Regulation
Regulation 13: Safeguarding service users from abuse and improper treatment
Regulation 13 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 is the provider-side safeguarding duty. It sits alongside two statutes (the Care Act 2014 for adults at risk, the Children Acts 1989 and 2004 for children) and the local-authority Section 42 enquiry framework. This page is the plain-English explainer; the verbatim statute is at legislation.gov.uk.
What the regulation says
Reg 13(1) sets the principle: service users must be protected from abuse and improper treatment. Reg 13(2) requires the provider to establish and operate effective systems to prevent abuse. Reg 13(3) requires effective systems to investigate, immediately upon becoming aware of, any allegation or evidence of abuse. Reg 13(4) sets out the operational standards: care must not be provided in a way that includes acts intended to control or restrain a service user disproportionately, that is discriminatory, that includes degrading treatment, or that significantly disregards the service user's needs.
Reg 13(5) prohibits any deprivation of liberty for the purpose of receiving care or treatment without lawful authority. The lawful-authority route is the Deprivation of Liberty Safeguards (DoLS) under Schedule A1 of the Mental Capacity Act 2005 for care-home and hospital settings; the Court of Protection route for other settings. The DoLS regime is being replaced by Liberty Protection Safeguards (LPS); LPS implementation remains deferred at the page review date and DoLS remains in force.
What CQC expects
CQC expects providers to have a named safeguarding lead, a clear written policy that staff can find and follow, safeguarding training appropriate to role (the relevant intercollegiate guidance for healthcare staff sets out the training levels expected for different roles), and a working route from concern to local authority referral to outcome to closure. The provider does not decide whether a Section 42 enquiry (under the Care Act 2014) should run; the provider refers concerns that may meet the Section 42 threshold and the local authority decides. The provider's job is the threshold reasoning at log-time, the referral submission through the local authority channel, the outcome capture, and the change-to-practice that follows.
Inspectors do not expect zero safeguarding concerns in a complex service. Presence of concerns on the register is read as recognition operating; the inspector reads the response pattern (threshold reasoning, referral timeliness, outcome capture, aggregate themes) for the well-led signal.
What providers most often miss
The Reg 13 patterns that recurred across thirteen years of CQC inspections: threshold reasoning recorded after the fact, with the audit trail showing the reasoning paragraph dated weeks after the concern was logged; the referral submitted but the local-authority outcome letter never attached, so the concern sits indefinitely in the local-authority-referred state; no record of a staff-allegation fork where one was needed, leaving the Local Authority Designated Officer (LADO) referral or the equivalent adult-allegation process undocumented; closure with “no further action required” and no learning recorded; and the aggregate-pattern miss, where three concerns in six months at the same site about the same staff team never surfaced as a well-led concern because no one was reading the aggregate. Each of these is a Reg 13 finding on its own; the aggregate pattern is the culture finding that drives ratings on the well-led key question.
How Verivius handles it
Verivius drives this regulation through the safeguarding-reporting lifecycle. Threshold reasoning is captured at log-time. The local-authority referral track runs as a sub-lifecycle with deadline visibility. The staff-allegation fork opens as a parallel record so the two response processes stay distinct. Aggregate patterns surface on the quarterly safeguarding view at the governance meeting.
Sample policy template: Reg 13 Safeguarding from abuse. Companion lifecycle marketing page: safeguarding reporting.
Related sample policies
Verivius-authored templates that pair with this page. Verbatim statutory text plus plain-British summary and adoption sections; for adaptation, not adoption unchanged.
- Safeguarding adults policy template · Reg 13
- Safeguarding adults policy (adult social care) · Adult social care
- Safeguarding policy (dental) · Dental
- Safeguarding policy (primary care) (gp) · GP
- Under-18s and safeguarding policy (sexual health) · Sexual health
- Positive behaviour support policy template · Positive behaviour support
- Restraint and restrictive interventions policy template · Restraint
- Professional Boundaries and Conduct Policy · Reg 13
- Safeguarding Children Policy · Reg 13
Free to start, no card. A 14-day trial when you subscribe.
Last reviewed 2 June 2026