2026-27 NDIS Regulatory Priorities: What Providers Need to Know
The Commission's governance priority shifts the leadership question from 'Do we have the right documents?' to 'Can we show that our systems prevent, identify and respond to harm in practice?'
The short answer
The NDIS Quality and Safeguards Commission's 2026-27 Regulatory Priorities mean that providers operating in high-risk settings should be ready to demonstrate more than policy coverage. Leaders need reliable visibility of whether workforce capability, clinical procedures, complaints and incident systems are working together to identify, escalate and manage preventable harm.
For provider leaders, the practical response is to test how governance operates across the organisation: what executives believe is happening, what managers can evidence and what frontline workers understand and do.
What are the 2026-27 NDIS regulatory priorities?
The Commission has identified three priorities for 2026-27:
1. Providers implementing regulated restrictive practices without being registered to do so.
2. Exploitative, coercive and dishonest behaviour that puts participants at risk and undermines the Scheme.
3. Governance failures affecting the quality and safety of supports in high-risk settings.
The third priority is especially relevant to disability providers delivering medication support, supported independent living, complex healthcare or high intensity daily personal activities. The Commission says it will target systemic governance and workforce capability failures that allow preventable risks and harms to persist.
What does Priority 3 mean for NDIS providers?
Priority 3 does not introduce a single new clinical governance checklist. It signals where the regulator intends to focus its attention. The Commission specifically identifies staff training, policies and procedures, and complaints and incident handling mechanisms as systems that should identify, escalate and manage preventable harm.
In high-risk services, this has a clear clinical governance dimension. Leaders need confidence that participant health risks are visible, workers are capable for the supports they deliver, current instructions reach the frontline, and incidents generate organisational learning rather than isolated corrective actions.
Five questions every provider leadership team should ask
1. Can we identify our highest clinical risks?
Leaders should be able to identify which services, participants and support activities carry the greatest potential for harm. This may include medication administration, dysphagia and mealtime support, enteral feeding, diabetes management, epilepsy support and other high intensity supports.
2. Can we demonstrate workforce capability, not only training completion?
Training records show that learning occurred. They do not, by themselves, demonstrate that a worker can perform a high-risk task safely for a particular participant. Providers should be able to show how practical competency is verified, participant-specific instruction is provided, workers are authorised and reassessment is managed.
3. Are participant plans current, specific and used in practice?
A care plan has limited value if it is generic, outdated, inaccessible or poorly understood. Leaders should know how plans are reviewed after changes in health, incidents, hospital admissions or clinical advice, and how updated instructions are communicated to the people delivering support.
4. Do incidents and complaints reach the right decision-makers?
Effective systems do more than record events. They support timely escalation, analysis of contributing factors, corrective action and follow-up. Executives need visibility of patterns, recurring risks and whether agreed improvements have actually been implemented.
5. Does our evidence tell one consistent story?
Policies, records and staff accounts should broadly align. If a policy describes one process, managers describe another and workers follow a third, the organisation has a governance gap even if the documentation appears complete.

What is Governance ?
Governance is how leaders direct, oversee and remain accountable for their organisation. It provides confidence that decisions, systems and workforce practices are working together to protect participants, manage risk and deliver safe, high-quality supports.
A Medecs practical 30-day clinical governance response
Provider leaders can use the following four-week review to establish an initial governance picture without attempting to overhaul every system at once.
| Week | Leadership Focus | Tangible Output |
| 1 | Map high-risk supports | A register of high-risk support activities, participants, locations and accountable leaders. |
| 2 | Sample the Evidence |
|
| 3 | Test Implementation | Short structured conversations with an executive, an operational manager and frontline workers to compare understanding with documented systems. |
| 4 | Set Priorities | A time-bound improvement register identifying the highest risks, responsible leaders, actions, evidence of completion and reporting dates. |
What evidence should leaders expect to see?
A useful executive evidence sample may include:
-
A clear clinical governance structure with named accountabilities and escalation pathways
-
A current register of participant clinical risks and high-risk supports
-
Participant-specific health or care plans with review dates and change controls
-
Training, practical competency verification, authorisation and reassessment records
-
Incident and complaint trends linked to corrective actions and quality improvement
-
Executive or board reporting that shows clinical risk, workforce capability and overdue actions
-
Evidence that workers understand current instructions and know when and how to escalate concerns
The most important leadership test
The central test is not whether each system exists in isolation. It is whether leadership, workforce capability and frontline clinical practice connect strongly enough to prevent harm.
A provider may have comprehensive policies and a high rate of course completion but still have limited assurance if competency is not verified, participant plans are outdated, incidents are reviewed individually without trend analysis, or executive reporting does not make clinical risks visible.
That is why governance should be examined through several sources: documents show what should happen, conversations show how people understand the system, and records show what occurred. Where these sources align, leaders have stronger assurance. Where they diverge, there is a practical improvement priority.
How an independent governance review can help
Internal reviews are valuable, but they can be constrained by familiarity with existing systems or by evidence being held across different teams. An independent governance capability assessment can help leaders establish an objective baseline, identify organisational strengths and gaps, and prioritise improvement according to risk.
Medecs' Governance and Workforce Capability Gap Audit applies a structured assessment methodology combining representative organisational evidence, governance conversations with executive, operational and frontline representatives, forty Governance Capability Statements and professional clinical and governance moderation. The outcome is an Executive Governance Report, a Governance Capability Index and a practical improvement roadmap. It is a governance capability assessment, not an NDIS compliance audit or pass-fail determination.
Your next step
Start with the five leadership questions above. If the answers rely mainly on policies, training attendance or informal assurance, consider a more structured examination of how governance is operating across leadership, management and frontline practice.
Need further guidance?
If you have questions about how this information applies to your organisation, workforce or participant supports, speak with the Medecs clinical team.