Healthcare compliance is a complex, multi-faceted discipline where regulatory adherence is the bedrock of both patient safety and institutional integrity. For a compliance lead operating within the United Kingdom, navigating the intersection of occupational health and safety law and health and social care regulations is a primary operational challenge. Two of the most critical pillars in this regulatory landscape are Section 2 of the Health and Safety at Work etc. Act 1974 (HSWA) and Regulation 18 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, overseen by the Care Quality Commission (CQC).
While HSWA Section 2 focuses on the overarching duties an employer owes to their employees to ensure a safe working environment, CQC Regulation 18 focuses on the deployment, competence, and support of staff to ensure the safe delivery of care to service users. Together, these instruments create a comprehensive framework that demands robust governance, continuous risk assessment, and a systematic approach to workforce management. This article delves into the specific clauses of these regulations, the practical expectations placed on providers, and strategic approaches to modernising compliance practices.
The Statutory Framework of Employer Duties under HSWA Section 2
The Health and Safety at Work etc. Act 1974 remains the cornerstone of occupational safety legislation in Great Britain. Section 2 of the Act establishes the general duties of employers to their employees, setting a broad but stringent standard for workplace safety.
The General Duty of Care
Under Section 2(1) of the Act, it is the fundamental duty of every employer to "ensure, so far as is reasonably practicable, the health, safety and welfare at work of all his employees" (Health and Safety at Work etc. Act 1974, 1974, s.2(1)). This overarching duty requires healthcare providers to balance the level of risk against the measures needed to control the risk in terms of money, time, or trouble.
Specific Operational Requirements
Section 2(2) expands upon this general duty by detailing five specific areas of responsibility that compliance leads must operationalise within their institutions:
1. Plant and Systems of Work: Employers must provide and maintain plant and systems of work that are, so far as is reasonably practicable, safe and without risks to health (Health and Safety at Work etc. Act 1974, 1974, s.2(2)(a)). In a healthcare setting, this encompasses everything from the maintenance of medical devices and lifting hoists to the protocols governing clinical handovers and infection control procedures. 2. Handling and Storage: There must be arrangements for ensuring safety and the absence of risks to health in connection with the use, handling, storage, and transport of articles and substances (Health and Safety at Work etc. Act 1974, 1974, s.2(2)(b)). This directly applies to the management of hazardous substances, clinical waste, and pharmaceuticals. 3. Information, Instruction, and Training: Employers are required to provide such information, instruction, training, and supervision as is necessary to ensure the health and safety at work of their employees (Health and Safety at Work etc. Act 1974, 1974, s.2(2)(c)). 4. Safe Place of Work: The employer must maintain any place of work under their control in a condition that is safe and without risks to health, including the provision and maintenance of safe means of access to and egress from it (Health and Safety at Work etc. Act 1974, 1974, s.2(2)(d)). 5. Working Environment and Welfare: The provision and maintenance of a working environment that is safe, without risks to health, and adequate regarding facilities and arrangements for employee welfare at work is mandatory (Health and Safety at Work etc. Act 1974, 1974, s.2(2)(e)).
Safety Policies and Employee Consultation
Beyond the physical and procedural safeguards, HSWA Section 2 mandates structural governance. Section 2(3) requires employers to prepare, and revise as often as appropriate, a written statement of their general policy with respect to health and safety at work, and the organisation and arrangements in force for carrying out that policy. This statement must be brought to the notice of all employees (Health and Safety at Work etc. Act 1974, 1974, s.2(3)).
Furthermore, the Act emphasises the importance of workforce engagement. Employers have a duty to consult with safety representatives appointed by recognised trade unions to make and maintain arrangements that enable the employer and employees to co-operate effectively in promoting and developing safety measures, and in checking their effectiveness (Health and Safety at Work etc. Act 1974, 1974, s.2(4), s.2(6)).
Meeting the Standards of CQC Regulation 18: Staffing
While HSWA protects the employee, the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 ensures that the service provided to patients is safe, effective, and of high quality. Regulation 18 specifically addresses staffing, creating a direct link between the competence and capacity of the workforce and the safety of the care delivered.
Deploying Sufficient and Suitably Qualified Staff
Regulation 18(1) states that "Sufficient numbers of suitably qualified, competent, skilled and experienced persons must be deployed in order to meet the requirements of this Part" (The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, 2014, reg.18(1)).
