The CQC fundamental standards explained
Reviewed September 2026 · Written by Complys and checked against CQC's published guidance and the 2014 Regulations (sources below).
If the five key questions are how CQC judges quality, the fundamental standards are the floor beneath it — the standards below which care must never fall, whoever you are and wherever you provide it. They are not aspirations or good practice; they are law, set out in the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. Every registered provider must meet them, and breaching some of them can lead to prosecution. This guide takes each standard in turn and explains, in plain English, what it actually requires — and points to the regulation behind it so you can read the source for yourself.
Standards, key questions and the law
It helps to be clear about how the pieces fit. The fundamental standards live in Regulations 9 to 20A of the 2014 Regulations. They are the specific legal duties you must meet. The five key questions — Safe, Effective, Caring, Responsive, Well-led — are the framework CQC uses to assess and rate how well you meet them and how good your service is overall. So you comply with the standards as a matter of law, and you are rated against the questions. Most of what follows maps neatly onto the questions: person-centred care and dignity sit close to Caring and Responsive, safe care and safeguarding to Safe, good governance and staffing to Well-led. Keeping both frameworks in view is the clearest way to understand what CQC expects.
Person-centred care (Regulation 9)
Care and treatment must be appropriate, meet a person's needs, and reflect their preferences. In practice this means assessing each person's needs properly, planning care around the individual rather than the routine of the service, involving them (and, where appropriate, those close to them) in decisions, and reviewing the plan as their needs change. A care plan that is generic, or written once and never revisited, is the classic failure of this standard.
Dignity and respect (Regulation 10)
People must be treated with dignity and respect at all times. That includes privacy — during personal care and more broadly — support for autonomy and independence, and treating people as individuals rather than tasks. Much of this standard is met in small everyday moments: knocking before entering, not talking over people, offering real choices. It is easy to describe on paper and only proven in how a service actually feels.
Need for consent (Regulation 11)
Care and treatment must only be provided with consent. Where a person may lack the capacity to consent to a particular decision, the service must act within the Mental Capacity Act — presuming capacity, supporting the person to decide where possible, and making and recording best-interests decisions properly where they cannot. Any deprivation of a person's liberty must be lawfully authorised. Consent is not a one-off signature; it is an ongoing part of respectful care.
Safe care and treatment (Regulation 12)
Care must be provided in a safe way — assessing and managing risks to health and safety, ensuring staff have the qualifications and skills to deliver care safely, managing medicines safely, and preventing and controlling infection. This is one of the standards a serious breach of which can lead directly to prosecution where it results in avoidable harm or exposes someone to significant risk. It is the legal backbone of the Safe key question, and it is where robust risk assessment, medicines management and safe premises all sit.
Safeguarding from abuse (Regulation 13)
People must be protected from abuse and improper treatment — including neglect, degrading treatment, unnecessary restraint, and the deprivation of liberty without lawful authority. Providers must have robust processes to prevent abuse, to recognise it, and to respond and refer appropriately when it is suspected. Evidence that safeguarding concerns are recorded, referred and followed through to an outcome is central to meeting this standard.
Meeting nutritional and hydration needs (Regulation 14)
Where a service is responsible for meeting people's nutritional and hydration needs, it must ensure people have enough to eat and drink to sustain life and good health, with support to do so where needed. Like safe care and treatment, a serious breach that causes avoidable harm can lead directly to prosecution. Meeting this standard means proper assessment of dietary needs, appropriate support at mealtimes, and monitoring where there is a risk of malnutrition or dehydration.
Premises and equipment (Regulation 15)
Premises and equipment must be clean, secure, suitable, properly maintained and used correctly. This is where much of the building-safety paperwork lives — maintenance, cleanliness and infection control, and equipment such as hoists that must be safe and fit for use. It is a standard that is easy to evidence and easy to fail on through a lapsed certificate or an unserviced piece of equipment.
Receiving and acting on complaints (Regulation 16)
There must be an accessible system for people to raise complaints, and complaints must be investigated and acted on. CQC treats how a service handles concerns as a strong indicator of its overall culture. A complaints process that is genuinely used — with issues logged, investigated, resolved and learned from — meets this standard; a conspicuously empty complaints log usually signals that concerns are going unrecorded rather than that none exist.
