Key Takeaways
- CQC compliance means meeting the fundamental standards, Regulations 9 to 20A of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014.
- Regulation 17, good governance, requires providers to improve quality rather than simply record it, and governance is consistently among the hardest areas to evidence.
- The fundamental standards are not changing in 2026; what changes is how CQC assesses against them, with sector-specific frameworks expected late in the year.
- Internal audits are how you evidence Regulation 17, and the hardest part to prove on paper is that a problem found was actually fixed.
The Care Quality Commission (CQC) serves as the independent regulator for health and adult social care services in England. The CQC’s regulatory scope includes hospitals, care homes, dental and general practices, and services provided in individuals’ homes. The CQC assesses their performance against established standards and publishes findings to inform the public and stakeholders.
Let’s find out how health and social care providers can create a culture of transparency and accountability by identifying areas for improvement, enhancing care quality, and ensuring CQC compliance.
- Understanding CQC Compliance
- The Importance of CQC Compliance for Health & Social Care Services
- CQC Compliance Requirements
- What Does CQC Look For Under Regulation 17: Good Governance?
- How Does the CQC Ensure Compliance?
- GoAudits: A Key Tool for CQC Compliance and Improved Governance
- Free & Customisable CQC Compliance & Audit Checklists
- Common CQC Compliance Challenges Facing Health & Social Care Services
- Tips to Ensure CQC Compliance
- What are CQC Compliance Audits?
- What Does CQC Dental Compliance Mean?
- FAQs
Understanding CQC Compliance
The Care Quality Commission (CQC) is the independent regulator of health and adult social care services in England. Established in 2009, its primary objective is to ensure that care providers deliver safe, effective, compassionate, and high-quality care, while also encouraging continuous improvement within the sector.
Achieving CQC compliance involves adhering to the standards and regulations established by the Commission. This process ensures that healthcare organisations and service providers meet the essential requirements necessary to deliver safe and effective care to patients and service users.
The Importance of CQC Compliance for Health & Social Care Services
CQC compliance brings several benefits that directly impact patient care, organisational credibility, and risk management.
- Improved Patient Care
CQC compliance ensures that patient care is safe, effective, and person-centred with measures such as consistent medication administration, timely responses to health issues, maintaining secure environments, etc. This leads to better health outcomes and a more positive experience for patients.
- Reducing Legal and Financial Risks
Failure to meet CQC standards can lead to serious legal and financial repercussions, including fines or the closure of facilities. Care providers can protect themselves from liability issues such as negligence claims or breaches of safety protocols by following these guidelines.
- Quality Assurance
Care providers must comply with fundamental standards to establish a framework for continuous improvement, ensuring high-quality care at all times.
- Reputation Management
A strong CQC rating directly enhances the reputation of an organisation, while poor ratings can damage credibility and lead to reduced patient engagement. ‘Good’ or ‘Outstanding’ ratings are an indicator of trustworthiness and reliability. Ratings and reports publicly available on the CQC website allow patients and families to make informed choices.
- Funding Opportunities
Many funding bodies and commissioners prioritise organisations with proven compliance records. Evidence of CQC compliance is often a prerequisite for financial support. A strong compliance framework positions care providers to secure funding and partnership opportunities.
CQC Compliance Requirements
The CQC ensures that care providers meet fundamental standards of quality and safety, as outlined in the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. Understanding these regulations for service providers is crucial for compliance and delivering high-quality care.
- Person-Centred Care
Regulation 9 emphasises that care must be tailored to each individual’s needs and preferences. Providers should involve service users in planning and decision-making, ensuring that care plans reflect personal choices and promote well-being.
- Visiting and Accompanying
Regulation 9A ensures that individuals in care homes, hospitals, and hospices can receive visitors and be accompanied during appointments. This regulation supports emotional well-being and maintains connections with family and friends.
- Dignity and Respect
Under Regulation 10, providers must treat individuals with dignity and respect. This includes maintaining privacy, promoting independence, and ensuring that care is delivered in a compassionate manner.
- Consent
Regulation 11 requires that care and treatment are provided only with the consent of the individual or their lawful representative. Providers must ensure that consent is informed, voluntary, and can be withdrawn at any time.
- Safety
Regulation 12 mandates that care and treatment must be provided safely. This involves assessing risks, preventing avoidable harm, and following best practices to ensure the safety of service users.
