NDIS Consultants Can Now Be Banned:What Providers Need to Know

Summary 

The NDIS Quality and Safeguards Commission now has stronger powers to issue banning orders against NDIS consultants and auditors, not just providers and workers. 

The significance of these changes became very clear in 2026 when the NDIS Commission announced lifetime banning orders against an NDIS consultant and an auditor alleged to have been involved in registering more than 200 providers using false or misleading information. 

The Commission subsequently refused 195 provider registration applications and revoked the registrations of a further 40 providers linked to the pair. 

For NDIS providers, there is an important lesson: who you choose to support you through NDIS registration matters. 

A consultant should help you understand your obligations, identify genuine gaps and develop systems that work in practice. They should not simply provide documents or promise to “get you through” an NDIS audit. 

Ultimately, your organisation remains responsible for its registration and ongoing compliance. 

Key points

• The NDIS Commission’s banning powers have been expanded to specifically capture consultants and approved quality auditors. 

• Banning orders can restrict or permanently prohibit someone from undertaking specified NDIS-related activities. 

• The Commission has already used these powers, issuing its first lifetime bans against a consultant and auditor in 2026. 

• Providers associated with improper registration practices can face serious consequences – even where an external consultant has assisted with the process. 

• Be cautious of consultants offering guaranteed registration, guaranteed audit outcomes or “instant compliance” packages. 

• Your policies, procedures and self-assessment should reflect your organisation and the services you actually deliver. 

• A good consultant should build your organisation’s knowledge and capability, not create dependence on the consultant. 

• Providers should maintain appropriate independence between their consultant and their chosen Approved Quality Auditor. 

• Before engaging an NDIS consultant, providers should undertake some basic due diligence and understand exactly what the consultant will, and won’t, do. 

• The provider remains responsible for understanding and meeting its NDIS obligations. 

What has changed with NDIS banning orders? 

Banning orders are not new to the NDIS. 

What has changed is who the NDIS Commission can ban. 

Changes introduced through the National Disability Insurance Scheme Amendment (Integrity and Safeguarding) Act 2026 expanded the Commission’s powers to include people operating around the provider registration and compliance system, including approved quality auditors and consultants. 

Importantly, the legislation specifically captures services that enable or facilitate the provision of supports and services, including services involving assistance or advice about applications to become a registered NDIS provider. 

This is significant. 

Consultants may not directly deliver NDIS supports to participants, but the advice they provide can influence the systems, governance and practices of organisations that do. 

The regulatory framework now more clearly recognises that influence, and the accountability that comes with it. 

Why are NDIS consultants facing greater scrutiny? 

In 2026, the NDIS Commission announced lifetime banning orders against an NDIS consultant and an NDIS auditor who are alleged to have colluded to register more than 200 providers using false or misleading information. 

The consequences extended well beyond the two individuals involved. 

The Commission advised that it had: 

• Refused 195 provider registrations; and 

• Revoked a further 40 provider registrations linked to the pair. 

The Commission described registration as an important safeguard for preventing harm, protecting participants and driving quality across the NDIS. 

These were the first banning orders issued under the new powers specifically enabling the Commission to ban consultants and auditors. 

For providers and consultants alike, this sends a strong message. 

NDIS registration isn’t simply an administrative hurdle to get through. 

The registration and audit process exists to assess whether an organisation has appropriate systems and practices in place to safely and competently deliver the supports within its registration scope. 

What can an NDIS banning order actually do? 

A banning order can prohibit or restrict a person from undertaking specified activities within the NDIS. 

Depending on the order, restrictions can be broad. 

The legislation allows banning orders to apply generally or in a more limited way, to operate for a specified period or permanently, and to be subject to particular conditions. 

The NDIS Commission also publishes information about banning orders through its compliance and enforcement records. 

For consultants, the important change is that being outside the provider organisation itself does not necessarily put someone outside the reach of the regulator. 

What does this mean if you use an NDIS consultant? 

Using a consultant does not transfer responsibility for compliance away from the provider. 

A consultant can provide expertise, guidance and practical assistance, but your organisation still needs to understand the systems it is implementing and the information being submitted as part of its registration. 

This is particularly important when completing your NDIS registration application and Self-Assessment. 

If a consultant has written your entire Self-Assessment, provided a generic set of policies and organised everything required to get you through the audit, ask yourself: 

Could we explain this ourselves if the consultant wasn’t in the room? 

If the answer is no, there may be a problem. 

An auditor should be assessing your organisation’s systems and implementation, not your consultant’s ability to prepare documentation. 

What should a good NDIS consultant actually do? 

A good NDIS consultant should make your organisation more capable, not simply more compliant on paper. 

Depending on the scope of the engagement, they may help you: 

• Understand the NDIS Practice Standards and other requirements relevant to your services 

• Determine which registration groups and audit modules apply 

• Identify gaps in your existing systems 

• Develop or improve policies and procedures that reflect how your organisation actually operates 

• Prepare an individualised Self-Assessment 

• Undertake internal reviews or mock audits 

• Identify evidence you may need to demonstrate implementation 

• Build the knowledge and confidence of your leadership team and workers 

• Prepare you to engage independently with your chosen Approved Quality Auditor 

A consultant should also be there when you have questions. 

NDIS requirements can be complex, and good consulting support should give providers somewhere to turn when they need clarification or guidance. 

But there is an important distinction between supporting a provider and doing the provider’s job for them. 

Becoming a registered NDIS provider carries significant responsibilities. Providers are expected to understand the requirements that apply to them, not simply rely on a consultant to understand those requirements on their behalf. 

