NDIS Registration Requirements: Complete 2026 Checklist
Meeting these requirements is the first step in your Regulatory Growth as an NDIS provider.
Every business that wants to become a registered NDIS provider must meet a defined set of requirements set by the NDIS Quality and Safeguards Commission. These requirements are not optional and they are not flexible. Meeting them is the condition of your registration, from the day you apply to the day your registration expires. Falling short at any stage – during the initial audit or at renewal – puts your registration at risk.
HCPA has guided 4,465 businesses through NDIS registration. Our team includes former support coordinators, LAC workers, and internal auditors who have assessed providers against these requirements from the other side of the table. The typical registration timeline is 3 to 6 months, and thorough preparation is the single biggest factor in achieving a faster, smoother outcome. This checklist covers every major requirement you need to meet.
Legal Entity and Business Registration Requirements
Before you can apply for NDIS registration, your business must exist as a legal entity. The Commission does not register individuals – it registers legal entities. This means you need a registered company, incorporated association, sole trader ABN, or another recognised legal structure in place before you submit your application. Begin your Regulatory Growth journey with expert support from HCPA.
ABN Registration
Your entity must hold an active Australian Business Number. The ABN is linked to your entity type and the NDIS registration is tied to this ABN. If you change your entity structure after registration, you will need to notify the Commission and potentially re-apply under the new entity. Getting the right entity structure at the start prevents this complication. Review our guide on starting an NDIS business and choosing the right structure before making this decision.
GST Registration
If your annual turnover exceeds $75,000, GST registration is mandatory. Most NDIS providers reach this threshold quickly. NDIS supports are generally GST-free when delivered by a registered provider, but you still need a GST registration in place. Confirm your GST status before applying.
Entity Suitability
The Commission assesses whether your entity is suitable to deliver NDIS supports. This includes reviewing whether the entity has any prior regulatory findings, outstanding legal issues, or financial concerns that would make it unsuitable. Transparency with the Commission about any relevant history is important – attempting to conceal material information is a more serious problem than the information itself.
Key Personnel Requirements
The NDIS Commission does not just assess your business entity – it assesses the people behind it. Key personnel are individuals with significant management or operational responsibility in your business. This includes directors, partners, senior managers, and anyone else who substantially influences how the business operates.
Key Personnel Suitability Assessment
Every key personnel member is subject to a suitability assessment by the Commission. The assessment considers their qualifications, professional experience, financial history (including bankruptcies or disqualifications), and any prior regulatory findings in the disability sector or other regulated industries. A negative assessment does not automatically disqualify an individual, but it requires explanation and, in some cases, additional governance controls.
Key Personnel Disclosures
You must disclose all key personnel in your application. This includes providing their personal details, roles, qualifications, and any relevant history the Commission has requested disclosure of. Incomplete or inaccurate disclosures are a common cause of application delays. Ensure all key personnel are prepared to provide the information required and that their details are accurate at the time of submission.
Insurance Requirements
Adequate insurance is a mandatory requirement for NDIS registration. The Commission will not grant registration without evidence that your business holds the required policies at the required coverage levels. You must maintain these policies throughout your registration period – a lapsed policy during your registration term constitutes a breach of your conditions of registration.
Professional Indemnity Insurance
Professional indemnity insurance covers claims arising from professional advice or services that result in harm to a participant. The minimum coverage level depends on your registration groups and the nature of your services. Higher-risk service types typically require higher coverage limits. Confirm the minimum required level for your specific registration groups before purchasing a policy.
Public Liability Insurance
Public liability insurance covers claims for property damage or personal injury to third parties arising from your business activities. Like professional indemnity, the minimum coverage level varies by service type. Most NDIS providers require a minimum of $10 million in public liability coverage, though some registration groups require higher limits.
Workers’ Compensation Insurance
If you employ staff, workers’ compensation insurance is required under state and territory legislation, independently of the NDIS registration requirements. The Commission expects registered providers to meet all applicable employment law requirements, which includes workers’ compensation coverage for all employees.
Governance and Management Requirements
The NDIS Practice Standards require that your organisation has clear, functional governance and management arrangements. This is not about having the right documents on file. It is about demonstrating that your governance is operational and that leadership is actively engaged in quality and safeguarding outcomes.
Governance Documentation
Your governance framework must include clear role descriptions for directors and key personnel, documented decision-making processes, conflict of interest management procedures, financial accountability mechanisms, and records management systems. These documents must reflect how your business actually operates. An auditor will test your governance by interviewing key personnel, not just reviewing your policy folder.
Quality Management System
You must have a quality management system that meets the requirements of the relevant NDIS Practice Standards modules. This includes processes for monitoring service delivery quality, collecting and acting on participant feedback, managing incidents and complaints, and conducting continuous improvement activities. The Commission expects evidence that your quality system is active and improving, not static.
Workforce Requirements
Your workforce is the frontline of your compliance obligations. The Commission holds registered providers responsible for the conduct of their workers, including employees, contractors, and volunteers who deliver supports to participants.
