Care Home Business Continuity Plans
By InspectReady editorial team · Published 10 October 2026
This guide explains what business continuity planning involves for care homes in England and the regulatory expectations behind it. It is general guidance on compliance documentation, not emergency-planning or legal advice. Your local resilience forum and commissioning authority may set additional requirements. References to legislation are current as of the last reviewed date above.
A business continuity plan answers one question: if something stops the home running normally, how does care keep happening safely?
Most homes have a document with that title. Rather fewer have one that a night senior could pick up at 2am and act on. The difference matters, because continuity plans are tested by events rather than by inspections — and the event does not wait for you to find the right version.
The regulatory basis
There is no regulation in England headed "business continuity." The expectation sits inside two of the fundamental standards, which is why it is easy to overlook until an inspector asks.
Regulation 12 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 requires that "Care and treatment must be provided in a safe way for service users," and specifies this includes "assessing the risks to the health and safety of service users of receiving the care or treatment" and "doing all that is reasonably practicable to mitigate any such risks." A foreseeable disruption that would make care unsafe is exactly such a risk.
Regulation 17 then requires systems to "assess, monitor and mitigate the risks relating to the health, safety and welfare of service users and others…" The continuity plan is the system that discharges that duty for disruption risk.
Your local authority may impose further requirements through contract terms, and local resilience forums often ask providers for continuity information. Check both — commissioning requirements are frequently more specific than the regulations.
What the plan needs to cover
Work from the disruptions that would actually affect your service, not a generic list. For most care homes the realistic set is:
- Utilities failure — loss of power, heating, hot water, or water supply
- Building loss or partial loss — fire, flood, structural damage, a wing taken out of use
- Staffing shortfall — severe sickness, an infectious outbreak among staff, adverse weather preventing travel, a sudden resignation of key staff
- IT and systems failure — loss of your care records system, medication records, call-bell system, or door-access control
- Supply failure — medicines, food, PPE, laundry, clinical waste collection
- Loss of key personnel — the registered manager or nurse cover
- External events — utility works, road closure, a local incident restricting access
For each, the plan should state the immediate actions in the first hour, who decides what, who is contacted, what the fallback arrangement is, and at what point you would consider partial or full evacuation.
The parts homes most often miss
The medication contingency. If the eMAR system is down, what do staff use? A blank paper MAR chart, printed and physically available, is the answer — not "we would print one," because printing needs the system and the power. Where records are electronic, keep a current printed resident list with key clinical information somewhere reachable in the dark.
The out-of-hours version. Most plans are written for a weekday with the manager present. Most incidents are not. The plan needs to work for a night senior with two carers and no manager on site, which means the first-hour actions must be within their authority and the escalation list must have numbers that are answered at 3am.
Real mutual aid. "We would transfer residents to a nearby home" is not an arrangement unless a named home has agreed it and knows your resident profile. Write down who, how many, and what they have confirmed.
Data and records. Where are backups, how quickly can records be restored, and who holds the access credentials if the manager is unreachable? Note that continuity arrangements involving resident data still have to satisfy your data protection obligations — a plan that involves emailing resident lists to personal accounts creates a second problem while solving the first.
Money and authority. Who can authorise emergency spending, up to what limit, out of hours? Plans stall on this more often than on anything technical.
Residents' individual needs in an emergency. Personal emergency evacuation plans (PEEPs) sit under a separate regime from the CQC regulations above — the Regulatory Reform (Fire Safety) Order 2005, article 9, which requires the "responsible person" to assess fire risk and identify persons especially at risk. They should be current and consistent with your fire risk assessment and your night staffing levels. If the evacuation assumption requires more staff than the night rota provides, the plan and the rota disagree, and that gap is a finding waiting to happen.
Keeping it usable
A continuity plan degrades quietly. Contact numbers change, staff leave, systems get replaced, and the document keeps saying what was true two years ago.
Three habits keep it alive:
Review it on a fixed cycle and after every use. Annually at minimum, and immediately after any incident where you used it — including near misses. Record the review date and what changed.
Test it, at least on paper. Walk a scenario through with the team: it is 2am on a Sunday in February, the power has failed, and the generator will not start. What happens, in order? A twenty-minute tabletop exercise finds more gaps than a year of document reviews, and it produces evidence of the learning culture CQC looks for.
Keep an offline copy where it will be found. A plan stored only on the system that has just failed is not a plan. Printed copies in the office and the nurses' station, with a version date on every page.
Building the review into your scheduled audit programme is the simplest way to stop it drifting — our guide to running a care home audit covers the method, and the free audit schedule generator will place a continuity review on the calendar.
How it shows up at inspection
Continuity planning is Well-Led territory. Inspectors are less interested in the document's length than in whether it is current, known, and connected to the rest of your governance. Expect questions like: when was it last reviewed, has it been used, what did you learn, do staff know where it is, and does it reflect the residents you have now.
Staff knowledge is the tell. A plan the manager can describe but the staff have never seen is a document, not a system. Our guide to Well-Led evidence covers the wider governance picture it sits in, and the care home risk assessment guide covers the risk-assessment discipline underneath it.
A short self-check
- Does the plan cover loss of power, water, heating, building, staff, IT, and supplies?
- Could a night senior act on it without calling the manager first?
- Is there a paper medication fallback that does not depend on power or the system?
- Are mutual-aid arrangements agreed with a named home, not assumed?
- Are personal evacuation plans consistent with night staffing and the fire risk assessment?
- When was it last reviewed, and last tested?
- Is there an offline copy, with a version date, where staff can find it?
This is general guidance based on the published Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 and CQC guidance current at the date above. There is no regulation in England specifically headed "business continuity"; the expectation arises from the risk and governance duties described. Local authority contracts and local resilience forums may set additional requirements. Always check the current guidance on cqc.org.uk and the regulations on legislation.gov.uk for your specific situation. Not legal advice.
Sources
- Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, regulation 12 — safe care and treatment
- Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, regulation 17 — good governance
- Regulatory Reform (Fire Safety) Order 2005, article 9 — risk assessment
Continuity plans, risk assessments, audits, and review dates all drift at different speeds, and the drift only shows up when something goes wrong. InspectReady keeps them organised and current in one place, built for independent care homes rather than enterprise chains. Start your free trial — 14 days free, no card required.
Sources & methodology
We build our guidance from primary sources — CQC, legislation.gov.uk, Skills for Care, and HSE — and check regulatory claims against the legislation itself. See our research methodology. This is information to help you prepare, not professional or legal advice.
On the CQC framework: where our guidance describes CQC's assessment framework, it describes the single assessment framework and its 34 quality statements — the framework CQC applies today. CQC has consulted on replacing the quality statements and is piloting the replacement; the final wording and the date it takes effect have not been published, and we have not rewritten our guidance for it. See the CQC assessment framework is changing.
Keep your evidence trail current
Policies, audits, and evidence packs — kept organised and ready to export when CQC asks. Start your 14-day free trial.
14 days free. No card required.