ACQSC Enforcement Powers: Penalties, Sanctions & How to Avoid Them

The Aged Care Quality and Safety Commission has more regulatory power under the Aged Care Act 2024 than at any point in the history of Australian aged care regulation. Chapter 6 of the Act sets out a graduated enforcement framework that gives the ACQSC a broad toolkit — from education and guidance at one end through to civil penalties of up to $1.65 million and revocation of provider registration at the other. For CEOs, compliance officers, and governing body members, understanding where each enforcement tool sits on that ladder — and what triggers the ACQSC to escalate — is now a core governance responsibility.

The Aged Care Act 2024 establishes a graduated enforcement model that reflects a deliberate policy choice: the ACQSC should have the flexibility to match its regulatory response to the severity and persistence of non-compliance. The model moves through six broad tiers.

At the lowest level, the ACQSC engages through education and guidance — working with providers to build understanding of their obligations before formal action is necessary. Where education alone is insufficient, the Commission can issue compliance notices directing a provider to take specific action within a defined timeframe. If the provider is willing to commit to a structured remediation plan, the ACQSC may accept enforceable undertakings as a binding alternative to more punitive measures. Beyond that, the Commission can impose sanctions — restricting a provider's operations, funding, or ability to accept new residents. For serious contraventions, the Act provides for civil penalties of up to 5,000 penalty units, enforceable through the courts. And at the top of the ladder sit registration actions: suspension or revocation of a provider's registration to deliver aged care services.

This is not a lock-step process. The ACQSC is not required to begin at the bottom and work its way up. Where there is an immediate risk to the safety, health, or wellbeing of aged care consumers, the Commission can move directly to suspension, sanctions, or civil penalty proceedings. The graduated model gives the regulator proportionality, not predictability.

Compliance notices under Chapter 6 of the Act are the ACQSC's primary tool for directing a provider to fix identified problems. A compliance notice specifies the contravention or risk, the action the provider must take, and the timeframe for completion. Failure to comply with a compliance notice is itself a contravention of the Act — meaning the notice creates a new and separate compliance obligation the moment it is issued.

Compliance notices are typically triggered by findings from assessment contacts, analysis of quality indicator data, patterns in incident reports, or substantiated complaints. They are not reserved for catastrophic failures. A provider that is consistently late with SIRS notifications, or that has unresolved quality indicator trends, may receive a compliance notice well before the situation reaches crisis point.

Enforceable undertakings under Chapter 6 operate differently. Rather than the ACQSC directing a provider to act, the provider offers a written undertaking setting out the steps it will take to address the non-compliance. If the ACQSC accepts the undertaking, it becomes legally binding. Breach of an enforceable undertaking can result in court orders, including orders for compensation, compliance, or injunction.

Enforceable undertakings are sometimes viewed as a softer option, but they carry real legal weight. They are published on the ACQSC register, they commit the provider to a specific remediation plan with measurable milestones, and they remain in force until the ACQSC is satisfied the provider has met every commitment. For governing bodies, an enforceable undertaking should be treated with the same seriousness as a sanction.

The Aged Care Act 2024 introduces a significantly strengthened civil penalty regime under Chapter 6. Maximum penalties reach 5,000 penalty units for the most serious contraventions. As at 1 July 2025, one penalty unit is set at $330, giving a maximum civil penalty of $1,650,000 per contravention.

Civil penalties are not criminal sanctions — they are pursued through the Federal Court or Federal Circuit and Family Court, and the standard of proof is the civil standard (balance of probabilities rather than beyond reasonable doubt). However, the consequences for providers are substantial. A civil penalty order is a matter of public record, it can be accompanied by injunctions or other court orders, and it signals to the sector, to consumers, and to the provider's own workforce that a serious failure has occurred.

The Act attaches civil penalty provisions to a range of obligations, including failures in the duty of care, failures to report serious incidents, breaches of prudential requirements, providing false or misleading information to the ACQSC, and failures to comply with conditions on registration. The ACQSC does not need to have issued a compliance notice or accepted an enforceable undertaking before pursuing a civil penalty — if the contravention is sufficiently serious, the Commission can proceed directly to penalty proceedings.

For governing body members, the civil penalty regime reinforces the importance of active oversight. A board that has no visibility of compliance performance, incident trends, or quality indicator data cannot demonstrate it has discharged its governance obligations.

Beyond penalties directed at provider organisations, the Aged Care Act 2024 gives the ACQSC the power to take action against individuals. Banning orders prevent a named individual from being involved in the provision of aged care services — effectively ending that person's career in the sector. Banning orders are used where an individual's conduct or character poses an unacceptable risk to aged care consumers, and they can apply to responsible persons, key personnel, or any individual involved in the delivery of care.

At the organisational level, the ACQSC can impose conditions on registration under section 67 of the Act. Conditions might require additional reporting, restrict the services a provider can deliver, mandate specific governance arrangements, or require the appointment of an independent adviser. Conditions are published and remain in effect until the ACQSC is satisfied they are no longer necessary.

The ultimate sanction is suspension or revocation of registration under section 73. Suspension temporarily removes a provider's authority to deliver aged care services, while revocation is permanent. Both carry significant consequences — not only for the provider, but for the consumers who rely on those services. The ACQSC uses these powers sparingly, but the Act ensures they are available when the safety of consumers demands it.

For responsible persons, it is worth noting that the ACQSC considers individual accountability alongside organisational accountability. A pattern of governance failure can result in both organisational sanctions and individual banning orders arising from the same set of circumstances.

The ACQSC draws on multiple data sources to identify providers at risk of non-compliance. Understanding these triggers is essential for proactive compliance management.

Quality indicator data is reported quarterly and benchmarked nationally. Persistent outlier performance — particularly in pressure injuries, physical restraint, unplanned weight loss, falls, and medication management — will attract regulatory attention. The ACQSC uses this data to identify emerging risks before they become systemic failures.

Incident reports submitted through the Serious Incident Response Scheme provide a real-time view of safety events. Patterns of late reporting, high incident volumes relative to service size, or inadequate investigation and remediation responses can all trigger closer scrutiny.

Complaints data from consumers, families, and staff is another key input. The ACQSC monitors complaint themes and volumes, and a sustained pattern of complaints about the same issue — particularly where the provider has not demonstrated an effective response — can escalate to formal enforcement.

Assessment contacts are the ACQSC's direct inspection mechanism. These can be announced or unannounced, and they may be triggered by data analysis, complaints, or random selection. During an assessment contact, the Commission examines clinical records, governance documentation, staffing evidence, and interviews staff and consumers. Findings from assessment contacts frequently lead to compliance notices or conditions on registration.

Financial reporting obligations under the Act allow the ACQSC to monitor the financial health of providers. Financial distress, failure to meet prudential requirements, or unexplained financial irregularities can trigger both financial-specific enforcement and broader investigations into governance and care quality.

Statura Care is built around the principle that enforcement action is best avoided by making compliance visible, continuous, and evidence-based — not by scrambling to prepare when an assessment contact is announced.

Across all 32 modules, the platform monitors compliance obligations in real time, tracking deadlines for SIRS notifications, quality indicator submissions, responsible person notifications, and every other time-bound requirement under the Act. Automated alerts escalate through your team as deadlines approach, ensuring nothing is missed.

The Quality Standards module consolidates evidence from across the platform — clinical data, incident records, workforce metrics, consumer feedback, and governance documentation — into a continuously updated self-assessment against all 7 Quality Standards. This gives your governing body a live view of compliance posture rather than a point-in-time snapshot prepared under pressure.

The Registration module manages your registration conditions, responsible person records, and ACQSC notification obligations in a single workspace. When conditions are imposed or changed, the module tracks compliance against each condition with clear accountability and evidence trails.

Quality indicator trends, incident patterns, complaint themes, and financial metrics are surfaced through dashboards designed for governing body reporting — giving board members the visibility they need to discharge their governance obligations and demonstrate active oversight if enforcement action is ever taken.

The best response to stronger regulatory powers is stronger compliance infrastructure. Statura Care provides that infrastructure across every obligation in the Aged Care Act 2024.