When an NDIS practitioner is also AHPRA-registered, the advertising ban follows the service itself. It does not depend on the funding stream or the worker's job title. Section 133 of the Health Practitioner Regulation National Law bans certain advertising of a "regulated health service," which Section 133(4) defines as a service provided by, or usually provided by, a health practitioner. So a testimonial about an occupational therapist's clinical work is banned whether the NDIS, Medicare, or a private client pays for it. The maximum penalty is $60,000 for an individual and $120,000 for a body corporate, and it lands on whoever controls the advertising.
Key takeaways
- The AHPRA advertising ban attaches to the regulated health service, not to the NDIS funding or the worker's title.
- Section 133(4) defines a regulated health service as one "provided by, or usually provided by, a health practitioner."
- A consented participant testimonial can satisfy the NDIS Code of Conduct and still breach Section 133 at the same time.
- Section 133 targets "a person" who advertises, so the provider organisation that runs the website carries the risk.
- Unregistered NDIS providers are not exempt. AHPRA registration follows the individual practitioner they employ.
Where does the compliance line actually fall?
Most explainers draw the line in the wrong place. They tell you the rules change based on who the worker is: a support worker gets one rulebook, an AHPRA-registered therapist gets another.
That is close, but it is not where the law draws the line. The line runs through the service, not the person.
This matters because the same person can sit on both sides of it in a single week. An occupational therapist running a sensory-integration session is delivering a regulated health service. The same therapist helping a participant practise catching the bus may not be. Same registration, same funding, different rule.
Get this wrong and you build one set of marketing materials for the whole team, publish a genuine testimonial, and breach a law that carries a six-figure penalty. So it is worth reading what the law actually says, rather than what the summaries say it says.
What does Section 133 actually say?
AHPRA's advertising rules come from Section 133 of the Health Practitioner Regulation National Law. That is the primary source, and it is short enough to quote.
Section 133(1) says a person must not advertise a regulated health service, or a business that provides one, in a way that:
- is false, misleading or deceptive, or is likely to be misleading or deceptive;
- offers a gift, discount or other inducement to attract a person to use the service, unless the advertisement also states the terms and conditions of the offer;
- uses testimonials or purported testimonials about the service or business;
- creates an unreasonable expectation of beneficial treatment; or
- directly or indirectly encourages the indiscriminate or unnecessary use of regulated health services.
The maximum penalty is set out right there in the section: $60,000 for an individual and $120,000 for a body corporate. Those figures come straight from the National Law as in force at 10 April 2026 (Health Practitioner Regulation National Law, Queensland consolidation, the version other states and territories apply).
The testimonials line is the one that catches NDIS providers. It is a flat prohibition. There is no consent exception written into it, which is exactly where the crossover with the NDIS rules gets sharp.
Why the rule follows the service, not the person
Here is the part almost nobody quotes. Section 133(4) defines the key term:
"regulated health service means a service provided by, or usually provided by, a health practitioner."
Health Practitioner Regulation National Law, Section 133(4)
Read that definition closely. It says nothing about who pays. It says nothing about NDIS registration. It hangs entirely on the nature of the service and whether a health practitioner is the one who usually provides it.
That is why the funding stream is a red herring. A physiotherapy session is a regulated health service whether the NDIS funds it, Medicare rebates it, or a participant pays cash. The advertising rule does not check the invoice. It checks the service.
It also explains the single-worker split. When a support coordinator, who is usually not an AHPRA-registered practitioner, does their job, that is generally not a regulated health service. When an OT, physio, psychologist, speech pathologist, or nurse delivers clinical care, it is. The moment your content describes the clinical work, you are advertising a regulated health service, and Section 133 switches on.
If you want the fuller picture of what AHPRA's rules ban and allow, our guide to the AHPRA advertising guidelines in 2026 walks through each clause.
Two rulebooks, one testimonial, opposite answers
NDIS providers already work under the NDIS Code of Conduct, enforced by the NDIS Quality and Safeguards Commission. The Code requires providers and workers to act with integrity, honesty and transparency (National Disability Insurance Scheme (Code of Conduct) Rules 2018, register ID F2024C00048, via the NDIS Commission). It applies to registered and unregistered providers alike.
The Code does not ban testimonials. So a provider can read the Code, get informed written consent from a participant, publish a genuine review, and feel fully compliant.
Then the same testimonial hits Section 133 and fails.
Picture a real example. A participant writes: "My OT helped my son learn to feed himself, and we are so grateful." It is true. It is consented. It honours the Code's transparency duty. But it is a testimonial about the clinical work of an AHPRA-registered practitioner, so Section 133(1)(c) prohibits it in advertising.
One testimonial. Two rulebooks. Opposite answers. The National Law wins, because a consent form cannot override a statutory advertising prohibition. This is the trap, and it catches careful providers precisely because they did follow a rulebook. They just followed the wrong one for that piece of content. Our deeper guide on patient testimonials and AHPRA covers what you can and cannot publish.
Who carries the liability, the practitioner or the provider?
This is where provider organisations get an unpleasant surprise. Section 133 does not say "a registered health practitioner must not advertise." It says "a person must not advertise." The duty sits with whoever controls the advertising.
In most NDIS organisations, that is the business, not the individual clinician. The organisation owns the website, runs the social media accounts, and signs off the brochures. So the organisation is the advertiser, and the organisation wears the $120,000 body-corporate penalty if the content breaches the rule.
There is one narrow carve-out. Section 133(2) says a person does not commit an offence merely because, as part of their business, they print or publish an advertisement for someone else. That protects the neutral printer or platform. It does not protect the provider who wrote and controls the copy.
The practical read: if your name is on the website and you decided what it says, you are the advertiser. Delegating the writing to a junior staffer or an agency does not move the liability off your organisation. It is worth checking whether your marketing agency actually understands AHPRA before you hand them the keys.
What should a dual-regulated provider actually do?
You do not need a law degree. You need one habit: sort every piece of content by the service it describes, before you publish it.
Ask a single question of any testimonial, case study, outcome claim, or service page. Does this describe work that a health practitioner usually provides? If yes, treat it as advertising of a regulated health service and hold it to Section 133. If it is purely about general disability support that a non-practitioner usually delivers, the National Law advertising ban is not the governing rule, though the Code and Australian Consumer Law still are.
Three moves make this reliable in practice.
Separate your content by service, not by staff member. A page about therapy services follows AHPRA rules. A page about daily-living support follows the Code and consumer law. Do not blend clinical outcomes into general-support pages, because the clinical content drags the whole page under Section 133.
Kill clinical-outcome testimonials, keep service-quality ones carefully. A review that praises a therapist's clinical results is out. A comment about your team's reliability or communication is a different animal, though it still needs consent and must not be misleading. When in doubt, leave it out.
Write compliant from the first draft. Fixing a flagged website after the fact costs more than writing it correctly once. This is the whole reason compliance-first copy exists: the rules are the brief, not an edit at the end. For the wider marketing view, our NDIS marketing guide maps all three frameworks that apply to providers.
This is general information for NDIS providers and their marketing teams. It is not legal advice. The National Law, the NDIS Code of Conduct, and AHPRA's guidelines are each updated from time to time. Check the current versions on their official sources and get formal advice for high-stakes decisions.
