The Federal Court’s decision to impose a $1.1 million penalty on Oak Tasmania represents a defining compliance moment for the National Disability Insurance Scheme (NDIS). It is the largest penalty issued to a Tasmanian NDIS provider and signals a firm regulatory stance on participant safety and governance failures.
Oak Tasmania, a not-for-profit provider of supported independent living services, admitted to extensive breaches of reporting obligations and multiple serious care failures. The Court found these failures placed people with disability at risk of significant harm, including the potential for serious injury or death.
For NDIS providers nationally, this ruling reinforces that compliance is not theoretical. It is operational, enforceable, and closely scrutinised by the NDIS Quality and Safeguards Commission.
What Happened? Understanding the Court’s Findings
Between 2021 and 2023, Oak Tasmania failed to report 474 reportable incidents within mandatory timeframes. Most involved the unauthorised use of restrictive practices, which must be reported within five business days of senior staff becoming aware.
In some cases, reporting was delayed by more than 300 days. The Court determined that these delays undermined the regulator’s ability to identify patterns, intervene early, and manage participant risk.
In addition to reporting failures, the agreed facts detailed serious care breaches affecting five participants. This included failure to administer insulin, incorrect use of lifting equipment resulting in injury, inappropriate catheter care, and inadequate supervision of a highly vulnerable participant.
Why Reporting Failures Attract Serious Penalties
Justice Timothy McEvoy made clear that while Oak Tasmania did not intend to breach the law, the absence of effective systems and oversight created unacceptable risk. Under the NDIS framework, intent does not mitigate responsibility.
Incident reporting is a central safeguarding mechanism, not an administrative task. When providers delay or fail to report, risks remain hidden and harm can escalate unchecked.
The Court imposed $850,000 in penalties for participant safety breaches and $250,000 for reporting failures, plus approximately $200,000 in legal costs. The breakdown reflects how regulators now separate governance failures from direct care harm.
This penalty comes as the NDIS sector faces major increases to penalties, with proposed legislation increasing maximum penalties from $400,000 to in excess of $15 million when a participant is hurt or injured under a provider’s care.
Governance Reform After the Fact Is Not Enough
Oak Tasmania presented evidence of significant remedial action, including strengthened incident management systems, credentialing processes, complex healthcare policies, and additional staff training. These reforms were accepted by the Court as genuine.
However, the judgment reinforces that corrective action after harm occurs does not negate regulatory consequences. Compliance systems must be in place before incidents occur, not built in response to enforcement action.
Following a merger with Independence Australia Group, all directors of Oak and its parent organisation resigned and were replaced, highlighting that governance accountability now extends to board level.
This pattern of substantial post-incident penalties is becoming more common, with recent cases including Valmar Support Services receiving a $1.9 million penalty after failures that contributed to a participant’s death.
Key Lessons for NDIS Providers
This decision carries clear lessons for providers across the NDIS ecosystem.
First, reporting obligations are strict, time bound, and actively enforced. Delays, even where no malicious intent exists, expose providers to significant penalties. Providers requiring support with incident management systems should consider VCCG’s internal audit services to identify and address reporting gaps before they become compliance issues.
Second, policies alone are insufficient. Providers must embed detection, escalation, and reporting processes into daily practice, supported by training, supervision, and quality oversight. VCCG’s compliance health check can help providers assess whether their current systems meet regulatory expectations.
Third, participant safety must remain the primary lens through which all operational decisions are made. Clinical care, equipment use, and supervision failures strike at the core purpose of the NDIS. For providers approaching their NDIS mid-term audit or renewal audit, these safety requirements will be under intense scrutiny.
Moving Forward: Strengthening Trust Through Compliance
At VCCG, we view this ruling as a pivotal reminder of what sustainable NDIS service delivery requires. Strong governance, real time reporting capability, and well trained teams are no longer optional, they are foundational.
Providers that invest in mature quality and compliance frameworks reduce risk, protect participants, and strengthen organisational resilience. In a sector built on trust, compliance is not a burden; it is a competitive and ethical necessity.
As regulatory scrutiny continues to increase, providers who act proactively rather than reactively will be best positioned to deliver safe, high quality supports and maintain long term viability in the NDIS market. This is particularly important for providers launching new NDIS businesses who must build compliance systems from the ground up.
Don’t Wait for an Audit to Find Your Compliance Gaps
The Oak Tasmania penalty demonstrates that compliance failures can cost providers millions in penalties and damage their reputation beyond repair. More importantly, these failures put vulnerable participants at risk.
VCCG specialises in helping NDIS providers build proactive compliance systems that prevent incidents before they occur. Our Virtual CFO services combine financial oversight with governance expertise, while our comprehensive internal audit program identifies risks and gaps in your current operations.
Whether you’re preparing for your next audit, launching a new service, or concerned about your current compliance systems, VCCG’s team understands the local regulatory environment and the real-world challenges NDIS providers face.
Schedule a confidential compliance consultation today. Don't let compliance failures become tomorrow's penalties.
Sources: