Why NDIS shift note failures can become audit findings
An NDIS audit does not fail a provider on a single shift note. The auditor rates how well the provider meets each Practice Standard and quality indicator, from 3 (best practice) to 0 (major non-conformity), and shift notes are part of the evidence behind those ratings. A major non-conformity gives the provider 3 months to fix the issue, and its registration will not progress until it does. Penalties are a separate regime.
Key takeaways
- Audit ratings are 3 (conforms with elements of best practice), 2 (conforms), 1 (minor non-conformity) and 0 (major non-conformity), given for each Practice Standard and quality indicator.
- A major non-conformity must be fixed within 3 months. A minor one gives a longer time and does not stop the process. Minor non-conformities left outstanding can lead to a condition audit.
- The Commission says a non-conformity does not mean the provider has failed. It means something needs to be corrected or strengthened.
- The highest penalties in the 2026 Act relate to serious harm to a participant, not to documentation alone. Records are how a provider shows what was done.
How are NDIS audits rated?
The outcome of an NDIS audit is an audit report that rates how well the provider complies with each Practice Standard and quality indicator. The ratings are submitted to the NDIS Commission.
| Rating | Meaning | What follows |
|---|---|---|
| 3 | Conforms with elements of best practice | Nothing to correct |
| 2 | Conforms with the NDIS Practice Standards | Nothing to correct |
| 1 | Minor non-conformity | A longer time to fix the issue, and the registration process can continue |
| 0 | Major non-conformity | 3 months to fix the issue. Registration does not progress until it is addressed and the quality audit is successfully completed |
The audit report is submitted to the Commission up to 14 days after a verification audit, and up to 28 days after a certification or mid-term audit.
How does a shift note failure become an audit finding?
A rating is given against a standard or indicator, not against a note. The evidence behind it includes participant records. The Commission says auditors ask to see real examples and observe whether supports match the participant’s plan. The core module asks for participant information that is accurately recorded and timely, so a run of vague or late notes is evidence an auditor can weigh against that indicator.
The Commission’s own certification audit case study shows how this looks in practice: the auditors reported strengths first, then “a minor non-conformity relating to incomplete documentation”, explained what evidence would be needed and the timeframe for corrective action. The Commission described the process as structured and procedural.
What happens after a non-conformity?
The provider is given a timeframe to correct it. A condition audit may be imposed during the registration period if minor non-conformities are outstanding, among other reasons. In the Commission’s case study the provider was given the draft report to check for factual accuracy before the auditor finalised it. In NoteGate’s view, keeping the corrected records and the date of each correction is the evidence that an issue was addressed.
Where do penalties come in?
Audit findings and penalties are different things. The National Disability Insurance Scheme Amendment (Integrity and Safeguarding) Act 2026 received Royal Assent on 8 April 2026. The NDIS Commission states that civil penalties for providers will increase from a maximum of $412,500 to more than $15 million when a participant is hurt or injured under the provider’s care, and the Act creates new offences carrying up to 5 years’ imprisonment for providing supports that require registration without being registered and for failing to comply with a banning order.
The highest penalties are for serious harm to a participant, not for documentation alone. But records are how a provider shows what was done, why, and how it responded, so a provider that cannot produce accurate records when the Commission asks for them is exposed. The Commission also states that failing to notify a reportable incident within the timeframes might result in an infringement notice or other compliance action.
What should a provider do about it?
Treat notes as evidence when they are written. Check them before they are saved, correct weak ones while the shift is fresh, and keep the history. NoteGate checks each note before it is saved and keeps the validation and correction history. It supports documentation governance and does not determine the outcome of an audit. See why compliance fails before audit and the NDIS audit checklist.
Frequently asked questions
Does one bad shift note fail an NDIS audit?
No. Audit ratings are given for each Practice Standard and quality indicator. Shift notes are part of the evidence, but the Commission says a non-conformity does not mean the provider has failed.
How long do I have to fix a major non-conformity?
The Commission says a major non-conformity (rating 0) must be fixed within 3 months, and registration does not progress until it is addressed and the quality audit is successfully completed. A minor non-conformity (rating 1) gives a longer time.
Does an audit finding lead to a penalty?
The Commission’s audit pages describe correction timeframes and possible condition audits, not penalties. Civil penalties and offences under the 2026 Act relate mainly to serious harm and to unregistered supports or banning order breaches.
How long until the audit report reaches the Commission?
Up to 14 days after a verification audit, and up to 28 days after a certification or mid-term audit.
Sources
- Types of audits (NDIS) (NDIS Quality and Safeguards Commission, retrieved 28 September 2026)
- Core module: Provider governance and operational management (NDIS Quality and Safeguards Commission, retrieved 28 September 2026)
- Integrity and safeguarding (NDIS laws page, Royal Assent 8 April 2026) (NDIA, retrieved 25 September 2026)
- Regulator welcomes new powers to strengthen NDIS integrity and safeguards (NDIS Quality and Safeguards Commission, retrieved 25 September 2026)
- Reportable incidents (NDIS Quality and Safeguards Commission, retrieved 25 September 2026)
Related
Keep the correction history an auditor can follow
See how NoteGate keeps each note’s validation and correction history with the accepted record.
Book a 20-minute walkthroughChoose a plan