Whistleblowing in care homes: what the law protects and how to build a speak-up culture

Whistleblowing in care homes means a worker raising a concern about wrongdoing, risk or poor care that affects other people, usually residents, rather than a personal grievance about their own job. In England the worker is protected from dismissal and detriment by the Public Interest Disclosure Act 1998, and the Care Quality Commission is a prescribed body they can go to directly. The law is the easy part. The hard part is running a home where people raise concerns early, internally and without fear, so that nobody needs the law.

This guide is for registered managers, deputies and owners. It covers what whistleblowing is and is not, what the law protects, how CQC handles concerns, what your policy must contain, how to respond when a concern lands on your desk, and how to build the culture that makes all of that routine.

The short answer

Whistleblowing is disclosing information about a danger, illegality or wrongdoing that is in the public interest. A worker who does so with a reasonable belief is protected from being dismissed or treated badly because of it, whether they raise it with you, with CQC, with the local authority or, in defined circumstances, more widely. Your job as a manager is to have a clear policy that names CQC, to make raising concerns easy and safe, to take every concern seriously and investigate it fairly, to protect the person who raised it, to record what you did, and to feed what you learn back to the team. A home that gets concerns raised internally, early and often is a safe home. A home with no concerns on record is usually a home where people have stopped speaking.

What is whistleblowing in health and social care?

What is whistleblowing in health and social care, precisely? It is a worker disclosing information that they reasonably believe shows one of the following: a criminal offence, a failure to comply with a legal obligation, a miscarriage of justice, danger to the health and safety of any person, damage to the environment, or the deliberate concealment of any of those. In a care home the common examples are abuse or neglect of residents, unsafe staffing, medicines being falsified, records being altered, financial abuse, and managers covering up incidents.

The disclosure must be in the public interest. That is what separates whistleblowing from a grievance. A worker complaining that their own rota is unfair is raising a grievance. A worker saying that the rota leaves one person alone with twelve residents overnight is whistleblowing, because the risk is to others.

The worker does not have to be right. They have to reasonably believe the information tends to show wrongdoing. A concern investigated and found to be unfounded is still a protected disclosure if the belief was reasonable. Managers should hold on to that, because the instinct to treat a wrong concern as malicious is where most protection failures start.

At a glance: whistleblowing, grievance, safeguarding and complaint

The routes overlap. A whistleblowing concern about abuse is also a safeguarding matter and must be referred to the local authority regardless of any internal process. A worker may have both a grievance and a public interest concern in the same situation. The policy should tell people to raise the concern first and let the manager sort out which route applies.

What the Public Interest Disclosure Act 1998 protects

The Public Interest Disclosure Act 1998 inserted Part IVA into the Employment Rights Act 1996. It gives a worker who makes a protected disclosure two protections. They must not be subjected to any detriment by their employer because of the disclosure, and if they are an employee, dismissal for making it is automatically unfair. There is no minimum length of service for these claims and no cap on the compensation an employment tribunal can award.

A disclosure is protected if it is a qualifying disclosure, meaning it concerns one of the six categories above and the worker reasonably believes it is in the public interest, and it is made to the right person. Disclosure to the employer is always the right person. Disclosure to a prescribed body such as CQC is protected if the worker reasonably believes the information is substantially true and falls within that body's remit. Wider disclosure, for example to the press, is protected only in narrower circumstances, including where the worker reasonably believed they would be victimised or that evidence would be concealed, or where the matter is exceptionally serious.

Since 2013 there has been no requirement for the disclosure to be made in good faith, although a tribunal can reduce compensation if it was not. That change matters: a worker with mixed motives is still protected if the disclosure is in the public interest.

Who is protected

The protection covers workers, which is wider than employees. It includes agency workers, bank staff, and in most cases people on zero-hours contracts. It includes former workers in relation to detriment such as a bad reference. It does not, in general, cover genuine volunteers, although a home should treat a volunteer's concern with the same seriousness as a matter of policy.

The protection is against detriment by the employer and, since 2013, against detriment by colleagues, for which the employer can be vicariously liable. That means a manager who lets the team freeze out a colleague who raised a concern has exposed the home even if the manager did nothing personally. Protecting a whistleblower includes protecting them from their peers.

