The NHS is under unprecedented pressure to reduce elective care backlogs. As a result, insourcing providers and organisations operating under Waiting List Reduction frameworks are increasingly contracted by NHS Trusts to deliver additional clinical capacity.

However, many organisations entering this market misunderstand one critical regulatory requirement:

If you are delivering regulated activities within an NHS hospital, you may still need to register with the Care Quality Commission (CQC).

This blog explains when CQC registration is required, why it is required, and what insourcing providers must do to remain compliant.

Official reference:
https://www.cqc.org.uk/guidance-providers/registration/registering-cqc

---

What Is NHS Insourcing?

Insourcing refers to a model where an external clinical provider delivers services inside an NHS hospital using the hospital’s facilities and infrastructure.

Typical insourcing arrangements include:

1. Elective surgery lists (orthopaedics, ophthalmology, ENT etc.)

2. Endoscopy waiting list reduction

3. Diagnostic services (MRI, CT, ultrasound)

4. Outpatient clinics

5. Dermatology or minor surgery services

6. Community diagnostic centres

7. Specialist clinics run inside NHS estates

Under these arrangements:

• The NHS Trust provides the facility

• The insourcing company provides clinicians, management and service delivery

From a regulatory perspective, the question becomes:

Who is legally responsible for delivering the regulated activity?

If it is the external provider, CQC registration is normally required.

---

Why CQC Registration Applies to Insourcing Providers

The Health and Social Care Act 2008 requires organisations to register with CQC if they carry out regulated activities in England.

These activities include:

1. Surgical procedures

2. Diagnostic and screening procedures

3. Treatment of disease, disorder or injury

4. Transport services, triage and medical advice

5. Maternity services

6. Family planning services

Official guidance:
https://www.cqc.org.uk/guidance-providers/registration/regulated-activities

Even when operating inside an NHS hospital, if your organisation:

• supplies the clinicians

• manages the clinical governance

• controls how the service is delivered

then your organisation may be considered the provider of the regulated activity.

In that case, CQC registration becomes mandatory. – Book our Free Consultation today.

---

Common Scenario: Waiting List Reduction Framework Providers

Many companies operate under frameworks such as:

• NHS Elective Recovery Programmes

• Waiting List Reduction contracts

• Endoscopy insourcing frameworks

• Specialist clinical insourcing providers

Typical structure:

1. NHS Trust identifies backlog

2. Insourcing provider supplies clinical teams

3. NHS hospital provides theatre space

4. Provider performs procedures on NHS patients

Even though the procedures happen in an NHS building, the clinical service may legally be delivered by the insourcing company.

CQC expects the organisation delivering care to be registered for the regulated activity.

---

Example Real-World Scenario

A private healthcare company wins a contract with an NHS Trust to perform orthopaedic procedures on weekends.

The arrangement includes:

• Private surgeons

• Private anaesthetists

• Private theatre nurses

• External clinical governance framework

The NHS hospital only provides:

• theatre space

• recovery beds

• equipment

In this scenario:

The private company is delivering the surgical service.

Therefore they must normally register with CQC for:

• Surgical procedures

• Treatment of disease, disorder or injury

This position is supported by CQC guidance on who needs to register.

Reference:
https://www.cqc.org.uk/guidance-providers/registration/who-needs-register

---

When Insourcing Providers May Not Need CQC Registration

There are limited circumstances where registration may not be required.

Examples include:

1. Staffing-only contracts

If the provider only supplies clinicians but clinical governance remains with the NHS Trust, the Trust remains the provider.

2. Agency staffing models

Where clinicians work under the Trust’s policies and governance structure, the agency does not deliver the regulated activity.

3. Subcontracting under NHS governance

Where the NHS Trust fully controls:

• clinical governance

• policies

• patient pathway

• clinical accountability

In these cases the Trust remains the registered provider. – – Book our Free Consultation today.

---

Key Governance Questions CQC Will Ask

When assessing insourcing models, CQC will typically examine:

1. Who is clinically accountable for patient outcomes?

2. Who employs or contracts the clinicians?

3. Who provides clinical governance oversight?

4. Who writes the policies and procedures?

5. Who carries indemnity and insurance?

6. Who manages incidents and safeguarding?

7. Who is responsible for duty of candour?

If the insourcing company controls these elements, CQC will expect registration.

---

Typical CQC Regulated Activities for Insourcing Providers

Most insourcing providers register for one or more of the following:

---

The Biggest Risk: Operating Without Registration

Many insourcing companies begin working with NHS Trusts assuming the Trust’s registration covers them.

This assumption can create serious regulatory exposure.

Under the Health and Social Care Act 2008:

Providing regulated activities without registration is a criminal offence.

Potential consequences include:

1. Enforcement action

2. Prosecution

3. Contract termination

4. Reputational damage

5. Being excluded from NHS frameworks

Reference:
https://www.cqc.org.uk/guidance-providers/enforcement

---

What CQC Expects from Insourcing Providers

To successfully register, organisations must demonstrate:

1. Governance systems aligned with the Single Assessment Framework

2. Clinical leadership and Registered Manager

3. Policies covering all Fundamental Standards

4. Risk management and safeguarding systems

5. Clinical audit and quality assurance

6. Incident reporting and Duty of Candour

7. Evidence of staff competence and training

CQC will also review:

• service model

• patient pathway

• contractual structure with NHS Trusts

• governance arrangements

---

Common Registration Mistakes Made by Insourcing Providers

From real consulting experience, the most common errors include:

1. Assuming the NHS Trust registration covers them

2. Registering the wrong regulated activities

3. Failing to appoint an appropriate Registered Manager

4. Submitting a generic Statement of Purpose

5. Not aligning governance systems with the Single Assessment Framework

These mistakes often delay registration by 3–6 months.

---

Quick Comparison Table

Colour Key:

🟢 Low Risk
🟡 Depends on governance structure
🔴 Registration required

To discuss your tailored solution – Book our Free Consultation today.