NDIS Practice Standards Reform 2026: What the New Code of Conduct Rules Mean for Providers

If you work for, or run, an NDIS provider in Australia, you've probably heard that "things are changing" with the Practice Standards and the Code of Conduct, but the detail can be hard to pin down. Reform timelines in this scheme have shifted more than once, and it's easy to end up working from an outdated deadline. This guide sets out what's actually changed, who it affects, and where things genuinely stand right now, using the NDIS Quality and Safeguards Commission's own reform hub as the primary source. For the wider compliance picture across Australian health and disability services, our healthcare compliance and CPD training guide for Australia is a good place to start.

What the NDIS Practice Standards reform actually changes

The Practice Standards are the rules registered providers are audited against. The current reform has two main strands. First, a broader review of the Practice Standards themselves, introducing clearer "Expectation Statements" that spell out, in plain language, what participant-centred practice looks like in day-to-day service delivery, rather than leaving providers to interpret dense regulatory wording. Second, and more concretely, a new set of Practice Standards specific to Supported Independent Living (SIL), co-designed with people with disability and Inclusion Australia, delivered through a new SIL supplementary module and a dedicated registration category (Assistance with Supported Independent Living).

Alongside the Practice Standards work, mandatory registration has been extended to two groups that could previously operate unregistered: providers delivering Supported Independent Living, and NDIS digital platform providers (the online marketplaces that connect participants with support workers). A third area, support coordination, was flagged for possible mandatory registration but that particular reform has been paused, so support coordinators are not currently caught by this specific change.

This sits within a larger legislative shift too. The NDIS Amendment (Integrity and Safeguarding) Act significantly increases penalties for serious misconduct, expands the Commission's power to ban not just workers but auditors, business advisers and consultants from the scheme, and creates a new criminal offence for delivering supports that require registration without holding one. None of this is abstract: it's the backdrop that makes getting Practice Standards and Code of Conduct compliance right a genuinely higher-stakes exercise than it was a few years ago.

The NDIS Code of Conduct: same obligations, much sharper teeth

It's worth being precise here, because a lot of commentary talks about a "new" Code of Conduct as if the rules themselves have been rewritten. What's actually happened is more nuanced. The Code's core obligations are unchanged in substance: workers and providers must act with respect for individual rights, protect participants' privacy, deliver supports safely and competently, act with integrity and honesty, raise and act on quality or safety concerns, and take reasonable steps to prevent and respond to violence, exploitation, neglect, abuse and sexual misconduct.

What has changed dramatically is the enforcement environment around those obligations. Penalties for serious Code of Conduct breaches that lead to death or serious injury have risen from a maximum of around $412,500 to more than $15 million, and civil penalties for individuals can reach into the tens of thousands of dollars per incident. Crucially, the Code of Conduct has never applied only to registered providers, and that hasn't changed. Every NDIS provider and every worker delivering NDIS-funded supports, registered or not, sole trader or large organisation, is bound by it. Given that unregistered providers make up the large majority of the market by number, the Commission has explicitly named this group as an enforcement priority.

For providers, that means Code of Conduct training can't be treated as a once-off induction task. It needs to be current, documented, and refreshed as the penalty and enforcement landscape shifts.

The compliance deadlines: what's confirmed, and what's next

Because NDIS reform dates have moved before, we've verified this against the Commission's official reform hub rather than relying on earlier assumptions. Mandatory registration for SIL and digital platform providers, along with the new SIL Practice Standards, formally took effect on 1 July 2026, and that date was not delayed. If you're reading this after that date, the requirement is now live, not upcoming.

The date providers actually need to focus on right now is 1 October 2026: existing unregistered SIL providers who want to keep delivering supported independent living services must have lodged a registration application with the Commission by then, or stop delivering SIL supports. Given that NDIS registration can typically take many months to complete, providers still outside the process should treat this as urgent rather than routine. Because the Commission has adjusted timelines in past reform rounds, don't rely on secondhand summaries, including this one, for a decision that affects your registration status. Confirm your specific position directly on the NDIS Quality and Safeguards Commission's website or by contacting the Commission before you act.

How this relates to worker screening: a different compliance layer

It's easy to conflate the Practice Standards and Code of Conduct reforms with worker screening, but they sit at different layers of the same safeguarding system. Worker screening is about who is allowed to work in the sector at all: it checks a person's background before they start, or continue, working in risk-assessed roles with NDIS participants. The Practice Standards and Code of Conduct, by contrast, govern how registered organisations operate and how every worker, screened or not, is expected to behave once they're on the job.

Both layers are compulsory, and neither substitutes for the other. A worker can hold a valid NDIS Worker Screening Check and still fall foul of the Code of Conduct through poor practice, a privacy breach, or failing to raise a safety concern. If you haven't already, it's worth reading our companion piece on the NDIS Worker Screening Check alongside this one, since providers need both pieces in place, not just one, to be genuinely compliant.

What providers and support workers should do before the next deadline

Practically, this means reviewing where your organisation sits against the new SIL Practice Standards if that applies to you, confirming your registration status and, if you're an unregistered SIL provider, treating 1 October 2026 as a hard planning deadline rather than a distant one. It also means refreshing Code of Conduct training across your whole workforce, not just new starters, and keeping a clear record that this training has actually happened, since documented evidence is exactly what the Commission and any audit will ask to see.

This is where structured, trackable CPD earns its keep. Learnsignal's compliance training helps Australian disability and healthcare providers keep Code of Conduct and regulatory training current, with a clear record for every worker. You can browse what's available through our CPD training programmes.

This article is general information, not legal advice, and NDIS reform timelines have changed before. Please confirm current deadlines and your specific registration obligations directly with the NDIS Quality and Safeguards Commission before making compliance decisions for your organisation.