To meet this regulation, the Care Quality Commission expects providers to adopt a systematic approach to determine the number of staff and the range of skills required to meet the needs of people using the service and to keep them safe at all times (Care Quality Commission, 2025). This approach must reflect current legislation and available guidance. Compliance leads must ensure that their staffing models account for: * The different levels of skills and competence required to meet patient needs. * The specific registered professionals and support workers needed. * Supervision needs and leadership requirements (Care Quality Commission, 2025).
Crucially, staffing levels and skill mixes cannot be static. They must be reviewed continuously and adapted to respond to the changing needs and circumstances of the people using the service. Furthermore, providers must have procedures in place to manage emergencies, ensuring that sufficient and suitable personnel are deployed to cover both the emergency situation and the routine work of the service (Care Quality Commission, 2025).
Support, Training, and Professional Development
Regulation 18(2) shifts the focus from the deployment of staff to their ongoing development and support. Persons employed in the provision of a regulated activity must receive appropriate support, training, professional development, supervision, and appraisal necessary to carry out their duties (The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, 2014, reg.18(2)(a)).
The CQC guidance provides granular detail on how this must be achieved. Providers must implement an induction programme that adequately prepares staff for their roles. The training, learning, and development needs of individual staff members must be assessed at the start of their employment and reviewed at appropriate intervals (Care Quality Commission, 2025).
Specific training mandates include ensuring that all staff receive training on how to interact appropriately with people with a learning disability and autistic people, at a level appropriate to their role. Staff must also be supported to participate in statutory training, mandatory training defined by the provider, and any additional training required to maintain the necessary skills to meet the needs of the people they care for, including first aid training for those in the adult social care sector (Care Quality Commission, 2025).
The Intersection of Competence, Training, and Risk Management
The duties outlined in HSWA Section 2 and CQC Regulation 18 do not exist in isolation; they are deeply interconnected through the mechanisms of risk assessment and capability management, as further defined by the Management of Health and Safety at Work Regulations 1999 (MHSWR).
Assessing Risks to Health and Safety
Under Regulation 3 of the MHSWR 1999, every employer must make a "suitable and sufficient assessment" of the risks to the health and safety of their employees, as well as risks to persons not in their employment (such as patients and visitors) arising out of their undertaking (The Management of Health and Safety at Work Regulations 1999, 1999, reg.3(1)).
This risk assessment is the engine that drives compliance with both HSWA Section 2 and CQC Regulation 18. For instance, identifying a risk in patient handling directly informs the HSWA requirement for safe systems of work (s.2(2)(a)) and the CQC requirement for deploying skilled staff (Reg 18(1)). Where an employer employs five or more employees, they must record the significant findings of the assessment and identify any group of employees especially at risk (The Management of Health and Safety at Work Regulations 1999, 1999, reg.3(6)). Special consideration must also be given when employing young persons, taking into account their inexperience, lack of awareness of risks, and immaturity (The Management of Health and Safety at Work Regulations 1999, 1999, reg.3(5)(a)).
Aligning Capabilities with Tasks
Regulation 13 of the MHSWR 1999 explicitly bridges the gap between safety and staffing by requiring employers to take into account their employees' capabilities as regards health and safety when entrusting tasks to them (The Management of Health and Safety at Work Regulations 1999, 1999, reg.13(1)).
Employers must ensure that employees are provided with adequate health and safety training upon recruitment, and when exposed to new or increased risks due to a transfer of responsibilities, the introduction of new work equipment, new technology, or a new system of work (The Management of Health and Safety at Work Regulations 1999, 1999, reg.13(2)). This training must be repeated periodically where appropriate, adapted to take account of new or changed risks, and must take place during working hours (The Management of Health and Safety at Work Regulations 1999, 1999, reg.13(3)). This perfectly mirrors the CQC's expectation under Regulation 18 that learning and development must be monitored, and appropriate action taken quickly when training requirements are not being met (Care Quality Commission, 2025).
Practical Application: Supervision, Appraisals, and Professional Standards
For a compliance lead, translating these legislative requirements into daily operations requires robust human resources and clinical governance frameworks.
Supervision and Appraisals
The CQC guidance stipulates that staff should receive regular appraisal of their performance from an appropriately skilled and experienced person. During these appraisals, any training, learning, and development needs should be identified, planned for, and supported (Care Quality Commission, 2025).
