CQC Requirement Notice and action plan support

A Requirement Notice is often where the snowball starts rolling. This is the moment to stop it.

CQC has found a breach and expects you to put it right. It isn't CQC's most severe action, but it is a clear warning. Left unresolved, a breach can lead to a Warning Notice or worse, and CQC says a late report is a criminal offence. We step in early and help you fix it, evidence it and make it stick.

We know how this feels

A Requirement Notice often lands with an odd mix of relief and irritation. Relief that it isn't worse. Irritation that you're writing an action plan about something you may think was minor, when your team gets so much else right.

That reaction is the risk. CQC is formally telling you it considers your service in breach of its legal obligations. The plan you send is a promise, in writing, about how and by when you'll comply.

So take it seriously from day one. Handled well, a Requirement Notice can be where things stop. Handled badly, it's where escalation starts.

Why a Requirement Notice matters more than it looks

A Requirement Notice can often be the point where the snowball starts rolling. It may not carry the immediate consequences of more serious enforcement action, but it is a clear sign that CQC has identified regulatory failings and expects corrective action.

The bigger concern is escalation. If the issues are not addressed quickly and comprehensively, and evidenced correctly, you risk further scrutiny from CQC and potentially much more serious enforcement action.

In our experience, this is often the critical, fixable moment that providers miss. What could have been resolved through timely, structured work can turn into a far more serious regulatory situation if the response falls short or the improvements are not properly embedded.

How we help: step in early, before it escalates

Our role is to step in early. We assess CQC's concerns with you, establish the right corrective actions and work alongside your team to put them in place and evidence them before matters escalate.

We start by acknowledging the findings honestly, even the ones that feel minor. Then we find the root cause of each breach, fix it, gather the evidence that the fix works and embed it in everyday practice, so it still holds when CQC comes back. Done properly, that stops a manageable regulatory concern turning into a crisis.

We deal with CQC enforcement day in, day out, so we know what a credible response looks like, and what tends to happen when one falls short.

What we do on a Requirement Notice

  • Reading the request with you and fixing the deadline on day one
  • A regulatory assessment of each breach CQC found, and its root cause
  • A structured, prioritised action plan with clear owners, timescales and measures
  • Immediate corrective action, starting with anything that carries risk
  • Governance and oversight arrangements that keep the fixes in place
  • Policies, procedures, care documentation and audit tools, where the gap is in your systems
  • On-site support to put changes in place with your staff
  • Evidence of improvement, collated and organised so CQC can follow it
  • Mock inspections to test the fixes before CQC returns
  • Support with CQC and stakeholder communication
  • Advice from our trusted legal partners if you dispute a finding or the matter escalates

Who you'll work with

These are some of the people behind our Requirement Notice work. Between them they've run services, advised CQC, inspected for it and led clinical governance.

  • Kath Cox

    Head of Adult Social Care (Service Transformation)

    Former Registered Manager and Operations Manager. Leads our adult social care interim and crisis support, stabilising services and putting sound governance in place.

  • Adam Duncan

    Managing Director

    Over two decades of senior clinical and operational leadership. Former CQC Specialist Advisor and Director of Quality and Governance.

  • Helen Stevenson

    CQC Registration Associate

    A qualified dentist and former CQC inspector. Understands compliance and governance from both the provider's and the regulator's side.

  • Dr Atif Ghaffar

    Medical Director

    A long-serving GP Principal and his practice's CQC lead, with experience across primary and acute care. Former Medical Director at CQC Compliance Limited.

What is a CQC Requirement Notice?

A CQC Requirement Notice, now called an Action Plan Request, means CQC found that your service breached a regulation but people using it are not at immediate risk of harm. You must send CQC a written report saying how and by when you will put the breach right.

CQC's current enforcement policy says Action Plan Requests were previously called Requirement Notices. Some older CQC guidance still uses the old name, so you will see both.

CQC says an Action Plan Request is not an enforcement action. That does not make it optional. CQC also says failing to send the report on time is an offence and could lead it to use its enforcement powers. This page is general information, not legal advice.

How serious is a Requirement Notice?

It sits at the start of CQC's enforcement scale, and that's exactly why it matters. In CQC's enforcement decision tree, an Action Plan Request is the response to a low seriousness breach. CQC uses it when the impact on people is not immediately significant, when it thinks you can improve within a reasonable time, and when you have no history of poor performance that raises wider concerns.

CQC's own guidance gives an example. A GP practice recruited office staff without DBS checks, and without a risk assessment explaining why a check wasn't needed. When this was raised, the practice changed its procedures straight away and required checks for staff already in post. Its history showed it had consistently met the regulations. CQC says an Action Plan Request was the appropriate response there.

Look at what kept that case on the lowest rung: the practice acted immediately, and its track record was clean. Those are the same two things that keep your Requirement Notice from turning into something worse. Once a breach comes back, the history CQC weighs is no longer clean.

How can a Requirement Notice escalate?

Above it sit Warning Notices for medium seriousness breaches, Notices of Proposal to add conditions, suspend or cancel for high seriousness breaches, and urgent action for extreme cases.

What moves you up is mostly what happens next. CQC's decision tree tells its staff to ask whether a provider has failed to act on previous CQC reports, requirements or enforcement actions, and whether there's a history of repeated breaches. The answers can make the next action more severe.

So the risk looks like this. An Action Plan Request today. Then the same breach at the next inspection, with a plan that wasn't delivered. That's a pattern, and the decision tree treats patterns more severely. A Warning Notice becomes a realistic next step, and a breach that keeps coming back can end in action against your registration.

Separately, a missed deadline is its own problem. CQC's prosecution criteria include failing to provide governance reports and failing to comply with a requirement.

When is my action plan due?

Check your letter first. One CQC page says improvement action plans are requested under regulation 17(3) of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, the good governance regulation. Regulation 17(3) says you must send CQC a written report on your compliance with the governance requirements, and your plans to improve standards, no later than 28 days beginning on the day after you receive the request. A request for a summary of complaints under regulation 16(3) runs on the same 28-day rule.

CQC's enforcement policy does not name the regulation behind every Action Plan Request, so check which regulation your letter cites and what date it gives. Four weeks sounds like plenty. Once you've found the root cause, agreed owners and gathered evidence, it isn't.

Why is a good action plan harder than it looks?

CQC can refuse an action plan that does not satisfactorily address the issues. Its policy also says the actions have to fall within a timeframe CQC judges reasonable. Promise too much and you'll miss your own dates. Promise too little, too slowly, and CQC can reject the plan.

The common failure is treating the symptom. The missing record gets filled in, and whatever caused it to go missing stays put for the next inspection to find.

The plan also needs the provider behind it. Where the request is made under regulation 17(3), the report covers your governance. A plan the manager wrote alone, which the owner or board never saw, can look like the very governance gap CQC is asking about.

What to do in the first 48 hours and before the deadline

Where the request is made under regulation 17(3), your report is due no later than 28 days beginning on the day after you receive it. Day 1 is the day after it arrives. If your letter gives an earlier date, work to that.

  1. Record the day it arrived

    Note the date you received the request and keep the email or envelope. It is not settled whether the deemed delivery rules for other CQC notices apply to this clock, so count from the day it reached you. That gives you the earlier deadline. A request that arrives on 1 March has day 1 on 2 March and day 28 on 29 March.

  2. Check the letter for its own terms

    Read which regulation the letter cites, what it asks for and the date it gives. If that date is earlier than your 28-day count, work to the letter. If anything is unclear, ask CQC in writing straight away.

  3. List every breach

    For each one, write down the regulation, what CQC found and the evidence CQC relied on. Your action plan has to answer every finding.

  4. Deal with any risk today

    CQC judged that people are not at immediate risk. If you find something that is, act on it now and record what you did and when.

  5. Find the root cause

    Ask why each breach happened: a missing process, a training gap, weak oversight or too few staff. An action that treats only the symptom leaves the cause in place for the next inspection to find.

  6. Give every action an owner and a date

    One named owner per action, and a completion date you can meet. Your report tells CQC how and by when you will comply, so the dates you give are the dates CQC will read.

  7. Sign it off and send it

    Have the provider or nominated individual review the plan before it goes. Send it the way the letter asks, before the deadline, and keep proof of sending.

  8. Deliver the plan

    Track each action to completion, keep the evidence and audit that each change holds. At your next inspection CQC will look at how the service runs.

