Get the kit — A$297

Registration

Self-managed vs Registered Provider (2026 Walkthrough)

In 2026, NDIS participants who self-manage their funding can purchase supports from unregistered providers, while registered providers must meet the NDIS Practice Standards and undergo quality audits by approved auditors. Mandatory registration applies to any provider delivering higher-risk supports — including SIL — regardless of how a participant manages their plan. Strengthened 2026 framework rules tighten incident management and worker screening obligations for all registered providers.

Why This Distinction Matters More in 2026

The question of whether a disability support organisation must be registered — and what that registration demands — has become far more consequential since the NDIS Commission released its strengthened framework for provider obligations. For Supported Independent Living (SIL) providers in particular, the answer is clear: you must be registered, and the obligations that come with registration are substantial. But for many support types, the rules are more nuanced. This walkthrough explains what self-managed funding means for providers, who must register regardless, and what the 2026 Practice Standards actually require once you are registered.

Step 1 — Understand What "Self-Managed" Actually Means

Self-management refers to how a participant chooses to manage their NDIS plan funding. A self-managing participant takes direct control of their budget, pays providers directly, and can engage either registered or unregistered providers for most support types. This flexibility is a core feature of the NDIS, designed to give participants genuine choice and control.

What self-management does not mean is that providers are exempt from the NDIS Code of Conduct. Every person or organisation that delivers NDIS supports — registered or not — must comply with the NDIS Code of Conduct. Breaches can result in Commission investigations, banning orders, and civil penalties regardless of whether a provider is registered.

Key takeaways for providers at this step:

  • Unregistered providers can only be engaged by self-managing or plan-managed participants (not NDIA-managed participants).
  • All providers, registered or not, are bound by the Code of Conduct.
  • Worker screening requirements under state and territory legislation apply to workers delivering supports to people with disability, irrespective of provider registration status in many jurisdictions.

Step 2 — Determine Whether Your Organisation Must Register

Registration is mandatory — not optional — for providers delivering certain higher-risk supports. The NDIS Commission specifies registration groups, and any provider whose support activities fall within these groups must register. Attempting to deliver these supports without registration exposes a provider to serious enforcement action.

Supports that require provider registration include:

  • Supported Independent Living (SIL)
  • Specialist Disability Accommodation (SDA)
  • Early Childhood Supports
  • Behaviour Support (including any use of regulated restrictive practices)
  • Plan Management
  • Support Coordination (when delivered to certain participants)

If your organisation delivers SIL, there is no pathway to operate legitimately as an unregistered provider. Self-managed participants living in SIL arrangements cannot direct-engage an unregistered SIL provider under current NDIS rules.

Step 3 — Understand the Registration Pathway

Registration with the NDIS Commission is not a simple tick-box process. It involves a structured application, followed by a quality audit conducted by an approved quality auditor — either a certification audit (for larger or higher-risk providers) or a verification audit (for lower-risk support types).

  1. Submit an application via the NDIS Commission portal, selecting the registration groups that match your support delivery.
  2. Engage an approved quality auditor from the NDIS Commission's list of approved auditing bodies.
  3. Undergo the audit — the auditor assesses your organisation against the applicable NDIS Practice Standards modules.
  4. Receive the audit report — the auditor submits findings to the Commission.
  5. Commission decision — the Commission grants, refuses, or grants with conditions based on the audit outcome.
  6. Renew — registration is not permanent; providers must re-audit on a schedule aligned to their registration renewal period.

Step 4 — Know What the 2026 Practice Standards Require

The NDIS Practice Standards set the quality benchmark every registered provider must meet. They are organised into a core module applicable to all registered providers, plus supplementary modules that apply based on the registration groups held. For SIL providers, the most relevant modules include the core module and the high intensity daily personal activities module.

Core Module Obligations

The core module addresses fundamental expectations across all registered providers:

  • Rights and Responsibilities — participants must be informed of their rights; support must be person-centred and free from abuse, neglect, and exploitation.
  • Governance and Operational Management — policies, procedures, and management structures must be documented, implemented, and regularly reviewed.
  • The Provision of Supports — supports must be delivered safely, competently, and in accordance with each participant's support plan and preferences.
  • Support Planning — individualised support plans must be developed collaboratively, reviewed regularly, and reflect participant goals.

