Civil, not criminal: what the NDIS bill's new standard of proof means for providers

Among the amendments the government moved in the Senate on 18 August 2026, before the NDIS reform bill received Royal Assent two days later, is one that matters a lot more to providers than its dry legal wording suggests: for serious civil penalty breaches, the standard of proof has moved from criminal to civil. Here's what that actually changes, straight from the Department of Health's own fact sheet.

What actually changed

This amendment corrects an unintended outcome from an earlier law - the NDIS Amendment (Integrity and Safeguarding) Act 2026. Previously, serious civil penalty breaches needed to be proven "beyond reasonable doubt," the criminal standard, and a genuinely high bar. The final Act replaces that with the civil standard: "on the balance of probabilities," meaning it only needs to be more likely than not that a contravention occurred. This applies specifically to serious civil penalty breaches - the separate criminal offences the Act also creates keep the criminal standard.

Why it matters more than it sounds

A lower standard of proof means a contravention is genuinely easier to establish - the same set of facts that might not have cleared "beyond reasonable doubt" can clear "balance of probabilities" comfortably. For providers, that raises the practical stakes of the same compliance basics that always mattered: complete records, consistent paper trails, and being able to show what happened rather than just asserting it. It's the same evidentiary discipline the record-keeping rules already demand - see our guide to the 7-year retention rule - now with a sharper reason to take it seriously beyond audit risk.

It lands alongside a genuinely tougher penalty regime

The same round of amendments added a set of fraud and integrity offences directly into the NDIS Act, several of which carry civil penalties - exactly the category where the standard of proof now sits at balance of probabilities. Providing false or misleading information to the NDIA carries up to 5 years' imprisonment or 1,000 penalty units for a serious provider breach; obtaining funds by deception can carry up to 10 years or 2,000 penalty units where impersonation is involved; and intentionally destroying records to defraud the scheme or disrupt an audit is now its own offence, carrying up to 2 years or 240 penalty units. Our post on the new fraud and integrity offences covers the full list, including the new penalty for a nominee who abuses their position.

What to actually do about it

None of this changes what good practice already looked like - service agreements in place, invoices that match what was actually delivered, incident and complaint records kept the full 7 years, worker screening current. What's changed is the cost of not having that discipline, and the fact that providers are no longer immune from producing documents to a court, tribunal or investigating authority if it comes to that. This is general information, not legal advice - if you're unsure how the new standard applies to your specific situation, the NDIS Quality and Safeguards Commission or a lawyer familiar with the sector is the right call, not a blog post.

This article is general information dated 12 September 2026, not legal advice, and reflects the Department of Health, Disability and Ageing's own fact sheet. Juste is operated by Leah Justyce Art Gallery ABN 73 658 665 321. Verify current requirements at health.gov.au and ndis.gov.au.