Regulation 17: Good governance
Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (SI 2014/2936)
Last verified by Verivius on 19 May 2026. Next review due 17 Aug 2026.
Plain British summary
You have to run effective systems and processes to comply with everything else in Part 3. The regulation lists six things those systems must enable in particular: quality assessment and improvement, risk management, accurate service-user records, accurate employment and management records, seeking and acting on feedback, and continually evaluating and improving how you process all this. If CQC requests a written report on quality and risk plus your improvement plans, you have 28 days from the day after the request.
Full text on legislation.gov.uk. Treat quotes on this page as targeted excerpts, not as a substitute for the regulation.
Targeted verbatim quotes (3)
“Systems or processes must be established and operated effectively to ensure compliance with the requirements in this Part.”
Reg 17(1): the umbrella duty
“assess, monitor and improve the quality and safety of the services provided … assess, monitor and mitigate the risks relating to the health, safety and welfare of service users.”
Reg 17(2)(a) and (b): quality and risk
“maintain securely an accurate, complete and contemporaneous record in respect of each service user, including a record of the care and treatment provided to the service user and of decisions taken in relation to the care and treatment provided.”
Reg 17(2)(c): accurate service-user record
What Verivius does for you
Monthly oversight report
A cron-generated monthly report rolls up incidents, complaints, safeguarding concerns, action completion, and overdue notifications into a single document. It is designed to support the quality-and-risk monitoring duty in Reg 17(2)(a)–(b).
Append-only event streams
Every state change on every record is recorded as an immutable event. This is the structural support for "accurate, complete and contemporaneous record" in Reg 17(2)(c).