The 2026 Care Home Compliance Debt Audit Checklist

The term ‘compliance debt’ is borrowed from software development, where technical debt describes the cost of shortcuts taken today that create larger problems tomorrow. In a care home context, compliance debt can accumulate when:

• Care plans are not updated to reflect changes in a resident's condition
• Medication audits are completed but action plans are not followed through
• Supervision records fall behind schedule
• Incident logs are maintained but learning from those incidents is not documented
• Governance meetings happen but minutes and outcomes are not recorded

None of these gaps necessarily mean that care quality has fallen. Providers can be delivering thoughtful, person-centred care while simultaneously holding a fragile evidence base. The problem surfaces when an inspector arrives and asks for proof.

Many providers deliver good care but struggle to evidence it. Carrying out supervision, conducting audits, and monitoring medication compliance only carry weight with the CQC when they are properly recorded, if an activity cannot be demonstrated through documentation, it effectively did not happen from a regulatory standpoint.

The CQC introduced the Single Assessment Framework (SAF) changed how health and social care services in England are assessed. The familiar five key questions- Safe, Effective, Caring, Responsive, and Well-led- remain in place, but the approach has shifted away from periodic, standalone inspections towards ongoing monitoring, with ratings able to be updated more regularly and a stronger emphasis on person-centred outcomes.

The 34 Quality Statements  framed as 'We' statements that providers are expected to evidence through their day-to-day practice.

The CQC's own review of the Single Assessment Framework,  sets out six categories of evidence that map to each of the 34 quality statements: the experiences of people using services; feedback from staff and leaders; feedback from partners; direct observation; processes; and outcomes. While inspectors have always drawn on these sources, the SAF makes the expectation explicit in a way that earlier frameworks did not.

What this means operationally is significant in the sense that instead of relying on a folder built just before a visit, providers need care records, audits, feedback, action plans and governance evidence that stand up over time.

The CQC doesn’t have a specific schedule when it comes to inspections.  Instead, the regulator prioritises services based on risk, taking into account a provider's current rating, the data signals it is generating, and whether any concerns have been raised through complaints, whistleblowing or other intelligence.

According to analysis of CQC's 2025/26 business plan, the regulator aimed to carry out around 9,000 assessments across a sector of approximately 28,000 adult social care locations- a pace that, if maintained, would mean some services wait more than three years between assessments.

CQC's 2024/25 State of Care ratings data under the Single Assessment Framework showed that care homes in England still have significant room for growth. Under the Safe key question, 5% of services were rated Inadequate and 26% were rated Requires Improvement. Under the Well-led key question, 6% were rated Inadequate and 31% were rated Requires Improvement.

Overall, 4% of services were rated Inadequate, 29% were rated Requires Improvement, 65% were rated Good, and only 2% were rated Outstanding.

These figures, drawn from the CQC's State of Care 2024/25 report, point to a sector where the majority of services are meeting the baseline, but where a substantial minority carry compliance debt that is visible to regulators.

The checklist below maps to the CQC's five key questions and the evidence categories that inspectors draw on. It is designed not as a one-time exercise but as a framework for ongoing internal review.

Safe

The Safe key question asks whether people are protected from abuse and avoidable harm. Evidence gaps here carry the highest risk of enforcement action.

Records and documentation

• Medication Administration Records (MAR charts) fully signed with no unexplained gaps
• PRN protocols in place for every as-required medication
• Monthly medication audits completed, with action plans and evidence of follow-up
• Mental capacity assessments on file where restrictions apply
• Best-interest decisions documented with evidence of consultation
• DoLS applications submitted where appropriate, with a status tracker

Staffing and training

• Staff training matrix at 100% mandatory compliance
• Care Certificate completed for staff new to care, or evidence of equivalence
• Supervision records (6–8 weekly minimum) and annual appraisals on file
• Safeguarding training records current for all staff

Incidents and risk

• Incident and accident logs maintained with documented learning outcomes
• Risk assessments aligned to current health conditions and reviewed after changes
• Infection prevention and control audits completed and actioned

Effective

Under the SAF, outcomes are assessed on the basis of real results, not paperwork alone. Inspectors consider whether residents' health and wellbeing are being maintained over time, whether medication errors or incidents are recurring, and whether the care being delivered in practice reflects what is written in care plans.

Care planning

• Up-to-date care plans showing needs, outcomes and reviews
• Care plans reviewed after hospital discharge or significant health changes
• Evidence of adherence to NICE guidance or sector best practice where applicable
• Continuity and consistency of staff documented

Outcomes tracking

• Demonstrable improvements in residents' health, wellbeing and independence
• Evidence of reduction in avoidable deterioration
• Progress toward agreed care outcomes recorded and reviewed

Staff competence

• Staff competency assessments on file
• Evidence of ongoing professional development

Caring

The Caring key question looks at whether staff treat people with compassion, dignity and respect. Evidence here is drawn heavily from people's experience and observation.

Resident and family feedback

• Feedback forms, surveys and complaints/compliments data collected and reviewed
• Evidence that feedback has influenced practice changes
• Family engagement records maintained

Observation and culture

• Spot check and quality monitoring visit notes on file
• Senior staff observations of care interactions documented

Responsive

The Responsive key question asks whether services are organised to meet people's individual needs.

