Clinical governance and quality improvement

What clinical governance is and why it matters

Clinical governance is the framework through which healthcare organisations are accountable for continuously improving the quality of their services and safeguarding high standards of care. It was introduced following a series of high-profile care failures in the NHS and is now embedded in the regulatory expectations for all CQC-registered providers in England.

For healthcare leaders, clinical governance connects patient safety, staff development, clinical effectiveness, and organisational learning into a coherent whole. When it works well, problems are identified early, learning is shared, and care quality improves continuously. When it fails, the consequences can be catastrophic for patients, staff, and the organisation.

CQC assesses clinical governance directly under the Well-led key question. An organisation with weak governance will struggle to achieve a Good or Outstanding rating, regardless of how skilled its individual clinicians are.

The seven pillars of clinical governance

Clinical governance rests on seven interconnected pillars. Each pillar reinforces the others, and weakness in one area tends to undermine the whole framework:

1. Clinical effectiveness — Ensuring care is based on the best available evidence. This means following NICE guidelines, participating in national clinical audits, and measuring outcomes against benchmarks.
2. Risk management — Systematically identifying, assessing, and mitigating risks to patient safety. This includes incident reporting, root cause analysis, and proactive risk assessment.
3. Patient experience — Gathering and acting on feedback from patients and their families. Complaints, surveys, and patient stories all contribute to understanding the quality of care from the patient perspective.
4. Communication effectiveness — Ensuring information flows reliably between teams, departments, and organisations. Poor handover and communication failures are among the most common causes of patient safety incidents.
5. Resource effectiveness — Using staff, finances, and equipment efficiently to deliver safe, high-quality care. This includes workforce planning and ensuring safe staffing levels.
6. Strategic effectiveness — Aligning governance activities with the organisation’s strategy and objectives. Governance should drive improvement, not merely document compliance.
7. Learning effectiveness — Creating systems that capture learning from incidents, complaints, audits, and good practice, and translate that learning into measurable change.

Patient safety culture

At the heart of effective clinical governance is a patient safety culture. This is the shared set of values, attitudes, and behaviours that determine how an organisation responds when things go wrong.

Just culture

A just culture distinguishes between human error, at-risk behaviour, and reckless behaviour. It recognises that healthcare is inherently complex and that even competent, well-intentioned staff will sometimes make mistakes. The focus shifts from “who is to blame?” to “what can we learn?”

This does not mean accountability is abandoned. Reckless behaviour and deliberate violations are still addressed through disciplinary processes. But the default response to an honest error is support and learning, not punishment.

Freedom to Speak Up

Following the Francis Report into the Mid Staffordshire NHS Foundation Trust, all NHS organisations are expected to have a Freedom to Speak Up Guardian. Independent healthcare providers are strongly encouraged to adopt the same approach. The Guardian provides a confidential route for staff to raise concerns about patient safety, quality of care, or workplace culture without fear of reprisal.

CQC assesses speaking-up culture under the Well-led key question. Inspectors look for evidence that staff feel safe raising concerns and that the organisation acts on them.

Duty of candour

The statutory duty of candour is one of the most important governance obligations for CQC-registered providers. It requires openness and transparency when a notifiable safety incident occurs.

Professional duty alongside the organisational duty

Individual healthcare professionals also have a professional duty of candour imposed by their regulators. The GMC and NMC both require their registrants to be open and honest when things go wrong, regardless of whether the organisational duty under Regulation 20 is triggered. This professional duty applies UK-wide, not just in England.

Even where an incident falls below the threshold of a notifiable safety incident, individual clinicians are still expected to be honest with patients. Building a culture of candour means the organisation supports staff to have difficult conversations, not leaving them to navigate these situations alone.

Incident investigation and learning

How an organisation investigates and learns from patient safety incidents is a defining feature of its governance maturity.

From investigation to learning

The shift from the Serious Incident Framework to the Patient Safety Incident Response Framework (PSIRF) represents a fundamental change in philosophy. Rather than treating every serious incident as requiring a formal root cause analysis investigation, PSIRF asks organisations to develop a proportionate response based on what will generate the most learning.

This might mean:

• A learning response — Where the system issues are already understood and the priority is implementing known improvements
• A patient safety investigation — Where there are genuine questions about what happened and why, using systems-based methods rather than blame-focused inquiries
• A thematic review — Where multiple related incidents suggest a systemic problem requiring analysis across cases

The key business consideration for healthcare leaders is that PSIRF requires dedicated resource. Organisations must develop a Patient Safety Incident Response Plan and a Patient Safety Incident Response Policy, and they must have trained staff to conduct investigations using the new methods.

Clinical audit

Clinical audit is the systematic process of measuring care against defined standards, identifying gaps, and implementing improvements. It is one of the most practical tools in the governance toolkit.

The audit cycle

Effective clinical audit follows a continuous cycle:

1. Plan — Select a topic and define the standard you are measuring against (typically a NICE guideline, national standard, or local policy)
2. Measure — Collect data on current practice against the defined criteria
3. Compare — Analyse how current practice compares to the standard, identifying where care falls short
4. Improve — Implement changes to close identified gaps
5. Re-measure — Repeat the data collection to confirm that changes have led to improvement

Many organisations fail to close the loop by re-measuring. Without re-audit, there is no evidence that changes improved care. CQC inspectors specifically look for completed audit cycles, not just audit activity.

National clinical audits

NHS-funded providers are expected to participate in relevant National Clinical Audit and Patient Outcomes Programme (NCAPOP) audits. Independent providers may not be mandated to participate but doing so demonstrates commitment to clinical effectiveness and provides benchmarking data that supports governance discussions.

Complaints as a governance tool

Complaints are not merely a regulatory requirement to be managed. They are one of the richest sources of intelligence about the quality of care your organisation provides.

CQC Well-led assessment

CQC assesses clinical governance primarily through the Well-led key question. CQC is replacing the single assessment framework with sector-specific frameworks during 2026, but the five key questions are retained and inspectors will continue to evaluate whether:

• There is a clear vision and strategy, supported by governance structures and processes
• Leaders have the skills, knowledge, and experience to perform their roles effectively
• There are clear roles, responsibilities, and systems of accountability
• The organisation manages risk, performance, and information effectively
• There is a culture of continuous learning and improvement
• The organisation engages with patients, staff, and stakeholders
• Innovation and sustainability are encouraged

Quality improvement methodologies

CQC expects providers to have a structured approach to quality improvement, not just ad hoc responses to problems. Common methodologies used in healthcare include:

• Plan-Do-Study-Act (PDSA) cycles — Small-scale tests of change, widely used in healthcare quality improvement
• Model for Improvement — Structured approach asking three fundamental questions: What are we trying to accomplish? How will we know that a change is an improvement? What change can we make that will result in improvement?
• Lean methodology — Eliminating waste in processes to improve efficiency and reduce errors
• Statistical process control — Using data over time to distinguish between normal variation and genuine changes in performance

The choice of methodology matters less than the commitment to using it consistently. CQC looks for evidence that improvement work is embedded in governance structures, not conducted as isolated projects.

How this connects to your wider obligations

Clinical governance does not exist in isolation. It connects to virtually every other compliance obligation you have as a healthcare provider:

• Medicines management — Medicines audits and controlled drugs checks are governance activities
• Infection prevention and control — IPC audits feed into the governance framework
• Safeguarding — Safeguarding concerns are reported through incident reporting systems
• Data protection — Information governance is part of the overall governance framework
• Workforce — Staff training, supervision, and appraisal are governance enablers

Strong clinical governance creates the connective tissue between these individual obligations, ensuring they work together as a coherent system rather than as separate compliance silos.