Common mistakes

  • Treating the request as optional because CQC says it is not enforcement action.
  • Counting 28 working days. Regulation 17(3) says 28 days.
  • Sending a plan with no owners, no dates or no way to measure progress.
  • Promising completion dates you cannot meet.
  • Fixing the single record CQC found instead of the process that produced it.
  • Writing the plan, sending it and filing it. CQC will look at the service at your next inspection.
  • Leaving the registered manager to write it alone, with no sign-off from the provider.

What happens if you ignore it

Where CQC asks under regulation 17(3) and you do not send the report in time, you commit an offence under regulation 22 of the 2014 Regulations. On conviction the maximum fine is level 4 on the standard scale, which is £2,500. CQC can offer a fixed penalty notice of £300 instead, and paying it means you cannot be convicted of that offence. CQC must publish the details of a paid penalty notice.

Then there is the breach itself. A breach left unresolved, or found again, may lead CQC to pick a stronger response next time, such as a Warning Notice or action against your registration.

Can you challenge an Action Plan Request?

CQC does not describe a representations or appeal route for an Action Plan Request. It sits outside the Notice of Proposal process, and it is not settled whether a tribunal appeal is available. If you think a finding is wrong, still send the report on time and set out your evidence in it.

Other options may include asking CQC to withdraw the request, using CQC's complaints process or applying for judicial review. Take legal advice before relying on any of them. Where it's needed, we work with our trusted legal partners.

Before your first call, have these to hand

Don't delay the call to find them.

  • The Requirement Notice or Action Plan Request, plus the email or envelope it came in, so we can confirm when it arrived.
  • The inspection report or feedback the request refers to.
  • Any action plan or audit you have already started.

Requirement Notices and Action Plan Requests: common questions

What is a CQC Requirement Notice?
The old name for what CQC now calls an Action Plan Request. CQC uses it when it finds a breach of the regulations but people are not at immediate risk of harm. It asks you to send a report on how and by when you will comply.
Is a Requirement Notice the same as an Action Plan Request?
Yes. CQC's current enforcement policy says Action Plan Requests were previously called Requirement Notices. Some older CQC pages still use the old name.
How serious is a CQC Requirement Notice?
It isn't CQC's most severe action, but it's a clear sign CQC has found a breach and expects you to fix it. CQC uses it for low seriousness breaches. CQC says a late report is a criminal offence, and a breach that isn't put right can lead to stronger action next time.
How long do I have to send my action plan?
Check your letter first. Where CQC asks under regulation 17(3) of the 2014 Regulations, you must send the report no later than 28 days beginning on the day after you receive the request. That is 28 days, not 28 working days.
Is an Action Plan Request enforcement action?
CQC says it is not. Failing to send the requested report on time is still an offence, and CQC says it could lead it to use its enforcement powers.
Can I appeal an Action Plan Request?
CQC does not describe an appeal or representations route for it, and whether a tribunal appeal is available is not settled. Send the report on time with your evidence, and take legal advice if you think the request itself is wrong.
What if CQC rejects my action plan?
CQC can refuse a plan that does not satisfactorily address the issues. Give each finding a root cause, actions with owners and dates, and a way to show the fix worked.
Do I need a lawyer for a Requirement Notice?
Usually not. Most responses are a compliance job: a root-cause review, a sound plan and evidence of improvement. If you dispute a finding, or the matter escalates, our trusted legal partners can advise.
How can HLTH help with a Requirement Notice?
We step in early. We assess each breach with you, agree the corrective actions, help you put them in place and evidence them, and make sure the changes are embedded before CQC returns. The aim is to resolve it at this stage, before it escalates.

The HLTH Compliance team provided outstanding post-inspection support, offering calm, effective guidance during a challenging time. Their approach was not only professional but also sympathetic to our unique situation, creating a constructive environment for collaboration with our staff.

Stephen Gilmour, Hevercourt LimitedPOST-INSPECTION SUPPORT

A clear next step, before a big commitment

Received a Requirement Notice or Action Plan Request?

This is the stage where it's still fixable. Call us before you send your plan, so it's right the first time and the improvements hold.

Speak to one of our experts

Clinicians, a former CQC inspector and a former Registered Manager.

A 15-minute introductory call to explain your situation, explore the right support and discuss the next step.