What Does CQC Regulation 17 Require From a Care Home in England?

Regulation 17 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requires a care provider to operate effective systems that let the service meet every other requirement in Regulations 4 to 20A.

Known as the good governance regulation, Regulation 17 requires those systems to assess quality and safety, manage risk, keep accurate records and act on feedback. CQC judges whether the systems work, not whether they exist, and a working system shows a loop: a finding, an action, and a later check that proves the fix held.

What Does Regulation 17 Legally Require From a Care Provider?

Regulation 17 requires a care provider to operate effective systems that ensure compliance with the rest of Part 3 of the regulations.

Duty under Regulation 17(2)	What the duty covers in a care home
Assess, monitor and improve quality and safety	The care delivered and each resident’s experience of it
Assess, monitor and mitigate risk	Risks to residents, staff and visitors
Keep a care record for each resident	Accurate, complete, and recorded at the time
Keep staff and management records securely	Recruitment and training files, audits, action plans
Seek and act on feedback	Views of residents, relatives, staff and professionals
Evaluate and improve the system itself	How the care home handles its own governance information

Regulation 17(3) adds a further duty. A care provider must send CQC a written report within 28 days of a request, and CQC can prosecute a breach of Regulation 17(3) without first serving a warning notice.

What Does CQC Expect Beyond Policies and Completed Audits?

CQC assesses whether a care home’s governance systems detect problems and change practice, so a full audit folder is not by itself evidence of compliance with Regulation 17. CQC’s guidance asks that the systems let a provider identify where quality or safety are compromised and respond without delay.

Our guide to which care home audits are mandatory and how often covers the programme that produces those governance findings.

What Are the Most Common Reasons Care Homes Breach Regulation 17?

Care homes most often breach Regulation 17 because the governance system runs but fails to detect or fix the problem. CQC’s guidance points to four gaps that make a system ineffective.

1. Audit results are not analysed by someone with the skills to understand them.
2. Risks the home identifies are not escalated, and no measure follows in a timescale matching the risk.
3. Feedback from residents, relatives and staff is recorded but produces no change.
4. The governance system is never evaluated, so a method that stopped working carries on.

How Does a Care Home Show Continuous Improvement Under Regulation 17?

A care home shows continuous improvement by repeating the same checks on a fixed cycle and proving that what one round found, the next round no longer finds. Regulation 17(2)(a) asks providers to assess, monitor and improve quality, so two rounds showing movement prove more than one clean audit.

The loop usually breaks after the audit, not during it. On paper, a finding is handwritten, typed up, turned into an action plan, then copied into the service improvement plan. Each handoff is a place where an action stalls. The time it all takes is the other weak point: an audit that eats a morning gets postponed, and a postponed audit breaks the loop before it starts.

CQC does not set a frequency for a full self-assessment against its standards, so a sensible cadence follows the home’s current rating:

Current CQC rating	Self-assessment frequency
Inadequate	Quarterly
Requires improvement	Every six months
Good or Outstanding	More than once a year

Count evidenced standards rather than building a score that imitates CQC ratings. 18 of 20 standards were evidenced this round, and 20 of 20 at the next is an improvement an inspector can follow.

What Records Do Inspectors Look At for Good Governance?

Inspectors look at the records Regulation 17 names directly: care records, staff records, management records, and the feedback a care home has collected and acted on. CQC’s guidance says care records must be complete, legible, accurate and up to date.

Management records carry the governance story: audits, action plans raised in response to risks and incidents, policies and maintenance records. Paper and electronic records are both acceptable provided they meet the Data Protection Act 2018.

What Does Good Governance Look Like in a Small Care Home?

Regulation 17 applies in full to a small care home, but the systems can be proportionate to the size and complexity of the service. A single-site residential home does not need a head office compliance function to meet the regulation.

A small home needs checks covering the regulations that apply to it, one action list for the whole home rather than one per audit, and a review looking across incidents, complaints, feedback and audit results together.

CQC’s guidance on Regulation 17(1) expects scrutiny at board level or equivalent, which in an owner-managed home means the registered provider sees the open actions. Free care home audit checklist templates give a small home a consistent starting point.

How Is Regulation 17 Different From the Well-Led Key Question?

Regulation 17 is a legal duty a care provider must meet, while Well-Led is one of the five areas CQC uses to assess and rate a service. A care home can be rated “Requires improvement” for Well-Led without CQC naming a Regulation 17 breach.

Because governance is how a home catches problems everywhere else, a gap rarely stays in Well-Led. It tends to surface as, e.g., unsafe recruitment under Safe, or care plans that miss individual needs under Responsive.

A Regulation 17 breach is a regulatory finding that can carry enforcement action, including a warning notice or prosecution. CQC assesses the five key questions using CQC quality statements, then links what it finds back to the regulations.

Does Regulation 17 Change Under CQC’s New Assessment Frameworks?

Regulation 17 does not change under CQC’s reform of its assessment frameworks. CQC has confirmed that the fundamental standards will continue to be the basis of its assessment frameworks and its enforcement action, and that its guidance will show how framework content links back to those regulations.

CQC published four draft sector-specific frameworks in March 2026 to replace the CQC single assessment framework, with key lines of enquiry replacing quality statements. A care home that organises its evidence around CQC’s guidance on Regulation 17 rather than current framework wording will not have to rebuild it.

How Does GoAudits Help Care Homes Evidence Regulation 17?

Prove improvement, not just compliance. CQC wants to see that your governance finds problems and fixes them.

GoAudits care home auditing software closes that loop in one place, making the audit the only manual step. Each check produces a timestamped report with photo evidence, and each failed item becomes an action with a named owner and a due date, so nothing is retyped into an action plan. Shorter audits are audits that happen on schedule, which keeps the loop running. 

The Northern Healthcare story shows the approach at scale: the specialist care provider logged and resolved over 1,100 quality improvement actions in 12 months across 15 locations, and credits GoAudits with meeting Regulation 17. A single care home needs the same closed loop on far fewer audits.

Start with the regulations that apply to your service, and keep the evidence that your systems found something and fixed it.