CQC inspection: what it is, how to prepare, and what happens

A CQC inspection is the Care Quality Commission’s formal assessment of whether a registered health or social care service in England meets fundamental standards. Inspectors score the service against five key questions: Safe, Effective, Caring, Responsive, and Well-led. The result is a published rating of Outstanding, Good, Requires Improvement, or Inadequate.

Inspections can be announced or unannounced, so most of the evidence has to exist before anyone knocks. This guide covers what triggers an inspection, what happens on the day, and how the ratings work. It then works through how to prepare for each of the five questions.

Found our content helpful?

Key takeaways

A CQC inspection checks whether a registered service in England meets fundamental standards, judged across five key questions.

Inspections can be announced or unannounced, and are triggered by routine scheduling, risk intelligence, or a single complaint.

Services are rated Outstanding, Good, Requires Improvement, or Inadequate. An Inadequate rating can trigger special measures.

Inspectors want dated, attributable records, so consent forms, incident logs, and training files decide most of the outcome.

Practice management software like Pabau keeps that evidence in one place, ready for an unannounced visit.

What is a CQC inspection and who does it apply to?

The Care Quality Commission regulates every registered health and social care service in England. That covers GP practices, hospitals, dental practices, care homes, and independent aesthetic practices. Its legal basis is the Health and Social Care Act 2008, which lets the CQC register, monitor, inspect, and rate providers.

The CQC covers England only. Wales has Care Inspectorate Wales (CIW), Scotland has Healthcare Improvement Scotland (HIS), and Northern Ireland has the RQIA. If your service is registered in England, the CQC is your regulator, whether you are an NHS provider or an independent one. CQC registration comes first, because no service is inspected before it is registered.

What triggers a CQC inspection?

Three things prompt a CQC inspection: routine scheduling, risk-based intelligence, and a specific trigger such as a complaint. Routine inspections follow a cycle set by the provider’s last rating and sector. Risk-based inspections happen when the CQC sees a signal that standards may have slipped.

• Routine inspections: scheduled on previous rating and time since the last visit. Lower-rated providers are inspected more often.
• Responsive inspections: triggered by a complaint, a safeguarding concern, a coroner’s Regulation 28 report, or your own incident notification.
• Themed inspections: system-wide reviews across a sector, such as end-of-life care in care homes or medication management in GP practices.

How often does the CQC inspect?

Inspection frequency varies by provider type and previous rating, and there is no fixed universal cycle. The table below gives a general guide based on CQC methodology.

Announced vs unannounced CQC inspections

The CQC picks the format based on what it wants to observe. Announced inspections give notice, usually 48 hours to two weeks. They are common for complex services, where inspectors need access to named staff or specific records.

Unannounced inspections arrive without warning. The CQC uses them to see how a service runs on a normal day. They also use them when a signal suggests a problem that notice would let a provider tidy away. So the days before a visit are the wrong time to start preparing. Readiness has to be continuous.

The five key questions CQC inspectors ask

Every CQC inspection is structured around five key questions, whatever the provider type. These replaced the older Key Lines of Enquiry (KLOEs) model and now sit inside the CQC’s single assessment framework. Each question maps to quality statements that describe what good looks like, and inspectors gather evidence against those statements.

• Safe: is the service protecting people from avoidable harm? Inspectors look at medication management, infection control, incident reporting, safeguarding, and risk assessment.
• Effective: is care evidence-based, and does it achieve good outcomes? This covers clinical pathways, staff training and competency, and use of recognized guidelines.
• Caring: do staff treat people with compassion, dignity, and respect? Evidence includes patient feedback, observed interactions, and how complaints are handled.
• Responsive: is the service organized around individual needs? This covers access, waiting times, care planning, and how the service acts on feedback.
• Well-led: is leadership driving safe, high-quality care? Inspectors assess governance, staff engagement, learning from incidents, and data protection under UK GDPR.

The evidence behind each question is far more specific than the question itself. The chart below maps the five to the documents inspectors most often ask to see.

Each question is scored separately. A service can hold different ratings across the five, and the overall rating reflects the lowest question where serious concerns exist.

What happens during a CQC inspection?

A CQC inspection follows a set sequence, which takes some of the fear out of it. Inspectors work to a defined methodology rather than improvising. A peer-reviewed analysis of the process in general practice describes it in detail, and much of it applies across provider types.

1. Pre-inspection information gathering: inspectors review your previous rating, notifications, complaints, serious incidents, and monitoring data before they arrive.
2. On-site observation: they walk the premises, noting infection control standards, signage, accessibility, and whether the environment feels safe.
3. Staff interviews: clinical and non-clinical staff are interviewed on safeguarding, escalation, and how leadership responds when someone raises a concern.
4. Patient feedback: inspectors speak with patients or residents and review complaints records and Friends and Family Test data where it applies.
5. Records review: they sample clinical records, consent documentation, medication charts, staff training logs, and policies.
6. Closing conversation: lead inspectors share initial findings with the registered manager or nominated individual. No rating is given at this point.

A visit runs from a few hours for a small independent practice to several days for a large residential care service. Keeping consent forms and clinical records in order before any visit removes one of the main sources of inspection stress.

CQC inspection checklist: how to prepare your practice

The most effective preparation treats inspection readiness as continuous quality improvement rather than a one-off scramble. The areas below are organized by the five key questions, so you can audit one question at a time.