Registered nurses and other registered professionals have an additional professional duty to raise concerns under their regulator's code, and can face fitness to practise proceedings for staying silent. Care workers are not registered in England, but the Skills for Care code of conduct expects them to raise concerns too.

CQC as a prescribed body

The Public Interest Disclosure (Prescribed Persons) Order 2014 lists the bodies a worker can go to with the same protection as going to their employer. For health and social care in England, the Care Quality Commission is the prescribed body for matters relating to the registration and provision of regulated services. The Health and Safety Executive is prescribed for health and safety matters and the Information Commissioner for data protection. Local authorities also receive concerns about adult safeguarding under the Care Act 2014.

CQC whistleblowing contact is through its National Customer Service Centre, by phone, online form or post. A worker does not have to raise the concern internally first, and the policy must say so. CQC's own guidance encourages workers to use internal routes where they feel able to, but the choice is the worker's.

Every whistleblowing policy should name CQC as a prescribed body and give the worker the means to contact it. A policy that describes only the internal route, or that requires internal escalation before going outside, is inaccurate and undermines the protection. Inspectors check this.

What CQC does with a concern

When a worker contacts CQC to report a concern about a care home, CQC records it, assesses the risk and decides what to do. Options include contacting the provider for information, sharing the concern with the local authority safeguarding team, bringing forward an inspection, or using the information at the next assessment. CQC does not investigate individual employment matters and does not act as the worker's advocate; its role is regulatory.

CQC will keep the worker's identity confidential where it can, and accepts anonymous concerns, although anonymity limits what it can follow up. It will not usually tell the worker the outcome in detail. Workers who want feedback on their own case should raise the concern internally as well, or with the local authority for safeguarding matters.

From the manager's side, a call from CQC about a whistleblowing concern is not a disaster. It is information. Respond promptly, honestly and with evidence, and treat the concern as you would one raised internally. Managers who become defensive with CQC, or who try to identify and confront the worker, turn a manageable concern into a regulatory problem.

What the whistleblowing policy must contain

The policy is the document staff will read when they are frightened and deciding whether to speak. It needs to be short, clear and honest.

• A plain statement of what whistleblowing is and examples relevant to the home
• The difference between a whistleblowing concern, a grievance and a safeguarding referral
• The internal route: who to tell, including alternatives if the concern is about the manager, and how to reach the provider or nominated individual directly
• The external route: CQC named as a prescribed body, with contact details, plus the local authority safeguarding team, the Health and Safety Executive and, for registered professionals, their regulator
• A statement that the worker does not have to raise the concern internally first
• What protection the worker has under the Public Interest Disclosure Act 1998 and from the home, including protection from detriment by colleagues
• How confidentiality will be handled, and the difference between confidential and anonymous
• What will happen after a concern is raised: acknowledgement, investigation, feedback, timescales
• How the home records concerns and learns from them
• The independent advice available, such as the charity Protect

The policy should be part of induction, revisited in supervision at least annually, and displayed where staff can find it without asking the manager. Our guide to safeguarding adults in care homes covers the referral route that runs alongside it.

How a worker raises a concern

Staff need a simple sequence they can remember under stress. This is the version to teach at induction.

1. If someone is at immediate risk, make them safe first. Call emergency services if needed.
2. Tell the senior on duty or the manager, in person or by phone, as soon as possible. If the concern is about them, go to the deputy, the provider or the nominated individual.
3. Write down what you saw or heard: date, time, who was involved, what happened, what you did. Facts, not conclusions.
4. If you are not comfortable raising it internally, or you have raised it and nothing has happened, contact CQC or the local authority safeguarding team. You are protected either way.
5. Keep a copy of what you raised and when. If you are treated differently afterwards, write that down too.
6. Get advice if you need it, from a union, from the charity Protect, or from ACAS.

Teach this with a real, anonymised example from the home or the sector, and tell new staff about a concern that was raised and what happened. That single story does more for the culture than the policy.

How a manager should respond to a concern

Acknowledge and make safe

Thank the person, in those words. Confirm that you have understood the concern by repeating it back. If a resident is at risk, act immediately: that may mean removing a worker from shift, checking on the resident, calling the GP or making a safeguarding referral that day.

