Compliance checklist · Care
What your website and marketing must show to stay compliant in care
The rules that apply to a UK care business, turned into what your site, ads and social posts must show, or must not say. Each point links to the regulator or the legislation it comes from.
General guidance, not legal advice. Rules change and depend on your circumstances; check the linked source or take advice from a qualified adviser before relying on any point.
Care rules
Care Quality CommissionCQC fundamentals
Also covers: Health and Social Care Act 2008 Regulated Activities Regulations 2014.
Display your current CQC rating on the website (a legal requirement for rated providers) and link to your CQC profile.
Source: Care Quality Commission
NHS Data Security and Protection ToolkitDSPT toolkit
Only claim DSPT compliance on the site if your current submission meets the standard; the claim is checkable.
Source: NHS Data Security and Protection Toolkit
Care Act 2014Care Act 2014
Describe services and eligibility accurately; do not promise outcomes.
Source: Care Act 2014
SafeguardingSafeguarding Adults Boards
Publish how to raise a safeguarding concern with you, and keep that route working.
Source: Safeguarding
Mental Capacity Act 2005Mental Capacity Act 2005
Testimonials and photos of people who may lack capacity need consent from someone entitled to give it.
Source: Mental Capacity Act 2005
RIDDORRIDDOR
No website duty as such, but do not publish safety-record claims you cannot evidence.
Source: RIDDOR
Data protection officer (UK GDPR art. 37)ICO art 37 DPO
Where a DPO is required, publish their contact details in the privacy notice.
Source: Data protection officer (UK GDPR art. 37)
CQC statutory notificationsCQC statutory notifications
No display duty; keep the site consistent with what you have notified to CQC (for example a change of registered manager).
Source: CQC statutory notifications
Employment Rights Act 2025Employment Rights Act 2025 Fair Pay Agreement
Do not advertise roles or terms (zero-hours, notice, probation) in a way that contradicts the Act's worker rights; check commencement dates before stating what applies today.
Source: Employment Rights Act 2025
Every UK business site
Whatever the sector, these apply to almost every business website.
Company and trading details
A limited company's site must show its registered name, company number, place of registration and registered office address.
Source: Company and trading details
Privacy notice
Say who you are, what each form collects, why, how long you keep it and how people use their rights.
Source: Privacy notice
Cookie consent
Non-essential cookies and analytics wait for consent, and refusing is as easy as accepting.
Source: Cookie consent
Honest claims
Every claim, review and comparison is true, evidenced and not misleading (CAP Code).
Source: Honest claims
Genuine reviews
No fake, bought or selectively hidden reviews (DMCC Act 2024).
Source: Genuine reviews
Sector context
Recent changes in the sector that affect what your marketing should say, from the sources linked.
- Adult social care vacancy rate 6.2% in 2025/26, ~96,000 vacancies, ~3x wider economy; 1.59m filled posts (source)
- Care worker and senior care worker roles closed to new overseas sponsorship from 22 July 2025 (source)
- CQC consultation on sector frameworks, supporting key lines of enquiry and key-question-level ratings (source)
- CQC 2026 improvement plan: final frameworks summer 2026, implementation from end of year (plan). Status at 8 Nov 2026: draft consultation closed 12 June 2026 and pilots ran June-October; no final frameworks found published, so the single assessment framework and quality statements still apply (source)
- DSPT is an annual submission due 30 June (source)
- ~76.5% of CQC-registered adult social care services had an up-to-date DSPT at 30 June 2026 (source)
- Adult Social Care Negotiating Body to be set up by regulations planned for 2026 (body and chair 2026-27, negotiations from around April 2027); first Fair Pay Agreement expected in force April 2028 (source)
- Companies House identity verification for directors and PSCs mandatory from 18 November 2025 with a 12-month transition (source)
- SIC 2007 code definitions (source)
See how your site measures up
The free grader checks your site against the visible signals buyers, search engines and AI assistants look for, including several of the points above.
Grade my website