NDIS support lists are now law
Effective: 3 Oct 2024From 3 October 2024, NDIS funding can only be used for supports that meet the legal definition of an NDIS support or approved replacement supports. The NDIA has published lists of what can and cannot be funded under the NDIS Act 2013 as amended by the NDIS Amendment (Getting the NDIS Back on Track No. 1) Act 2024.
Compliance requirement
- All services delivered and claimed must be disability-related and connected to the participant's plan
- Invoices must describe the specific NDIS support, not a generic description
- Service notes must record what support was delivered, when, and how it relates to the participant's disability support needs
- Service agreements must reference NDIS support line items correctly
Staff action
- Do not use vague service descriptions on invoices or progress notes
- If uncertain whether a support is fundable, check the NDIA support lists before delivering
- Escalate to management if a participant requests a support that appears outside the lists
- Document rationale when delivering a borderline support
Funding periods changing how participants access plan funds
Effective: 19 May 2025From 19 May 2025, new and reassessed NDIS plans may include funding periods of 1, 3, 6, or 12 months, depending on the participant's circumstances. The total plan funding does not necessarily change, but the timing of fund release can. This affects how and when participants can access and spend plan funds.
Operational impact
- Participants may have less funds available at service commencement than their total plan amount suggests
- Rostering and service frequency should be confirmed against available funding period, not total plan
- Cancellations and short-notice changes may deplete shorter funding periods faster
Staff action
- At intake, confirm funding period and available balance with the participant, nominee, plan manager, or support coordinator
- Do not assume the full plan amount is available at start of services
- Build regular budget check-ins (at least monthly) into service delivery routine
- Document all budget conversations in participant file
Stronger provider registration model underway
SIL/platform: 1 Jul 2026The Australian Government has accepted the direction of a risk-based, graduated provider registration model recommended by the Provider and Worker Registration Taskforce. From 1 July 2026, all SIL providers and platform providers must be registered with the NDIS Commission. Transition guidance is being developed and expected from the Commission in early to mid 2026.
The broader direction is toward greater regulatory visibility across all provider types. Open Care Connect is a registered provider and must maintain standards consistent with this direction regardless of current categorisation.
What we must maintain
- Current registration and certificate of registration
- All policies and procedures
- Worker screening records (NDIS Worker Screening Check)
- Worker training records
- Incident register
- Complaints register
- Risk register
- Participant consent records
- Service agreements
- Insurance certificates
- Audit evidence
Staff action
- Never start supports without a signed service agreement
- Confirm worker screening is current before allocating shifts
- Report compliance gaps to management immediately
- Monitor NDIS Commission reform hub for transition guidance updates
Practice Standards and quality expectations strengthening
Ongoing - SIL: Jul 2026The NDIS Practice Standards set mandatory quality standards for all registered providers across: participant rights and responsibilities, provider governance, service delivery, risk management, complaints handling, incident management, and worker capability. New Practice Standards specifically for SIL providers are being developed alongside mandatory registration. A pilot audit of SIL-specific standards was conducted in February 2026, with findings expected in late March 2026.
Compliance requirement
- Policies must be implemented in practice, not just documented
- Worker training must be evidenced and current
- Incidents must be reviewed and responded to
- Complaints must be recorded, acknowledged, investigated, and closed
- Service improvements must be documented
Audit readiness
- Auditors look for evidence that systems work, not just that they exist
- Maintain a current evidence folder for each Practice Standard module
- Conduct internal audits before the next external audit cycle
- Document all quality improvement actions taken
Incident management and reportable incidents
Ongoing requirementRegistered providers must have an incident management system. Certain incidents must be reported to the NDIS Commission as reportable incidents. These include: death of a participant, serious injury, abuse or neglect, sexual misconduct, use of restrictive practices, and unauthorised restrictive practices.
Reportable incident categories
- Death of an NDIS participant
- Serious injury of a participant
- Abuse or neglect of a participant
- Unlawful sexual or physical contact
- Sexual misconduct by a worker
- Use of an unauthorised restrictive practice
Staff action
- Record all incidents in the incident register immediately
- Escalate reportable incidents to management immediately - do not wait
- Management notifies the NDIS Commission within required timeframes
- Participate in incident reviews and document what changed
- If unsure, report and escalate - do not make independent judgements about severity
NDIS Code of Conduct - all providers and workers
Ongoing requirementThe NDIS Code of Conduct applies to all registered providers, key personnel, and workers. It requires: acting with respect, providing safe supports, acting with integrity and transparency, promptly taking action on concerns about safety, and supporting participant choices and rights.
