NDIS Lifetime Bans: What Providers Need to Know in 2026

If you've been keeping half an eye on NDIS news lately, you'll have noticed a shift in tone. The NDIS Quality and Safeguards Commission isn't just increasing scrutiny, it's now using expanded powers to issue lifetime bans and take stronger action against people working across the Scheme.

This follows the NDIS Amendment (Integrity and Safeguarding) Act 2026, which passed federal parliament earlier this year and significantly widened the Commission's enforcement toolkit. The changes significantly expand the Commission's enforcement toolkit and are worth understanding, because they affect far more than the providers who end up in the headlines.

What's actually changed

Previously, banning orders were mostly aimed at registered providers and workers who'd breached the NDIS Code of Conduct. The net is now much wider. The Commission can issue a banning order against registration applicants (even before they're approved), quality auditors and their staff, registration consultants, and anyone providing services that “enable or facilitate” NDIS supports. In other words, the people connected to a provider — not just the provider itself — are now firmly within the Commission’s scope.

The grounds for a ban have also broadened. A banning order can be triggered by a revoked registration, a reasonable belief that someone has breached or is likely to breach the NDIS Act, a fraud or dishonesty conviction, insolvency, or simply the Commission deciding a person is unsuitable to work in disability services. Bans can be permanent, and the Commission has already begun using this power in 2026, with individuals receiving permanent bans following investigations into falsified NDIS claims.

The consequences of breaching these requirements are serious. Breaching a banning order is now a criminal offence, with penalties of up to five years’ imprisonment. Serious breaches of registration or Code of Conduct obligations can also result in significant civil penalties.

What this means for your organisation

These changes don't mean every provider is at risk of enforcement action. However, they do raise the consequences of getting things wrong and broaden where compliance risks can arise. 

There are a few areas providers should be paying particular attention to: 

• Check who you work with: Due diligence now extends beyond your own staff. If you engage subcontractors, consultants or auditors, make sure you understand who you're engaging and that they meet the relevant requirements. Checking the NDIS Provider Register before entering into these arrangements can help you make informed decisions. 

• Review your marketing: Make sure your advertising and communications accurately represent the services you provide. Claims that misrepresent your services or pressure participants about how to use their funding can create serious compliance risks. 

• Be prepared for information requests: Have clear processes in place for responding to Commission requests, particularly where timeframes may be short. Make sure the right people know who is responsible for responding and where relevant information is stored. 

• Keep compliance records up to date: Code of Conduct training, incident reporting and registration documentation should be current, accurate and easy to access. Good record-keeping can make it easier to demonstrate compliance if the Commission needs information from you. 

Staying on top of these requirements can help reduce compliance risks and ensure you're prepared if the Commission needs information from you. 

If you’re a provider ready to show participants and families you meet high standards, list your services on MySolas and get discovered by people actively searching for NDIS support. Providers on MySolas are vetted and verified, helping participants and families connect with safe, reliable support.