CQC Regulation 12 Safe Care and Treatment: A Practical Guide for Care Managers
Regulation 12 is the most commonly cited safety regulation. Here are its nine duties in plain English, with the evidence an inspector expects to see.
CQC Regulation 12 (safe care and treatment) requires you to provide care safely by assessing and reducing risks, using competent staff, keeping premises and equipment safe, managing medicines properly, controlling infection and planning care with others. To evidence it, keep current risk assessments, competency records, maintenance and equipment checks, medicines audits, infection control audits and an incident log that shows you learn from events.
Regulation 12 is one of the 14 fundamental standards below which care must never fall. CQC’s guidance says its intention is to prevent people receiving unsafe care and treatment, and avoidable harm or risk of harm (CQC: Regulation 12).
This guide breaks the regulation into its nine duties and shows how a registered manager can evidence each one. It supports your wider CQC compliance work and the safe key question in an inspection.
Key takeaways
- Regulation 12 has nine duties in 12(2)(a) to (i): risk assessment, mitigation, competent staff, safe premises, safe equipment, sufficient supplies, medicines, infection control and shared care planning.
- CQC accepts care carries inherent risk. It will not treat care as unsafe if you show you took all reasonable steps to manage risk.
- CQC can prosecute without a warning notice where a failure results in avoidable harm or significant risk of harm.
- Incidents must be reported, investigated and learned from, including near misses.
- Providers stay legally responsible when they use contractors or suppliers.
In this guide
- The Nine Duties of Regulation 12 and How to Evidence Them
- What Does “Reasonably Practicable” Mean in Practice?
- Incidents, Learning and Alerts
- Medicines and Infection Control: Two Areas Inspectors Test Closely
- Premises, Equipment and Contractors
- What Happens If You Breach Regulation 12?
- Keeping Safety Evidence Together
- Frequently asked questions
The Nine Duties of Regulation 12 and How to Evidence Them
| Duty | What it requires | Evidence to keep |
|---|---|---|
| 12(2)(a) Assess risk | Assess risks to health and safety of receiving care, using people with the right skills. | Dated, reviewed individual risk assessments with management plans |
| 12(2)(b) Mitigate risk | Do all that is reasonably practicable to reduce those risks. | Care plans reflecting controls; review notes after changes or incidents |
| 12(2)(c) Competent staff | Staff have the qualifications, competence, skills and experience to work safely. | Training matrix, competency sign-offs, supervision records |
| 12(2)(d) Safe premises | Premises are safe for their purpose and used safely. | Health and safety audits, fire, water, gas and electrical checks |
| 12(2)(e) Safe equipment | Equipment is safe and used safely. | Servicing logs, hoist and bed checks, staff competence on equipment |
| 12(2)(f) Sufficient supplies | Enough equipment and medicines to meet needs. | Stock checks, ordering process, emergency supplies |
| 12(2)(g) Medicines | Proper and safe management of medicines. | MAR audits, medicines policy, trained and assessed staff, error log |
| 12(2)(h) Infection control | Assess, prevent, detect and control the spread of infection. | IPC audits, training, cleaning schedules, outbreak plan |
| 12(2)(i) Shared care | Work with other services to ensure timely care planning when responsibility is shared or transferred. | Hospital transfer and discharge records, communication with professionals |
What Does “Reasonably Practicable” Mean in Practice?
CQC states that there may be inherent risks in care and treatment, and it will not consider care unsafe if providers can demonstrate they have taken all reasonable steps to ensure health and safety and manage the risks that arise. The test is not zero risk. It is whether you assessed the risk, put sensible controls in place, followed them and reviewed them.
Risk assessments should balance people’s needs and safety with their rights and preferences. They must also follow the Mental Capacity Act 2005, including best interest decision making, lawful restraint and, where required, authorisation for deprivation of liberty. See our guides on risk assessment in care and MCA and DoLS in practice.
Incidents, Learning and Alerts
CQC’s guidance on 12(2)(b) goes beyond assessments. It says:
- Incidents affecting health, safety and welfare must be reported internally and to relevant external bodies.
