Penalties & enforcement
How long does an NDIS Commission investigation take?
Most NDIS Commission compliance matters take 3–9 months from first notice to outcome. Complex investigations - especially those involving banning orders or civil penalty proceedings - routinely run 12–24 months. Here are the four stages and typical durations.
Short answer: Most matters resolve in 3–9 months. Complex investigations - banning orders, multiple allegations, civil penalty proceedings - routinely run 12–24 months. The Commission's own published service standards typically commit to acknowledgement within 7 days and initial assessment within 28 days; substantive investigations have no fixed statutory deadline.
Why timelines vary so much
A "Commission investigation" isn't one thing. It's a continuum from an informal compliance review letter that closes in three weeks to a multi-jurisdictional banning-order case with civil penalty proceedings that runs for years. The single biggest predictor of duration is the seriousness of the alleged conduct - and the number of witnesses, participants, and document categories involved.
Within that, four things slow matters down: complex factual disputes, multiple participants or workers, parallel regulators (Fair Work, ATO, police, coroner), and the provider's own response cadence. Three things speed them up: clean records, prompt full disclosure, and prompt remediation evidence.
The four stages, in detail
Triage and intake
Typical duration: 2–8 weeks
The Commission receives a complaint, reportable incident, referral, or intelligence and decides whether to take it forward. Most matters close at this stage with a no-action outcome, a referral to another body, or a brief informal contact with the provider.
Note: You may not be told a complaint has been received until - or unless - the matter progresses. The Commission isn't legally required to notify you at the triage stage.
Information-gathering
Typical duration: 1–4 months
Where the Commission decides to investigate, it issues notices to produce documents, requests written submissions, conducts interviews under s55A, and (occasionally) attends premises. This stage absorbs most of the elapsed time and most of your internal cost.
Note: Initial response windows are typically 14–28 days per notice, with extensions available on request. Multiple rounds of follow-up requests are normal.
Proposed action and provider response
Typical duration: 6–12 weeks
If the Commission forms a preliminary view that compliance action is warranted, it issues a notice of intention - e.g., notice of intention to ban under s73ZN, notice of intention to impose conditions, or a referral for civil penalty proceedings. You have a statutory window to respond.
Note: This is the most important stage strategically. The response is your one structured chance to influence the outcome before the Commission's decision-maker makes a final decision.
Decision, outcome, and review
Typical duration: 1–6 months (plus AAT/ART review where applicable)
The decision-maker considers your response and either drops the matter, imposes conditions or variations, issues a banning order, accepts an enforceable undertaking, or refers civil penalty proceedings to the Federal Court. Review rights at the Administrative Review Tribunal (formerly AAT) attach to most adverse decisions.
Note: Tribunal review adds another 6–18 months depending on listing times. Interim banning orders carry urgent review pathways.
Three worked examples
Example A — Informal review that closes quickly
A participant's family lodges a complaint about a missed shift and inconsistent worker rosters. The Commission assesses the complaint, writes to the provider asking for a chronology and copies of the rosters, the provider responds within 14 days with full records and a one-page remediation plan, and the matter closes with no further action. Elapsed time: 8–14 weeks. Internal cost: 10–30 hours.
Example B — Mid-weight investigation with conditions
A reportable incident triggers an investigation into a SIL provider's behaviour-support practices. The Commission issues a s55A notice for behaviour-support plans, training records, and incident logs across two houses; interviews three workers; and ultimately issues a notice of intention to impose conditions on the provider's registration. The provider responds substantively through counsel, accepts conditions requiring an external behaviour-support audit at six and twelve months. Elapsed time: 8–14 months. Internal cost: 150–400 hours plus A$25k–A$80k in legal fees.
Example C — Banning order with AAT review
A worker is the subject of multiple complaints alleging neglect across two providers. The Commission opens a banning- order investigation. Information-gathering takes 7 months; notice of intention to ban issues; the worker responds; a 5-year banning order issues; the worker seeks review at the (former) AAT. Total elapsed time including review: 18–30 months. Cost falls primarily on the worker, but both employer providers carry significant document-production and witness obligations throughout.
What you should plan for at each stage
Day 0 — notice arrives
Engage a lawyer the same day. Issue an internal preservation hold. Notify your insurer. See the first-72-hours playbook.
