Compliance guide • Updated May 2025
The Complete CQC Compliance Guide for UK Home Care Agencies
Everything your agency needs to face inspection with confidence — covering all five CQC key questions, the evidence inspectors actually look for, and how to maintain it without pre-inspection panic.
How CQC inspections work
The Care Quality Commission regulates all health and social care services in England — including domiciliary (home care) agencies. Inspections can be announced or unannounced. The frequency depends on your rating: Outstanding and Good-rated agencies are typically inspected every two to three years; Requires Improvement and Inadequate agencies can expect inspections within months.
Inspectors assess your agency against five key questions. Under CQC's Single Assessment Framework, each question is broken down into quality statements — clear descriptions of what good care looks like that guide what evidence inspectors gather. The five questions are: Is the service Safe? Is it Effective? Is it Caring? Is it Responsive? Is it Well-led?
Inspectors gather evidence through three methods: reviewing documentary records, observing care being delivered, and speaking with staff, clients and families. This guide covers what documentary evidence you need — in enough detail to act on it.
Safe — what evidence inspectors look for
The Safe key question asks whether people are protected from abuse and avoidable harm. For home care agencies, the evidence inspectors look for includes:
- Medication administration records — complete, accurate, timestamped records for every scheduled and PRN medication. Missed doses must be documented with a reason, not simply left blank.
- Visit records — evidence that every commissioned visit happened, at the contracted time, by a qualified carer. GPS-verified clock-in records are the clearest form of this evidence.
- DBS and safer recruitment — valid DBS checks for every member of staff, with clear records of when they were obtained and when they're due for renewal.
- Incident and accident records — documented incidents, including near-misses, with evidence that they were reviewed and acted upon by management.
- Risk assessments — up-to-date risk assessments for each client, covering their home environment, moving and handling needs, and any specific risks associated with their care.
- Safeguarding processes — a clear safeguarding policy, evidence that staff have been trained on it, and records of any safeguarding referrals made.
Common Safe failures
Blank spaces on MAR sheets (rather than documented refusals), no record of what happened when a visit was missed, and DBS records that have expired without renewal.
Effective — training, care plans and outcomes
Effective asks whether care, treatment and support achieves good outcomes. For domiciliary care, this centres on whether your carers are properly trained, whether care plans reflect each person's current needs, and whether care is actually making a difference to people's lives.
- Staff training records — mandatory training (moving and handling, safeguarding, infection control, medication awareness, fire safety) completed by all staff, with expiry dates tracked and renewals planned.
- Competency assessments — evidence that staff have been assessed as competent in the care they're delivering — especially for clinical tasks like catheter care or PEG feeding.
- Care plans — personalised, regularly reviewed care plans that reflect each client's current needs, preferences and goals. Version history matters: inspectors want to see that plans are updated when needs change.
- Carer qualification matching — evidence that only carers with the right qualifications are assigned to visits requiring specific skills.
Caring — dignity, involvement and feedback
Caring asks whether staff involve and treat people with compassion, kindness, dignity and respect. Evidence here is harder to document than in Safe — but it's not impossible.
- Client and family feedback — regular, recorded feedback from clients and their relatives. This can be satisfaction surveys, portal feedback, or documented conversations.
- Continuity of care records — evidence that you prioritise sending familiar carers. Inspectors look at whether continuity is tracked and whether it's a priority when building rotas.
- Family involvement — records of family meetings, care reviews with family present, and any mechanisms you have for families to stay informed (such as a family portal).
- Complaint records — a complaints log, with evidence that complaints were investigated, responded to, and used to improve services.
Responsive — person-centred care and complaints
Responsive asks whether services are organised so that they meet people's needs. For home care, this is largely about how quickly and effectively you respond when things change or go wrong.
- Response to missed visits — documented evidence of how quickly missed visits were identified and what action was taken. Inspectors look at specific cases.
- Care plan change records — evidence that when a client's needs changed, their care plan was updated promptly and the relevant carers were informed.
- Complaints handling — documented complaints with response times, investigation outcomes and evidence that learning was used to improve services.
- Flexibility of scheduling — evidence that visit times can be adjusted to meet individual preferences, and that requests for changes are acted on.
Well-led — governance and continuous improvement
Well-led asks whether leadership, management and governance assure high-quality, person-centred care, support learning and innovation, and promote an open and fair culture. This is about what management does, not just what carers do.
- Quality monitoring systems — evidence that management regularly reviews data on visit completion, medication compliance, complaints and incidents — and uses it to identify and act on problems.
- Staff supervision and appraisal records — documented supervision meetings and annual appraisals for every member of staff.
- Audit records — regular internal audits of care records, MAR sheets and visit logs, with documented findings and actions.
- Business continuity plans — documented plans for how you'd maintain care delivery in an emergency (severe weather, loss of key staff, system failure).
The most common compliance failures in home care
Based on CQC inspection reports published between 2022 and 2024, these are the most frequently cited failures in domiciliary care:
- Incomplete medication records. Blank MAR sheets — without documented reasons for non-administration — are the single most common Safe failure. The fix: switch to eMAR, which requires carers to record an outcome for every medication on every visit.
- Expired training records. Moving and handling certificates, safeguarding training and DBS checks that have lapsed without renewal. The fix: track expiry dates in your system with automatic alerts before they're reached.
- No evidence of care plan reviews. Care plans that haven't been reviewed in 12+ months, or have no version history. The fix: set a review schedule in your system and require a dated sign-off for every review.
- No response-to-missed-visit records. Inspectors ask what happened when a specific visit was missed. If you can't show the alert, the call and the action taken, the evidence isn't there. The fix: real-time missed visit alerts with a documented response workflow.
- No quality monitoring evidence. Managers saying they monitor quality without being able to show how or what they found. The fix: regular, documented audits using data from your care management system.
How to maintain compliance day to day
The agencies that perform best at inspection are not the ones that prepare hardest before an inspection. They're the ones whose normal operations generate compliance evidence continuously.
That means:
- Every visit is verified. GPS clock-in means you have documented evidence of every visit that happened — automatically, without any additional administrative work.
- Every medication is recorded. eMAR means carers record administration or non-administration at the point of care — creating a complete, timestamped record that no inspector can fault.
- Training expiry is monitored automatically. Alerts before expiry dates are reached mean you never schedule a carer with lapsed training.
- Incidents are reported in real time. Mobile incident reporting means events are documented immediately — not reconstructed from memory at the end of a shift.
- Management reviews data regularly. Dashboard reporting on visit completion, medication compliance and incident trends means management can evidence their quality monitoring processes.
iStaffRota is designed to make all of this happen as a byproduct of your normal operations — not as additional administrative overhead. If you'd like to see how it works in practice, book a 20-minute demo and we'll walk you through a mock inspection scenario.