Worker requirements
- Complete the NDIS Worker Orientation Module before starting support delivery
- Valid NDIS Worker Screening Check before any participant contact
- Follow all organisational policies in day-to-day practice
- Report concerns about colleagues' conduct immediately
Provider requirement
- Keep training completion records for all workers
- Screen all workers through the NDIS Worker Screening database
- Respond to conduct concerns as per the complaints policy
- Worker conduct issues can constitute a provider compliance breach
Provider portal access: myID and RAM (PRODA discontinued)
From 10 Nov 2025From 10 November 2025, all NDIS provider portal access requires myID (identity verification) and RAM (Relationship Authorisation Manager). PRODA has been discontinued. This applies to the NDIS Provider Portal, the NDIS myplace portal, and related NDIA business systems.
System access rules
- Only authorised personnel can hold system access
- Login credentials must not be shared under any circumstances
- Access must be removed immediately when a staff member leaves
- All access activity is logged and can be audited
Privacy implication
- Unauthorised access to participant data is a privacy breach and must be reported under our Privacy Policy and the Privacy Act 1988
- Report any suspected unauthorised access to management immediately
Pricing arrangements - ongoing updates
Review monthlyThe NDIA regularly updates pricing arrangements and price limits. Providers must claim at or below current NDIA price limits. Overclaiming, underclaiming, or misclassifying support types are all claiming errors that can result in compliance action.
Correct claiming
- Check current price limits before issuing invoices
- Claim the correct support category and line item
- Travel claims must follow NDIA rules exactly
- Cancellations must be claimed under correct cancellation rules
- Non-face-to-face time has specific eligibility conditions
- Group supports have per-participant pricing rules
Price list management
- Review NDIA pricing page at least monthly
- Update internal price list when NDIA releases changes
- Update all service agreements when prices change
- Never charge above the NDIA price limit for any support
Long-term direction of the NDIS
- Compliance will become a standard business function, not just a pre-audit activity. Build it into weekly operations.
- Documentation quality will increasingly determine audit outcomes. Poor notes are a risk, not just an inconvenience.
- Participant outcomes will become more important than hours claimed. Evidence of goal progress will be expected.
- Low-quality providers will find it harder to survive as stronger rules reduce the ability to cut corners and still claim.
- Well-run providers will benefit. Stronger safeguards build trust with participants, families, plan managers, and support coordinators.
Registration and governance
| NDIS registration current and certificate held on file | Management | |
| All policies reviewed against current Practice Standards | Management | |
| Insurance certificates current (public liability, professional indemnity) | Management | |
| myID and RAM access set up for all authorised personnel only | Management |
Worker compliance
| All workers have current NDIS Worker Screening Check on file | All staff | |
| NDIS Worker Orientation Module completed and recorded for all workers | All staff | |
| Additional training records kept (Code of Conduct, incidents, rights, privacy) | All staff |
Participant records
| Signed service agreement in place before support starts | All staff | |
| Consent to collect and hold personal information recorded | All staff | |
| Progress notes completed after each support session | Support workers | |
| Budget check-in conducted and documented monthly | All staff |
Claiming and invoicing
| Services checked against NDIS support lists before delivery | Management | |
| NDIA pricing reviewed monthly - internal price list updated | Management | |
| Invoices include support description, date, duration, unit price, line item | Admin | |
| Travel, cancellations, and group supports claimed under correct rules | Admin |
Incidents and complaints
| Incident register maintained and reviewed monthly | Management | |
| Reportable incidents notified to NDIS Commission within required timeframes | Management | |
| Complaints register maintained - all complaints recorded and closed | Management | |
| Improvements documented following incident or complaint review | Management |
| Topic | Source | Status |
|---|---|---|
| Supports funded by the NDIS | NDIA | Live |
| Changes to funding periods | NDIA | Live |
| Mandatory registration | NDIS Commission | Transition in progress |
| Practice Standards | NDIS Commission | Live |
| Incident management | NDIS Commission | Live |
| Code of Conduct | NDIS Commission | Live |
| Pricing arrangements | NDIA | Updated periodically |
| myID and RAM | NDIA | Live |
| NDIS Act 2013 (current) | legislation.gov.au | Live |
| NDIS Commission reform hub | NDIS Commission | Live |