Red flags when choosing an NDIS consultant 

Not every consultant works in the same way. 

There are some warning signs providers should consider before engaging someone to assist with NDIS registration. 

“We guarantee you’ll become registered” 

No consultant can control the final registration decision made by the NDIS Commission. 

Similarly, a consultant should not guarantee the outcome of an independent audit. A consultant can help you become better prepared. They cannot legitimately guarantee what an auditor or regulator will decide. 

“We’ll have all your policies ready in 24 hours” 

Be cautious of promises to produce a complete suite of policies almost overnight. 

Templates can be a useful starting point, but your documentation should be customised to your organisation, services, structure, risks and specific actual practices. Genuine customisation takes time. A consultant needs to understand how your organisation operates before they can assist you with documentation that accurately reflects it. 

The NDIS Commission and auditors look for documentation that is relevant to the individual provider, not a generic template where little more than the organisation’s name has been changed. 

A large bundle of policies nobody understands is not a quality management system. 

Very few questions about your organisation 

A consultant developing individualised documentation should want to understand your business. 

What services do you provide? Who do you support? How many workers do you have? How do you manage incidents? What are your governance arrangements? What systems do you already use? 

If very little information is being gathered, it is worth asking how the resulting documentation can genuinely reflect your organisation. 

The consultant wants to control the entire registration and audit process 

Consultants can certainly guide providers through registration, but providers should remain actively involved and understand what is being submitted in their name. 

You should also be able to engage directly and independently with your Approved Quality Auditor. Appropriate independence within the registration and audit process matters. 

The focus is entirely on “passing the audit” 

An audit is an important milestone, but it isn’t the end goal. 

The real question is whether your systems work after the auditor leaves. 

Can workers find and understand your procedures? Are incidents being managed appropriately? Are risks actually reviewed? Are complaints used to improve services? Does governance oversight occur in practice? 

That is what sustainable compliance looks like. 

What should you ask before engaging an NDIS consultant? 

Providers don’t need to conduct an investigation before hiring a consultant, but some basic due diligence is sensible. 

Consider asking: 

What experience do you have with the NDIS Practice Standards and provider registration? 

How will you tailor your work to our organisation? 

What information will you need from us? 

Who will actually undertake the work? 

How will you help us understand and implement the systems you develop? 

What will we be responsible for during the registration process? 

Can we choose and communicate directly with our own Approved Quality Auditor? 

You can also search the NDIS Commission’s published compliance and enforcement actions when undertaking due diligence. 

Most importantly, pay attention to how the consultant talks about registration. 

If the conversation is primarily about shortcuts, guarantees and getting through the audit as quickly as possible, that should prompt further questions. 

Consultants should be prepared to have difficult conversations 

Good consulting isn’t always about telling a client what they want to hear. 

Sometimes the right advice is: 

You’re not ready yet. 

A policy may not be sufficiently implemented. Records may be incomplete. Workers may need further training. Governance systems may not yet be operating effectively. 

Those conversations can be uncomfortable, particularly when an audit date is approaching. 

But identifying a problem before an auditor or regulator does is part of the value of good compliance support. 

A consultant’s job should not be to hide gaps. 

It should be to help the provider find them, understand them and address them. 

The bigger lesson: compliance can’t simply be outsourced 

Perhaps the most important lesson from the new banning powers is that accountability is extending across the NDIS ecosystem. 

Providers have responsibilities. 

Auditors have responsibilities. 

And consultants now face clearer regulatory accountability for the role they play. For providers, however, the fundamental principle hasn’t changed: 

You remain responsible for your organisation. 

Your consultant can help you interpret requirements, develop systems, build capability and prepare for audit. 

But your leadership team needs to understand those systems. Your workers need to implement them. And your organisation needs to be able to demonstrate that what is written in its policies is actually happening in practice. That is why choosing the right consultant matters. 

Frequently Asked Questions 

Can an NDIS consultant be banned by the NDIS Commission? 

Yes. Changes to the NDIS Act in 2026 expanded the NDIS Commission’s banning-order powers to expressly cover people providing certain consultancy services, including assistance and advice relating to applications for NDIS provider registration. 

What is an NDIS banning order? 

A banning order is an enforcement action that can prohibit or restrict a person or organisation from undertaking specified activities within the NDIS. An order can be limited or broad and can operate for a specified period or permanently. 

Can an NDIS consultant guarantee registration? 

No. Providers should be very cautious of guarantees. The NDIS Commission makes provider registration decisions, and audits are undertaken by Approved Quality Auditors. A consultant can help a provider prepare and address gaps but cannot control those independent decisions. 

Can my NDIS consultant complete my registration application for me? 

A consultant can assist you to understand and prepare your registration application. However, the provider should remain actively involved, understand the information being provided and be satisfied that it accurately reflects the organisation. 

How do I check whether someone has an NDIS banning order? 

The NDIS Commission publishes compliance and enforcement actions, including current banning orders, on its website. Providers can search these records as part of their due diligence before engaging a consultant or other person working within their NDIS business. 

Choosing an NDIS consultant should be about more than getting through an audit 

At Engels Floyd Quality Consulting, we welcome the increased accountability being placed on consultants working within the NDIS. 

Providers should expect good advice from the people they engage, advice that is ethical, accurate, practical and focused on quality and safeguarding. 

Our role as consultants isn’t to do everything for a provider, and we happily state that. 

It is to give providers the knowledge, systems and confidence to understand their own responsibilities and implement them in practice, while of course remaining available when they need advice or support along the way. 

Because becoming an NDIS provider is a significant responsibility, and compliance needs to continue long after registration has been granted.