Key Legislation

Nobody working in care needs to memorise Acts of Parliament, but every care worker is carrying them out, shift after shift. When you knock before entering a room, you are honouring dignity rights. When you record medication properly, you are meeting a regulation that exists because people were harmed when records were sloppy. The law is not paperwork for its own sake — it is the minimum promise the country makes to people who depend on care.

The framework has layers. Acts of Parliament (primary legislation) set the big duties. Regulations (secondary legislation) fill in the detail, such as the fundamental standards that CQC enforces. Statutory guidance tells councils and providers how to apply the law, and while it is not the law itself, you need a very good reason to depart from it.

Adult social care law in England is also in a period of genuine change: the independent commission chaired by Baroness Casey is working towards a national care service — its timetable was accelerated in August 2026 to report by summer 2027, alongside a nationwide public conversation and cross-party talks; from late September 2026 households across England began receiving invitations to join its Public Panel on Care. Pay is changing too: an Adult Social Care Negotiating Body, bringing unions and employers together, is due to be set up by the end of 2026, with negotiations from April 2027 and the first Fair Pay Agreement taking effect in April 2028. Court rulings have reshaped how deprivation of liberty is understood, and data protection law was updated in 2025. The safest habit is simple: know the core Acts below, and check the official source before relying on any detail.

• Care Act 2014 — the foundation of adult social care in England. It puts individual wellbeing at the centre, and covers needs assessments, eligibility, care planning, carers' rights, safeguarding enquiries (section 42), advocacy, market oversight and continuity of care when people move.
• Health and Social Care Act 2008 — establishes the Care Quality Commission (CQC) and the registration system for providers of regulated activities such as personal care.
• Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 — the "fundamental standards" (regulations 9 to 20A): person-centred care, dignity, consent, safe care, safeguarding, nutrition, premises, complaints, good governance, staffing, fit and proper persons, and the duty of candour.
• Care Quality Commission (Registration) Regulations 2009 — registration requirements and the statutory notifications providers must send to CQC, such as deaths and serious incidents.
• Mental Capacity Act 2005 — the five principles, the two-stage capacity test, best-interests decision-making, Lasting Powers of Attorney, IMCAs, and the Deprivation of Liberty Safeguards (Schedule A1).
• Mental Health Act 1983 — detention and treatment for mental disorder; relevant in care settings for people on section 117 aftercare or community treatment orders.
• Health and Safety at Work etc. Act 1974 — employer and employee duties, supported by regulations on manual handling, COSHH, RIDDOR and more.
• Equality Act 2010 — nine protected characteristics, the duty to make reasonable adjustments, and protection from discrimination.
• Human Rights Act 1998 — brings the European Convention rights into UK law, including Article 5 (liberty) and Article 8 (private and family life), which run through capacity and safeguarding work.
• Data Protection Act 2018 and UK GDPR — how personal and special category data must be handled; amended by the Data (Use and Access) Act 2025, which is being brought into force in stages.
• Health and Care Act 2022 — created integrated care systems, gave CQC oversight of local authority social care duties, and introduced the requirement for training on learning disability and autism (the Oliver McGowan Mandatory Training).
• Public Interest Disclosure Act 1998 — protects workers who blow the whistle on wrongdoing.

CQC does not expect care workers to quote legislation, but it does expect providers to show the law working in practice. Assessors look for governance that keeps pace with legal change: policies that reference current law, training that reflects it, and records showing that rights — consent, capacity, dignity, safeguarding — are respected day to day.

Registered managers should be able to explain how legal duties are met, evidence statutory notifications sent on time, and show that statutory guidance (such as the Care and Support statutory guidance under the Care Act) informs how the service operates. A policy folder that still cites repealed rules is a red flag for the well-led question.

• Keep a short "legal register" for the service: the Acts and regulations that apply, when policies referencing them were last reviewed, and who owns each one.
• Build law into induction in practical terms — "this is why we knock", "this is why we record refusals" — rather than as abstract module titles.
• Watch for change: subscribe to CQC provider bulletins and check GOV.UK when news mentions social care reform. In 2026 that particularly means the Casey Commission (reporting by summer 2027, with its Big Conversation on Care under way), CQC's new assessment framework, the developing guidance on deprivation of liberty, the pending Liberty Protection Safeguards, the Fair Pay Agreement for care workers, and the Data (Use and Access) Act 2025 changes now in force.
• When guidance and habit conflict, follow guidance and update the habit. "We've always done it this way" has no legal weight.
• Encourage staff to ask "what does the law say here?" in supervision — it builds confidence and surfaces training gaps early.

Example 1. A domiciliary care coordinator notices a support plan says a person "must" have a shower every morning. She recognises a Care Act and MCA issue: the person has capacity and increasingly refuses. The plan is rewritten around the person's own choice — showers offered, preferences recorded, refusals respected and documented — turning a potential dignity breach into person-centred practice.

Example 2. A new deputy manager audits the policy file and finds the data protection policy was last reviewed before the Data (Use and Access) Act 2025 existed. Rather than quietly re-dating it, she checks the ICO's current guidance, updates the subject access request procedure, and records the review — exactly the governance trail an inspector wants to see.