- Safeguarding from Abuse
According to Regulation 13, providers must protect individuals from abuse and improper treatment. This includes implementing safeguarding policies, training staff, and responding promptly to any concerns.
- Food and Drink
Regulation 14 ensures that individuals receive adequate nutrition and hydration. Providers must cater to dietary needs and preferences, promoting health and well-being through proper nutrition.
- Premises and Equipment
Under Regulation 15, premises and equipment must be clean, secure, and suitable for their intended purpose. Regular maintenance and adherence to health and safety standards are essential.
- Complaints
Regulation 16 requires providers to have an effective system for handling complaints. Individuals must feel comfortable raising concerns, and providers should address them promptly and transparently.
- Good Governance
Regulation 17 emphasises the need for effective governance systems. Providers should monitor and improve service quality, maintain accurate records, and ensure compliance with all regulations.
- Staffing
Regulation 18 requires sufficient numbers of suitably qualified, competent and experienced staff. It also now carries a specific statutory training requirement: Section 181 of the Health and Care Act 2022 amended Regulation 18 to require all staff to receive training on learning disability and autism at a level appropriate to their role, delivered in line with the Oliver McGowan Code of Practice.
CQC considers the Code when assessing whether a provider’s training meets the standard. A certificate alone does not satisfy Regulation 18; providers need to evidence that staff can apply what they learned.
- Fit and Proper Staff
Regulation 19 ensures that individuals employed are fit and proper persons. Providers must conduct appropriate background checks and verify qualifications to maintain a safe and competent workforce.
- Duty of Candour
Under Regulation 20, providers have a duty of candour, meaning they must be open and honest when things go wrong. This includes informing service users of incidents, providing support, and offering remedies.
- Display of Ratings
Regulation 20A requires providers to display their CQC ratings at each premises where a regulated activity is carried on, and on their website if they have one. This transparency allows service users to make informed choices about their care.
What Does CQC Look For Under Regulation 17: Good Governance?
Regulation 17 is the regulation internal audit programmes exist to support, and governance is consistently among the areas providers find hardest to evidence. It requires providers to “assess, monitor and improve” the quality and safety of services, and to “assess, monitor and mitigate” risks.
The word doing the work is improve. Recording that something happened does not meet the regulation. CQC is looking for evidence that problems were identified, acted on, and resolved.
What inspectors ask for:
- The audit programme. What gets audited, how often, and by whom. A schedule that exists but shows three-month gaps is weaker than a modest one that is kept to.
- The findings. What each audit actually found, not just that it was completed.
- The actions. Issues assigned to named individuals with deadlines, and records showing they were closed.
- The trend. Whether the same issues recur, and what changed as a result.
- The records themselves. Accurate, complete, contemporaneous, and securely held.
Where providers fail. Not usually on the first item. Most services audit something. The gap is almost always between finding a problem and evidencing that it was fixed, which is the half of the loop that paper systems lose.
» For what good governance evidence looks like in practice, see what evidence works for Well-Led.
How Does the CQC Ensure Compliance?
The CQC uses a structured approach that includes regular inspections, assessments, and the issuance of ratings to ensure compliance.
Registration of Care Providers
The CQC registers health and adult social care providers that meet the necessary standards. This registration is a prerequisite for legally operating care services in England.
Regular Inspections Using the Single Assessment Framework
In November 2023, the CQC introduced the Single Assessment Framework (SAF) to standardise evaluations across all health and social care services. The CQC assesses care homes in the five key areas:
- Safe
- Caring
- Effective
- Responsive
- Well-led
What is changing. In March 2026, the CQC published four proposed sector-specific frameworks, replacing the 34 quality statements with 24 Key Lines of Enquiry and removing numerical scoring in favour of rating characteristics. Implementation is currently anticipated towards the end of 2026. The five key questions and the four-point rating scale are unchanged, so compliance work built around Safe, Effective, Caring, Responsive and Well-Led remains valid either way.
The fundamental standards themselves are unaffected. Regulations 9 to 20A remain the legal basis for registration and enforcement, and the changes apply to how CQC assesses against them, not to what is required.
CQC piloted the new approach between June and October 2026, with evaluation following. Pilot judgements carry no legal standing and do not affect current ratings. Until CQC confirms implementation, its guidance is to continue working to the published framework.
👉 Each key question is supported by quality statements, expressed as ‘we statements’. For instance, under ‘Effective,’ a quality statement might be: “We assess and monitor the quality of care to ensure it meets the needs of people.”
