{"licence":"Free to reuse with attribution. The requirement statements here are The Art of Service wording of each clause of the Australian care-quality frameworks named, cited to the clause they come from, not the instrument verbatim. Reuse under Creative Commons Attribution 4.0 International.","generated":"2026-10-15","framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","counts":{"ndisreg":21},"total":21,"frameworks":{"ndis":{"key":"ndis","name":"Australia NDIS Practice Standards and Quality Indicators","short":"NDIS Practice Standards","slug":"australia-ndis-practice-standards-and-quality-indicators","count":334,"page":"/standards/ndis/","endpoint":"/api/standards/ndis.json"},"acs":{"key":"acs","name":"Aged Care Quality Standards (Australia)","short":"Aged Care Quality Standards","slug":"aged-care-quality-standards-australia","count":66,"page":"/standards/acs/","endpoint":"/api/standards/acs.json"},"ndisreg":{"key":"ndisreg","name":"Australia NDIS Provider Registration Rules 2018","short":"NDIS Provider Registration Rules","slug":"australia-ndis-provider-registration-rules-2018","count":21,"page":"/standards/ndisreg/","endpoint":"/api/standards/ndisreg.json"},"ndisconduct":{"key":"ndisconduct","name":"Australia NDIS Code of Conduct Rules 2018","short":"NDIS Code of Conduct","slug":"australia-ndis-code-of-conduct-rules-2018","count":8,"page":"/standards/ndisconduct/","endpoint":"/api/standards/ndisconduct.json"}},"controls":[{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s11","domain":"Becoming registered (Rules Part 3, Act ss 73C to 73E)","requirement":"To register, the applicant itself needs an Australian Business Number, held under the A New Tax System (Australian Business Number) Act 1999.","evidence":["ABN Lookup record matching the applicant's legal name and entity type","Evidence the ABN on invoices and the registration match"],"common_gaps":["ABN held by a related entity rather than the applicant","Cancelled ABN not noticed"],"reviewer_question":"Show me aBN Lookup record matching the applicant's legal name and entity type, and tell me who owns it and when it was last reviewed.","answer":"For s11 Hold an ABN, the evidence to bring is: ABN Lookup record matching the applicant's legal name and entity type. It sits under Becoming registered (Rules Part 3, Act ss 73C to 73E) and the instrument's own clause is Rules s 11. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s11","instrument_clause":"Rules s 11","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s11/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s13","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"The provider tells the Commissioner, using the form the Commissioner approves and as quickly as it can after it learns a change will happen or it happens (whichever is earlier), about any shift to the details it uses to be contacted and any shift of scale in the supports it is registered to give: the geographic areas served, the places it operates from, a large rise or fall in the number of people served, or a large rise or fall in workers.","evidence":["Notification records lodged in the NDIS Commission portal with dates","Internal trigger list linking new sites, service areas and headcount changes to a notification step"],"common_gaps":["New sites opened without notice","Rapid growth in participants or workers not notified"],"reviewer_question":"Show me notification records lodged in the NDIS Commission portal with dates, and tell me who owns it and when it was last reviewed.","answer":"For s13 Notify changes to contact details and to scale, the evidence to bring is: Notification records lodged in the NDIS Commission portal with dates. It sits under Conditions of registration (Rules Part 4, Act ss 73F to 73J) and the instrument's own clause is Rules s 13. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s13","instrument_clause":"Rules s 13","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s13/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s13A","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"The provider tells the Commissioner, using the form the Commissioner approves, about: an event that has a significant effect on its ability to meet its conditions; a change that harms the access people with disability have to the supports it is registered to provide; a decline in its financial capacity; a major change to its organisation or its governance; and events that bear on whether it or its key personnel remain suitable (the matters in ss 9(2)(c) to (h) and 10(2)(b) to (g)). Where ownership of the provider, or of its business, changes and that brings a governance change, the notice is due by the earlier of when it learns the change will happen and any step that must come first to bring the change about (s 13A(3), from 1 July 2026); other notices by the earlier of awareness and occurrence.","evidence":["Notification records for governance, financial and suitability events","Transaction timetable for any sale or restructure showing the Commission notice before the first precondition step","Board papers identifying events requiring notice"],"common_gaps":["Commission told of a sale only after completion","Key personnel charges or insolvency events not notified"],"reviewer_question":"Show me notification records for governance, financial and suitability events, and tell me who owns it and when it was last reviewed.","answer":"For s13A Notify significant events, including a change of ownership before it, the evidence to bring is: Notification records for governance, financial and suitability events. It sits under Conditions of registration (Rules Part 4, Act ss 73F to 73J) and the instrument's own clause is Rules s 13A. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s13A","instrument_clause":"Rules s 13A","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s13a/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s13B","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"A provider whose registration covers a class assessed by certification goes through a certification audit halfway through its registration period, run by an approved quality auditor, that starts within 18 months of the period beginning (or later if the Commissioner allows), covering the governance standards in Part 3 of the Core module, any standard that had required a corrective action plan, and any standard the Commissioner names; the report reaches the Commissioner as quickly as it can. It does not apply to early childhood providers who are individuals or partnerships, to SDA-only providers, or to transitioned providers.","evidence":["Mid-term audit engagement letter and start date within 18 months of registration start","Mid-term audit report and evidence it was given to the Commission"],"common_gaps":["Mid-term audit booked too late to start within 18 months","Previous corrective actions not re-tested"],"reviewer_question":"Show me mid-term audit engagement letter and start date within 18 months of registration start, and tell me who owns it and when it was last reviewed.","answer":"For s13B Mid-term certification audit within 18 months, the evidence to bring is: Mid-term audit engagement letter and start date within 18 months of registration start; Mid-term audit report and evidence it was given to the Commission. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s13B","instrument_clause":"Rules s 13B","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s13b/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s13BA","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"Where a certification-assessed provider goes through a major change to its organisation or governance because ownership changes for the provider, or for a business it runs, and in the next three months it has no mid-term audit underway and its registration does not end, it goes through a certification audit that starts within 3 months of the change (or later if the Commissioner allows), against the Part 3 Core module standards and any standard that had a corrective action plan; the auditor reports to the Commissioner within 28 days of finishing it. This applies to changes of ownership from 1 July 2026.","evidence":["Change of ownership audit engagement starting within 3 months of completion","Audit report and auditor's submission to the Commission within 28 days"],"common_gaps":["Acquirer assumes the vendor's audit cycle continues unchanged","Audit not scheduled after a share sale"],"reviewer_question":"Show me change of ownership audit engagement starting within 3 months of completion, and tell me who owns it and when it was last reviewed.","answer":"For s13BA Change of ownership audit within 3 months (from 1 July, the evidence to bring is: Change of ownership audit engagement starting within 3 months of completion; Audit report and auditor's submission to the Commission within 28 days. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s13BA","instrument_clause":"Rules s 13BA","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s13ba/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s13C","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"A provider registered for high intensity daily personal activities may provide a support listed in Schedule 2 (complex bowel care, enteral feeding, severe dysphagia management, tracheostomy, urinary catheter, ventilator, subcutaneous injections, complex wound management) only if that support is set out in its certificate of registration.","evidence":["Certificate of registration listing each high intensity support","Participant register showing only listed supports are delivered"],"common_gaps":["New participant with a tracheostomy accepted before the support was added to the certificate","Certificate not varied after a module audit"],"reviewer_question":"Show me certificate of registration listing each high intensity support, and tell me who owns it and when it was last reviewed.","answer":"For s13C Provide only the high intensity supports listed on the certificate, the evidence to bring is: Certificate of registration listing each high intensity support. It sits under Conditions of registration (Rules Part 4, Act ss 73F to 73J) and the instrument's own clause is Rules s 13C. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s13C","instrument_clause":"Rules s 13C","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s13c/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s13D-2","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"A registered NDIS digital platform provider may not let anyone hold out on the platform that they can deliver supports under a participant's plan unless that person has shown that they (if an individual) and every individual they employ or engage to deliver the supports hold a current NDIS worker screening clearance, and the provider does not know of a clearance that has ended. This applies from 1 January 2027.","evidence":["Onboarding workflow requiring clearance evidence for each provider and each of its workers before listing","Periodic re-verification of clearances against the NDIS worker screening database","Delisting records when a clearance ends"],"common_gaps":["Clearance collected for the business owner but not for its workers","No process to delist on notice of an exclusion"],"reviewer_question":"Show me onboarding workflow requiring clearance evidence for each provider and each of its workers before listing, and tell me who owns it and when it was last reviewed.","answer":"For s13D-2 to (4) Digital platforms: only screened people may offer supports, the evidence to bring is: Onboarding workflow requiring clearance evidence for each provider and each of its workers before listing; Periodic re-verification of clearances against the NDIS worker screening database. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s13D-2","instrument_clause":"Rules s 13D(2) to (4)","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s13d-2/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s13D-5","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"The platform provider checks, and shows on the platform, for each person offering supports and for each person they engage: whether an NDIS banning order applies; whether a banning order under the Aged Care Act 2024 or the former Aged Care Quality and Safety Commission Act 2018 applies; that the credentials or qualifications shown on the platform are actually held; for individuals, that a worker screening clearance is held; and plain information on how checks of credentials are done. This applies from 1 January 2027.","evidence":["Profile pages showing banning order status, verified credentials and clearance status","Check logs against the NDIS Provider Register and aged care banning order register","Published description of the credential verification process"],"common_gaps":["Credentials displayed as self-declared without checking","Aged care banning orders not checked"],"reviewer_question":"Show me profile pages showing banning order status, verified credentials and clearance status, and tell me who owns it and when it was last reviewed.","answer":"For s13D-5 and (6) Digital platforms: check and display banning orders, credentials, the evidence to bring is: Profile pages showing banning order status, verified credentials and clearance status; Check logs against the NDIS Provider Register and aged care banning order register. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s13D-5","instrument_clause":"Rules s 13D(5) and (6)","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s13d-5/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s20-22","domain":"Becoming registered (Rules Part 3, Act ss 73C to 73E)","requirement":"To be registered for a class of supports, the applicant is assessed by an approved quality auditor, by certification or verification as the s 20(3) table specifies, as meeting each applicable standard, plus Module 2A by certification where regulated restrictive practices are or may be used; to remain registered it keeps complying with those standards (s 20(1) and (2)). Individuals and partnerships providing early childhood supports are assessed against Core clause 7 and Module 3 (s 20(4) and (5)); Commonwealth, State, Territory and local government providers are certified against the whole Core module for any class (s 22). Certification satisfies a verification requirement (s 23), and auditors apply the quality indicators (s 24).","evidence":["Scope of audit document mapping each registered class to its modules and assessment method","Certification or verification audit reports and certificates from an approved quality auditor","Corrective action plans and close-out evidence for any nonconformity"],"common_gaps":["Registered classes added without the matching supplementary module audited","Module 2A not audited although restrictive practices are in use","Corrective actions left open past their due date"],"reviewer_question":"Show me scope of audit document mapping each registered class to its modules and assessment method, and tell me who owns it and when it was last reviewed.","answer":"For s20-22 20 and 22 Be audited against the applicable modules, the evidence to bring is: Scope of audit document mapping each registered class to its modules and assessment method; Certification or verification audit reports and certificates from an approved quality auditor. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s20-22","instrument_clause":"Rules ss 20 and 22","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s20-22/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s7-4","domain":"When registration is mandatory (Rules Part 2, Act s 73B)","requirement":"A person gives assistance with supported independent living when the participant needs another person constantly at hand, or immediately available, for all or a large part of each day; the assistance comes as a package that helps with or supervises daily tasks so the participant can live as autonomously as possible at home and reach the community; and that person runs the package and the supports under it. Such a person must be registered for that class (class 0138). Transitional rules (s 32(2) and (3)): a registered provider already delivering SIL keeps going until the Commissioner varies its registration, and in the meantime, if registered for item 15 (daily life tasks in a shared or group living arrangement), it complies with Module 5A; an unregistered provider