Duty of candour in care
Reviewed September 2026 ยท Written by Complys and checked against CQC's published guidance and the 2014 Regulations (sources below).
When something goes wrong in a care service, the instinct โ human and organisational โ can be to close ranks. The duty of candour exists to require the opposite. Set out in Regulation 20 of the 2014 Regulations, it is a legal obligation to be open and honest with people when their care causes harm: to tell them, to say sorry, to explain, and to support them. It is both a specific set of steps you must take and, more broadly, a test of a service's culture. This guide explains exactly what Regulation 20 requires, what counts as a notifiable safety incident, the steps in order, and how to build the kind of open culture that makes candour natural rather than frightening.
Where the duty comes from, and why
The statutory duty of candour was introduced after inquiries into serious care failings found that a lack of openness had allowed harm to go unacknowledged and unaddressed โ that families were too often left in the dark, and that a culture of defensiveness compounded the original harm. Regulation 20 is the response: it makes openness a legal requirement rather than a matter of good intentions. Understanding that history is useful, because it explains the spirit of the duty. It is not a bureaucratic hoop; it is a deliberate correction to the instinct to hide mistakes, built on hard evidence of what that instinct costs.
What triggers the duty: notifiable safety incidents
The duty of candour is triggered by a notifiable safety incident. In broad terms this is an unintended or unexpected incident, occurring in the course of a person's care, that a healthcare professional reasonably considers could result in โ or already has resulted in โ the death of the person, or serious or moderate harm to them. The precise thresholds are defined in Regulation 20, and they are what separate an incident that triggers the formal duty from a lesser mistake that does not.
That said, the wisest services do not treat the threshold as a line to hide behind. Even where an incident falls short of the formal trigger, the ordinary professional duty to be open and honest with the people you care for still applies. The statutory duty sets the floor for the most serious incidents; a genuinely candid service is open as a matter of habit, well below that floor.
The steps the duty requires, in order
When a notifiable safety incident occurs, Regulation 20 requires a specific sequence. Taken in order, it looks like this:
- Tell the person as soon as reasonably practicable. The person affected โ or, where appropriate, someone acting on their behalf โ must be informed in person that the incident has happened.
- Give a true account of what is known. Explain, in a way the person can understand, what happened as far as it is known at that point โ without speculation, but without holding back what is known.
- Offer an apology. A genuine apology is a required part of the duty, not an optional courtesy โ and it is not an admission of legal liability.
- Explain what happens next. Set out what further enquiries the service believes are appropriate.
- Provide reasonable support. Offer the practical and emotional support the person needs in the circumstances.
- Follow up in writing. Provide a written notification that gives the same account and apology, and share the results of enquiries as they are completed.
- Keep a written record. Securely record every step taken, including the conversations, the apology and the written follow-up.
The apology myth
One misconception does more damage to candour than any other: the fear that saying sorry is an admission of liability that will be used against the service. It is not. An apology under the duty of candour is an expression of sorrow and regret that something went wrong, and both CQC and professional guidance are explicit that staff should never be discouraged from apologising. The evidence points the other way โ being open and apologising early tends to reduce the anger, mistrust and formal complaints that follow an incident, because what most people want after harm is honesty and acknowledgement, not a defensive wall. A service that trains its staff to understand this removes the single biggest barrier to meeting the duty well.
Candour and statutory notifications are not the same
It is easy to confuse the duty of candour with statutory notifications, because a serious incident often triggers both โ but they point in different directions. The duty of candour is about being open with the person affected and their family. A statutory notification is about telling CQC. They are separate obligations, and meeting one does not discharge the other: you can notify CQC promptly and still breach the duty of candour by failing to be open with the family, or vice versa. Treat them as two parallel tracks that both run from the same incident, and make sure your process handles each.
Building a culture of candour
The formal steps only work if the culture underneath them supports honesty. In a defensive culture, staff hide near-misses, incidents get minimised, and the duty of candour becomes a reluctant exercise carried out too late. In an open culture, staff report things freely because they trust they will be supported rather than blamed, and candour with families becomes a natural extension of how the service already behaves. Building that culture takes deliberate effort: train staff on what the duty is and why it exists, make it genuinely safe to report mistakes, treat incidents as learning rather than as ammunition, and have leaders model openness themselves. A service that gets the culture right rarely has to worry about the mechanics of Regulation 20, because openness is simply how it operates.
What it looks like in practice
Suppose a resident is given another person's medication in error and, although quickly identified, needs monitoring and a GP review as a result. A defensive service might quietly note it in the medicines record and hope the family never asks. A candid service does the opposite, and the sequence is instructive. As soon as it is practical, a senior member of staff speaks to the resident and their family in person, explains plainly what happened and what is being done to check the resident is safe, and apologises sincerely. They explain that the service will review how the error occurred and share what it finds. They offer whatever support is needed. Then they follow up in writing with the same account and, once the review is complete, its findings โ and they record every step.
Notice what that achieves. The family, told openly and early, is far more likely to trust the service than one that has to be prised for the truth. The written record demonstrates the duty was met if an assessor ever asks. And the review turns a mistake into a change in practice, which is exactly what the Safe and Well-led key questions reward. Handled this way, the incident โ genuinely serious โ becomes evidence of a service that is safe to trust, rather than one to worry about.
Handle incidents openly and on the record
Complys helps you log incidents, prompt the duty-of-candour steps, and keep the written record that shows you were open. It helps you organise and evidence your compliance โ it does not certify your service or submit your statutory notifications for you; those stay with you as the provider.
Sources
- Regulation 20 โ Duty of candour (2014 Regulations)
- CQC โ Regulation 20: Duty of candour
- CQC โ Notifications
This guide is general information, not regulatory or legal advice. Always check Regulation 20 and CQC's own current guidance for the precise requirements and thresholds.
Duty of candour โ FAQs
What is the duty of candour?
It is a legal requirement, in Regulation 20 of the 2014 Regulations, for care providers to be open and transparent with people when something goes wrong with their care or treatment. Where a notifiable safety incident occurs, the provider must tell the person affected (or their representative), offer an apology, explain what is known, and provide reasonable support โ and keep a written record of doing so.
What is a notifiable safety incident?
In broad terms, an unintended or unexpected incident in the course of care that, in the reasonable opinion of a healthcare professional, could result in or has resulted in death, or serious or moderate harm to the person โ with the precise thresholds set out in Regulation 20. Not every mistake meets the threshold, but the duty is designed to capture the incidents that genuinely affect a person's safety.
Is saying sorry an admission of liability?
No. An apology under the duty of candour is an expression of sorrow or regret that something went wrong โ it is not an admission of legal liability, and both CQC and professional bodies are clear that staff should not be discouraged from apologising. Being open early and honestly tends to reduce conflict and complaints rather than increase them.
What are the steps the duty requires?
Tell the person as soon as reasonably practicable after the incident; give a true account of what is known at that point; offer an apology; explain what further enquiries will be done; provide reasonable support; follow up in writing with the same information and the results of any enquiries; and keep a secure written record of every step.
How does the duty of candour relate to statutory notifications?
They are separate duties that often arise from the same event. The duty of candour is about being open with the person affected and their family; a statutory notification is about telling CQC. A serious incident may require both, and doing one does not discharge the other.
What happens if a provider breaches the duty of candour?
It is a breach of the fundamental standards, and CQC can take enforcement action. Certain failures relating to the duty of candour can be prosecuted directly. Beyond the regulatory consequence, a failure to be open when things go wrong is one of the most damaging things a service can do to the trust of the people it cares for.