100x growth in NDIS enforcement

In 2019, the NDIS Quality and Safeguards Commission issued just 15 enforcement actions across all of Australia. By 2025, that number had exploded to 1,557. Enforcement activity grew more than 100 times in six years.

The 2026 trajectory is even steeper. In just the first five months, 924 actions have already been recorded, putting the year on track to exceed 2,200 by December.

Several factors converge. The Commission itself has matured, hiring more compliance officers, building better detection systems, and establishing clearer enforcement thresholds. The NDIS market has expanded rapidly, attracting some operators with weak governance. Political pressure has intensified through media investigations and parliamentary inquiries. And the Commission's data capability has improved, with cross-references to ABN, ASIC, and payment analytics now flagging suspicious patterns automatically.

Banning orders prevent individuals from providing any NDIS supports. They are the most serious personal sanction available. In 2019, just 2 banning orders were issued. In 2025, 356 people were banned. In the first five months of 2026, another 218 have been added.

The Commission uses banning orders when it identifies individuals who pose an unacceptable risk to participants: criminal conduct, financial exploitation, neglect of participants, or falsifying qualifications.

Actions are not distributed evenly. New South Wales accounts for 35% of all enforcement, Victoria 29%. Within those states, specific postcodes stand out dramatically. Postcode 2170 (Liverpool, NSW) has 61 enforcement actions alone. Postcode 3029 (Hoppers Crossing, VIC) has 58.

These hotspots tend to be outer suburban areas with high NDIS participant populations and large numbers of small, recently registered providers. Concentration follows market structure: areas with many new, small operators attract more compliance attention. Read the full geographic analysis.

For NDIS participants, the growth in enforcement is largely positive. It means the regulator is doing more to weed out unsafe or fraudulent providers. But it also creates uncertainty. A participant may discover that their current provider has received a compliance notice, which does not automatically mean the provider is unsafe.

Compliance notices are often issued for administrative failures (incomplete incident reporting, expired worker screening checks, documentation gaps) rather than direct harm to participants. The key distinction is between notices (process issues) and banning orders or revocations (serious safety concerns). Learn how to check your provider's compliance status.

If current trends continue, 2026 will be the biggest year for NDIS enforcement by a wide margin. The Commission has signalled that it expects to issue even more banning orders as it processes a backlog of investigations from 2024 and 2025. Proposed legislative changes may also give the Commission new powers around deregistration and financial penalties.