Which policies and documents does CQC expect, and how do you keep them current?

CQC asks every new provider for eleven documents, including a statement of purpose and policies on complaints, consent, safeguarding, infection control, medicines and recruitment, and the regulations require records such as contemporaneous clinical notes. Keep each policy current by checking it against what your service actually does, at least once a year and after any change in law or guidance.
The documents CQC asks every provider for
When you apply to register, CQC asks every provider applicant for the following, and rejects applications that are incomplete or out of date.1
- Building control final certificate, where a location needs building regulations approval
- Complaints policy
- Consent policy and procedure
- Equality, diversity and human rights policy
- Governance and quality assurance policies
- Infection prevention and control policy
- Medicines management and prescribing policy
- Public and employer liability insurance quote or certificate
- Recruitment policy
- Safeguarding policy and procedure
- Statement of purpose
Applicants also send a financial viability statement unless they are, for example, a corporate provider or an NHS trust, and some services need extra documents.1 These are the floor. Registered providers are judged on how the policies work in practice.
The records the regulations require
| Regulation | What it requires | What to keep |
|---|---|---|
| 17, Good governance | An accurate, complete and contemporaneous record for each person, kept securely, and feedback sought and acted on | Signed, timed notes, and a feedback log with actions |
| 17(3) | A written report on how you monitor quality and safety, within 28 days of CQC asking | Governance minutes, audits and improvement plans you can summarise fast |
| 16, Complaints | An accessible complaints system, and a summary of complaints within 28 days of CQC asking | Every complaint, response and change, in one place |
| 11, Consent | Care provided only with the consent of the relevant person | What was explained, and when the person agreed |
| 20, Duty of candour | A secure written record of meetings and communications after a notifiable safety incident | The apology, the account and the follow-up, in writing |
Each of these comes from CQC's guidance on the regulations.2345 Note the two 28-day duties. If CQC asks, you have four weeks to send a governance report and a complaints summary, so both should already exist.
How to keep CQC policies current
- Give each policy one owner. A named person, not a role, who answers for it.
- Set a review date by risk. Annually at least, sooner for safeguarding, medicines and infection control, and immediately after any law or guidance change.
- Test it against practice. Pick three recent cases and check the policy describes what actually happened. If not, change the policy or the practice.
- Make it reachable. Staff should find any policy in under a minute, and be able to say what it means for them.
- Record each review. Record the date, the reviewer, what changed and why, so you can show CQC how policies are governed.
- Policy ______ Owner ______
- Last reviewed ______ Next review ______
- Regulation it supports ______
- Checked against practice on ______ using cases ______
- What changed at the last review ______
Keeping the statement of purpose current
Your statement of purpose tells CQC what you do, for whom and where. Keep it current and notify CQC when it changes.6 An inspector will compare it with what they see, so the services you deliver and the people you serve should match it exactly.
Questions
Does CQC provide policy templates?
CQC sets out what each required document must include in its registration guidance, rather than providing a template to copy.
How often should policies be reviewed?
Set a date by risk, at least once a year, and review sooner when law, guidance or your service changes. Record every review.
What is the 28-day rule?
When CQC asks, you must send a written governance report under Regulation 17(3), or a summary of complaints under Regulation 16, within 28 days.
Sources
- 1CQC, 2026Supporting documents, documents everyone must sendRead source
- 2CQC, 2025Regulation 17, Good governanceRead source
- 3CQC, 2025Regulation 16, Receiving and acting on complaintsRead source
- 4CQC, 2025Regulation 11, Need for consentRead source
- 5CQC, 2025Regulation 20, Duty of candourRead source
- 6CQC, 2026NotificationsRead source
Written by the wai team from Care Quality Commission guidance, checked on 15 October 2026. This is guidance, not legal advice. CQC does not endorse wai or any software.
