The Securing the NDIS for Future Generations Act 2026: what it means for providers, plan managers and support coordinators

Written by the Provider360 team. Provider360 is Australia’s leading done-for-you NDIS provider registration and compliance solution, supporting 3,000+ disability service providers nationally. We track laws like this one from Bill to Act because their machinery lands on a provider’s desk long before the headlines catch up.

Act status as at 21 August 2026: passed both Houses on 19 August 2026 and received Royal Assent on 20 August 2026 as Act No. 66 of 2026. It is law. Its formal provisions and transitional rule-making power commenced on assent; the first operative changes for providers start seven days after assent, on 27 August 2026.

What is the Securing the NDIS for Future Generations Act 2026?

The Securing the NDIS for Future Generations Act 2026 is a roughly 150-page amending Act, in five schedules, that changes the National Disability Insurance Scheme Act 2013 across access and planning, fraud and enforcement, pricing governance, new-framework planning, and transitional rules. It gives effect to changes announced in the 2026-27 Budget and implements recommendations from the NDIS Review, the Disability Royal Commission and the Provider and Worker Registration Taskforce.

The Explanatory Memorandum names two problems it is built to fix. One is cost: the Agency (the NDIA) states it “does not have the necessary powers to regulate and monitor the payment of over $50 billion per year”. The other is growth: in January 2026, National Cabinet agreed to bring the Scheme’s annual cost growth to “5 to 6 per cent, or lower”. For provider businesses, that matters: a law written to slow spending reaches into the funding pools you bill against.

If this feels familiar, it should. This is the legislative step behind the announcement we covered in April: Minister Butler’s 22 April 2026 four-pillar reform speech named the pillars, and this Act is the machinery that writes them into the NDIS Act.

Did the Securing the NDIS for Future Generations Act pass, and what happened in the Senate?

Yes. The Bill was introduced to the House on 14 May 2026 and referred to a Senate committee the same day. After inquiry hearings through June, the committee tabled an interim report on 23 June 2026, and the House agreed 30 amendments on 1 July (12 crossbench, 18 government) before passing the Bill at its third reading on 2 July 2026.

Around the interim report, the government accepted amendments in a deal with the Greens, including limits on the ministerial funding-reduction power and greater transparency around automated decisions. Submissions closed on 10 July 2026 (“a large volume of material”), and further hearings ran on 30–31 July and 6 August.

The Senate Community Affairs Legislation Committee handed down its final report on 14 August 2026 and recommended the Bill be passed. The Senate took it up from 12 August, agreed to the second reading on 18 August, added further government amendments in the Committee of the Whole, and passed the Bill the same day. The House accepted the Senate’s amendments on 19 August 2026, the day the Bill finally passed both Houses, and Royal Assent followed on 20 August 2026, making it Act No. 66 of 2026.

Sector commentary written before passage describes an older text, and the difference is not cosmetic: the Act as passed runs to roughly 150 pages against the third reading’s 114, and it carries five Parts that did not exist when the House finished with it. This page works from the Act as passed by both Houses.

What does the Act say?

This is what the Act does, cited to the text as passed by both Houses. It is law, but it commences in stages, so each item carries the date it starts. One distinction matters more than any other, because it is where most coverage goes wrong:

• What is in the Act: the machinery set out here, the definitions, the deed regime, the pricing power, the record and claim rules.
• Announced programme intent, not in the Act: the operational rollout described separately (panel dates, commissioning models, the registration-expansion schedule). The Act creates the powers; the dates and models ride on rules, proclamations, and procurement that follow.

Who is an “NDIS provider” (s10C). The Act defines you as an NDIS provider if you receive NDIS funding or amounts other than as a participant, and rules can extend that definition further. The Explanatory Memorandum says this “will enable a proportionate model for mandatory registration of NDIS providers”, per the Registration Taskforce. The definition sits in the Act and takes effect seven days after assent, on 27 August 2026. The rollout of expanded mandatory registration is announced intent.

