A registered provider keeps records of the kind, for the period and in the form the NDIS rules prescribe (s 73Q; for example Part 3 of the worker screening rules and the incident, complaints and restrictive practice rules), and a former registered provider keeps them for 3 years after ceasing to be registered (s 73R, civil penalty 60 penalty units). From 27 August 2026 every NDIS provider keeps records of a prescribed kind relating to claims for NDIS amounts and the supports claimed for, for 7 years from the claim or any shorter period the rules prescribe (s 45B, civil penalty 120 penalty units).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.