Between September 2025 and February 2026, the National Law, the National Regulations and the NQS were changed to strengthen child safety. The headline changes: abuse allegations must be notified to the regulator within 24 hours (from 1 September 2025); vaping banned and a digital technologies policy required (1 September 2025); the NQS refined for child safety (1 January 2026); and from 27 February 2026, a paramount consideration duty, rules limiting personal devices, mandatory child protection and child safety training for everyone, an offence of inappropriate conduct, stronger Working with Children Check rules, no more ongoing waivers for regulation 115, and a National Early Childhood Worker Register.
A single timeline of what changed and when, with what each change means for approved providers, nominated supervisors and staff. Where a detail depends on further guidance, the page says so.
| Date | Change |
|---|---|
| 1 September 2025 | Required policy and procedures for the safe use of digital technologies and online environments; notification of physical or sexual abuse allegations or incidents cut from 7 days to 24 hours; vaping substances and devices banned at services |
| 10 December 2025 | Longer limitation period for prosecuting offences, with a new “stop the clock” provision; more information sharing by regulatory authorities, including from recruitment agencies; an offence for a person under a prohibition notice to give a recruitment agency false or misleading information about it |
| 1 January 2026 | NQS refined to make child safety explicit in Quality Areas 2 and 7 (details) |
| 2 January 2026 | Higher penalties and more infringement offences and regulatory penalties |
| 27 February 2026 | The main package, below |
Source: ACECQA’s commencement summary. NSW, Victoria and WA have published their own information on how the changes apply there.
Everyone involved in running or delivering a service must make the safety, rights and best interests of children the paramount consideration in all their decisions and actions. That includes approved providers, persons with management or control, nominated supervisors, educators, staff and volunteers (including students). The National Law already had this as a guiding principle; it is now a statutory duty, and it applies to decisions such as recruitment, not only to work with children. ACECQA notes that for company directors it prevails over inconsistent duties under the Corporations Act 2001.
Images of children must be captured, stored or transmitted only on devices supplied by the service. In family day care, devices authorised by the service are also allowed. These devices cannot be used for personal purposes. In centre-based services, staff must not have personal devices in their possession or control while working directly with children, except in limited circumstances ACECQA describes. Update your digital technologies policy.
All staff members, volunteers and students must complete child protection training and child safety training, whether or not they work directly with children. Providers must also make sure people know their obligations under the child protection law of their state. See child protection requirements by state.
It is now an offence for an approved provider, nominated supervisor, staff member or volunteer to subject a child to inappropriate conduct while the child is being educated and cared for. Providers and nominated supervisors must also make sure children are not subjected to it.
Everyone working in a service must hold a valid Working with Children Check (or Working with Vulnerable People registration) before they start. ACECQA notes this changes practice in WA, the ACT and the NT. Staff must tell their approved provider about any change to their check status, and providers must notify the regulator of such changes.
Providers can no longer apply for an ongoing service waiver of regulation 115, which requires premises (including toilets and nappy change areas) to be designed and maintained so children can be supervised at all times.
Regulators gained wider powers to respond to misconduct, to identify and monitor related providers, and to enter and inspect family day care premises. A National Early Childhood Worker Register was established under the National Law. According to ACECQA, approved providers must update it within 14 days of employing, engaging or appointing a worker or changing workforce information. Check ACECQA for when the register goes live for your service.
A serious incident, or an allegation or incident of physical or sexual abuse, must be notified to the regulator within 24 hours (regulation 176). Families must be told about any incident within 24 hours under regulation 86.
Under the National Law and Regulations: a paramount consideration duty for children's safety, rights and best interests; rules on service devices and personal devices; mandatory child protection and child safety training for all staff, volunteers and students; an offence of inappropriate conduct; stronger Working with Children Check rules; no ongoing waivers of regulation 115; wider regulator powers; and a National Early Childhood Worker Register.
Yes. From 27 February 2026, all staff members, volunteers and students must complete child protection training and child safety training, whether or not they work directly with children.
In centre-based services, personal devices must not be in a person's possession or control while working directly with children, except in limited circumstances. Images of children must be taken and stored on service-supplied devices.
24 hours. From 1 September 2025, notifications of physical or sexual abuse allegations or incidents to the regulatory authority were cut from 7 days to 24 hours.
A register under the National Law that gives regulators visibility of who works in the sector and where. ACECQA says approved providers must update it within 14 days of engaging a worker or changing workforce information.
WIDEN Law answers National Quality Framework questions with inline citations to the National Law, the Regulations and the NQS, so you can check the source provision yourself.
14-day free trial, no card →This page is a research summary, not legal or compliance advice. It is written in our own words from the sources linked on the page; confirm the position with your regulatory authority before relying on it for a compliance decision.