Who sets prices (s45C). The Act makes the Minister the decision-maker on NDIS prices, on the Agency’s advice following its Annual Pricing Review, implementing NDIS Review Action 11.3 that “the Australian Government, not the Board of the Agency, should make the final determination on prices”. Maximum amounts are set by legislative instrument; the Agency must not pay above them, and a provider must not charge above them where a determination applies. This part commences on 27 August 2026, and the Agency says there are no immediate changes to NDIS pricing.

Caps can differ by provider registration status among other factors, with the Agency’s advice tabled in Parliament within 5 sitting days. They bind where funding is plan-managed or Agency-managed, leaving self-managed arrangements outside the direct charge cap. That power sits behind the annual pricing document we broke down in the NDIS Pricing Schedule 2026-27: the pricing review feeds a Minister-made instrument.

Support determinations (s34A). The Act lets the Minister, by legislative instrument, reduce funding by a percentage for two support groups only: assistance with social, economic and community participation; and improved daily living skills. A determination can take effect even where the funding for reasonable and necessary supports ends up below their cost. This part commences on 1 October 2026. For a provider business, that is a demand-side lever on two of the pools you bill against.

A second regulator, records and claims. From 27 August 2026 the Act gives the Agency its own enforcement arm: inspectors and investigators, compliance notices and enforceable undertakings under the Regulatory Powers Act, and new civil penalties. Providers must keep claim-related records for 7 years (120 penalty units for a failure, roughly $43,680 at $364 a unit), and from 1 December 2026 the claim window shrinks from 2 years to 90 days after a support is delivered.

What the Senate added: kickbacks, fraud and whistleblower protections. Offering an inducement or kickback to win or keep business becomes an offence three months after assent; new fraud offences, including intentionally destroying records to defraud the Scheme or disrupt an audit, start on 27 August 2026; and strengthened whistleblower protections start on 1 July 2027.

Providers are named in the Act’s own review clause (s4). A House-added provision requires an independent review of the amendments that must consider “the viability and sustainability of the provider market” and “service delivery in thin markets”. Your commercial survival is written into the Act’s own success test.

Who does it affect, and how?

The Act hits three kinds of provider business unequally, but the impacts stack rather than split: under the s10C definition, plan managers and support coordinators count as NDIS providers too. Read the first section as the common floor for every business, and the next two as the extra layers those models carry on top.

What changes for NDIS providers?

If you run a registered or unregistered service delivering NDIS supports:

• The regulatory net widens. From 27 August 2026 the s10C definition brings more businesses inside “NDIS provider”, and rules can extend it to non-NDIS disability providers. The expansion timetable, high-risk supports from 1 July 2027 and all supports in scope by December 2030, is the government’s announced intent, not a date in this Act.
• You answer to two regulators, not one. Today’s Commission-facing experience becomes Commission plus Agency, with the Agency holding its own penalties and inspectors.
• Claims discipline becomes cash-flow-critical. A 90-day claim window from 1 December 2026 and 7-year records (120 penalty units for a records failure) turn back-office hygiene into revenue protection. Six months after assent, the Act adds debt-recovery safeguards on the other side of that ledger: notice before recovery, 14 days for a provider to respond, and a low-value waiver threshold lifted from $200 to $500.
• Prices can become charge caps. Under s45C, exceeding a determined maximum is a breach by the provider, not just a payment ceiling.

Prepare: map your service mix against the two support groups exposed to s34A; sanity-check your claiming and record-keeping against a 90-day window and 7-year retention; if you are unregistered, watch the provider-definition rules, because the registration expansion would arrive through them.

What changes for plan managers?

