The $60,000 Penalty That Could Destroy Your NDIS Therapy Business in 2026

Most NDIS therapy providers worry about audits, participant complaints, or documentation failures. Few realise that a single social media post, testimonial, or misleading claim could expose them to penalties exceeding $60,000 and under new 2026 reforms, potentially much more.

This is not a hypothetical. Regulators are actively targeting misleading advertising across the NDIS sector. The enforcement landscape in 2026 is fundamentally different from the one that existed even two years ago, and many therapy practices are still operating as though the old rules apply.

They do not.

The New Era of NDIS Enforcement

Parliament passed the NDIS Integrity and Safeguarding Bill in 2025, with key provisions taking full effect through 2026. The reforms were a direct response to years of participant complaints about misleading practices, predatory advertising, and providers making claims they could not substantiate.

The changes are significant. The NDIS Quality and Safeguards Commission now holds substantially stronger enforcement powers, including the ability to issue anti-promotion orders directions that prohibit a provider from making specific types of claims or advertising in certain ways. Breaches of these orders carry their own additional penalties.

Criminal offences now apply to serious misconduct, not just administrative violations. For therapy practice owners, this shifts the compliance conversation from "what is the fine?" to "what is the risk to my registration and my freedom to practice?"

📌 External Reference

Source: ABC News / Disability Advocacy (Facebook, 26 November 2025) — "NDIS providers could face jail time or multi-million dollar fines if they do the wrong thing, as part of the Federal Government's move to overhaul the system. Under the new laws, offenders could face up to two years in jail or a fine of up to $16.5 million." This screenshot is reproduced here as a third-party reference for educational purposes only. The Purple Arrow does not own this content. Original reporting by ABC News Australia.

The Department of Health and Aged Care has also signalled a more coordinated approach between AHPRA and the NDIS Commission, meaning a complaint to one regulator is increasingly likely to trigger a review by both. Therapy providers who previously relied on regulators operating in silos are now dealing with a unified enforcement environment.

The Advertising Mistake Most Providers Do Not Realise They Are Making

The most common source of compliance risk for NDIS therapy providers is not fraud or deliberate misconduct. It is well-intentioned marketing that inadvertently crosses compliance lines that many practitioners do not know exist.

Three categories account for the majority of advertising breaches across occupational therapy, physiotherapy, speech pathology, and psychology practices.

Testimonials With Clinical Outcomes

Patient and participant testimonials are powerful marketing tools. They are also one of the most regulated forms of health advertising in Australia. Under AHPRA's Section 133 guidelines, testimonials that reference a health outcome an improvement in function, a reduction in symptoms, a diagnosis-related result are prohibited.

These testimonials feel authentic and compelling precisely because they reference real outcomes. That is exactly why they are prohibited. A participant reading them may make a decision about their therapy based on outcomes that are not typical, not verifiable, and not guaranteed to apply to their situation.

If you have testimonials on your website, social media, or Google Business Profile that reference a health condition, diagnosis, or clinical outcome, they need to be removed or rewritten before a complaint is made not after.

Guaranteed Outcome Claims

Outcome guarantees are explicitly prohibited under AHPRA guidelines. They are also increasingly targeted by the NDIS Commission under its expanded powers to address misleading representations.

The problem with these claims is not that they are necessarily false. It is that individual outcomes in therapy are inherently variable. A claim that implies otherwise even a statistic that sounds conservative creates the impression of a certainty that no ethical clinician can guarantee for every participant.

Before-and-After Marketing

Before-and-after content is common in wellness and allied health marketing. It is also one of the more subtle areas of compliance risk for NDIS therapy providers.

When before-and-after content focuses on functional improvements "before therapy: unable to dress independently; after therapy: fully independent with daily tasks" it creates a direct implied guarantee about what a prospective participant can expect. The NDIS Commission's expanded powers specifically address selective reporting of outcomes, which includes presenting improvement cases without context about the range of outcomes across the participant cohort.

Why Regulators Care

Understanding the regulatory intent behind these rules makes compliance easier and more sustainable than treating it as a checklist.

NDIS participants are, by definition, people with disability who may have complex health needs, limited capacity to evaluate competing claims, and significant reliance on the therapy services they choose. The power imbalance between a well-resourced provider with a polished marketing presence and a participant trying to make an informed decision about their care is real and meaningful.

Regulators are not targeting therapy providers to be obstructive. They are targeting advertising that could cause a vulnerable person to choose a provider or service on the basis of claims that do not reflect the realistic range of outcomes they should expect. That is a consumer protection concern, a clinical ethics concern, and an informed consent concern simultaneously.

Understanding this makes it easier to apply the compliance principles consistently rather than trying to memorise a list of prohibited words. The core question is simple: could this content cause a participant to form a materially false impression about what they are likely to experience?

Real-World Enforcement Trends

The enforcement trend data across 2024 and 2025 shows a consistent pattern: regulators are prioritising misleading marketing, fraudulent billing claims, advertising by unregistered services, and predatory targeting of participants with high support budgets.

The introduction of anti-promotion orders under the new reforms adds a powerful tool to this enforcement mix. These orders allow the NDIS Commission to direct a provider to cease specific marketing activities, remove content from digital platforms, or publish corrective notices. Non-compliance with an anti-promotion order carries separate and additional penalties on top of the original breach.

AHPRA has also substantially increased its monitoring of social media. Instagram, Facebook, and LinkedIn are now actively reviewed for advertising guideline breaches, not just formal website content. A promotional post from three years ago that has never been deleted is just as exposed as content published today.

The True Cost of a Compliance Breach

The $60,000 penalty figure that most providers are aware of represents the maximum per-breach fine for an individual practitioner under AHPRA guidelines. For a body corporate, the equivalent maximum is $120,000 per breach. Under the new NDIS integrity reforms, additional penalties apply for conduct that meets the threshold for criminal proceedings.

But the financial penalty is rarely the most significant cost of a compliance breach. The full business impact typically looks like this:

📌 External Reference

Source: The Advertiser (Facebook, 20 November 2025) — "Suppliers owed up to $60,000 face devastating losses as troubled disability provider Bedford Group takes its next crucial step in administration proceedings." This screenshot is reproduced here as a third-party reference for educational purposes only. The Purple Arrow does not own this content and is not affiliated with The Advertiser or Bedford Group. This is shared solely to illustrate the real-world financial consequences facing NDIS providers in the current regulatory and commercial environment.

This does not account for the personal and professional toll of being under regulatory investigation, which practitioners consistently describe as one of the most stressful experiences of their careers.

A compliance audit that costs a few hundred dollars and a few hours of time is not a bureaucratic obligation. It is straightforward risk management.

Conclusion

The biggest threat to many therapy businesses in 2026 may not be an audit or participant complaint. It may be the marketing content they published years ago and forgot about.

AHPRA and the NDIS Quality and Safeguards Commission are operating with stronger powers, better coordination, and a clearer mandate than at any point in the sector's history. The 2026 reforms have removed the ambiguity that some providers relied on. The rules are clear, the enforcement is active, and the cost of a breach extends far beyond any single penalty figure.

For therapy practice owners and compliance managers, the message is straightforward: the time to audit your advertising content is before a complaint is made, not after.