Strengthened Framework Areas in 2026

The NDIS Commission has progressively strengthened expectations in several areas that providers should treat as elevated priority:

  • Incident Management — providers must have a documented incident management system, report certain incidents to the Commission within mandated timeframes, and demonstrate that learnings are embedded into practice. Serious incidents — including any involving death, serious injury, abuse, or neglect — trigger mandatory notification obligations.
  • Complaints Management — an accessible, documented complaints system is required. Participants must be told how to make a complaint and must not face any negative consequence for doing so.
  • Restrictive Practices — only behaviour support practitioners registered with the Commission may write behaviour support plans that authorise regulated restrictive practices. Providers must have state or territory authorisation before implementing any regulated restrictive practice, and must report their use to the Commission. Unauthorised use is a serious breach.
  • Worker Screening — all registered providers must ensure workers in risk-assessed roles hold a current NDIS Worker Screening clearance. This is a non-negotiable condition of registration.

Step 5 — Compare Operating Obligations Side by Side

Obligation Unregistered Provider Registered Provider
NDIS Code of Conduct Yes — mandatory for all Yes — mandatory for all
NDIS Practice Standards audit No Yes — verified by approved auditor
Worker Screening clearance Varies by state/territory legislation Yes — mandatory for risk-assessed roles
Incident reporting to Commission No mandatory obligation Yes — mandatory for reportable incidents
Complaints system requirement No formal requirement Yes — documented system required
Can deliver SIL supports No Yes — if registered in SIL group
Can be engaged by self-managed participant Yes — for most support types Yes — for all support types

Step 6 — Prepare for Your Audit

Approved quality auditors assess evidence of your policies, procedures, and practice against the Practice Standards. Common non-conformances found during audits include:

  • Incident management policies that are documented but demonstrably not followed in practice
  • Support plans that are generic rather than genuinely individualised
  • Worker screening checks not completed prior to workers commencing in risk-assessed roles
  • Restrictive practice authorisation paperwork not obtained before implementation
  • Complaints registers that exist on paper but contain no entries — auditors treat this as a sign the system is not accessible to participants
  • Governance documents not reviewed or updated within the period required by the provider's own policies

The audit is not just a document review — auditors typically conduct interviews with workers, participants, and management, and may observe support delivery. Your team needs to be able to describe how policies operate in day-to-day practice, not just point to a folder of documents.

Practical Preparation for SIL Providers

For SIL providers preparing for their 2026 registration renewal or initial registration, the groundwork involves building a policy and procedure library that covers every Practice Standards element, establishing operational systems for incident reporting, complaints, and worker screening, and ensuring all documentation is current and accessible to auditors. Providers who want a head start can draw on the 136-document SIL compliance kit available at ndiscompliant.com.au, which is structured around the NDIS Practice Standards modules applicable to SIL registration.

Registration is not a one-time achievement. The Commission monitors registered providers continuously and can conduct compliance audits at any time. Maintaining registration means embedding the Practice Standards into daily operations — not filing documents and forgetting them until the next renewal cycle.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.

Frequently asked questions

Can a SIL provider operate without being registered with the NDIS Commission?

No. SIL is a higher-risk support that requires provider registration with the NDIS Commission. There is no lawful pathway for an unregistered provider to deliver SIL, even if a participant is self-managing their plan. Attempting to do so exposes the provider to significant enforcement action, including civil penalties.

Does a self-managing NDIS participant have to use registered providers?

Not for most support types. Self-managing participants can engage unregistered providers for the majority of supports. However, some support types — including SIL, SDA, plan management, and behaviour support involving restrictive practices — require providers to be registered regardless of how the participant manages their plan.

What is the difference between a verification audit and a certification audit?

A verification audit applies to lower-risk registration groups and involves a desktop review of policies and documentation. A certification audit applies to higher-risk groups, including SIL, and involves a more comprehensive on-site assessment including interviews with workers, management, and participants, plus observation of practice.

Do unregistered providers have to follow the NDIS Code of Conduct?

Yes. The NDIS Code of Conduct applies to all providers and workers who deliver NDIS supports, whether registered or unregistered. Breaches can result in NDIS Commission investigations, enforceable undertakings, or banning orders regardless of registration status.

When must a registered provider report an incident to the NDIS Commission?

Registered providers must notify the NDIS Commission of reportable incidents — which include death, serious injury, abuse, neglect, and certain other events — within the timeframes set out in the NDIS (Incident Management and Reportable Incidents) Rules. Initial notifications are generally required within a short period of the provider becoming aware of the incident, with follow-up reports required thereafter.

What happens if a registered provider uses a restrictive practice without proper authorisation?

Using a regulated restrictive practice without the required state or territory authorisation is a serious breach of the NDIS Practice Standards and the provider's registration conditions. The Commission can take compliance action including issuing compliance notices, imposing conditions on registration, or commencing civil penalty proceedings.

Keep reading

Free: the SIL Readiness Pack

A checklist and a sample policy page, sent as a download. No sequence.