Is there a minimum dollar amount of insurance NDIS providers must hold?

The NDIS Commission's rules do not prescribe a specific minimum dollar limit in legislation. However, auditors assess whether your cover is proportionate to your operations. The industry norm for public liability is at least $10 million per occurrence, and professional indemnity limits should reflect the scale and risk profile of your services. Speak with a specialist disability-sector broker to confirm adequacy.

What happens if my insurance lapses during my registration period?

A lapse in required insurance is a breach of your registration conditions. You should notify the NDIS Commission promptly. Depending on the circumstances, the Commission may issue a compliance notice, impose conditions on your registration, or — in serious cases — begin suspension or revocation proceedings. Reinstating cover immediately and notifying the Commission is the correct first step.

Do subcontracted support workers need their own insurance?

Yes. If you engage subcontractors rather than employees, your organisation's PI policy may not extend to their conduct. Your subcontractor agreements should require each individual or entity to hold their own professional indemnity and public liability insurance, and you should collect and retain evidence of their current cover as part of your governance records.

Does the 2026 strengthened Practice Standards introduce new insurance rules?

The strengthened framework does not introduce entirely new insurance categories, but it increases governance obligations — particularly around board oversight of risk management, which includes insurance. Governing persons must now demonstrate they are actively reviewing and approving risk controls, and insurance adequacy is part of that evidence base.

Are sole traders and small providers treated differently for insurance requirements?

The registration condition to hold appropriate insurance applies to all registered providers regardless of size. However, the 'appropriateness' of cover is assessed proportionately. A sole trader operating a single SIL house will have a different risk profile to a multi-site organisation, and auditors expect the level of cover to reflect that — but the requirement to hold it does not vary.

How should I document insurance compliance for an NDIS audit?

Maintain an insurance register listing each policy (type, insurer, policy number, limit, and expiry date), keep current certificates of currency on file, include insurance review as a standing agenda item at governing body meetings, and record the outcome in meeting minutes. Auditors will request all of this evidence during a certification or verification audit.

NDIS provider insurance requirements (2026 walkthrough)

Why insurance is a registration condition, not an afterthought

Insurance is not merely a prudent business measure for NDIS providers — it is a mandatory registration condition enforced by the NDIS Quality and Safeguards Commission. Under the National Disability Insurance Scheme (Provider Registration and Practice Standards) Rules 2018, registered providers must demonstrate they hold appropriate insurance before approval is granted and must maintain that cover throughout the registration period.

With the strengthened Practice Standards taking effect progressively from 2026, the Commission's auditors are applying increased rigour to governance and risk-management evidence during both initial registration audits and mid-term verification audits. Insurance documentation is one of the first items an approved quality auditor examines.

The two core insurances every registered provider must hold

1. Professional indemnity insurance

Professional indemnity (PI) insurance protects your organisation against claims arising from professional advice or services that cause a participant harm, loss, or financial damage. For NDIS purposes this covers the conduct of your support workers and your organisation's clinical or support decisions. The cover must be:

Held with a licensed Australian insurer (or Lloyd's of London equivalent recognised under the Insurance Act 1973).
Scoped to the specific registration groups you hold — a provider registered for both daily activities and specialist behaviour support must ensure the policy explicitly covers both.
Current and not subject to undisclosed exclusions that would void claims relating to NDIS participants.

2. Public liability insurance

Public liability (PL) insurance covers third-party bodily injury or property damage arising from your business operations. For SIL providers this is especially critical because participants live on-premises, and any injury to a participant, visitor, or neighbour that is caused by your operational activities may give rise to a claim.

The NDIS Commission does not prescribe a minimum dollar limit in legislation, but the market standard for disability services — and what most auditors expect to see — is cover of at least $10 million per occurrence. Providers operating multiple SIL houses or delivering high-intensity supports should review whether that limit is adequate for their specific risk profile.

