Lone Working in Domiciliary Care: Risk Assessment and CQC Expectations

Lone working is not an edge case in domiciliary care — it is the job. A care worker travelling between clients' homes, letting themselves in with a key safe code, and delivering personal care with nobody else present is the default shift pattern for most home care providers. That built-in isolation is why lone working needs its own healthcare-specific treatment, distinct from generic workplace risk assessment guidance written for offices, warehouses or lone tradespeople. In domiciliary care, lone working risk sits inside CQC's regulatory framework, not alongside it — and registered managers who treat it as a standalone health and safety policy, rather than a quality-of-care issue, tend to struggle at inspection.

This is where domiciliary care differs sharply from lone working in other sectors. A security guard or a delivery driver working alone faces personal safety risk. A domiciliary care worker faces that same personal safety risk plus clinical risk, safeguarding risk and the complete absence of an independent witness to what happens inside someone's home. Understanding how CQC's Regulation 12 (Safe care and treatment) and Regulation 18 (Staffing) frame that combination, and how it connects to the wider CQC single assessment framework quality statements, is the starting point for building a lone working framework that actually holds up at inspection, not just on paper.

Why Lone Working in Domiciliary Care Carries Distinct Risk

Four features of home care make lone working materially different from lone working in most other industries.

• Unfamiliar and unpredictable environments. Every client's home is a different, uncontrolled workplace — different layouts, different hazards, different pets, different family dynamics, and conditions that can change between visits without warning (a broken step, a hostile relative, an unlocked property).
• Safeguarding concerns with no independent witness. If a care worker observes signs of abuse, neglect, self-neglect or financial exploitation, or if an allegation is later made against the worker themselves, there is no colleague present to corroborate what happened. This cuts both ways — it protects neither the client nor the worker unless the provider has built in alternative safeguards.
• Medical emergencies with no immediate backup. A fall, a choking incident, a sudden deterioration or a cardiac event during a visit leaves one worker managing the situation, calling for help and continuing care simultaneously, often in a property the emergency services have never entered before.
• Personal safety of the worker. Lone visits, particularly early mornings, evenings and in areas the worker does not know well, carry a real risk of verbal aggression, physical assault, or being placed in situations (a client in crisis, an aggressive family member) that a single, unsupported worker cannot safely de-escalate alone.

None of this is unique to any one provider — it is structural to how domiciliary care is delivered. That is precisely why CQC does not treat lone working as a peripheral health and safety matter for home care services; it treats it as core evidence of whether care is being delivered safely and whether staffing is adequate.

How CQC Frames Lone Working: Regulation 12 and Regulation 18

CQC does not publish a standalone "lone working regulation." Instead, lone working risk in domiciliary care sits at the intersection of two fundamental standards, and inspectors read the evidence across both together.

Regulation 12: Safe Care and Treatment

Regulation 12 requires providers to assess risks to the health and safety of service users and to do all that is reasonably practicable to mitigate risks, including risks arising from the environment in which care is delivered. For a domiciliary care provider, this extends to the working environment itself — the client's home — and to whether the provider has identified and controlled the risks a lone worker will encounter there: environmental hazards, the client's specific clinical and behavioural needs, and what happens if something goes wrong with no second person present. CQC's own guidance on the Safe and Effective Staffing quality statement makes clear that safety is judged as an outcome of how care is planned and delivered, not just whether a policy document exists.

Regulation 18: Staffing

Regulation 18 requires sufficient numbers of suitably qualified, competent, skilled and experienced staff, deployed appropriately to meet people's needs — and CQC guidance is explicit that staff must be supervised until they can demonstrate the competence needed to work independently. For domiciliary care, this is directly about lone working: a new or developing care worker should not be sent out alone to a complex, high-risk visit before they have been assessed as competent to manage it unsupervised. Staffing adequacy also covers whether there are enough staff, and enough oversight capacity, to run an effective check-in and escalation system across a whole rota of lone visits — not just whether enough visits are theoretically covered.

What CQC Inspectors Actually Look For

In practice, inspectors triangulate several strands of evidence when assessing lone working safety in a domiciliary care service:

• Individualised risk assessment. A generic "lone working policy" is not enough. Inspectors expect to see risk assessed at the level of the individual client and their home — updated when circumstances change, not filed once at the start of the care package.
• Check-in and lone worker device systems. Evidence that the provider knows, in real time or near real time, where staff are and that they arrived and departed safely — whether through a care management app, a lone worker alarm device, or structured phone check-ins at agreed intervals, in line with the Health and Safety Executive's guidance on monitoring and supervising lone workers.
• Escalation protocols. A clear, staff-understood chain for what happens when a worker doesn't check in, raises a safeguarding concern, or requests urgent help — and evidence that escalation actually happened when it was needed, not just that a flowchart exists.
• Staff training and competence sign-off. Training records showing lone worker safety, safeguarding without a witness, basic emergency response, and de-escalation are covered before a worker is deployed alone, aligned to Regulation 18's competence requirement.
• The closure loop on incidents. Where something has gone wrong on a lone visit, inspectors look for evidence the incident was investigated, learning was specific (not generic), and practice changed as a result — the same documentation discipline covered in Learnsignal's guide to incident investigation and documentation standards.

Building a Compliant Lone Working Framework for Domiciliary Care

A framework that satisfies both the practical safety need and CQC's expectations needs to work at three levels: before the visit, during the visit, and after the visit.

Underpinning all three stages, governance matters as much as the individual controls. A lone working framework that is not reviewed, audited and reported into the provider's wider oversight structure will not hold up under scrutiny — this is the same principle covered in Learnsignal's overview of good governance in health and social care. Registered managers should be able to show, not just describe, how lone working risk is monitored across the whole staff team, not only referenced in individual client files.

Training Is the Difference Between a Policy and a Working System

None of the controls above function without staff who understand why they exist and how to use them under pressure. Domiciliary care staff need training that goes beyond generic health and safety induction: recognising safeguarding indicators when no colleague is present to sense-check an observation, using check-in technology correctly and consistently, knowing exactly who to contact and when, and understanding that reporting a near miss is expected, not a sign of failure. Building this into structured CPD, rather than a one-off induction session, is what allows a provider to evidence ongoing competence under Regulation 18 rather than a single point-in-time sign-off. Learnsignal's CPD courses for health and social care can support this ongoing training obligation alongside a provider's own induction and supervision programme.

Lone working in domiciliary care will never be risk-free — the nature of the service means workers will keep visiting people's homes alone. What CQC expects is not the elimination of that risk but clear evidence that it has been properly assessed, actively managed, and continuously learned from. Providers who build that evidence trail into everyday practice, rather than reconstructing it before an inspection, are the ones who consistently demonstrate safe, well-led care.