Sample policy · Reg 19

Responding to Unsafe Conduct, Fitness Concerns and Referral Duties Policy

Statutory anchor: Regulation 19 (fit and proper persons employed), Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (SI 2014/2936). The duty to make a barring referral to the DBS arises under the Safeguarding Vulnerable Groups Act 2006. This policy also engages Regulation 13 (safeguarding service users from abuse and improper treatment). · primary source

Download the PDF

The PDF version of this template is the same content, formatted for adaptation in your document control system. The disclaimer above is repeated on the PDF cover.

Verivius pack version v1, 2026-06-10

1. What the regulation says

Regulation 19 sets the fitness requirements for people employed to provide a regulated activity, and the action required where a person no longer meets them:

be of good character, (Reg 19(1)(a) (good character))

have the qualifications, competence, skills and experience which are necessary for the work to be performed by them, and (Reg 19(1)(b) (qualifications + competence))

be able by reason of their health, after reasonable adjustments are made, of properly performing tasks which are intrinsic to the work for which they are employed. (Reg 19(1)(c) (health fitness))

take such action as is necessary and proportionate to ensure that the requirement in that paragraph is complied with, and (Reg 19(5)(a) (enforcement: ensure compliance))

if the person is a health care professional, social worker or other professional registered with a health care or social care regulator, inform the regulator in question. (Reg 19(5)(b) (enforcement: inform the regulator))

Regulation 13 adds the safeguarding duties that this policy operationalises:

Service users must be protected from abuse and improper treatment in accordance with this regulation. (Reg 13(1) (the headline duty))

Systems and processes must be established and operated effectively to investigate, immediately upon becoming aware of, any allegation or evidence of such abuse. (Reg 13(3) (investigation systems))

The full text of the regulation is at https://www.legislation.gov.uk/uksi/2014/2936/regulation/19. Where this policy and the regulation diverge, the regulation wins.

2. Plain-English summary

Everyone you employ to provide a regulated activity must be of good character, suitably qualified and competent for the work, and capable in health (with reasonable adjustments). You have to operate effective recruitment procedures. For each employee you have to hold the Schedule 3 information, plus any other records required by law. Where the person is a volunteer, Regulation 19(3A) removes the requirement to obtain the Schedule 3 paragraph 7 full employment history with written explanation of gaps, unless Regulation 4, 6 or 7 applies. The identity requirement, including proof of identity and a recent photograph, still applies. Providers may still request employment history for volunteers where they consider this necessary for the role. Staff requiring professional registration must hold it. Where a person no longer meets these requirements, you must take action that is necessary and proportionate, and where they are a registered professional you must inform their regulator. Alongside this, you must protect people using the service from abuse and improper treatment, with effective systems to prevent abuse and to investigate any allegation or evidence of abuse immediately on becoming aware of it.

3. Purpose

The purpose of this policy is to protect people using the service from staff who may be unfit or unsafe to work with them.

It sets out how the service meets the Regulation 19 fitness requirements, the Regulation 13 safeguarding duties, and the duties to refer to the DBS and to professional regulators where a person may have caused harm or be unfit to practise.

The service must be able to act quickly, fairly and proportionately where a fitness or conduct concern arises, and to make the referrals the law requires.

4. Policy warning

The service must act immediately on a fitness or conduct concern. A delay can leave people using the service exposed to harm.

Protective action taken while a concern is assessed is a safety measure, not a finding of guilt.

Safeguarding, DBS and professional-regulator referrals must not be delayed while internal HR or disciplinary processes are completed. The referral duties run alongside internal process, not after it.

5. Scope

This policy applies to all staff, volunteers, agency workers, contractors and professionals involved in the regulated activities carried on by the service.

It covers concerns relating to:

6. Principles

The service applies the following principles when responding to a fitness or conduct concern:

7. Responsibilities

All staff are responsible for raising fitness and conduct concerns immediately and for cooperating with any investigation.

Managers are responsible for taking immediate protective action, completing risk assessments, gathering evidence and escalating concerns to the Registered Manager.

The Registered Manager is responsible for deciding on protective action, overseeing investigations, making safeguarding, DBS, professional-regulator, police and CQC referral decisions, and recording the rationale for each.

The Nominated Individual or provider representative is responsible for oversight of serious or persistent concerns and for ensuring the service has the capacity and authority to act on referral duties.

