Falls Prevention in Care Homes: A CQC Regulation 12 Compliance Guide

A resident falls overnight. No one witnesses it, and by the time a carer notices, the resident has already been helped back into bed with a cup of tea and a plaster. For CQC inspectors working to Regulation 12 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, that sequence is not a footnote — it is often the whole story of whether a provider manages risk safely. This guide sets out what a defensible falls risk assessment and post-fall protocol actually need to contain, where falls sit inside CQC's Single Assessment Framework, and what CQC's own enforcement record shows happens when providers get it wrong.

What Regulation 12 actually requires on falls

Regulation 12 requires registered providers to assess the risks to the health and safety of people using the service, do everything reasonably practicable to mitigate those risks, and ensure the proper and safe management of medicines and equipment (Care Quality Commission, Regulation 12: Safe care and treatment guidance, cqc.org.uk). Falls are not named explicitly in the regulation's wording, but CQC treats them as one of the clearest practical tests of "safe care and treatment" because a fall exposes several risk domains at once: the physical environment, staffing levels and supervision, mobility support, continence care, and medication — sedatives, antihypertensives and psychotropics among them — that can affect balance and alertness. A home with no functioning system for identifying and acting on falls risk is one of the most common findings behind Regulation 12 breaches, and the same underlying gap — a system that exists on paper but doesn't change practice — recurs across many of the reasons providers fail CQC inspections.

Where falls sit in CQC's Single Assessment Framework

Under CQC's Single Assessment Framework, inspectors gather evidence against 34 quality statements grouped under five key questions: Safe, Effective, Caring, Responsive and Well-led. Falls prevention sits most directly under the "Safe" key question, in the quality statement "Involving people to manage risks", which asks whether people are supported to understand and manage risks to their own safety and are involved in shaping their own risk management plans, rather than having a generic, one-size-fits-all response applied to them. Inspectors are looking for evidence that risk assessments are person-specific, reviewed after every fall rather than on a fixed annual cycle, and actually drive a change in care — not paperwork that sits untouched in a file. For a fuller breakdown of how all 34 quality statements map onto everyday practice, see Learnsignal's guide to the CQC Single Assessment Framework quality statements.

What a defensible falls risk assessment looks like

NICE clinical guideline CG161, Falls in older people: assessing risk and prevention, remains the reference point most UK care providers build their falls policies around, even though NICE has since updated and folded this guidance into NG249, Falls: assessment and prevention in older people and in people 50 and over at higher risk (NICE, 2025). Both versions keep the same core principle: falls risk should be identified through multifactorial assessment rather than a single tick-box score, and anyone identified as at risk should be offered a multifactorial intervention targeted at their specific risk factors — not a generic "falls pack" handed out uniformly to every resident (NICE CG161/NG249).

A credible assessment tool for a care home setting draws on the same territory as the widely used FRAT (Falls Risk Assessment Tool), which gives staff a structured way to flag risk before a fall happens rather than only reacting afterwards. Whatever tool a home uses, it should capture at minimum:

• Falls history — any fall in the last 12 months, including near-misses that didn't result in injury
• Medication — sedatives, antihypertensives, diuretics, anticoagulants and psychotropics, all of which raise falls risk
• Mobility and gait — use of walking aids, balance, muscle strength, and footwear
• Cognition — confusion, dementia-related impulsivity, or delirium risk
• Continence and toileting patterns — a major driver of night-time falls
• Vision — uncorrected or unchecked eyesight
• Environment — lighting, flooring, clutter, bed height, and call bell reach

An assessment is only defensible at inspection if it is dated, signed, reviewed on a set schedule, and re-triggered immediately after any fall or significant change in condition. Inspectors will ask to see that the resulting actions — a falls clinic referral, a footwear change, a sensor mat, a medication review — actually happened, not just that a box was ticked.

Building a post-fall protocol that holds up to scrutiny

A risk assessment only covers half the picture. CQC and NICE guidance both expect a clear, written post-fall protocol that staff follow every time, regardless of how minor a fall looks. At minimum this should cover an immediate safety check before the resident is moved, especially if they are on anticoagulant medication or a head injury is possible; a schedule of neurological observations — level of consciousness, pupil response, orientation — for any fall involving a head injury or where the resident cannot reliably describe what happened, with clear escalation if their condition changes; a documented decision on when to call 999 versus NHS 111 or the GP; full written documentation of what happened, what was observed, who was contacted and the outcome, recorded close to the time rather than from memory the next day; and prompt notification of family or next of kin.

Certain falls also trigger a duty to notify CQC directly — particularly where a resident has died or suffered a serious injury. Learnsignal has covered the detail of that duty separately, including timescales and what must be included, in the guide to CQC statutory notifications and what to report. A well-run post-fall protocol should point straight into that process rather than leaving a manager to work it out from scratch in the middle of a serious incident.

When falls management goes wrong: lessons from CQC enforcement

CQC has prosecution powers under Regulation 12 when a provider's failure to manage risk causes avoidable harm, and falls are a recurring feature of these cases. In one case published on CQC's own website, a Durham-based care home provider was ordered to pay £47,681 following a prosecution connected to the death of a 93-year-old resident, after CQC's investigation found the provider had failed to properly assess and manage the risk of falls (Care Quality Commission press release, cqc.org.uk). Cases like this tend to share a pattern rather than being one-off bad luck: a risk assessment that existed on paper but was never updated after a change in the resident's condition, supervision gaps at the times falls were most likely to happen, or a post-fall response that didn't escalate quickly enough. CQC's own guidance is clear that Regulation 12 prosecutions are reserved for exactly this kind of gap between what the paperwork says and what actually happens on the floor.

Embedding falls prevention into everyday governance

None of this holds up without governance behind it. A single annual audit of falls risk assessments will not satisfy CQC, and it will not prevent falls either. Registered managers should expect to review every fall at a home level, not just for the individual resident, looking for patterns by time of day, location, staffing shift or resident group; feed falls data into the home's wider incident investigation process, with documentation robust enough to stand up to scrutiny (see Learnsignal's guide to incident investigation and documentation standards for care providers); make falls prevention a standing item in governance and care planning meetings rather than a subject only raised after a serious incident; and keep staff training on falls risk assessment, moving and handling, and post-fall response current, rather than treating it as a one-off induction module.

Falls prevention is one of the clearest places where CQC compliance and genuinely good care overlap: a defensible risk assessment and a well-rehearsed post-fall protocol protect residents and protect the provider's Regulation 12 position at the same time. For registered managers who want to build this into their team's day-to-day practice rather than relying on policy documents alone, Learnsignal's CPD courses cover falls risk assessment, safeguarding and CQC-aligned safe care practice in more depth.