Supervision is a critical component of this. Where appropriate, staff must be supervised until they can demonstrate acceptable levels of competence to carry out their role unsupervised. Even after achieving competence, staff should receive ongoing or periodic supervision to ensure that competence is maintained. This includes specific supervision to ensure they demonstrate and maintain competence in understanding the needs of people with a learning disability and autistic people (Care Quality Commission, 2025). Furthermore, health, social, and other care professionals must have access to clinical or professional supervision as required, in line with the requirements of their relevant professional regulator.
Maintaining Professional Registration
Regulation 18(2)(c) places a specific duty on providers regarding registered professionals. Where staff are health care professionals, social workers, or other professionals registered with a health or social care regulator, the provider must enable them to provide evidence to their regulator demonstrating that they continue to meet the professional standards which are a condition of their ability to practise (The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, 2014, reg.18(2)(c)).
Providers must also enable staff to obtain further qualifications appropriate to the work they perform (The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, 2014, reg.18(2)(b)). This requires compliance leads to ensure that duty rosters and training budgets accommodate the continuing professional development (CPD) requirements of bodies such as the General Medical Council (GMC) or the Nursing and Midwifery Council (NMC).
Strategic Approaches to Modernising Compliance Practices
Modern healthcare compliance requires moving away from siloed approaches where occupational health and safety is managed separately from clinical quality and patient safety.
Integrating Safety and Quality Systems
Compliance leads should seek to integrate their auditing and monitoring systems. A failure in manual handling training, for example, is simultaneously a breach of HSWA Section 2(2)(c) (failure to train employees) and CQC Regulation 18(2)(a) (failure to support and train staff to carry out duties).
| Compliance Domain | HSWA 1974 Section 2 Requirement | CQC Regulation 18 Requirement | Integrated Compliance Strategy |
|---|---|---|---|
| Workforce Capacity | Safe systems of work (s.2(2)(a)) | Sufficient numbers deployed (Reg 18(1)) | Systematic dependency/acuity tools to dictate staffing levels and safe operational limits. |
| Training & Competence | Information, instruction, training (s.2(2)(c)) | Support, training, professional development (Reg 18(2)(a)) | Unified learning management systems tracking statutory safety training alongside clinical competencies. |
| Ongoing Monitoring | Revise safety policy as appropriate (s.2(3)) | Regular appraisal and supervision (Guidance) | Annual integrated performance reviews covering clinical skills, safety adherence, and professional revalidation. |
Consequences of Non-Compliance
Understanding the enforcement mechanisms is vital for compliance leads when securing board-level buy-in for compliance initiatives. While the Health and Safety Executive (HSE) can prosecute directly for breaches of HSWA Section 2, the CQC's approach to Regulation 18 is slightly different.
The CQC cannot prosecute for a breach of Regulation 18 or any of its parts directly; however, they can take other regulatory action (Care Quality Commission, 2025). Crucially, the CQC must refuse registration if providers cannot satisfy them that they can and will continue to comply with this regulation. A failure to deploy sufficient, competent staff often leads to breaches of other regulations (such as Regulation 12: Safe care and treatment, or Regulation 13: Safeguarding), for which the CQC can and does prosecute.
Fostering a Culture of Co-operation
Finally, compliance is not merely a paper exercise; it is a cultural imperative. The HSWA requirement to consult with safety representatives (Health and Safety at Work etc. Act 1974, 1974, s.2(6)) should be viewed not as a bureaucratic hurdle, but as a strategic tool. Engaging with staff on the ground provides the most accurate intelligence regarding where systems of work are failing, where staffing levels are dangerously stretched, and where training is inadequate. By fostering a culture of transparency and co-operation, healthcare providers can proactively identify risks before they manifest as either occupational injuries or adverse patient events, thereby satisfying the dual demands of the HSE and the CQC.
References
Care Quality Commission (2025) Regulation 18: Staffing - Care Quality Commission*. Available at: https://www.cqc.org.uk/guidance-regulation/providers/regulations-service-providers-and-managers/health-social-care-act/regulation-18 Health and Safety at Work etc. Act 1974 (1974) Section 2*. Available at: https://www.legislation.gov.uk/ukpga/1974/37/section/2 The Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 (2014) Regulation 18*. Available at: https://www.legislation.gov.uk/uksi/2014/2936/regulation/18/made The Management of Health and Safety at Work Regulations 1999 (1999) Regulation 3*. Available at: https://www.legislation.gov.uk/uksi/1999/3242/regulation/3/made The Management of Health and Safety at Work Regulations 1999 (1999) Regulation 13*. Available at: https://www.legislation.gov.uk/uksi/1999/3242/regulation/13/made