Decide the route

Is it a safeguarding matter? Refer to the local authority and notify CQC if required. Is it a criminal matter? Involve the police. Is it a health and safety matter? Consider RIDDOR. Is it an employment issue about the person raising it? Open the grievance route in parallel. Record the decision and the reasons.

Investigate fairly

Appoint someone with no involvement to investigate, which may mean the provider or an external person if the concern touches the manager. Gather records, interview witnesses, hear the person complained about, and reach a finding on the evidence. Keep the investigation proportionate: a concern about a single missed medication does not need a month.

Feed back and record

Tell the person who raised it what happened, as far as confidentiality allows. Record the concern, the route, the investigation, the outcome and the learning in the whistleblowing log. Report to the provider.

Fairness to the person complained about

Protecting the whistleblower does not mean presuming the person complained about is guilty. A worker accused of poor practice is entitled to know the allegation, to respond, and to be treated fairly under the disciplinary policy. Suspension, where needed to protect residents or the investigation, is a neutral act and should be described as such.

Managers who go in hard on the accused to show they take concerns seriously create two problems: an unfair process that may collapse at a disciplinary hearing or tribunal, and a team that learns concerns are dangerous to everyone. The aim is a fair investigation with a clear outcome. If the concern is upheld, the disciplinary route follows. If it is not, the accused is told so and supported. Either way, the person who raised it was right to raise it.

Protecting the whistleblower

Detriment is anything that leaves the worker worse off because of the disclosure: reduced hours, unpleasant shifts, exclusion from the team, a poor reference, being passed over, or being subjected to a sudden capability process. Managers need to watch for it actively, because it often comes from colleagues rather than from management.

Practical protection means checking in with the person regularly, telling the team that victimisation will be treated as gross misconduct and meaning it, monitoring the person's rota and supervision for changes, and keeping the circle of people who know their identity as small as possible. If the person asks for confidentiality, honour it unless the law requires otherwise, and tell them if it does.

Where a worker is treated badly by colleagues, act on it as a disciplinary matter. The employer can be liable for detriment by co-workers, and in any case a team that punishes concerns is unsafe.

Confidential versus anonymous

Staff often say they want to raise a concern anonymously. Managers should explain the difference. Confidential means the manager knows who raised it and protects their identity. Anonymous means nobody knows. Confidential concerns can be investigated properly, fed back on and the person protected. Anonymous concerns are harder to investigate, cannot be fed back on and leave the person with no protection because nobody can show detriment was because of the disclosure.

The policy should allow anonymous concerns and take them seriously, but it should encourage confidential ones and explain why. A home where staff will only raise concerns anonymously has a trust problem, and the manager should treat that as the first finding.

When the concern is about the manager or the owner

Every policy must answer the question staff ask silently: what if it is you? The route has to go past the registered manager to the provider, the nominated individual or a named director, and to CQC. The contact details must be in the policy and on the noticeboard, not just in the manager's head.

Owners who also manage their home have a particular responsibility. If you are the manager and the provider, there is no internal escalation above you. Your policy should say plainly that staff can go to CQC or the local authority, and you should tell them so at induction in your own words. A single-site owner-manager who says that out loud has done more for the culture than any policy.

If a concern about you does reach you, do not investigate it yourself. Ask the provider, an external HR adviser or a peer manager to do so, and cooperate.

Whistleblowing and safeguarding

What is whistleblowing in safeguarding terms? Most whistleblowing in care homes is about abuse or neglect, which means it is also a safeguarding matter under the Care Act 2014. The two processes run in parallel. The whistleblowing process protects the worker and deals with the internal response. The safeguarding process protects the adult at risk and belongs to the local authority.

The practical rule is that a concern about abuse or neglect is referred to the local authority whether or not the internal investigation has concluded, and CQC is notified where the regulations require it. Managers should not hold a safeguarding referral back until they have looked into it themselves, and the incident record on the resident's file should show the referral time. Raising safeguarding concerns late, because the home wanted to check first, is one of the most common findings in serious case reviews.

Where the concern involves organisational neglect, for example unsafe staffing across a period, the home itself may become the subject of a section 42 enquiry. Cooperate fully. Trying to manage the enquiry is worse than the finding.

