The rules haven’t just changed. They’ve sharpened.
If you’ve been watching the NDIS legislative updates roll through and telling yourself you’ll deal with it once things settle, I need you to hear this clearly. Things have settled. This is what they’ve settled into.
New investigation powers. New criminal penalties. A hard 90 day claims window. Structural separation deadlines for plan managers. A penalty mechanism that can convert your earned revenue into a debt. And an enforcement system that now operates on two tracks at once.
This isn’t a rumor. It isn’t a draft. It’s happening now, not months.
Let’s talk about what that actually means for your business.
What the new investigation powers mean for you
NDIA inspectors now have expanded powers. That includes the ability to come to your premises, request your records, and examine your systems.
For most compliant providers, that sentence isn’t frightening. But here’s the thing. Compliance isn’t just about doing the right thing. It’s about being able to prove it, on the spot, in a format that holds up under scrutiny.
If your records are scattered, incomplete, or stored in a way that makes them hard to produce quickly, that’s a problem even if every transaction you’ve ever made was perfectly legitimate. The four pillars of solid NDIS record keeping are accuracy, accessibility, completeness, and timeliness. If any one of those pillars is weak, your records aren’t compliant. They’re a liability.
Ask yourself right now. If an NDIA notice arrived at your door this week, how long would it take you to produce everything they asked for? If the answer is anything other than ‘same day,’ that’s your first action item.
The criminal penalties nobody is talking about plainly enough
Criminal penalties are now part of the NDIS enforcement landscape. Not just civil penalties. Not just financial penalties. Criminal.
That changes the risk profile of non-compliance in a fundamental way.
The gap between a paperwork mistake and a criminal charge is still real. But the gap between deliberate non-compliance and a criminal charge has narrowed considerably. And the new dual enforcement system means both the NDIA and external bodies can pursue action simultaneously.
Good intentions have never been a risk control. They’re a value, not a system. What protects you is documentation, process, and a business structure that can withstand scrutiny.
The revenue to debt penalty
Most providers hear ‘penalty’ and think fine. A number. Painful, but finite.
The revenue to debt mechanism is different. Under certain conditions, revenue you’ve already received can be reclassified as a debt owed back to the NDIA. Money that has already cleared your account. Already been spent. Now owed back, potentially with interest.
That’s not a fine. That’s an existential risk to a small business.
What triggers it? Claiming for services that don’t meet the required standard. Claiming without adequate supporting records. This is why the billing process conversation is urgent. Not because billing is complicated. Because the consequences of getting it wrong have compounded.
October 2027 and the plan manager separation deadline
If you’re a plan manager, or if you run a business that includes plan management as one of several services, this deadline applies directly to you.
The structural separation requirement means that plan management can’t simply be a service line inside a larger NDIS business. There are legal boundaries being drawn around what plan managers can and can’t do within the same entity that delivers other supports.
October 2027 is the deadline. That sounds like a long time. It isn’t, not when you account for the legal work, the structural changes, the accountant conversations, and the operational transitions involved.
Providers who start this process in late 2026 will not finish in time. That’s not a guess. That’s arithmetic.
The roadmap exists. The key dates are mapped. What’s missing for most providers right now is the decision to start.
The unregistered provider question
A lot of providers have been operating as unregistered because the model worked. Lower compliance overhead. Flexibility. Direct relationships with participants.
That risk environment has changed.
Unregistered providers are not outside the scope of the new legislation in the way some assume. The penalties, the investigation powers, and the claims requirements reach further than the registered tier alone.
If you’ve been telling yourself that staying unregistered keeps you safe from this, it’s worth going back and checking that assumption against the actual legislation. Not your interpretation of it. The text.
The 6 actions that matter right now
Here’s what I want every NDIS provider reading this to do this week.
First, audit your records against the four pillars. Accurate, accessible, complete, timely. All four. Not three.
Second, review your claims window process. Do you have a system that flags claims approaching the 90 day cutoff? If not, build one.
Third, check your business structure. Especially if you’re a plan manager. Is it built for the post October 2027 world or the pre-2026 world?
Fourth, call your accountant. Today. Not when you feel like you have enough information. The call is how you get the information.
Fifth, look at who else is running operational tasks in your business. If your answer involves family members or informal arrangements, those arrangements need to be reviewed against the new requirements.
Sixth, stop waiting for the rules to land. They’ve landed. You’re reading about them right now.
The honest summary
The NDIS is not getting simpler. The compliance overhead is real, the penalties are real, and the deadlines are set.
But none of this is unsurvivable if you move now.
The providers who will struggle are the ones who treat this as a future problem. The providers who will be fine are the ones who treat it as a this week problem.
You know which one you want to be.
Watch the full breakdown to get the complete picture, including the specific legal changes, what each one triggers, and what a compliant NDIS business looks like in this new environment.