Access and continuity

• Rostering records demonstrating punctuality and reliability
• Logs of missed or late care and corrective actions taken
• Admission assessments completed thoroughly within 48 hours

Complaints handling

• Complaints policy displayed and included in resident welcome packs
• Complaints log capturing verbal and written complaints, with investigation, written response and outcome
• Evidence of practice changes resulting from complaints

Individual needs

• Individualised activity plans based on assessed interests
• Communication needs documented and met

Well-Led

Well-Led is the key question most directly connected to compliance debt. Regulation 17: Good Governance requires providers to have the systems and processes in place to meet their wider regulatory obligations. This means maintaining robust governance arrangements, including auditing and assurance mechanisms, that actively assess, monitor and drive improvement in both the quality and safety of care, and the experience of the people receiving it. Providers are also required to identify and mitigate risks to the health, safety and welfare of residents and others.

Beyond governance structures, Regulation 17 also requires providers to maintain accurate, complete and securely held records, covering individual residents, staff employment, and the overall management of the regulated activity.

Governance and oversight

• Governance meeting minutes recorded with actions and owners
• Quality assurance audits completed across all key areas, with findings tracked to closure
• Provider Information Return (PIR) kept current and accurate
• Clear accountability structures documented

Learning and improvement

• Evidence that audits have led to measurable improvements
• Lessons learned from incidents shared with staff
• Complaints analysis used to inform service development

Leadership and culture

• Staff surveys or feedback mechanisms in place
• Evidence of open, transparent culture, including speaking-up arrangement

Many care homes operate across multiple disconnected tools: a paper MAR chart, a separate digital care planning system, a spreadsheet for training records, and a manual process for complaints. Each system holds a fragment of the compliance picture. When an inspector arrives, the task of assembling that picture falls to the manager, often under time pressure and without a clear audit trail.

Paper-based systems are not penalised directly by the CQC, but they are poorly suited to producing the kind of real-time audit trails, accessible evidence and trend analysis that inspectors now expect to see when examining the Processes and Outcomes evidence categories.

Digital care records change this dynamic, as when a provider that can retrieve a timestamped, complete record of any care activity within minutes is in a fundamentally stronger position than one that must search through paper files and that difference is visible to an inspector from the moment they arrive.

Digitising a fragmented system produces a fragmented digital system. The meaningful shift comes from connecting those processes so that a completed medication audit automatically feeds into the governance dashboard, a resolved complaint is linked to the care plan it informed, and a training gap triggers an alert before it becomes a compliance gap.

NHS England's Digitising Social Care (DiSC) programme has accelerated the move to Digital Social Care Records (DSCRs) across adult social care in England. The Assured Solutions List identifies DSCR products that have been assessed by NHS England against the DSCR Capability Assessment and Standards Assurance Process.

Products on the list meet a defined baseline of functionality for social care providers, including the ability to generate reports and track record changes, and have cleared financial and security checks. Compliance with national standards means these solutions also support providers in governance processes and evidence collection.

A Digital Social Care Record is a secure digital platform through which care providers record, manage and share information about the people in their care. Rather than relying on paper files, DSCRs create structured, auditable records that authorised staff can access safely and consistently.

A connected ecosystem goes further than a single DSCR. When care planning, medication management, staff training, incident reporting, complaints handling and governance oversight are held within a unified platform, the compliance picture becomes visible in real time.

Access Evo is one example of this connected approach. Evo is the AI-enabled layer built into the Access care products, bringing the care suite together behind a single sign-on, so that teams work from one shared workspace instead of moving between separate systems.

Because the products draw on centrally held data, managers and care professionals see the same up-to-date information, and real-time insights show what needs attention, with direct links to the relevant records. Finance and HR software can feed into the same view, which adds workforce and operational context to the care picture. For compliance purposes, this means the information behind audits, governance reviews and staff oversight sits within one environment.

Compliance debt in care homes is a structural challenge that grows from everyday gaps in evidence, and it says little about the intent of the people delivering care. The CQC's Single Assessment Framework has changed what ‘inspection-ready’ looks like, shifting the focus from a folder prepared before a visit to a continuous, evidenced record of quality care. 

This article has covered what compliance debt means in practice, mapped the evidence requirements across all five CQC key questions, and set out a care home compliance audit checklist that managers can use as a framework for ongoing internal review. It has also looked at why fragmented systems make compliance debt harder to address, and how a unified digital ecosystem built on NHS-assured Digital Social Care Records allows evidence to accumulate continuously.

Access Evo puts that approach into practice. It connects the Access care suite behind a single sign-on, draws on centrally held data and shows managers in real time what needs attention, so the information behind audits, governance reviews and staff oversight sits in one place.

Gaps can then be addressed as part of day-to-day management, well before an inspection is announced. With the CQC also moving towards a named inspector for each provider, a current and well-organised evidence base gives managers a firm footing for those conversations.

The preventative approach comes down to four habits: audit regularly, close every finding, connect your data, and make evidence generation part of the daily care workflow. When those habits are embedded, an inspector's arrival confirms what the records already show, and nobody has to reconstruct anything under pressure.