Whistleblowing in learning disability and mental health services

Services for people with a learning disability, autism or mental ill health carry a higher risk of closed cultures: settings where poor practice becomes normal, where the people supported cannot easily complain, and where staff who question it are isolated. CQC's work on identifying and responding to closed cultures was prompted by abuse scandals in exactly these settings, and inspectors look for the warning signs.

Whistleblowing is the main defence. Staff in these services need to be told, repeatedly, that questioning restraint, seclusion, PRN use, locked doors, blanket rules and the tone colleagues use with residents is expected, not disloyal. Managers should audit restrictive practice, review incident footage where it exists, and ask staff directly in supervision whether there is anything they are uncomfortable with.

The warning signs of a closed culture include high agency use, low staff turnover combined with no concerns raised, families kept at a distance, and residents with no independent advocate. A manager who recognises two or three of those should treat it as urgent.

Agency and bank staff

Agency workers are protected under the Act and are often the people best placed to spot poor practice, because they see many homes. They are also the least likely to raise concerns, because they do not know the route and fear losing shifts.

Every agency worker should receive the whistleblowing route as part of their induction to the home, in writing, on the first shift. That includes who to tell, how to reach CQC, and a statement that raising a concern will not affect their bookings. The home's agreement with the agency should cover how concerns raised by agency staff will be shared and handled. Our guide to agency staff in care homes covers induction in more detail.

Building a speak-up culture day to day

Culture is built in small acts repeated. Managers who want concerns raised early do these things.

• Say thank you, visibly, every time someone raises something, however small
• Tell the team what happened after a concern, as far as confidentiality allows, so people see that raising things works
• Ask in every supervision: is there anything you have seen that worried you?
• Raise concerns yourself, about your own home, and let staff see you do it
• Treat near misses and honest errors as learning, not blame, so that reporting is safe
• Never ask who told you, and never let anyone else ask
• Walk the floor at unpredictable times so that practice is the same whether you are there or not
• Act on the first sign of a colleague being frozen out

The 6 Cs include courage for a reason. Our guide to the 6 Cs on a real shift shows where courage turns up hour by hour. A manager who models it gets it back.

Recording concerns and the whistleblowing log

Every concern raised should be logged, whatever route it came through and whatever the outcome. The log records the date, a summary of the concern, the route taken, who investigated, the outcome, the feedback given, any safeguarding referral or CQC notification, and the learning. The identity of the person who raised it should be held separately and restricted.

The log serves three purposes. It shows inspectors that concerns are raised and handled. It lets the manager and provider see patterns, such as repeated concerns about one shift or one practice. And it protects the home if a worker later claims detriment, because it shows what was done and when.

Holding incidents, concerns and their reviews in an incident and concern workflow that timestamps each step and restricts who can see what makes this straightforward. Where the concern relates to a member of staff, the investigation record belongs in the HR file, with access limited to the manager and provider.

Learning from concerns

A concern that is investigated, closed and never mentioned again has taught the home nothing. Each closed concern should generate at least one question: what let this happen, and what would stop it happening again? The answer may be training, a policy change, a rota change, a piece of equipment or a conversation with one person.

Themes across several concerns matter more than any single one. Three concerns in a year about night shift, or about one worker, or about medicines, are a pattern the provider should know about. The manager's quality report to the provider should include the number of concerns raised, the themes and the actions. A provider that never asks about whistleblowing has told the manager it does not want to know.

Where a concern reveals a serious failing, the home should be candid about it with residents and families under Regulation 20, and should tell CQC what it has done. Regulators are far more concerned by concealment than by failure.

Common mistakes

• A policy that describes only the internal route, or requires internal escalation before contacting CQC.
• Treating a concern that turned out to be wrong as malicious, and disciplining the person who raised it.
• Trying to find out who told CQC.
• Holding a safeguarding referral back until the internal investigation is finished.
• Investigating a concern about yourself.
• Ignoring detriment by colleagues because management did nothing directly.
• An empty whistleblowing log presented as evidence of a good culture.
• Agency staff on shift with no idea how to raise a concern.