To gather evidence, the CQC uses six categories:
- People’s experiences of care
- Feedback from staff and leaders
- Feedback from partners
- Observations
- Processes
- Outcomes
It ensures a holistic assessment of service quality.
Scoring and Rating Post-Inspection
Following an inspection, the CQC assigns ratings to services based on their performance against the key questions. The ratings are: Outstanding, Good, Requires Improvement, and Inadequate.
👉 Read our blog to learn more about how the CQC assesses, scores, and rates care services under the single assessment framework.
Ensuring Compliance Through Continuous Monitoring
Beyond inspections, the CQC engages in ongoing monitoring of services. This includes reviewing data, feedback, and any significant events that may affect service quality. Such continuous oversight enables the CQC to identify issues promptly and take necessary actions to ensure compliance and protect service users.
The CQC plays an important role in safeguarding individuals by ensuring that care services operate in a manner that respects dignity and human rights. This includes monitoring compliance with regulations related to safeguarding and the Mental Health Act.
Enforcement Actions
When providers fail to meet required standards, the CQC can take certain actions, including issuing warning notices, imposing fines, or, in severe cases, cancelling a provider’s registration to protect service users from substandard care.
Providing Guidance and Support
Beyond regulation, the CQC offers guidance to help providers understand and meet their obligations. This support includes detailed information on regulations, best practices, and resources to assist in delivering compliant, high-quality care.
GoAudits: A Key Tool for CQC Compliance and Improved Governance
The GoAudits CQC Compliance Software can help significantly enhance governance and streamline compliance processes.
- GoAudits simplifies the auditing process. With customisable CQC inspection checklists, covering key areas such as safety, effectiveness, and leadership, you can conduct routine internal audits as well as thorough mock inspections.
- Easily attach and annotate photos directly from the app. Add time stamps, geolocation, and e-signatures to provide visual evidence and ensure transparency.
- Generate instant reports after the completion of each inspection. Review them and share them with relevant team members.
- Assign corrective actions directly within the app. Set priorities, due dates, and responsible personnel, ensuring timely resolution of issues.
- View audit scores, recurring issues, trends, patterns, past results, etc., and adjust your policies accordingly.
- With all audits, reports and corrective actions recorded in one place, demonstrate proof of strong governance and quality improvement processes at your next CQC inspection.
Free & Customisable CQC Compliance & Audit Checklists
GoAudits has an extensive library of audit checklists tailored to different healthcare settings. Care homes can use the checklists below to meet internal standards, prepare for CQC inspections, and ensure compliance.
- CQC Inspection Audit
- CQC Dental Inspection Checklist
- CQC Registered Manager Checklist
- MAR/EMAR Audit Checklist
- Care Home Audit Checklist
- Care Home General Observation
- Daily Care Home Audit
- Care Home Cleaning Checklist – Daily
- Care Home Audit Template
- Dignity in Care Audit
- Patient Care Checklist
Common CQC Compliance Challenges Facing Health & Social Care Services
Health and social care services face several common challenges in maintaining CQC compliance.
- Limited budgets often hinder the ability to invest in necessary resources, staff training, and infrastructure improvements, leading to compromised care quality.
- Inadequate staff training can result in non-compliance with CQC standards, as employees may not be fully aware of current regulations and best practices.
- High turnover rates and staffing shortages can disrupt service continuity and negatively impact patient care, making it difficult to maintain consistent CQC compliance.
- Aligning services with patient expectations requires continuous feedback mechanisms and adaptability to evolving needs, which can be challenging without proper systems in place.
- The complexity of the CQC framework necessitates thorough comprehension and diligent application to ensure compliance across all service areas.
- Inadequate record-keeping and incomplete documentation can lead to significant compliance issues.
- Internal audits conducted by the same people who deliver the care can develop blind spots. Rotating who audits what, or bringing in an external view periodically, surfaces issues a familiar eye stops seeing.
- Failing to investigate the underlying causes of incidents can lead to repeated issues and hinder the development of effective corrective actions.
Tips to Ensure CQC Compliance
Implementing the following strategies can help you meet and exceed CQC standards:
- Train Staff on CQC Standards and Requirements
Educate your team about the CQC’s fundamental standards. Regular training sessions ensure that staff understand their roles in maintaining compliance and delivering quality care.
