Regulation 19 Explained: What Every Registered Manager Needs to Know About Staffing Compliance

If a CQC inspector walked through your door tomorrow and asked to see evidence that every member of staff — including agency workers — is fit and proper to work in your service, how confident would you be? Regulation 19 is one of the most frequently scrutinised standards in a care inspection, yet it remains one of the least understood. This guide breaks it down clearly, practically, and without the legal jargon.

As a Registered Manager, your name is on the registration. That means the responsibility for ensuring every individual working in your service meets the “fit and proper persons” standard sits, ultimately, with you. This applies whether that person is a long-standing permanent member of staff — or an agency Healthcare Assistant covering a single night shift.

Understanding Regulation 19 isn’t just about passing inspections. It’s about protecting the people in your care.

What Is Regulation 19?

Regulation 19 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 is titled Fit and Proper Persons Employed. In simple terms, it requires providers to ensure that every person working in their service is fit, proper, and safe to do so.

The regulation applies to all workers — permanent staff, bank workers, volunteers in regulated roles, and agency staff placed through a third-party recruitment agency. There are no exemptions based on employment status or shift type.

📋 The Regulation in Plain English

Regulation 19 requires that providers only employ — or continue to employ — people who are of good character, have the qualifications and experience necessary for the work they are required to do, are physically and mentally fit, and are legally entitled to work in the UK. These requirements must be evidenced and documented before an individual begins working in a regulated activity.

The regulation is supported by Schedule 3 of the same legislation, which sets out the specific checks that must be completed and evidenced before a person can be deployed. Schedule 3 is, in effect, the practical checklist that sits behind Regulation 19.

Schedule 3: The Specific Requirements

Schedule 3 lists the checks that providers — and their staffing agencies — must carry out before a worker can be placed in a regulated activity. Here is what those checks cover:

Check	What It Requires	Evidence Required
Identity Verification	Confirmation that the person is who they claim to be	Passport, photo ID, proof of address
Right to Work	Legal entitlement to work in the UK	Passport verification or Share Code online check — screenshot alone is insufficient
Enhanced DBS Check	Disclosure of criminal history relevant to regulated activity	Enhanced DBS certificate; if on Update Service, online status check with barred list verification
References	Minimum two professional references confirming suitability	Written references; most recent employer mandatory; gaps in employment explained
Employment History	Full account of work history with unexplained gaps investigated	CV cross-referenced and verified
Qualifications	Relevant training and credentials are valid and evidenced	Training certificates with expiry dates
Good Character Assessment	Structured interview including safeguarding and conduct scenarios	Interview record signed and dated
Physical and Mental Fitness	Fitness to undertake the duties of the role	Fit-to-work declaration; Occupational Health referral where indicated

⚠️ Critical Point

All Schedule 3 checks must be completed before a worker is deployed into a regulated activity. Deploying a worker without full clearance — regardless of urgency — is a direct breach of Regulation 19. CQC inspectors will look for evidence that this sequencing was followed without exception.

What Regulation 19 Means for Agency Staff

This is where many care providers — and some recruitment agencies — fall short. The misconception is that responsibility for compliance checks transfers entirely to the staffing agency. It does not.

When you accept an agency worker into your service, CQC expects you to be satisfied that Regulation 19 and Schedule 3 requirements have been met. In practice, this means:

Your agency can provide documentary evidence of every Schedule 3 check before the worker’s first shift
The DBS check is Enhanced level and covers the correct workforce (adult, children, or both)
Training certificates are in-date — not expired — at the time of deployment
Right to Work documentation has been verified by the agency using an online check (not a screenshot), with visa expiry dates tracked
You have a record of the compliance checks on file — or immediate access to them — prior to the worker arriving on site

If your staffing agency cannot provide this documentation on demand, you are exposed. An inspector will not accept “the agency handles all of that” as a satisfactory response. The duty of compliance rests with the registered provider.

