Well Led Ratings - Regulation 17
Well-led is where ratings are won and lost. Here's what Regulation 17 really asks.
If I could get providers to focus on one key question, it would be Well-led.
Not because the others matter less, but because Well-led is where the causes sit. When a service is unsafe, or ineffective, or unresponsive, the reason is almost always that the leadership did not know, or knew and did not act, or acted and did not check it worked. Well-led is the diagnosis. The rest is symptoms.
CQC's draft adult social care assessment framework puts five of the 24 key lines of enquiry under Well-led — a fifth of the whole framework. That is not an accident.
What Regulation 17 actually says
Regulation 17 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 is titled Good governance. It requires providers to have systems and processes that:
- assess, monitor and improve the quality and safety of the services provided
- assess, monitor and mitigate risks to the health, safety and welfare of people using the service
- maintain accurate, complete and contemporaneous records for each person, and records relating to the running of the service
- seek and act on feedback from people using the service, staff and others
- evaluate and improve practice
Read that list again and notice the verbs. Assess. Monitor. Improve. Mitigate. Act on. Evaluate.
Not "have." Not "hold." Not "file."
Regulation 17 is not a documentation requirement. It is a requirement to run a loop: find out how you are doing, act on what you find, check whether the action worked. Almost every Regulation 17 breach I have seen comes down to a loop that opens and never closes.
The four failures I see most
The audit that goes nowhere. A medicines audit finds three errors. It is filed. Next month's audit finds three errors. Also filed. Nobody has asked why, nobody has changed anything, and in six months there is a serious incident and the audit trail shows you knew. That last part is the problem — an unactioned audit is worse than no audit, because it evidences that you were aware.
Feedback collected but not used. An annual survey, results tabulated, a summary on the noticeboard. Regulation 17 requires you to seek feedback *and act on it*. What changed because of what people told you? If the answer is nothing, you have completed half a duty.
Records that are neither accurate nor contemporaneous. Care notes written at the end of a shift from memory. Gaps. Entries that contradict each other. The regulation says accurate, complete and contemporaneous. Retrospective completion fails on the third word regardless of how good the content is.
Governance that exists on an org chart. A monthly quality meeting with no agenda, no data, no actions with owners and dates, and no review of last month's actions. That is a meeting, not governance. Governance is the thing that would have caught the problem.
Why this gets harder under the new framework
CQC is removing numerical scoring and replacing it with rating characteristics — written descriptions of what each rating looks like. That change hits Well-led harder than anything else.
Under scoring, you could evidence governance by showing that governance activity happened. Meetings held, audits completed, policies reviewed. Activity converted into score.
A rating characteristic describes a service. A description of a well-led service is not a description of a service that holds meetings. It is a description of a service where leadership knows what is happening, acts on it, and can show that things improved.
So the question shifts from "can you show you did governance" to "can you show your governance worked." Those are very different evidence requirements, and the second one is much harder to fake.
What I would put in place
One quality report, monthly, with numbers.
Falls, medicines errors, safeguarding referrals, complaints, incidents, staffing gaps, agency use, turnover. Trended over at least twelve months. Trends tell you things that snapshots hide, and being able to say "this went up in March, here is why, here is what we did, here is it coming back down" is the strongest evidence you can hold.
Every action with an owner and a date.
Then reviewed at the next meeting. An action list where items roll over unchanged for four months is evidence against you.
A visible thread from finding to change.
Pick any issue your audits identified six months ago and follow it. Audit finding, analysis, decision, action, communication to staff, re-check, outcome. If you can produce that thread for three or four issues, you can demonstrate Regulation 17 compliance in about ten minutes. If you cannot produce it for any, you have a problem regardless of how much paperwork you hold.
Feedback that visibly changes something.
Even small things. "You said, we did" is unfashionable but it works, because it evidences the loop.
Someone whose job is to challenge.
Whether that is a non-executive, an external adviser or a peer manager from another service, you need a person who is not invested in the answer being good. Internal quality assurance drifts towards reassurance over time. That is human, not dishonest, and the correction is external eyes.
The connection to everything else
Well-led is also where this year's other changes will show up.
Did your governance pick up the Supreme Court's June 2026 deprivation of liberty judgment and get your policies and staff briefing updated? Did you notice the Oliver McGowan Code became the benchmark for your Regulation 18 training duty in September 2025 and check your training against it? Are you preparing for the new assessment framework, or waiting?
A well-led service notices things and responds. That is, in the end, what the key question is asking.
The uncomfortable question
Here is the test I use, and I would encourage you to try it honestly.
If something went seriously wrong in your service tomorrow, would your governance records show that you knew about the risk and did something, or that you knew and did not, or that you had no way of knowing?
All three are possible. Only the first one is defensible.
If you would like an external read on your governance before CQC provides one, that is what a mock inspection is for. Get in touch if it would help.
https://www.tiffanynelsonconsulting.co.uk/contact
---
*Tiffany Nelson supports adult social care providers in England with CQC registration and inspection preparation. [tiffanynelsonconsulting.co.uk](https://www.tiffanynelsonconsulting.co.uk) | [Connect with me on LinkedIn](https://www.linkedin.com/in/tiffany-nelson-177784281)*
**Sources:** Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, Regulation 17; CQC draft adult social care assessment framework (published 24 March 2026); CQC guidance on meeting Regulation 17.