Securing the NDIS Act 2026: what changes for providers, and when
The National Disability Insurance Scheme Amendment (Securing the NDIS for Future Generations) Act 2026 received Royal Assent on 20 August 2026. This page lists the provider-facing changes and dates as the Department of Health, Disability and Ageing has published them, in one place, with the source for each line. It will be updated as the rules and lists are released.
Published 25 September 2026. Every statement below was read at its own source on that date; the numbered links take you there.
The Act and its timing
On 19 August 2026 the Bill was passed by the Parliament; it received Royal Assent on 20 August 2026 and became the National Disability Insurance Scheme Amendment (Securing the NDIS for Future Generations) Act 2026. The government says some changes commenced on 27 August 2026 and others will happen over a longer period to allow more time for consultation and communication, with the NDIA to tell participants and providers before any change happens.[1]
The dates, in order
- 1 July 2026: mandatory registration for supported independent living and platform providers begins to roll out (announced December 2025).[1] See our 1 October deadline page.
- 1 October 2026: funding for some supports is reset: budget allocations for social, economic and community participation supports and improved daily living skills supports, for new plans and plan reassessments.[1]
- 1 December 2026: the time to make a claim for supports reduces from 2 years to 90 days.[1]
- From 1 July 2027: expanded registration requirements begin to roll out for providers of higher-risk supports; all providers in scope need to be registered by December 2030.[1]
- 1 July 2028: a new support coordination and connection service set up by the NDIA; participants no longer pay for support coordination from plan funding.[1]
- 30 June 2028: an improved NDIS app for self-managed participants; claims above a threshold require supporting documentation.[1]
Registration and enrolment
Mandatory registration will be expanded to all providers delivering higher-risk supports, described as supports to participants most at risk of abuse or exploitation, such as personal care, daily living supports and supports provided in closed settings. A list of the supports considered high risk will be published, and providers will have time to identify whether the change applies to them and register with the NDIS Commission before it starts.[1]
Separately, most providers will need to enrol with the NDIA, showing a minimum basic level of identifiable information and a nominated, validated bank account into which payments will be made. Some providers, such as mainstream retailers who may not know they have served NDIS participants, will not need to enrol.[1] The government also lists the design of a commissioning approach for SIL home and living supports and the expansion of differentiated pricing for unregistered providers among the changes under way.[1]
Claims, records and penalties
Where claims exceed a certain threshold, supporting documentation will be required. Providers will need to keep records relating to payment and receipt of NDIS funds for 7 years; failure to retain records will result in a civil penalty, and the government says there will be time to develop filing and storage systems to meet the requirement.[1] From 1 December 2026 the claim window falls from 2 years to 90 days.[1] Participants or their plan managers must keep records for NDIS support payments for 3 years.[1]
Changes on the participant side that reach you
A panel of plan management providers approved by the government will be set up by the NDIA; a participant using a plan manager not on the list will have 6 months to transition.[1] From 1 July 2028 participants will choose support coordination from a list of providers funded directly, rather than paying from their plan.[1] The Act also sets out safeguards for automated administrative action, including human oversight and the right to seek review.[1]
What to do this month
Three practical steps follow from the dates above. Check whether any of your supports are personal care, daily living supports or supports in closed settings, because the published high-risk list will decide whether registration reaches you from 1 July 2027. Set your record-keeping to 7 years for anything about payment or receipt of NDIS funds now, rather than when the penalty starts. And bring your claiming cycle inside 90 days before 1 December 2026. Our Registration Scope Pack is built for the first of those questions; the policy versus evidence guide covers the records.
Questions providers are asking
When did the Act take effect?
The Bill passed the Parliament on 19 August 2026 and received Royal Assent on 20 August 2026. The government's explainer says some changes commenced on 27 August 2026 and others will happen over a longer period.[1]
Which providers will have to register?
Mandatory registration will be expanded to all providers delivering higher-risk supports, with examples given as personal care, daily living supports and supports provided in closed settings. A list of the supports considered high risk will be published, the expanded requirements begin to roll out from 1 July 2027, and all providers in scope need to be registered by December 2030.[1]
How long do I have to make a claim?
From 1 December 2026 the time to make a claim for supports under a participant's plan reduces from 2 years to 90 days.[1]
How long must I keep payment records?
Providers will need to keep records relating to payment and receipt of NDIS funds for 7 years, and failure to retain records will result in a civil penalty. Participants and plan managers keep claim records for 3 years.[1]
What happens to support coordination?
A new support coordination and connection service will be set up by the NDIA from 1 July 2028; participants will no longer pay for support coordination from their plan and will choose from providers funded directly to deliver it.[1]
Do unregistered providers have to do anything now?
The explainer says all NDIS providers must meet their obligations under the NDIS Act and the Code of Conduct whether registered or not, that most providers will need to enrol with the NDIA with identifiable information and a validated bank account, and that the NDIS Commission will provide more information before providers need to be registered.[1]
Sources
Each numbered line is the page a statement above was taken from, with the date we opened it. Read the source before you act; we summarise, the source decides.
- About the changes to the NDIS, Department of Health, Disability and Ageing, opened 25 September 2026.