An inspection finding that a worker was placed without full compliance documentation is not just a paperwork failure — it is evidence that the provider did not take its regulatory responsibilities seriously.— SecureHands Recruitment Ltd | Compliance Commentary

The Most Common Regulation 19 Failures in Inspections

CQC inspection reports are publicly available, and a review of findings relating to staffing compliance reveals a consistent pattern of failures. Here are the most frequently cited issues:

DBS certificates not renewed or not on the Update ServiceA DBS check is a point-in-time check. Without Update Service registration, an Enhanced DBS that was issued two or three years ago may not reflect a worker’s current status. Inspectors look for live, current verification — not outdated certificates.
Right to Work checks not completed compliantlyUsing a photocopy or scan of a passport without completing an online Share Code check for non-UK nationals is a direct breach. The check must be conducted online and the outcome — not just the document — must be recorded.
References not verified before deploymentWritten references from personal acquaintances, or references that were received but not verified for authenticity, fail to satisfy Schedule 3. The most recent employer reference is mandatory, and employment gaps must be explored and explained.
Training records held by the agency but not accessible to the providerInspectors may ask to see training records during a visit. If the information sits only within an agency’s internal system and you cannot access or provide it, this creates an audit gap — even if the training was completed.
Deployment before full clearance — due to shift urgencyThis is one of the most serious failures. The pressure to fill an urgent shift can lead to a worker being deployed before all checks are complete. No level of operational urgency justifies this. The risk to service users — and to your registration — is too great.

Schedule 3 checks required before any placement

Professional references required — most recent employer mandatory

Exceptions permitted — no shift urgency overrides compliance

The Role of Mandatory Training in Regulation 19

Schedule 3 requires that workers have the qualifications, skills, and experience appropriate to their role. For Healthcare Assistants and Support Workers, this translates into a mandatory training framework that must be current, evidenced, and tracked.

Core mandatory training for HCAs and Support Workers in UK care settings typically includes:

Safeguarding Adults (and Safeguarding Children where relevant to the service type)
Moving and Handling — both theory and practical elements
Infection Prevention and Control
Basic Life Support / CPR
Fire Safety and Health & Safety
Mental Capacity Act (MCA) and Deprivation of Liberty Safeguards (DoLS)
Medication Awareness

The key word is “current.” An expired training certificate does not satisfy Schedule 3. A compliant staffing agency must maintain a live training matrix with completion dates, expiry dates, and renewal tracking — and must prevent deployment of any worker whose training has lapsed.

💡 Good Practice Tip

Request a copy of your agency’s training matrix before confirming a placement. A well-run agency should be able to provide a worker’s full training record — including expiry dates — on demand, not just upon request the week before an inspection.

What to Ask Your Staffing Agency

If you use — or are considering using — a healthcare staffing agency, the following questions will help you assess whether they are operating to a standard that protects your registration and the people in your care.

1“Can you provide a full compliance pack for any worker before their first shift?”A compliant agency should be able to confirm — in advance of placement — that all Schedule 3 checks have been completed and are documented. This should include DBS, right to work, references, ID, and training records.
2“Is your DBS process on the Update Service?”The DBS Update Service allows real-time checks on a worker’s DBS status. Without it, agencies must re-apply for new DBS certificates periodically — which can create gaps in coverage.
3“How do you verify right to work for non-UK nationals?”The answer must reference the online Share Code check via the Home Office system. A photocopy of a visa or biometric card alone is not a compliant right-to-work check.
4“What happens if a worker’s training expires?”The agency should have a live training tracker and a clear policy: workers with expired mandatory training are removed from the deployment pool until training is renewed and evidenced. There should be no grey areas.
5“Do you have a written Governance Manual or Compliance Policy?”An agency that has invested in formal governance documentation — not just informal processes — is demonstrating a level of commitment to compliance that goes beyond the minimum. Ask to see it.

Building an Audit-Ready System for Agency Staff

Compliance is not a one-time event — it is an ongoing management function. For Registered Managers using agency staff regularly, building a simple but robust system for documenting and tracking agency worker compliance is essential.