This is the segment the Act hits hardest, and the part with no fixed start date yet: the plan-management deed regime commences by Proclamation, and no later than 24 months after the 20 August 2026 assent. Once it commences, if you are a registered plan management provider:

• Your registration depends on a deed of arrangement with the Agency (s73EA). The deed sets integrity and governance standards, key-personnel standards, claims handling including identity verification and verification that supports were actually provided, ICT standards, and related-party conflict management.
• Managing funding without a compliant deed carries a civil penalty of 250 penalty units (roughly $91,000 at $364 per unit).
• You have to choose one side of the business. A new condition bars a registered plan management provider from providing “any supports or services other than plan management under the NDIS”, and cross-registration is blocked both ways (s73E(2B)). The Explanatory Memorandum frames this as ending “the extensive conflicts of interest that currently exist in the plan management market”. A dual-role business has to divest one arm.
• A public register of registered plan management providers is kept by the Agency, and existing registrations can be revoked where no deed is in place, with 6-month grace periods for nominated plan managers and for the no-other-services condition.

Watch and prepare: the government’s announced model, a panel from 1 October 2027 with a six-month transition, is programme intent, not Act text. The Department’s own summary of the final amendments puts it plainly: the Act “clarifies the definition and registration requirements for plan management providers, enabling the Government to commission a panel of providers”. The Act builds the machinery; the panel is a separate commissioning decision. If you or a related party deliver other supports, start scenario-planning the either/or now, and review your conflict-of-interest and claims-verification systems against the standards the deed sets.

What changes for support coordinators?

Here the honest answer is the important one. Nothing in this Act restructures support coordination as a service. We read the enacted text: the words “support coordination”, “commissioning”, “panel” and “merit-based” do not appear in it. The change support coordinators keep hearing about is the announced commissioning model: from 1 July 2028, the Agency would directly commission support-coordination and connection providers through a merit-based process, rather than fund coordination inside participant plans. That is programme intent, with consultation flagged for the second half of 2026. It is not a clause of this Act.

What the Act does do to support-coordination economics is indirect but nearer-term, because funded support coordination lives inside participant plans, and the Act tightens the plan machinery around it:

• Plan renewals with no rollover of unspent funds from 1 February 2027, so unused coordination hours do not carry forward.
• Support determinations (s34A) from 1 October 2026, resetting the social/community-participation and daily-living budgets that coordination hours are often drawn against.
• Tighter unscheduled reassessments and plan suspension where a participant cannot be contacted, from 27 August 2026 and 1 October 2026 respectively, both of which interrupt funded coordination revenue.

Watch and prepare: engage with the second-half-2026 commissioning consultation when it opens, and model what plan renewals without rollover would do to your funded coordination hours. This is a “watch the consultation” moment, not a compliance deadline.

When do the changes start?

This Act runs on two timelines, and mixing them up is the most common mistake on this topic: how it got through Parliament, and when each part of it commences.

Part 1: how the Act got through Parliament

Part 2: when each part of the Act commences

Two rows carry the Act’s own relative wording rather than a calendar date, because that is how the Act fixes them: as a number of months counted from the 20 August 2026 assent.

How big is this, really?

The scale is not abstract. The Agency says it cannot currently police over $50 billion a year in payments, and the Scheme cost $50.2 billion in the twelve months to March 2026. Thirty amendments were agreed in a single House sitting, and further government amendments followed in the Senate.

The claim window compresses from two years to 90 days, and records have to be kept for seven years under a 120-penalty-unit threat. Providers are not a footnote: the Act’s own review clause names “the viability and sustainability of the provider market” and “thin markets” as measures the reforms must be judged against.

Here is what we see from our own desk. Across the 3,000+ providers we have taken through registration and audit, our pre-audit reviews catch an average of 16 gaps per provider, and the most common gap is the distance between what a provider says it does and what it can actually evidence. A law that shortens claim windows, lengthens record retention and hands the Agency its own penalties is a law that puts a price on exactly that gap: evidence that is not ready in time would cost you the claim, and evidence you cannot produce later would cost you a penalty.

It also sharpens an honest point: no one can promise a registration outcome, because the NDIS Commission decides every registration. In a tightening enforcement environment, look for a money-back guarantee on the work, not a success-rate claim.