NDIS Worker Screening
Every worker who delivers NDIS supports in a risk-assessed role must hold a valid NDIS Worker Screening Check. This is a national check administered through state and territory screening agencies. It is separate from a standard police check and specifically assesses suitability to work in the disability sector. You must maintain a worker screening register, track expiry dates, and have processes for managing workers whose checks lapse, are suspended, or are refused.
Qualification Requirements by Registration Group
Some registration groups require your workforce to hold specific qualifications. Behaviour support practitioners must be registered with the Commission. Allied health practitioners delivering therapeutic supports must hold the relevant professional registrations. Support coordinators do not have a mandated qualification under the Practice Standards, but the Commission expects evidence of relevant experience and capability. Confirm the workforce qualification requirements for each of your intended registration groups before you apply.
Workforce Management Policies
You must have documented workforce management policies covering recruitment, induction, supervision, performance management, and separation. These policies must address how you assess worker suitability beyond the screening check, how you supervise workers delivering high-risk supports, and how you manage concerns about worker conduct. The Commission expects these policies to be embedded in your actual HR practices, not just documented in a folder.
Safeguarding and Rights-Based Requirements
The NDIS is a rights-based scheme. Every requirement in the Practice Standards ultimately exists to protect the rights, safety, and wellbeing of participants. Your registration requires you to have robust systems for safeguarding participants and upholding their rights.
Incident Management System
You must have a documented incident management system that covers identification, reporting, investigation, and response to incidents. Certain incident types – called reportable incidents – must be reported to the NDIS Commission within specific timeframes. These include death, serious injury, abuse, neglect, unlawful sexual or physical contact, and use of unauthorised restrictive practices. Your system must be capable of meeting these reporting obligations reliably.
Complaints Management System
Every registered provider must have a documented complaints management process. Participants must be informed of their right to make a complaint, including the right to complain to the NDIS Commission directly. Your process must be accessible, include timelines for responding, and demonstrate that complaints are taken seriously and used to drive improvement. The Commission may review your complaints records during an audit.
Participant Rights and Restrictive Practices
If your services involve any form of behaviour support or restrictive practices, you face additional requirements. All use of regulated restrictive practices must be authorised under the relevant state or territory legislation, documented in a behaviour support plan developed by a registered behaviour support practitioner, and reported to the Commission. Providers who use restrictive practices without proper authorisation face serious compliance consequences.
Frequently Asked Questions
What is the NDIS Practice Standards?
The NDIS Practice Standards is the framework set by the NDIS Quality and Safeguards Commission that defines the quality and safety requirements for registered providers. It is organised into core modules that apply to all providers and supplementary modules that apply to specific registration groups. Your audit assesses your compliance against the modules relevant to your registration groups.
How do I know which requirements apply to my business?
The requirements that apply to your business depend on your registration groups. The Commission maps each group to specific Practice Standards modules, which determines the scope of your audit. The best way to understand your specific requirements is to identify your intended registration groups first, then map those groups to the applicable Practice Standards modules. Our guide on NDIS registration groups explains this mapping in detail.
How often must I renew my NDIS registration?
NDIS registration is typically granted for a period of up to three years. At the end of your registration period, you must apply for renewal, which involves another audit. The renewal audit assesses your ongoing compliance with the Practice Standards. Providers with strong continuous improvement practices and well-maintained documentation typically find renewal audits more straightforward than initial audits.
What happens if I breach my registration conditions?
Breaching your registration conditions can result in a range of Commission actions, from requiring a compliance audit to imposing conditions on your registration, suspending your registration, or cancelling it entirely. The severity of the response depends on the nature and gravity of the breach. Proactive engagement with the Commission when issues arise is always a better strategy than hoping problems go undetected.
How much does it cost to meet the NDIS registration requirements?
The cost of meeting registration requirements varies by business size, service type, and audit complexity. Key cost components include audit fees (set by your chosen auditing body), policy and governance development, insurance premiums, worker screening fees, and any professional support you engage for preparation. HCPA’s full registration support package starts from $4,400, which covers the preparation work and guidance needed to meet these requirements efficiently.
Get Compliant and Stay Compliant With HCPA
Meeting the NDIS registration requirements is not a one-time exercise. It is an ongoing commitment that starts with your initial application and continues through every audit, every renewal, and every change to your business. The providers who thrive long-term in the NDIS market are those who build compliance into their operations from day one, not those who scramble to meet standards when an audit is imminent.
HCPA has helped 4,465 businesses navigate the registration requirements. Our team includes professionals with direct experience as support coordinators, LAC workers, and internal auditors who understand what the Commission is actually looking for and how to build systems that demonstrate genuine compliance, not just surface-level compliance.
Our client managers average 3 years of tenure, which means you work with experienced professionals who know your business and your registration history. When your renewal is due, when the Commission asks questions, or when your business changes in ways that affect your compliance, we are the team you call. Full registration support packages start from $4,400.
Book a free consultation with HCPA today and get a clear assessment of where your business stands against the NDIS registration requirements. We will identify any gaps, create a preparation plan, and walk alongside you through the entire process – from application to audit to registration certificate.