Here is a practical framework to consider:

📂 Recommended Documentation System

Before each placement: Request and file the worker’s compliance summary — DBS status, right to work confirmation, training matrix with expiry dates, reference confirmation, and ID verification. Store this in a dedicated agency worker file (digital or physical).

Ongoing: Maintain a simple log of every agency worker deployed — name, date of placement, role, and the date compliance documentation was received. Review expiry dates quarterly.

Before an inspection: Ensure you can locate the compliance record for every agency worker who has worked in the service in the preceding 12 months. CQC may request these during an inspection, not just for current workers but for recent placements too.

Your staffing agency should be making this easy for you — not creating additional administrative burden. The best agencies operate what is known as a Worker Compliance Wallet: a pre-packaged compliance document set for each worker that can be shared with the provider electronically before a shift begins.

How SecureHands Approaches Regulation 19

At SecureHands Recruitment Ltd, our entire operational model was built around Regulation 19 and Schedule 3 compliance — before we placed our first worker. We believe that a staffing agency’s compliance infrastructure is not an add-on to the service. It is the service.

Here is how we operationalise Regulation 19 in practice:

Zero Deployment Without Clearance. No worker is deployed until all eight Schedule 3 checks are complete, verified, and signed off by our Compliance Lead. Commercial urgency does not override this.
Worker Compliance Wallets. Every worker has a digital compliance pack — DBS, right to work, training matrix, references, and ID — available on request before their first shift with any client.
Live Training Matrix. We track every mandatory training certificate — completion date, expiry date, and renewal status. Workers with expired training are removed from deployment immediately.
Compliant Right to Work Verification. All right to work checks for non-UK nationals are completed via the Home Office online Share Code system. Expiry dates are logged and recheck reminders scheduled.
Quarterly Compliance Audits. Our internal audit programme reviews a minimum 10% random sample of all worker files — plus 100% of new starters and all visa holders — every quarter.
Governance Manual. Our Master Governance Manual documents every policy, control mechanism, and assurance procedure — providing full regulatory traceability aligned to CQC Regulations 17, 18, and 19.

We work primarily with care homes, supported living services, and domiciliary care providers across Telford, Shropshire, and the wider West Midlands. Our clients — typically Registered Managers — tell us that working with a compliance-led agency reduces their audit anxiety considerably. That is the outcome we are designed to deliver.

Want to See Our Compliance Pack?

Request a copy of the SecureHands Compliance Summary and Worker Compliance Wallet process. We’re happy to walk you through our Regulation 19 framework before you make any commitment.Request Our Compliance Pack →Or call us on 01952 956027 | WhatsApp: 07737 077764

Final Thoughts

Regulation 19 is not bureaucracy for its own sake. It exists because the people in your care are among the most vulnerable in society, and the standard of every person who works with them matters deeply.

For Registered Managers, the practical takeaway is straightforward: know what Schedule 3 requires, verify that your agency evidences every check before deployment, and maintain your own record of agency worker compliance that you can produce at any time.

For staffing agencies, the message is equally clear: compliance is not a cost of doing business — it is the business. An agency that cannot provide a compliant, documented, audit-ready worker is not a suitable partner for a CQC-registered provider.

If you are a Registered Manager in Telford, Shropshire, or the wider West Midlands and you would like to understand more about how SecureHands structures its compliance processes, we welcome the conversation.

Disclaimer: This article is provided for informational and educational purposes. It does not constitute legal advice. Registered Managers and providers should consult CQC guidance and seek appropriate professional advice in relation to their specific regulatory obligations.

📑 In This Article

Get In Touch

Phone

01952 956027

07737 077764

info@securehandsrecruitment.co.uk

Website

securehandsrecruitment.co.uk

📄 SecureHands Services

SecureHands Recruitment Ltd | Company No. 16925273
Unit A, 82 James Carter Road, Mildenhall Industrial Estate, Mildenhall, Suffolk, IP28 7DE
Serving care providers across Telford, Shropshire & the West Midlands

01952 956027 | info@securehandsrecruitment.co.uk | www.securehandsrecruitment.co.uk

Safe Hands. Every Shift.