CQC Provider Governance

Use this page for Care Quality Commission (CQC) source-layer evidence about England registered-provider governance, care records, and duty of candour.

Source-Layer Position

CQC Regulation 17 supports the England provider-governance layer for secure, accurate, complete, and contemporaneous records of care, treatment, decisions, and regulated-service governance. CQC Regulation 20 and associated guidance support provider duty-of-candour records for notifiable safety incidents.

What It Supports

Area	Supported record evidence
Care and treatment records	Secure, accurate, complete, contemporaneous records of care, treatment, and decisions.
Governance records	Records needed to assess, monitor, and improve quality and safety.
Incident and candour records	Notification, apology, written follow-up, correspondence, and learning where duty of candour is engaged.
Provider accountability	Organisational evidence distinct from individual professional duties.

What It Does Not Prove

CQC evidence is England registered-provider evidence. It does not prove devolved provider duties, product conformance, DSIC compliance, GP Connect onboarding, or that a named deployment has configured the required workflows.

Deployment Evidence Needed

For a digital deployment, pair CQC duties with provider policy, record templates, governance reporting, incident/candour workflow, complaint/correspondence records, audit, role-based access, clinical-safety case, and local assurance sign-off.