Good governance (Regulation 17)
Providers must have systems and processes to assess, monitor and improve the quality and safety of their services, to manage risks, and to keep accurate, complete records. This is the legal heart of the Well-led key question. In practice it means a working audit cycle where findings become actions that get closed, a grip on the service's risks, and records — of care, of staff, of incidents — that are accurate and up to date. Weak governance tends to be the thread that, when pulled, unravels the rest.
Staffing (Regulation 18)
There must be sufficient numbers of suitably qualified, competent, skilled and experienced staff, and they must receive the training, supervision and appraisal they need to do their jobs. This standard covers both having enough of the right people on every shift and making sure they remain competent through ongoing training and support — not simply that a course was once completed.
Fit and proper staff (Regulation 19)
Providers must only employ people who are of good character, appropriately qualified and physically and mentally able to do their role, with the necessary checks in place — including DBS checks, right to work and references. Safe recruitment is the front line of protecting vulnerable people, and gaps in staff files are among the most common and most avoidable findings.
Duty of candour (Regulation 20)
Providers must be open and transparent when things go wrong. Where a notifiable safety incident occurs, the service must tell the person affected, offer an apology, explain what is known, and provide reasonable support — and keep a written record of having done so. The duty of candour is both a legal requirement and a cultural test: it asks whether a service faces its mistakes honestly. It is important enough to warrant a guide of its own, linked below.
Displaying ratings and fit and proper directors
Two further duties sit alongside the standards above. Under Regulation 20A, providers must display their current CQC rating — at each location and on their website — so the public can see it. And the fit and proper persons requirement for directors (Regulation 5) means those at board level who direct the organisation must themselves be of good character and competent, with responsibility for the standard set from the top. Together these ensure accountability runs both to the public and up through the organisation's leadership.
Meeting the standards in practice
The recurring theme across all of them is that the standards are met in practice and demonstrated through records — never satisfied by having a policy alone. A dignity policy does not create a dignified culture; a safeguarding policy does not protect anyone unless staff know it and act on it. The services that meet the fundamental standards comfortably are the ones where the everyday systems that keep care safe, personal and well-governed simply do not lapse: training stays current, audits lead to action, risks are known, and honesty is the default when something goes wrong. Build those habits and the standards look after themselves.
Evidence every standard, without the folders
Complys keeps the training, checks, audits, policies and records that evidence the fundamental standards current and in one place. It helps you organise and evidence your compliance — it does not certify your service or submit your statutory notifications for you; those stay with you as the provider.
Sources
- Health and Social Care Act 2008 (Regulated Activities) Regulations 2014
- CQC — Regulations for service providers
- CQC — The fundamental standards
This guide is general information, not regulatory or legal advice. Always check the current regulations and CQC's own guidance for your service type.
The fundamental standards — FAQs
What are the CQC fundamental standards?
They are the standards below which care must never fall, set out in the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014. They cover person-centred care, dignity and respect, consent, safe care and treatment, safeguarding, meeting nutritional needs, premises and equipment, complaints, good governance, staffing, fit and proper staff, and the duty of candour.
Are the fundamental standards the same as the five key questions?
No. The fundamental standards are specific legal requirements you must meet as a matter of law. The five key questions are the lenses CQC uses to assess and rate the overall quality of your service. The two are closely related — meeting the standards is a large part of being Safe, Effective and Well-led — but they are different things.
What happens if a service breaches a fundamental standard?
CQC can take action ranging from requirement notices to civil enforcement and, for the most serious breaches, prosecution. Some standards — notably parts of safe care and treatment, and the duty to meet nutritional and hydration needs — can lead directly to prosecution without a prior warning where the breach results in avoidable harm or significant risk.
Which regulations set out the fundamental standards?
Mainly Regulations 9 to 20A of the 2014 Regulations. Regulations 9 to 20 cover the substance of care, Regulation 20 sets out the duty of candour, and Regulation 20A covers the requirement to display CQC ratings. Regulations 4 to 7 deal with fit and proper persons and registration requirements that sit alongside them.
Do the fundamental standards apply to all care settings?
They apply to all providers of regulated activities, from care homes and nursing homes to domiciliary care, supported living and healthcare services. How each standard is met varies with the setting, but no provider is exempt from the standards themselves.
How can a provider show it meets the fundamental standards?
Through the everyday evidence of a well-run service — current risk assessments and care plans, safe recruitment and training records, medicines and safety audits, acknowledged policies, complaints handled and learned from, and clear governance. The standards are met in practice and demonstrated through records, not satisfied by policies alone.