Most registered managers only think about the CQC provider portal when something has gone wrong: a death to notify on a Saturday, a manager leaving, a draft report to challenge. That is when they find the login belongs to someone who left last year, or the reset email goes to an inbox nobody checks. This guide explains what the portal is for, how to set up access so it never depends on one person, and the simple routine that keeps your dealings with CQC on time and on record.
The short answer
The CQC provider portal is the online service providers use to deal with the Care Quality Commission: submitting statutory notifications, applying for and changing registration, keeping provider and location details up to date, and responding to CQC during an assessment. Every service should have at least two people with working access, a shared log of everything submitted with the reference numbers, and a named person who checks for messages from CQC every working day. What exactly you can do in the portal depends on what CQC has moved online for your type of provider, so check CQC's current guidance when something new comes up.
What the portal is for
CQC has been moving its dealings with providers onto a single online portal over the last few years, replacing older online forms and email routes. The functions a care home manager is most likely to use are:
- Statutory notifications: deaths, serious injuries, allegations of abuse, police incidents, deprivation of liberty outcomes, events that stop the service running safely, and absences of the registered manager.
- Registration: applying to register a new provider, location or manager, and applying to vary or remove a registration.
- Changes to details: changes of address, contact details, nominated individual, statement of purpose or the regulated activities you carry on.
- Assessment activity: responding to requests for information and checking the factual accuracy of a draft report, where CQC routes these through the portal for your service.
If you are unsure whether something should go through the portal, by email or by another route, CQC's guidance for providers is the authority. Do not guess with a statutory notification. A notification sent to the wrong place has not been sent.
Who should have access
The most common failure is access that belongs to one person. Managers leave, go on holiday, go off sick, and the home cannot notify a death until someone remembers a password. Set access up deliberately:
| Role | Why they need access | What to watch |
|---|---|---|
| Registered manager | Day-to-day notifications and contact with the inspector | Remove access the day they leave, and notify the absence or departure |
| Nominated individual or provider lead | Registration changes, provider-level information, cover when the manager is away | Must be able to act at short notice, not only at month end |
| Deputy manager | Cover for weekends and absences | Should be trained on what to notify, not just how to log in |
| Group compliance lead (if you have one) | Oversight across several locations | Must not become the only person who can submit |
Use work email addresses that belong to the role or the organisation, not personal Gmail accounts. Record who has access in your governance file and review the list every quarter. When anyone with access leaves, remove them that day.
Notifications: the part that matters most
Failing to notify CQC of a notifiable event without delay is a breach of the Care Quality Commission (Registration) Regulations 2009, and it is one of the few failures CQC can prosecute directly. Most homes that get caught out do not decide not to notify. They forget, or assume someone else did it, or cannot get into the portal.
A notification routine that works:
- Every incident form asks one question: is this notifiable to CQC? The person reviewing the incident answers it, with a reason if the answer is no.
- If yes, the notification is submitted the same day, or the next working day for events where the guidance allows it.
- The reference number goes on the incident record and in a notifications log.
- Once a month, the manager compares the incident log with the notifications log. Every notifiable incident has a reference; every non-notified incident has a reason.
Our guide to CQC notifications lists what must be reported and when, and the incident reporting guide shows how the decision fits into an incident review.
Registration changes that are easy to miss
Some changes need CQC to be told, or need an application, before they happen. Homes most often miss these:
- A new registered manager. The new manager must apply to be registered. Until they are, the service is running without a registered manager, and the departure of the old one should already have been notified.
- The registered manager is away for 28 days or more. This must be notified, with who is in charge in the meantime.
- A change of nominated individual at provider level.
- Changes to the statement of purpose, for example a new client group, a change in the number of beds or the start of nursing care.
- New regulated activities, such as adding accommodation with nursing, which needs a variation of registration before you start.
- A change of legal entity, such as moving from a sole trader to a limited company, which usually means a new registration rather than a change of details.
If you are opening a new service, our guide to registering a learning disability service with CQC walks through the application from the start.
Draft reports and factual accuracy
After an assessment, CQC normally sends the provider a draft report and gives a short window to point out factual inaccuracies. This is not a chance to argue with judgements, but it is the time to correct wrong facts: a training figure taken from an old matrix, an incident described inaccurately, a policy said to be missing that exists.
The window is short, so the draft must reach someone who can act straight away. Whoever has portal access should check for it daily after an inspection. A factual accuracy response works best when every correction is matched to evidence: the current training matrix, the dated policy, the incident record with its review. Our guide to reading CQC reports covers what to look for in a draft.
