Serious Contravention |
|---|---|---|
| Intent | Usually inadvertent or administrative | Deliberate, reckless, or systemic |
| Harm | Minimal or theoretical | Actual or significant risk |
| History | First time or isolated | Pattern or repeated after warning |
| Penalty | Administrative action, lower civil penalties | Up to 10,000 penalty units |
| Speed of action | Usually slower, with remediation pathway | Commission can act more swiftly |
An isolated paperwork error, a missed policy update, or a single late incident report is unlikely to be classified as a serious contravention. The category is designed for patterns of failure and deliberate misconduct, not honest mistakes.
What Are the Penalties?
This is where serious contraventions become very significant.
Under the 2026 Act, serious contraventions carry civil penalties of up to 10,000 penalty units. As of the 2026 financial year, one penalty unit equals approximately $330.
This means:
– Individuals: Up to $3.3 million per serious contravention
– Body corporates: Up to $16.5 million per serious contravention (under the standard multiplier for corporations)
These are maximum figures, actual penalties imposed depend on the seriousness of the conduct, the degree of harm, the provider’s history, and whether they cooperated with the Commission’s investigation.
But to put it in context: these are penalties that can end a business or result in personal financial ruin for an individual.
How Will the Commission Identify Serious Contraventions?
The Act gives the Commission expanded powers specifically to investigate and act on conduct that may amount to serious contraventions. These include:
- Unannounced audits where there is reasonable suspicion of misconduct
- Information sharing with other regulatory bodies (ATO, ACCC, state agencies)
- Expanded document and record production powers, requiring providers to hand over records quickly
- Participant and worker complaints that trigger formal investigations
- Data analysis across billing and claims patterns
The Commission is investing in compliance capability. Patterns that might previously have gone undetected, such as systematic overbilling or fabricated support records, are increasingly likely to be identified.
What Should Providers Do?
Understand Where Your Risks Are
Walk through your operations and identify any areas where compliance is less than rigorous. Worker screening gaps, inconsistent record keeping, billing practices that rely on habit rather than policy, these are the starting points.
Document Everything
Good documentation is both a compliance requirement and your best defence if the Commission investigates. Service agreements, support notes, incident records, worker screening records, all of it should be current, accurate, and accessible.
Review Your Policies
Your policies and procedures should reflect the current practice standards and include any updates required under the 2026 Act. If your policy documents are more than 12 months old, review them.
Act on Audit Findings Promptly
If you’ve received compliance notices or audit recommendations, address them. Unresolved audit findings are exactly the kind of history that can turn an ordinary compliance issue into something more serious if a problem recurs.
Train Your Team
Your staff should understand what the rules are, not just that the rules exist. Training on mandatory reporting, restrictive practices, pricing obligations, and participant rights is not just good practice; it’s a compliance requirement.
The Bigger Picture
The serious contravention framework sends a clear message: the NDIS is a rights based scheme funded by Australian taxpayers to support some of the most vulnerable people in the community. Providers who exploit that system will face consequences that match the seriousness of the harm caused.
For providers operating with genuine intent to deliver quality supports, the serious contravention category is unlikely to affect your daily operations. Understanding it clearly, however, helps you appreciate the line the Commission is drawing, and ensure you’re comfortably on the right side of it.