Step-by-step: meeting the insurance requirement for registration or renewal

Obtain your certificates of currency. Contact your insurer and request certificates of currency for both PI and PL policies. The certificate must show your organisation's legal name exactly as it appears on your ABN registration, the policy period, the type of cover, and the limit of indemnity.
Check the policy wording for NDIS-specific exclusions. Some policies exclude intentional acts, abuse, or sexual misconduct — categories that are particularly relevant in disability support. If such exclusions exist, discuss with your broker whether endorsements or a separate safeguarding policy can fill the gap.
Match cover to registration groups. Cross-reference each registration group on your NDIS provider portal account against your policy's "activities insured" schedule. Gaps here are a common non-conformance finding.
Upload documentation to the myplace provider portal. When lodging or renewing your registration application, upload current certificates of currency in the governance section. Expired certificates will trigger an immediate non-conformance.
Set calendar renewal reminders. Build a 60-day advance renewal prompt into your compliance calendar so certificates never lapse. A gap in cover — even of one day — can trigger a reportable incident obligation and put your registration at risk.
Maintain an internal insurance register. Document policy number, insurer, renewal date, cover type, limit, and the staff member responsible for renewal. This register should be reviewed at least annually by your governing body (required under the strengthened governance standard).
Brief your board or governing persons. Under the 2026 strengthened Practice Standards, governing persons must demonstrate active oversight of risk, which includes insurance adequacy. Minute your insurance reviews in board or governance meeting records.

Additional insurances SIL providers should consider

Beyond the mandatory PI and PL requirements, SIL providers routinely need:

Insurance type	Why it matters for SIL
Workers' compensation	Legally required in every state/territory for employees. Failure to hold it is a criminal offence, not just an NDIS non-conformance.
Property insurance	If your organisation owns or leases SIL properties, cover for the building and contents protects participants' living environment and your organisational assets.
Management liability / directors and officers	Covers board members and senior managers against claims arising from governance decisions — increasingly relevant given the Commission's focus on governing person obligations.
Cyber liability	Mandatory incident reporting and participant record-keeping obligations mean a data breach could trigger both NDIS and Privacy Act obligations. Cyber cover is becoming standard practice.

What auditors look for — and common non-conformances

Approved quality auditors conducting certification or verification audits will request your insurance register and current certificates of currency. The most common findings that result in non-conformances are:

Expired certificates. A certificate that lapsed even briefly during the audit period is treated as a gap in compliance, not an administrative oversight.
Mismatch between insured activities and registration groups. If your policy covers "community services" generically but your registration includes specialist behaviour support, the auditor will likely flag this as inadequate specificity.
Inadequate policy limits for the size of operations. A sole trader operating one SIL house may hold different cover to a multi-site provider, and auditors will assess proportionality.
No evidence of governing body review. Under the strengthened standards, insurances must be reviewed by your governing body at defined intervals. If your board minutes contain no reference to insurance, the governance standard may also attract a finding.
Subcontractor gaps. If you use subcontracted support workers, your contracts should require them to hold their own appropriate insurance, and you should hold evidence that they do. Otherwise, your PI policy may not respond to incidents involving those workers.

SIL-specific considerations for 2026

SIL providers face a particular compliance burden because participants reside in the funded environment around the clock. The Commission's strengthened framework places additional obligations on providers of higher-intensity and overnight supports, including:

More frequent verification audit touchpoints compared to lower-risk registration groups.
Heightened incident reporting requirements, meaning your insurer and risk team need to be briefed on the NDIS Commission's 24-hour and five-day reportable incident notification timelines.
Restrictive practice authorisation obligations that can intersect with professional liability if an unauthorised restrictive practice causes harm.

Ensure your PI policy does not exclude incidents arising from the use of authorised restrictive practices, and confirm with your broker that your coverage aligns with the regulatory environment in which SIL is delivered.

Keeping your compliance evidence audit-ready

The simplest way to avoid an insurance-related non-conformance is to treat your certificates of currency as living documents — not paperwork filed once at registration and forgotten. Build the following into your quality management system:

A centralised insurance register reviewed at each board meeting.
Automatic renewal reminders no less than 60 days before expiry.
A documented process for notifying the NDIS Commission if cover lapses or material changes occur.
Annual confirmation from subcontractors that their own insurances remain current.

If you are building or upgrading your full compliance framework, the 74-document audit-ready SIL compliance kit available at ndiscompliant.com.au includes an insurance register template, board review checklist, and subcontractor insurance declaration form — useful if you want to lift all your governance evidence in one step rather than building each document from scratch.

Key takeaways

Professional indemnity and public liability insurance are mandatory registration conditions, not optional.
Cover must be matched to your specific registration groups and scoped to your operational context.
The 2026 strengthened Practice Standards require governing persons to actively oversee insurance adequacy, with meeting minutes as evidence.
SIL providers should audit their policies for exclusions relevant to overnight care, restrictive practices, and subcontracted workers.
Expired or mismatched certificates are among the most common audit non-conformances — proactive calendar management prevents them.

Important: This article provides general guidance about NDIS compliance requirements. It is not legal or professional advice. Requirements may change as the NDIS Commission updates its policies and Practice Standards. Always verify current requirements with the NDIS Quality and Safeguards Commission or a registered NDIS consultant before making compliance decisions.