Safe

• Maintain up-to-date risk assessments for every clinical activity
• Keep a timestamped incident log that records the action taken and what changed
• Confirm every staff member has a current DBS check, with the record easy to find
• Audit medication storage and administration records regularly
• Document infection prevention and control (IPC) procedures and recent audits

Effective

• Evidence that clinical protocols follow NICE guidelines or royal college standards
• Training records for every clinical staff member, with competencies and renewal dates
• Supervision logs for non-prescribing practitioners working under prescriber oversight

Caring and responsive

• A patient feedback mechanism in place, through surveys, reviews, or a complaints process
• Evidence that feedback is reviewed and acted upon
• An accessible complaints policy, displayed or handed to patients
• Care plans or treatment records that reflect individual needs and preferences

Well-led

• An up-to-date governance structure with a named responsible individual
• Regular clinical governance meetings, with minutes and action logs
• Signed data processing agreements with every third-party processor
• Staff appraisal records showing regular performance reviews

Data protection sits inside Well-led, so work through a UK GDPR checklist alongside the clinical material. Inspectors ask who can see a patient record, how long you keep it, and what happens when someone requests a copy.

Common CQC inspection failures and how to avoid them

Most Requires Improvement and Inadequate ratings trace back to a small set of recurring problems. None of them are obscure. They build up quietly and surface the moment an inspector asks to see evidence.

• Incomplete or unsigned consent documentation: inspectors pull a sample of patient records. Missing signatures and generic forms without procedure-specific risks get flagged straight away.
• No documented learning from incidents: logging an incident is not enough. Inspectors want to see what changed afterwards, and “action taken: none” reads as a red flag.
• Expired DBS certificates or training records: practices with overdue DBS checks, or lapsed safeguarding training, consistently score lower on Safe.
• Weak governance evidence: no meeting minutes, no named responsible individual, no sign of leadership oversight. This lands directly on Well-led.
• Staff who cannot explain safeguarding: if someone cannot say what they would do about a patient safety concern, that counts as a finding.

Incident records are where most of this surfaces. A standard incident report form keeps every entry in the same shape, with the action taken sitting next to the event it followed. Practices working across several sites need that consistency everywhere, not only at the site they expect to be inspected.

CQC ratings explained

After the inspection, the CQC assigns one of four ratings to each of the five key questions, then an overall rating. Each one carries different consequences for the provider.

Ratings are published on the CQC website and are publicly searchable. Patients, commissioners, and insurers check them routinely. A Good or Outstanding rating carries commercial value. A Requires Improvement rating can affect referrals and patient trust long before you have fixed what caused it.

What happens after a CQC inspection?

The visit is not the end of the process. The CQC follows a defined post-inspection sequence before any rating is published.

1. Draft report: the inspection team writes up its findings against each of the five key questions.
2. Factual accuracy check: you can review the draft and flag errors of fact, such as wrong dates or a misdescribed process. It is not an appeal against the judgment.
3. Final report and rating published: the CQC publishes both on its website. Timelines vary, but eight to twelve weeks after the visit is typical.
4. Required actions: a Requires Improvement or Inadequate rating comes with a schedule of actions. Inadequate can bring enforcement notices, conditions on registration, or suspension.

Providers can challenge a rating through the factual accuracy process, and through judicial review if it comes to that. Appeals take time and do not delay publication of the report. Avoiding a poor rating is far cheaper than contesting one.

How the CQC single assessment framework changed inspections

The CQC began rolling out its single assessment framework (SAF) in 2023, replacing the KLOEs-based model across all provider types. The practical shift is that assessment is now continuous rather than a point in time. Between visits, the CQC collects notifications, complaints, and system data, and feeds it into the risk assessment that decides when you are next assessed.

For providers, that means the assessment window never closes. Evidence created on a quiet Tuesday in March counts as much as evidence created the week before a visit. Quality statements under the SAF are more granular than the old KLOEs. They set specific expectations about involving people in their care, and about showing that leaders learn from incidents. It is worth reading the CQC’s guidance for your own sector.

How Pabau keeps your CQC evidence audit-ready

Inspectors rarely doubt that a process exists. What they ask for is a dated, attributable record showing it was followed every time, and that is where preparation usually comes apart. Practice management software like Pabau holds that record as a by-product of the work itself.

Pabau’s compliance management software keeps the records inspectors request in one place. Consent forms sit against the patient record with a timestamp. Treatment notes carry the name of whoever wrote them. Incident logs live inside the clinical workflow instead of a spreadsheet someone has to remember to update.

None of this produces a rating on its own. Compliance stays the provider’s responsibility, and inspectors judge the evidence in front of them. What the software removes is the scramble between running good processes and proving it, at half an hour’s notice, to someone standing in your reception.

See how Pabau keeps your practice inspection-ready

Pabau brings consent forms, treatment records, incident logs, and governance documentation into one system. Your team can produce the evidence CQC inspectors ask for on the day they ask for it.

Book a demo

Conclusion

Practices that hold Good and Outstanding ratings are rarely the ones that prepare hardest in the final week. They keep the evidence current, so an inspection only asks them to show what they already have. That is the whole trick, and it is mostly an administrative habit rather than a clinical one.

Pick one of the five questions and audit it this month. Well-led is usually the quickest win, because minutes, appraisals, and a named responsible individual are documents you can produce without changing how you treat anyone. Book a demo to see how Pabau keeps consent, incident, and governance records ready for your next CQC inspection.

Continue your research

Not registered yet, or changing your registered activities? How to get CQC registered walks through the steps, timelines, and documents a new registration needs.

Want the background on the regulator itself? The role of the Care Quality Commission explains what the CQC regulates and where its powers come from.

Need to prove your records stand up? Medical chart audit sets out how to sample your own records before someone else samples them for you.

Unsure how long to keep patient files? How long to keep medical records covers retention periods and what to do when a record reaches the end of one.

Frequently asked questions