- Update Policies and Procedures
Regularly review and revise your organisation’s policies and procedures to align with current CQC guidelines. Ensure these documents are accessible to all staff and reflect best practices in care delivery.
- Conduct regular internal audits & inspections
Internal audits help identify gaps before they become compliance issues. Use CQC standards as a benchmark during internal audits, focusing on service delivery, documentation, patient feedback, and staff performance. Engage staff in the process to create a culture of accountability and improvement.
- Conduct mock CQC inspections
Simulate real CQC inspections to prepare staff and identify potential compliance issues. CQC mock inspections provide valuable insights into your organisation’s readiness and highlight areas that need immediate attention. They also help gauge the effectiveness of your action plans and prepare staff for the actual inspection.
👉 GoAudits offers a wide range of free and customisable CQC inspection checklists you can use to conduct mock inspections.
- Keep Comprehensive Documentation and Records
CQC inspectors rely on documented evidence to assess compliance. Maintain up-to-date records of care plans, incident reports, training logs, audits, and risk assessments. Ensure your records are organised, easily retrievable, and demonstrate continuous improvement efforts.
What are CQC Compliance Audits?
A CQC compliance audit is an internal check a provider runs on itself, measuring its own practice against the fundamental standards and the assessment framework. CQC does not conduct audits; it conducts assessments. The distinction matters because Regulation 17 requires you to assess, monitor and improve your own service, and a structured audit programme is how most providers do that.
An effective audit programme covers the areas CQC examines most: medication and MAR, care planning and records, infection prevention, safeguarding, staffing and training, health and safety, and complaints and feedback.
CQC compliance audits help maintain and improve the quality of care:
- Identify areas of compliance and non-compliance.
- Ensure that services are aligned with legal and regulatory requirements.
- Foster continuous improvement by addressing deficiencies.
- Help providers prepare for CQC inspections and maintain their ratings.
👉 Regular internal audits, clear documentation, well-defined policies, and continuous staff training are essential to achieving CQC compliance.
As a care provider, you can use digital tools and software like GoAudits to systematically evaluate your performance against these standards.
For how often each audit should run, see which care home audits are mandatory and how often to run them. For choosing a tool, see how to choose software for CQC audits.
What Does CQC Dental Compliance Mean?
CQC compliance for dental practices in the UK involves meeting the regulatory standards set by the CQC. It aims to ensure patient safety, quality care, and accountability. The CQC evaluates whether dental services provide safe, effective, and compassionate care. As part of compliance, dental practices are required to undergo periodic inspections to verify adherence to these standards, typically focusing on five key areas of the CQC.
To be CQC-compliant, dental practices must keep detailed and up-to-date records on patient care, maintain properly equipped and stocked emergency kits, and follow up on actions from audits.
Preparing for a CQC inspection involves having these documents organised and accessible, ensuring staff training, and aligning internal policies with CQC requirements to demonstrate transparency and commitment to high standards.
Being CQC-compliant not only boosts patient trust but also minimises legal and operational risks for dental practices.
👉 GoAudits dental compliance software is a tailored solution for dental practices. They can use GoAudits to streamline processes, stay current with regulations, assign and track tasks, and document compliance efforts comprehensively.
FAQs
Audits are evidence, not a separate requirement. Under the framework, CQC gathers evidence across six categories, and your internal audits feed directly into two of them: processes and outcomes. An audit demonstrating that you identified a medication error, acted on it, and prevented recurrence is evidence under Safe and under Well-Led simultaneously. The audit programme is how a provider generates its own evidence between inspections.
Four things: it is dated and attributable, so an inspector can see who checked what and when; it records the finding rather than just the completion; it links to an action with a named owner and a deadline; and it shows the action was closed. Evidence that stops at “audit completed” demonstrates activity, not governance.
Yes. There is no requirement to use software, and a well-maintained paper audit file meets Regulation 17. The practical difficulties are retrieval and trend analysis: an inspector asking what changed after three medication audits over six months needs an answer, and finding it across paper files takes time you may not have during a visit. Paper also makes it harder to evidence that actions were closed, because the finding and the resolution usually sit in different places.
Yes, and increasingly inspectors ask to see the system rather than printed reports. Digital records satisfy Regulation 17’s requirement for accurate, complete, and contemporaneous records, and they make the improvement loop visible: the audit, the finding, the assigned action, and its closure in one place. Make sure whoever is on duty can navigate it, not just the registered manager.