What good looks like on inspection day

The inspector asks a support worker what they would do if they saw a colleague being rough with a resident. The worker names the senior, the manager, the provider and CQC, in that order, and says they would write it down. The inspector asks whether they would feel safe doing so, and the worker says yes and gives an example. The inspector asks the manager for the whistleblowing policy and finds CQC named with contact details and no requirement to go internal first. The inspector asks for the log and finds concerns raised in the last year, each with an investigation, an outcome, feedback and learning, and finds the safeguarding referrals and notifications that went with them.

Good also shows in the records around the concern. Supervision notes include the question about worries. Team meeting minutes show concerns discussed in general terms and learning shared. Induction records show the policy covered in the first week, including for agency staff. The provider's quality report includes whistleblowing themes.

What the inspector is really assessing is whether the home has a culture where people speak, which is a Well-led quality statement in the single assessment framework. Evidence of concerns raised and handled well is far stronger than evidence of none. A compliance view that brings together concerns, incidents, safeguarding referrals and notifications lets the manager show that story in one place.

Final conclusion

Whistleblowing in care homes is protected by law, and CQC will always take a worker's call. But a home that relies on the law has already failed the people who live there. The point of the policy, the training, the log and the culture is that concerns are raised inside the home, early, by people who trust that they will be heard and protected. Build that, and whistleblowing stops being a threat and becomes the most reliable safety system the home has.

Frequently asked

What is whistleblowing in care?

Whistleblowing in care is a worker disclosing information that they reasonably believe shows wrongdoing, risk or poor practice affecting others, such as abuse, neglect, unsafe staffing or falsified records. It is different from a grievance, which is about the worker's own employment, and it is protected by the Public Interest Disclosure Act 1998.

Is CQC a prescribed body for whistleblowing?

Yes. The Care Quality Commission is a prescribed body under the Public Interest Disclosure (Prescribed Persons) Order 2014 for matters relating to regulated health and social care services in England. A worker who raises a concern with CQC has the same legal protection as one who raises it with their employer, and does not have to go internal first.

Can I report a care home to CQC anonymously?

Yes. CQC accepts anonymous concerns through its National Customer Service Centre by phone, online form or post. Anonymity limits what CQC can follow up and means it cannot give you feedback, so where you can, raise the concern confidentially instead, which lets CQC protect your identity while still contacting you.

What protection does a whistleblower have in a care home?

Under the Public Interest Disclosure Act 1998, a worker who makes a protected disclosure must not be subjected to detriment because of it, and dismissal for making it is automatically unfair. There is no minimum service requirement and no cap on tribunal compensation. Protection also covers detriment by colleagues, for which the employer can be liable.

What is the difference between whistleblowing and safeguarding?

Safeguarding is the process, led by the local authority under the Care Act 2014, that protects an adult at risk from abuse or neglect. Whistleblowing is the act of a worker disclosing a concern and the legal protection that follows. A concern about abuse is usually both, and must be referred to the local authority regardless of any internal investigation.

What should a care home whistleblowing policy include?

It should explain what whistleblowing is with examples relevant to the home, the internal route including alternatives if the concern is about the manager, and CQC named as a prescribed body with contact details. It must state that workers do not have to go internal first. It should also cover the protection available, how confidentiality is handled, what happens after a concern is raised, and where to get independent advice.

Does a whistleblower have to be right to be protected?

No. The worker must reasonably believe that the information tends to show wrongdoing and that disclosing it is in the public interest. A concern that is investigated and not upheld is still protected if that belief was reasonable, so managers should never treat an unfounded concern as malicious without clear evidence.

How should a manager respond when a staff member raises a concern?

Thank them and make any resident at immediate risk safe. Decide whether the matter is also a safeguarding, criminal or health and safety issue and refer accordingly. Arrange a fair and proportionate investigation by someone not involved, protect the person from detriment, and feed back the outcome. Record everything in the whistleblowing log with the learning.

Sources

• Public Interest Disclosure Act 1998
• Employment Rights Act 1996, Part IVA
• Public Interest Disclosure (Prescribed Persons) Order 2014
• CQC: Whistleblowing guidance for providers registered with the Care Quality Commission
• CQC: Identifying and responding to closed cultures
• Care Act 2014
• Freedom to Speak Up: report of the review by Sir Robert Francis (2015)
• Skills for Care: Code of Conduct for Healthcare Support Workers and Adult Social Care Workers