Policies and Procedures

Policies exist to make good practice survive staff turnover, night shifts and busy days — the organisation's decisions written down so that nobody has to improvise ethics or safety at 3am. The medication procedure is why the bank worker gives medicines the same safe way your best senior does. The safeguarding policy is why a brand-new starter knows who to call. Paper doesn't care for anyone, but it's how consistency travels.

The failure modes are familiar. The policy bought as a 200-document pack and never localised — still referring to "the Company" and a head office in another county. The policy written beautifully and stored where nobody looks. The policy contradicting the other policy. The policy from 2019 confidently describing law that changed twice since. A policy set is a garden: unattended, it becomes evidence against you.

Kept alive, though, the set becomes genuinely useful: a place staff actually check ("what's our missing person procedure?"), a training backbone, and — when things go wrong — proof that the organisation had thought, decided and instructed properly, leaving the question only whether the day's events followed it.

• Regulation 17 (good governance): systems and processes to ensure compliance must be established and operated effectively — policies are the visible half of those systems.
• Several regulations effectively require specific policies: safeguarding (Reg 13), complaints (Reg 16), duty of candour (Reg 20), recruitment (Reg 19 with Schedule 3), plus statutory requirements around whistleblowing, data protection, health and safety (written policy at five or more staff) and fire.
• The statement of purpose is itself a registration requirement — kept current, reflecting what the service actually does.
• Policies should track statutory guidance (Care Act guidance, MCA Code, Hygiene Code) and current CQC expectations — and in 2026, the post-judgment deprivation of liberty guidance and Data (Use and Access) Act commencement.

CQC reads policies as a window into well-led: are they current, localised, version-controlled, legally accurate, and — the real test — do staff know and follow them? Assessors triangulate: the policy says medication competencies annually; the training matrix says otherwise; a worker describes a third arrangement. That's a governance finding regardless of how handsome the policy binder is. Expect particular attention to safeguarding, medication, whistleblowing, complaints, recruitment and — newly — how quickly the provider updated deprivation of liberty and data policies after the 2025–26 changes.

• Keep a master register: every policy, version number, owner, last review, next review, and the law/guidance it depends on — so when the law moves, you can find every affected document in minutes.
• Review on triggers as well as dates: legal change, incident learning, CQC feedback, new service type. Annual-by-rote plus never-on-events is the worst of both worlds.
• Localise everything: names, phone numbers, the actual local authority safeguarding contact, your on-call arrangements, your building. A policy is only followable when it describes your service.
• Write procedures for the reader at the worst moment: numbered steps, plain words, the phone numbers in the text. The missing-person procedure will be read at speed, by torchlight, by someone frightened.
• Launch, don't upload: new or changed policies get a briefing, a supervision mention, and a signature sheet or digital acknowledgement — then spot-check understanding, not just signatures.
• Retire loudly: when a version changes, hunt the old copies (staff room folder, night office drawer, someone's car) and remove them.

Example 1. After the June 2026 Supreme Court judgment on deprivation of liberty, a registered manager checks her master register and finds four affected documents: MCA policy, DoLS procedure, restraint policy and admission checklist. She updates them against the GOV.UK guidance, versions them, briefs seniors at the next meeting, and files the local authority's advice email with the review record. When CQC asks in November how the service responded to the judgment, the answer is a two-minute paper trail.

Example 2. A domiciliary agency's medication error investigation finds the procedure requires double sign-off for warfarin — a step designed for their old residential service, impossible with lone workers. Reality had quietly diverged for months. Rather than blaming staff for the workaround, the manager rewrites the procedure for lone working (photo verification and phone-witness for high-risk medicines), trains everyone, and notes the learning in the policy's version history. Policy and practice re-converge on purpose, not by pretence.