- They must be thoroughly investigated by competent staff and monitored until action has remedied the situation and prevented recurrence.
- Incidents include those with potential for harm, so near misses count.
- Outcomes should be shared with the person and, where relevant, their family, carers or advocates, in keeping with Regulation 20 duty of candour.
- Providers must comply with relevant Patient Safety Alerts, recalls and rapid response reports from MHRA and the Central Alerting System.
- There must be a process for anyone to raise concerns about care, and arrangements for a clinical or medical emergency.
Read more in duty of candour in a care home and our incident management log guide. Some incidents also trigger a CQC notification, covered in the notifiable events list.
Medicines and Infection Control: Two Areas Inspectors Test Closely
Medicines
CQC says medicines policies and procedures should cover supply and ordering, storage, dispensing and preparation, administration, disposal and recording. Staff must be trained and competent, and administration must follow prescriber instructions at suitable times. Covert administration must be in a person’s best interests under the Mental Capacity Act. Medication reviews should align with care plans. When errors occur, follow what to do after a medication error and keep a medication error log.
Infection prevention and control
Regulation 12 links to the Health and Social Care Act 2008 Code of Practice on the prevention and control of infections. Read our guide to infection prevention and control in care homes and check CQC’s own IPC pages, which CQC currently marks as under review.
Premises, Equipment and Contractors
CQC guidance is clear that providers keep legal responsibility when they delegate through contracts to third parties, independent suppliers or contractors. If a contractor fails to service a hoist, the breach is still yours. So keep:
- A planned maintenance schedule with dates and who is responsible.
- Contractor certificates and visit records.
- Induction and training on safe operation of equipment, including incident reporting and emergency and contingency plans.
- Budget lines for the capital and revenue cost of maintaining safety.
What Happens If You Breach Regulation 12?
CQC’s guidance says it can prosecute for a breach of Regulation 12, or part of it, if the failure results in avoidable harm to a person or exposes them to significant risk of harm. It does not have to serve a warning notice first. It can also take other regulatory action. For the full picture, see CQC enforcement action explained.
Regulation 12 is among the regulations most often cited when a service is rated Requires Improvement or Inadequate. See what causes a CQC inadequate rating.
Keeping Safety Evidence Together
CQCLogic includes an incident log with flags for CQC notification and RIDDOR, a medication error log, a DoLS/MCA tracker, a staff training tracker, a supervision log and an audit schedule that pre-loads medication, infection prevention and control, and health and safety audits. These are separate registers, so assign tasks to close every finding and keep a trail from incident to action to re-check.
Close the loop from incident to action
CQCLogic helps you log incidents, track audits and turn findings into dated actions, so you can evidence Regulation 12 on inspection day. See a sample improvement plan, view pricing or get started free.
Frequently Asked Questions
What is CQC Regulation 12?
Regulation 12 is the safe care and treatment regulation. It requires providers to assess and reduce risks, use competent staff, keep premises and equipment safe, manage medicines safely, control infection and work with others on timely care planning.
What are the nine requirements of Regulation 12?
They are risk assessment, mitigation of risk, competent staff, safe premises, safe equipment, sufficient equipment and medicines, safe medicines management, infection prevention and control, and working with other services when care is shared or transferred.
Does Regulation 12 mean care must be risk free?
No. CQC recognises care carries inherent risk. It will not consider care unsafe where the provider can show it has taken all reasonable steps to ensure health and safety and manage risks.
Can CQC prosecute for breach of Regulation 12?
Yes. CQC’s guidance says it can prosecute, without first serving a warning notice, where a failure to meet the regulation results in avoidable harm or significant risk of harm.
Do near misses need to be reported under Regulation 12?
CQC’s guidance says incidents that affect health, safety and welfare must be reported, investigated and learned from, and that incidents include those with potential for harm. A near miss therefore belongs in your incident process.
Who is responsible if a contractor fails to maintain equipment?
The provider. CQC states that providers retain legal responsibility under these regulations when they delegate through contracts to third parties or contractors.