8. Responding to unsafe conduct, fitness concerns and referral duties

The service will act immediately where there is concern that a staff member, volunteer, agency worker, contractor or professional may not be fit or safe to work with people using the service.

The safety of people using the service takes priority over staffing convenience.

9. Immediate protective action

Where there is an allegation, concern or evidence of unsafe conduct, the Registered Manager must complete an immediate risk assessment and decide whether protective action is required.

Protective action may include:

Protective action is not a finding of guilt. It is a safety measure while concerns are assessed.

10. Investigation and evidence

The service must gather and retain clear evidence, including:

The service must continue the investigation as far as reasonably possible even if the person resigns, leaves, retires or stops attending work.

11. Safeguarding referral

The Registered Manager must make a safeguarding referral where there is concern that a person using the service has experienced, or is at risk of, abuse, neglect, exploitation or avoidable harm.

This includes concerns involving:

Safeguarding referral must not be delayed while internal HR processes are completed.

12. DBS barring referral

The service will make a DBS barring referral where the legal duty to refer is met.

This includes situations where the service withdraws permission for a person to work in regulated activity, or would have withdrawn permission but the person resigns, retires, is redeployed or leaves, and the service believes the person has:

The duty to refer to DBS is separate from any referral to the local safeguarding authority, police, CQC or professional regulator. Making one referral does not remove the need to consider the others.

The Registered Manager must record either:

13. Professional-regulator referral

Where the person is registered with a professional regulator, the Registered Manager must consider whether the concern should be referred to that regulator.

This may include referral to bodies such as the NMC, GMC, HCPC, GDC, GPhC, Social Work England or another relevant professional regulator.

Referral must be considered where there are concerns about:

Where the service decides not to refer, the rationale must be recorded.

14. Police contact

The service must contact the police where there is an allegation or evidence that a criminal offence may have been committed.

This includes, but is not limited to, assault, sexual offence, theft, fraud, wilful neglect, ill-treatment, coercive behaviour or deliberate harm.

15. CQC notification

The Registered Manager must consider whether the concern triggers a statutory notification to CQC.

This may include notifications relating to abuse or allegations of abuse, serious injury, police involvement, events that affect the safe running of the service, or other notifiable incidents.

The decision to notify or not notify must be recorded.

16. Return to work or removal from role

Before a person returns to normal duties after a fitness or safeguarding concern, the Registered Manager must record:

Where the person is no longer fit for the role, the service must take necessary and proportionate action. This may include dismissal, withdrawal from regulated activity, redeployment, referral to DBS, referral to a professional regulator, or notification to relevant authorities.

17. Records

The service must record, for each fitness or conduct concern:

Records must be kept securely and in line with the service's information-governance and retention arrangements.

18. Audit

The Registered Manager must audit fitness, conduct and referral handling at least annually.

The audit must check:

Audit findings must be recorded and actioned.

19. Review

This policy will be reviewed annually, or sooner following a relevant event such as a serious fitness or conduct concern, a safeguarding referral, a DBS or professional-regulator referral, a CQC inspection finding, a significant service change, or a change in the law or regulator guidance.

20. Related policies in this pack

This policy should be read with:

21. Sources and further reading

This template is based on CQC's guidance for providers and managers, the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, and other topic-specific legislation and guidance listed below. It is a starting point for adaptation, not a substitute for legal, clinical, HR, safeguarding or specialist professional advice.

22. When to seek further advice

Seek specialist advice where the issue involves serious harm, safeguarding, deprivation of liberty, restraint, children, professional misconduct, controlled drugs, radiation, termination of pregnancy, infection outbreak, water safety, employment dismissal, DBS barring referral, or regulatory enforcement.

23. Document control

Version Date Author Changes
v1 2026-06-10 Verivius (sample) Initial sample template, conformed to the Verivius policy standard.

This sample policy template was issued by Verivius. It is a template, not a substitute for legal advice or the tenant's own policy-development process. Where this template and live law or regulator guidance diverge, the live source wins.

Want help adapting this to your service?

A Verivius consultant can read your adapted policy against the live regulation and your service shape. The work fits inside a Mock Inspection engagement or a shorter consulting brief. A 20-minute conversation is the fastest way to find out whether the fit is right.

Book a 20-minute design-partner conversation

50% off for 12 months. Mock Inspection at the design-partner rate.

Last reviewed 10 June 2026