already delivering SIL before 1 July 2026 may keep going only if it applies to register before 1 October 2026, until that application is decided, and otherwise must stop from 1 October 2026; a new entrant must be registered before starting.","evidence":["Registration application or varied certificate adding the SIL class, with its date","For existing unregistered SIL providers, proof of an application lodged before 1 October 2026","Assessment of each participant's package against the s 7(5) test (constant support, package, provider manages it)"],"common_gaps":["Providers repackaging SIL as separate hourly supports to avoid the definition","No application lodged by 1 October 2026 but supports continuing","Module 5A not implemented after the registration variation"],"reviewer_question":"Show me registration application or varied certificate adding the SIL class, with its date, and tell me who owns it and when it was last reviewed.","answer":"For s7-4 and (5) and s 32 Assistance with supported independent living, the evidence to bring is: Registration application or varied certificate adding the SIL class, with its date; For existing unregistered SIL providers, proof of an application lodged before 1 October 2026. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s7-4","instrument_clause":"Rules s 7(4) and (5) and s 32","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s7-4/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s7-6","domain":"When registration is mandatory (Rules Part 2, Act s 73B)","requirement":"An NDIS digital platform means an online application, website or system run mainly to make it easier to deliver supports under participants' plans, where the operator stands between participants and the people delivering supports and the operator, a related entity or a contracted payment processor asks for and processes NDIS amounts as payment through it (s 5A). Giving an NDIS digital platform service (class 0137) needs registration and certification against the Core module. Transitional rules as for SIL: an existing unregistered platform may keep going only if it applies before 1 October 2026; the s 13D platform conditions apply from 1 January 2027 (s 32(5)).","evidence":["Assessment of whether the platform meets the s 5A definition (intermediary role, payment processing by operator, associate or contractor)","Registration application or certificate listing the NDIS digital platform service class","Core module certification audit report"],"common_gaps":["Payment processing moved to a contractor in the belief that this avoids the definition","Platform continuing after 1 October 2026 without an application"],"reviewer_question":"Show me assessment of whether the platform meets the s 5A definition (intermediary role, payment processing by operator, associate or contractor), and tell me who owns it and when it was last reviewed.","answer":"For s7-6 Rules s 5A, s 7(6) and s 32(4) NDIS digital, the evidence to bring is: Assessment of whether the platform meets the s 5A definition (intermediary role, payment processing by operator, associate or contractor). Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s7-6","instrument_clause":"Rules s 5A, s 7(6) and s 32(4)","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s7-6/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73B-7","domain":"When registration is mandatory (Rules Part 2, Act s 73B)","requirement":"A person must not deliver a support under a participant's plan where the NDIS rules require registration for it and the person is not registered (s 73B(2)), nor hold themselves out as able to deliver such a support (s 73B(3)). Rules s 7 requires registration for: specialist disability accommodation (s 7(1)); any class of supports where a regulated restrictive practice is needed now or on an interim or ongoing basis, or is likely to be (s 7(2)); specialist behaviour support that involves a behaviour support assessment or the writing of a behaviour support plan (s 7(3)); assistance with supported independent living (s 7(4) and (5)); and NDIS digital platform services (s 7(6)). Separately, supports to a participant whose funding is managed by the Agency may be given only by a registered provider (Act ss 32D(7) and 33(6)). Breaking this is a fault-based offence (up to 2 years in prison or 120 penalty units), a strict liability offence, and a civil penalty (up to 10,000 penalty units for a serious breach by an NDIS provider).","evidence":["Certificate of registration listing every class of support delivered, checked against the service catalogue","Register of participants whose supports involve regulated restrictive practices, with the provider's registration class for each","Review of website, brochures and platform listings confirming no claim to deliver registration-only supports without registration","Plan management type checked for each participant (Agency-managed participants served only while registered)"],"common_gaps":["Unregistered provider delivering supports where restrictive practices are in use","Marketing that implies SIL or SDA capability without registration","Serving Agency-managed participants after registration lapsed"],"reviewer_question":"Show me certificate of registration listing every class of support delivered, checked against the service catalogue, and tell me who owns it and when it was last reviewed.","answer":"For s73B-7 and Rules s 7 Do not provide, or hold out, the evidence to bring is: Certificate of registration listing every class of support delivered, checked against the service catalogue; Register of participants whose supports involve regulated restrictive practices, with the provider's registration class for each. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73B-7","instrument_clause":"s 73B and Rules s 7","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73b-7/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73C-73D","domain":"Becoming registered (Rules Part 3, Act ss 73C to 73E)","requirement":"An application for registration (or to vary it, s 73M) is made in writing in the Commissioner's approved form with the information and documents required, and further information is supplied within the period in any notice (at least 14 days). A person must not give information or a document in or connected with an application knowing it is false or misleading in a material particular (s 73D; civil penalty up to 10,000 penalty units for a serious contravention by an NDIS provider, otherwise 120; Criminal Code Part 7.4 offences also apply). A misleading application is also a ground to suspend or revoke registration (ss 73N, 73P).","evidence":["Copy of the lodged application and supporting documents with sign-off by an authorised officer","Evidence file supporting each statement (key personnel declarations, policies, insurance)","Responses to Commissioner requests for further information with dates"],"common_gaps":["Key personnel omitted from the application","Policies submitted that the provider does not actually operate"],"reviewer_question":"Show me copy of the lodged application and supporting documents with sign-off by an authorised officer, and tell me who owns it and when it was last reviewed.","answer":"For s73C-73D 73C and 73D Apply in the approved form and give, the evidence to bring is: Copy of the lodged application and supporting documents with sign-off by an authorised officer; Evidence file supporting each statement (key personnel declarations, policies, insurance). Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73C-73D","instrument_clause":"ss 73C and 73D","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73c-73d/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73F-73J","domain":"Conditions of registration (Rules Part 4, Act ss 73F to 73J)","requirement":"Registration is subject to the conditions in s 73F(2), any conditions the Commissioner imposes on the certificate (s 73G, for example audit type and timing or limits on supports) and conditions in the NDIS rules (s 73H, Rules Part 4). The statutory conditions are: comply with applicable Commonwealth, State and Territory law; the NDIS Code of Conduct; the applicable NDIS Practice Standards; record-keeping rules under s 73Q; the complaints system under s 73W and complaints rules under s 73X; the incident management system under s 73Y and reportable incident rules under s 73Z; and give the Commissioner information or documents on request within the period stated (at least 14 days, shorter where there is a risk of serious harm). Breaching a condition is a civil penalty provision (s 73J: up to 10,000 penalty units for a serious contravention, otherwise 250).","evidence":["Compliance register listing every statutory, Commissioner-imposed and rule-based condition with an owner","Certificate of registration with its conditions","Log of Commissioner information requests and responses within the stated period"],"common_gaps":["Conditions imposed on the certificate not known to operational managers","Information requests answered late or incompletely"],"reviewer_question":"Show me compliance register listing every statutory, Commissioner-imposed and rule-based condition with an owner, and tell me who owns it and when it was last reviewed.","answer":"For s73F-73J 73F, 73G, 73H and 73J Comply with every condition, the evidence to bring is: Compliance register listing every statutory, Commissioner-imposed and rule-based condition with an owner; Certificate of registration with its conditions. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73F-73J","instrument_clause":"ss 73F, 73G, 73H and 73J","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73f-73j/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73K","domain":"Registered provider duties in the NDIS Act (ss 73K to 73ZNA)","requirement":"Registration continues past its expiry date only if the provider applies for registration under s 73C within the 6 months before the day it would cease; it then continues until the Commissioner decides the application. A provider that misses the window loses registration on the expiry date.","evidence":["Renewal application lodged within 6 months of expiry, with the portal submission date","Audit booked in time for the renewal assessment"],"common_gaps":["Renewal lodged after expiry","Renewal audit not completed so the application stalls"],"reviewer_question":"Show me renewal application lodged within 6 months of expiry, with the portal submission date, and tell me who owns it and when it was last reviewed.","answer":"For s73K Apply for renewal within 6 months before registration expires, the evidence to bring is: Renewal application lodged within 6 months of expiry, with the portal submission date; Audit booked in time for the renewal assessment. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73K","instrument_clause":"s 73K","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73k/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73Q-73R","domain":"Registered provider duties in the NDIS Act (ss 73K to 73ZNA)","requirement":"A registered provider keeps records of the kind, for the period and in the form the NDIS rules prescribe (s 73Q; for example Part 3 of the worker screening rules and the incident, complaints and restrictive practice rules), and a former registered provider keeps them for 3 years after ceasing to be registered (s 73R, civil penalty 60 penalty units). From 27 August 2026 every NDIS provider keeps records of a prescribed kind relating to claims for NDIS amounts and the supports claimed for, for 7 years from the claim or any shorter period the rules prescribe (s 45B, civil penalty 120 penalty units).","evidence":["Records retention schedule mapping each NDIS rule to the record kind and period","Archive arrangements for records if the business closes or registration ends","Claim records (service agreements, delivery notes, invoices) retained for 7 years"],"common_gaps":["Records destroyed on closure of the business","Delivery records not linked to claims"],"reviewer_question":"Show me records retention schedule mapping each NDIS rule to the record kind and period, and tell me who owns it and when it was last reviewed.","answer":"For s73Q-73R 73Q and 73R and s 45B Keep prescribed records, including, the evidence to bring is: Records retention schedule mapping each NDIS rule to the record kind and period; Archive arrangements for records if the business closes or registration ends. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73Q-73R","instrument_clause":"ss 73Q and 73R and s 45B","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73q-73r/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73W","domain":"Registered provider duties in the NDIS Act (ss 73K to 73ZNA)","requirement":"A registered provider implements and maintains a complaints management and resolution system that is appropriate to its size and the classes of supports it provides, acknowledges the role of advocates, including independent advocates, and other representatives, cooperates with and facilitates their involvement for people who want independent support in the process, and meets the NDIS (Complaints Management and Resolution) Rules 2018.","evidence":["Complaints policy and procedure recognising advocates and representatives","Complaints register with outcomes","Records of advocate involvement facilitated at the complainant's request"],"common_gaps":["Advocates refused access to complaint meetings","Complaints system not scaled to multi-site operations"],"reviewer_question":"Show me complaints policy and procedure recognising advocates and representatives, and tell me who owns it and when it was last reviewed.","answer":"For s73W Implement and maintain a complaints management and resolution system, the evidence to bring is: Complaints policy and procedure recognising advocates and representatives. It sits under Registered provider duties in the NDIS Act (ss 73K to 73ZNA) and the instrument's own clause is s 73W. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73W","instrument_clause":"s 73W","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73w/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73Y-73Z","domain":"Registered provider duties in the NDIS Act (ss 73K to 73ZNA)","requirement":"A registered provider implements and maintains an incident management system appropriate to its size and supports and meeting the NDIS (Incident Management and Reportable Incidents) Rules 2018, and notifies and manages reportable incidents as those rules prescribe. Reportable incidents are the death of, serious injury to, abuse or neglect of, unlawful sexual or physical contact with or assault of a person with disability, sexual misconduct against or in the presence of them (including grooming), and use of a restrictive practice other than in accordance with a State or Territory authorisation. The Commissioner may require the provider to inform people of their right to an advocate, and to fund an independent investigation and give the report to the Commissioner.","evidence":["Incident management system documents and incident register","Reportable incident notifications with timestamps against the rule timeframes","Independent investigation reports where required by the Commissioner"],"common_gaps":["Unauthorised restrictive practices not recognised as reportable","Late notifications"],"reviewer_question":"Show me incident management system documents and incident register, and tell me who owns it and when it was last reviewed.","answer":"For s73Y-73Z 73Y and 73Z Incident management system and reportable incident notification, the evidence to bring is: Incident management system documents and incident register. It sits under Registered provider duties in the NDIS Act (ss 73K to 73ZNA) and the instrument's own clause is ss 73Y and 73Z. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73Y-73Z","instrument_clause":"ss 73Y and 73Z","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73y-73z/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73ZBA-73ZC","domain":"Registered provider duties in the NDIS Act (ss 73K to 73ZNA)","requirement":"Workers, contractors, participants, nominees, families, carers and advocates who report a suspected contravention of the NDIS Act to the Commissioner, the Agency or the provider's key personnel or partners on reasonable grounds are protected (s 73ZA). No one may disclose the discloser's identity or information likely to identify them except as s 73ZBA(2) authorises (Commissioner, Agency, police, legal advice, consent, serious threat to safety, courts, complaint handling) (civil penalty 30 penalty units), and no one may cause or threaten detriment because of a protected disclosure (s 73ZC; civil penalty up to 10,000 penalty units for a serious contravention by an NDIS provider, otherwise 500), with a right to compensation (s 73ZD).","evidence":["Whistleblower policy covering who is protected, recipients, confidentiality and anti-victimisation","Restricted-access register of protected disclosures","Training for key personnel who may receive disclosures"],"common_gaps":["Discloser identity shared with the manager being complained about","Roster cuts or contract termination after a worker reports to the Commission"],"reviewer_question":"Show me whistleblower policy covering who is protected, recipients, confidentiality and anti-victimisation, and tell me who owns it and when it was last reviewed.","answer":"For s73ZBA-73ZC 73ZBA and 73ZC Protect disclosers: keep identity confidential and prohibit, the evidence to bring is: Whistleblower policy covering who is protected, recipients, confidentiality and anti-victimisation; Restricted-access register of protected disclosures. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73ZBA-73ZC","instrument_clause":"ss 73ZBA and 73ZC","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73zba-73zc/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s73ZNA","domain":"Registered provider duties in the NDIS Act (ss 73K to 73ZNA)","requirement":"A person against whom a banning order is made must not breach it or its conditions (fault-based offence up to 5 years' imprisonment or 300 penalty units, strict liability offence and civil penalty). Providers check the NDIS Provider Register's banning order list before engaging workers, key personnel and contractors, since employing a banned person in breach of an order and failing the Code of Conduct and screening duties exposes the provider; approved quality auditors can be required not to engage banned persons (s 73U(5A)). Since 9 April 2026 banning orders can also be made against applicants for registration, approved quality auditors and the other persons listed in s 73ZN(2C) (Integrity and Safeguarding Act 2026).","evidence":["Banning order register check recorded for every new worker, key person and contractor","Periodic re-check of the existing workforce against the register"],"common_gaps":["Checks only at hiring, never repeated","Contractors and consultants not checked"],"reviewer_question":"Show me banning order register check recorded for every new worker, key person and contractor, and tell me who owns it and when it was last reviewed.","answer":"For s73ZNA and s 73U(5A) Comply with banning orders and do not, the evidence to bring is: Banning order register check recorded for every new worker, key person and contractor; Periodic re-check of the existing workforce against the register. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s73ZNA","instrument_clause":"s 73ZNA and s 73U(5A)","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s73zna/"},{"framework":"ndisreg","framework_name":"Australia NDIS Provider Registration Rules 2018","clause":"s9-10","domain":"Becoming registered (Rules Part 3, Act ss 73C to 73E)","requirement":"The Commissioner registers only an applicant who is suitable, and whose key personnel are suitable, having regard to prior registration, any banning order, convictions for indictable offences (subject to the spent convictions scheme), insolvency or Chapter 5 administration, adverse findings or enforcement action by government regulators (including disability, aged care and child regulators, ASIC, ACNC, ACCC, APRA, the Australian Crime Commission, AUSTRAC and WHS regulators), findings or pending proceedings about fraud, misrepresentation or dishonesty, and disqualification from managing corporations. Suitability must continue: loss of it is a ground to suspend or revoke (ss 73N(1)(d) and (e), 73P(1)(d) and (e)). The provider therefore screens its key personnel against these matters before appointment and keeps the declarations current.","evidence":["Key personnel register with suitability declarations covering each s 10(2) matter","Checks of the NDIS banning order register, ASIC banned and disqualified register and insolvency index for each key person","Board procedure for assessing suitability before a new key personnel appointment"],"common_gaps":["New directors appointed without suitability checks","Declarations collected once at initial registration and never refreshed"],"reviewer_question":"Show me key personnel register with suitability declarations covering each s 10(2) matter, and tell me who owns it and when it was last reviewed.","answer":"For s9-10 9 and 10 Provider and key personnel suitability maintained, the evidence to bring is: Key personnel register with suitability declarations covering each s 10(2) matter; Checks of the NDIS banning order register, ASIC banned and disqualified register and insolvency index for each key person. Keep every record dated, signed and current, and name who owns it.","source":{"clause":"s9-10","instrument_clause":"Rules ss 9 and 10","framework_page":"https://compliance.theartofservice.com/frameworks/australia-ndis-provider-registration-rules-2018","instrument":"NDIS (Provider Registration and Practice Standards) Rules 2018"},"page":"/standards/ndisreg/s9-10/"}]}