The TEQSA compliance mistakes that catch registered providers are made in the quiet years between decisions: a material change notified late or not at all, a risk register that has not been reviewed since the application, course reviews that were scheduled and never done, data returns that contradict the provider's own website, third-party arrangements nobody monitors, and conditions of registration that were never formally closed out. None of these is a registration-day problem. All of them surface at renewal, and several can trigger scrutiny well before it.
Registration is the start of a regulatory relationship, not the end of one. This article works through the six post-registration failures I see most often across our TEQSA registration and compliance work, why TEQSA notices each of them, and the habit that prevents it.
Why TEQSA compliance mistakes surface years after registration
A registered provider is assessed on a risk basis. TEQSA's renewal application guide says plainly that it does not require evidence against every standard; instead it weighs compliance history, annual data and the strength of the provider's own self-assurance. That means the record you build between registration and renewal is the case TEQSA will read. A provider with a clean notification history, current registers and completed reviews walks into renewal with a short evidence index. A provider without them walks in with a story to explain.
The other reason these mistakes surface late is that the Threshold Standards are written in the present tense. Standard 5.3 requires that courses are reviewed; Standard 6.2 requires that risks are managed. A policy that says these things will happen is not compliance with a standard that says they do. The step-by-step approach to keeping that record is set out in TEQSA compliance for private providers; this article is about what goes wrong when nobody follows it.
Mistake one: late material change notifications
Section 29 of the TEQSA Act 2011 requires a provider to notify TEQSA of a material change, and TEQSA's material change notification policy sets the deadline at no later than fourteen days after the provider would reasonably be expected to have become aware of it. The categories are broad: changes of ownership, major shareholding or CEO; incidents significantly affecting student safety; matters going to good standing; significant revenue changes; new third-party delivery arrangements; and major course changes, including notable reductions in duration.
The mistake is not usually concealment. It is a CEO who resigns in March, a board that appoints a replacement in April, and a compliance officer who notifies TEQSA in June because nobody realised a CEO change was a notifiable event. In my experience the fourteen-day clock is the single most missed deadline in the sector, because the events that start it are business events, not compliance events, and the people managing them are not thinking about the regulator. I cover the triggers at length in what triggers TEQSA scrutiny under material change. The fix is a standing agenda item at every governing body meeting asking whether anything decided today is notifiable.
Mistake two: a risk register nobody has opened
Standard 6.2 requires risk management, and the renewal guide lists a risk register, policy and procedures as mandatory evidence. Every registered provider has a register because every application needed one. Far fewer have a register that has changed since.
TEQSA reads the register against what actually happened. If the register from 2023 rates "loss of key academic staff" as low likelihood and the provider lost its Dean and two course coordinators in 2024, an assessor will ask what the governing body did with that information, and the honest answer is often nothing. The fix is mechanical: the register goes to the governing body at least twice a year, every rating is revisited, and the minutes record which ratings changed and why. A register that changes is evidence the system works; one that never changes is evidence nobody uses it.
Mistake three: course reviews scheduled and not done
Standard 5.3 requires comprehensive review of each course at least once during its accreditation period, and interim monitoring in between. A course review policy adopted at registration typically sets a schedule that looks sensible on the day and then collides with reality: the academic board meets less often than planned, the person responsible leaves, and the review of the flagship Bachelor degree slips a year, then two.
The consequence appears at renewal of course accreditation, where TEQSA expects to see the review, the external input, the changes made and the academic board's consideration of all of it. A review done in a hurry in the six months before lodgement reads as exactly that. In my experience the fix is to give the academic board a review calendar it owns, with a standing report on progress at every meeting, so that slippage is visible to the board rather than discovered by the assessor.
Mistake four: data that contradicts the website
Every registered provider lodges annual data with the regulator and publishes information for prospective students under Standard 7.1. The two need to agree. When the data return records one delivery location and the website advertises three, or the return reports a course as not delivered and the website is taking enrolments for it, TEQSA has two inconsistent statements from the same provider and will ask which is true.
This is a version control problem, not a dishonesty problem, but assessors cannot tell the difference from the outside. The fix is a single source of truth for course scope, locations, modes and durations, checked against the National Register and the website each time a data return is prepared. The broader alignment task, keeping every public statement consistent with the standards and the register, is the subject of aligning with the national higher education standards.
Mistake five: third parties left to run themselves
Standard 5.4 makes the provider responsible for every course delivered with or through another party, and TEQSA's material change categories include both new third-party arrangements and failures of control over existing ones. The mistake is a signed agreement, a launch, and then silence: no site visits, no moderation of assessment, no reports to the academic board, no review of the partner's staffing against Standard 3.2.
Assessors ask a direct question: how does the academic board know that students at the partner site are receiving the accredited course? If the answer is that the partner sends an annual letter, the provider has delegated its accountability, which it cannot do. The fix is a third-party monitoring schedule owned by the academic board, with moderation samples, staff qualification checks and student feedback reported by partner and by cohort.
Mistake six: conditions never formally closed out
Conditions imposed on registration or accreditation have due dates and evidence requirements. The mistake is doing the work and never telling the regulator. A provider that was required to appoint two independent directors within twelve months, did so in month nine, and never wrote to TEQSA is technically still carrying an open condition, and it will appear on the National Register until it is varied or removed.
The fix is to treat every condition as a project with a closing report to TEQSA, and to request variation or revocation formally once the evidence exists. The fee for varying or revoking conditions is modest against the cost of arriving at renewal with a condition that was met but never closed.
My advice: run compliance as a calendar, not a memory
Every one of these TEQSA compliance mistakes has the same cause: the obligation was known once, at registration, and then relied on someone remembering it. The providers that avoid them keep a compliance calendar owned by the company secretary or compliance lead, reported to the governing body at every meeting, listing material change checks, risk register reviews, course review milestones, data return reconciliations, third-party monitoring and condition deadlines. It is not sophisticated. It is simply written down and looked at.
Renewal is where the calendar pays for itself. A provider that can hand TEQSA a self-assurance report backed by five years of dated, minuted compliance activity has done most of the work already, and has avoided the requests for further information that turn a nine-month assessment into a much longer one.
Download the Darlo Re-registration Evidence Index Template
— a working index that maps five years of compliance activity to the Threshold Standards, drawn from our TEQSA registration and governance work with private providers. Get the template
Want the full article?
Enter your email for free access to the rest of this guide and our TEQSA resource library.
Frequently asked questions
What is the deadline for notifying TEQSA of a material change?
No later than fourteen days after the provider would reasonably be expected to have become aware of the change, under section 29 of the TEQSA Act and TEQSA's material change notification policy.
Does TEQSA check whether our risk register has been reviewed?
Yes. Risk management evidence is mandatory at renewal, and assessors compare the register's ratings with what actually happened at the provider. A register that has not changed since registration reads as unused.
How often must a course be reviewed under the Threshold Standards?
Standard 5.3 requires a comprehensive review of each course at least once during its period of accreditation, with ongoing monitoring in between. The provider's own policy sets the schedule, and TEQSA expects it to be followed.
What happens if a condition of registration is met but never closed out?
The condition remains on the National Register until TEQSA varies or removes it. The provider should write to TEQSA with evidence that the condition has been satisfied and request variation or revocation formally.
Dr Brendan Moloney is CEO of Darlo Higher Education, Australia's largest specialist TEQSA consultancy. He holds a PhD from the University of Melbourne, is a Cambridge University Press author on governance in higher education, and has advised private providers on registration and course accreditation for more than fifteen years.