A weekly portal routine
Ten minutes a week stops most portal problems:
- Check for messages, requests or drafts from CQC.
- Check the notifications log against the week's incidents.
- Check that both named users can still log in. An expired password is easier to fix on a Tuesday than at 2am on a Sunday.
- Note any upcoming change that needs CQC to be told: a manager's planned leave, a refurbishment that closes rooms, a new service type.
Write the routine into your governance calendar so it does not depend on one person's memory. Our guide to Regulation 17 good governance explains how routines like this become evidence of oversight.
Keeping your own record
Do not treat the portal as your filing system. Keep your own record of every submission: date, type, reference, who submitted it, and a copy or summary of what was said. If CQC's records and yours ever disagree, yours is the evidence that you notified on time. Inspectors will also ask to see your notifications log, and they will compare it with incidents.
A care records system helps when the notification decision is part of the incident review itself. In Kiwi, the incident review records whether the event was CQC-notifiable, when the notification was made and the reference, so the log builds itself from the incidents. Kiwi does not submit to CQC for you; the submission is still made through CQC's own channels.
Worked example: the Saturday death
Marcus, a resident in a learning disability home, dies unexpectedly on a Saturday afternoon. The registered manager is on annual leave abroad.
In a home that has set things up well, the deputy, who has her own access, completes the incident record, contacts the police and the family as the procedure says, and submits the death notification that evening. She records the reference on the incident, adds it to the notifications log and messages the manager. On Monday the manager reviews the record, adds the LeDeR notification, and checks that the family has been contacted under the duty of candour where it applies.
In a home that has not, nobody can log in until Tuesday, the notification goes in three days late, and the next inspection finds a late notification of a death with no explanation. The difference is not effort. It is two named users and a log.
Common mistakes
- One person holding the only login.
- Portal emails going to a personal or shared inbox nobody reads.
- No notifications log, so nobody can prove what was sent.
- Assuming the local authority safeguarding referral also tells CQC. It does not; both are needed.
- Not notifying the registered manager's absence or departure.
- Starting a new regulated activity before the variation is approved.
- Missing the factual accuracy window because nobody checked for the draft.
What good looks like on inspection day
The inspector asks the deputy what she would do if a resident died while the manager was away. She describes the steps, says she has her own access to the portal, and shows the notifications log with references. The inspector picks three incidents from the last quarter, finds that the notifiable ones have references and dates, and that the others each have a one-line reason for not notifying. The governance file lists who has portal access and when that list was last checked. If you want to see how incident reviews and notification records sit together, book a demo.
Final conclusion
The CQC provider portal is just a channel, but the duties that run through it are not optional. Give at least two people working access, keep your own log of everything you submit, check for messages every week and straight after an inspection, and make the 'is this notifiable?' question part of every incident review. Do that and the portal stops being a source of panic and becomes what it should be: a routine part of running a well-led service.
Frequently asked
What is the CQC provider portal used for?
Providers use it to submit statutory notifications, apply for and change registration, keep provider and location details up to date, and respond to CQC during assessments, such as checking the factual accuracy of a draft report. What is available depends on what CQC has moved online for your type of provider.
Who should have access to the CQC portal in a care home?
At least two people: usually the registered manager and the nominated individual or deputy, so that notifications can be made when the manager is away. Use work email addresses and remove access the day someone leaves.
How quickly must a death be notified to CQC?
Without delay. Deaths of people using the service must be notified promptly, and late notification is a breach of the registration regulations. Check CQC's notification guidance for the exact requirements for your type of service.
Does a safeguarding referral to the local authority also notify CQC?
No. A safeguarding referral to the local authority and a statutory notification to CQC are separate duties, and an allegation of abuse usually needs both.
What should we do if we cannot log in to the CQC portal?
Use CQC's published support routes straight away, and if a notification is due, follow CQC's guidance for submitting it by another route. Record what you did and when. Then fix the underlying problem by making sure more than one person has access.
Do we need to keep our own record of notifications?
Yes. Keep a notifications log with the date, type, reference and who submitted each one. It is your evidence that you notified on time, and inspectors will ask to see it alongside your incident records.
Sources
- Care Quality Commission: guidance for providers, statutory notifications
- Care Quality Commission (Registration) Regulations 2009, regulations 14, 15, 16 and 18
- Care Quality Commission: registration guidance for providers and managers
- Care Quality Commission: factual accuracy process for assessment reports
- Health and Social Care Act 2008 (Regulated Activities) Regulations 2014, regulation 17