Weeks 1–8 — first response
Assemble responsive documents. Draft the response chronology with your lawyer. Identify witnesses. Brief key internal personnel under confidentiality. Continue operating - this is also the stage where operational quality slips, and the Commission notices.
Months 2–6 — information-gathering
Expect follow-up notices, witness interview requests, and clarifying questions. Maintain a single contact-of-record with the Commission case officer. Demonstrate active remediation - new policies, training records, behaviour- support adjustments - in real time, not at the end.
Months 6–12+ — proposed action and decision
The response to a notice of intention is the most important document you'll write in the matter. Treat it as such - senior counsel, factual precision, full remediation evidence. After the decision, monitor review timing carefully - statutory deadlines for AAT/ART review are strict.
What you can't control - and what you can
You can't control whether you're investigated. Complaints and reportable incidents happen even at the best- run providers. You can't control how the Commission prioritises its caseload, which constrains responsiveness in either direction. You can't control AAT/ART listing times.
What you can control is the elapsed time on your side - the response cadence. Providers with clean records respond to a Commission notice in days, not weeks. Providers with mature compliance practices have less to disclose and less to remediate. Providers with a strong audit-readiness posture are already prepared for the question.
This is general information, not legal advice. Investigation timelines vary by case. The durations on this page are practical observations, not service standards. Engage a lawyer with NDIS regulatory experience for case- specific timing advice.
How Checkbase helps
The single largest variable cost of any Commission investigation is the internal time spent assembling records. Checkbase keeps worker compliance, participant files, incident logs, and a timestamped audit trail in one place. The same auditor portal used for certification audits can be used to share a structured evidence set with the Commission or your lawyer at short notice.
Frequently asked questions
Will the Commission tell me a complaint has been received?
Not always - and not at the triage stage. If the matter progresses to information-gathering, you'll be contacted formally. Many complaints close at triage without provider notification.
Can I push the Commission to move faster?
Indirectly. Full, prompt disclosure plus visible remediation evidence makes a matter easier to close. Repeatedly asking the case officer to expedite rarely works and can be counterproductive.
Do I have to keep operating during an investigation?
Generally yes, unless a registration suspension or interim banning order says otherwise. The Commission expects ongoing service quality while a matter is open - and operational decline during an investigation is itself a relevant factor.
What if the timeline runs across an audit cycle?
It often does. Disclose the open Commission matter to your approved quality auditor at the relevant audit stage. Concealment is itself a non-conformity and a serious aggravating factor if discovered.
What about media disclosure during the investigation?
The Commission generally doesn't publish details during an investigation. Adverse decisions - banning orders, civil penalty findings, registration suspensions - are typically published on the public register and may be highlighted in the Commission's quarterly enforcement updates. Plan media strategy with your lawyer.
Related terms
- Penalties & enforcement
Can the NDIS Commission audit you without warning?
Short answer: no, your scheduled audit doesn't happen without warning. But yes, the Commission can compel documents, attend premises, and open an investigation with little or no notice if there's a trigger. Here's the difference - and what you should have ready either way.
Read - Penalties & enforcement
How to respond to an NDIS Commission notice
You got the letter. Here's the disciplined first 72 hours, the standard mistakes to avoid, and when you absolutely need a lawyer. General information, not legal advice.
Read - Penalties & enforcement
The NDIS Commission complaint process
Who can complain to the NDIS Commission, what they do with the complaint, how long it takes, and what providers should do when one lands on them.
Read - Penalties & enforcement
What is an NDIS banning order?
Banning orders are the NDIS Commission's most serious enforcement tool. Here's who issues them, what they cover, and where the public register lives.
Read - Penalties & enforcement
Recent NDIS banning orders: patterns from 2024–2026
What gets you banned, in practice. Conduct patterns drawn from the public NDIS Commission register - neutral, citation-only, no named individuals.
Read - Penalties & enforcement
How much is an NDIS provider fine?
Current civil-penalty maximums per NDIS contravention, what they apply to, and what changes with the 2025 reforms - in plain language.
Read
Track every NDIS document in one place
Checkbase keeps your worker screening, participant files, governance, insurance, and audit evidence on one continuously-updated page. Built for Australian NDIS providers, 1–50 staff.