NDIS research

How long providers get to meet an audit notice.

How many days compliance notices on the NDIS Commission register give providers to engage an auditor and hand in the audit report.

Summary

How many notices we could read

We searched the published text of each notice for the words “required by” followed by a date, and treated that date as the deadline to engage an auditor. Where a second “by” date was given for the audit report, we read that too. The day counts run from the register’s “date effective from” to each deadline.

Audit typeNoticesDeadline date readDeadline date not readIn force at 4 Nov 2026
Mid-term audit1,6011,449152370
Condition audit1,082763319125
Total2,6832,212471495

Of the 471 notices where we could not read a date, 310 are condition audit notices that set the deadline relative to another event (an audit to start “three months after service delivery has commenced”). 160 state no deadline date in the text that we could find (this includes one notice with no effective date in the register). Nearly all of the 152 mid-term notices we could not read concern an audit to start within 18 months of registration starting.

The unread notices are not spread evenly. Of the 1,050 audit notices dated 2025, we could read 580. Of the 1,632 dated 2026, we could read all 1,632. So the figures below say more about 2026 notices than 2025 ones.

Days to engage an auditor

The first deadline asks the provider to engage an approved quality auditor to complete the audit. The table shows how many days that deadline falls after the notice date. The median is 21 days for all 2,212 notices.

Days from notice dateMid-termConditionTotal
154300430
217744001,174
222440244
230343343
2502020
107101
Total1,4497632,212

The same few gaps repeat across hundreds of notices, which suggests the deadlines were set in batches. We have not tested that.

Days to hand in the audit report

1,968 of the 2,212 notices also give a date by which the provider must send the completed audit report to the Commission. The other 244 state only the first deadline, and all are mid-term notices. The median report gap is 90 days. The report date falls 65 to 81 days after the first deadline, with a median of 69 days.

Days from notice dateMid-termConditionTotal
890343343
907742711,045
924300430
1020149149
184101
Total1,2057631,968

Still in force

We counted a notice as in force if it has no end date, or an end date after 4 November 2026. On that basis 495 of the 2,683 audit notices are in force: 370 mid-term and 125 condition. In force means the notice has not been marked as ended. It does not tell you whether the provider met the deadline.

What this does not tell you

Source and licence

Source: NDIS Quality and Safeguards Commission, compliance and enforcement actions register, retrieved 4 November 2026. © Commonwealth of Australia. Licensed under Creative Commons Attribution 4.0 unless stated otherwise (see the Commission’s copyright and disclaimer page). The counts, classifications and commentary on this page are our own analysis of that material, and the Commission has not reviewed or endorsed them.

Methodology

How we sourced this

Sources
  • NDIS Quality and Safeguards Commission, Compliance and enforcement actions register (CSV export, retrieved 4 November 2026)
Period and scope
Compliance notices that mention an audit, effective in 2025 and 2026 (one has no date). Deadlines are measured to 4 November 2026.
Method
We selected compliance notices whose published text contains the word audit. We read the required-by dates from the notice text by pattern matching and counted the days from the register date effective from. We split audits into mid-term and condition by the audit named in the text. We recounted every figure with a second, separate script.
Limitations
Deadlines could be read for 82.4% of audit notices. Counts are of entries, not providers. The register does not show whether deadlines were met. A compliance notice is not a proven breach. Keyword and pattern classification has error.
Last updated
4 November 2026
Author
Applysmarts Team
Reviewed by
Not independently reviewed
Corrections
Email [email protected] with the page name and what to correct. Corrections are listed on the page with their date.
Use
General information only. It is not legal advice. It is built from public data and may lag the source.

Read our general methodology

Related product

Most audit notices set fixed dates to engage an auditor and to hand in the report. Evidence Store & Audit Export keeps audit evidence and due dates in one place.

See how Evidence Store & Audit Export handles this

General information only, not legal advice. Spotted an error? Email [email protected].