Who Oversees the NHS? Regulators, Ombudsman & Accountability Bodies in England

What are you trying to get investigated?

Why is NHS accountability so difficult to navigate?

Because responsibility is fragmented.

The organisation that investigates your complaint may not be able to discipline the person responsible.

The regulator that can restrict a doctor's licence may have no power over the NHS policy the doctor was implementing.

The body overseeing an Integrated Care Board may be able to intervene in its governance but may not award you compensation.

The Information Commissioner's Office may determine that information law was breached but will not become the ICB's internal HR department and investigate whether an executive should be disciplined.

That is why accountability often requires more than one route.

Who oversees NHS governance, ICBs, Boards and senior leadership?

NHS England regional teams

NHS England's regional teams are one of the most important routes where the concern is bigger than an individual patient complaint and instead involves organisational performance, governance, leadership capability, commissioning or persistent failure within an Integrated Care Board or NHS provider.

Under the NHS Oversight Framework, regional teams lead the day-to-day oversight of ICBs and NHS providers.

Their role includes:

• monitoring organisational performance;
• assessing organisational capability;
• examining Board and leadership capability;
• overseeing ICB performance and strategic commissioning;
• identifying emerging risks;
• increasing scrutiny where performance deteriorates;
• coordinating support or intervention;
• escalating serious issues;
• and, where necessary, using or initiating enforcement powers.

Importantly, NHS England says regional oversight can take account of information from outside the organisation itself — including complaints, whistleblowing, audits, regulatory reports, peer reviews, coroners and other intelligence.

This matters where a problem is no longer simply one complaint but appears to reveal something about how the organisation itself is being governed.

NHS England regional oversight is not, however, a substitute for the normal patient complaints process and should not be treated as an appeal body for every individual disagreement with an NHS organisation.

Best suited to: systemic ICB failure, serious commissioning concerns, Board capability, recurring governance problems, leadership failures and issues indicating that regional intervention may be required.

Related guide: What to Ask For and How to Escalate NHS Concerns.

The Fit and Proper Person Test: when the concern is a senior Board member

The Fit and Proper Person Test (FPPT) is not a separate regulator.

It is an NHS governance framework used to assess whether Board members remain suitable to hold senior NHS positions.

It applies to executive and non-executive Board members of organisations including ICBs, NHS trusts, foundation trusts, NHS England and the Care Quality Commission.

The framework considers matters including:

• character;
• honesty and openness;
• qualifications;
• competence;
• skills and experience;
• serious misconduct;
• serious mismanagement;
• and information arising from regulatory or disciplinary findings.

For most NHS organisations, the Chair carries ultimate accountability for ensuring that Board members are assessed and remain fit and proper.

The Chair assesses the Chief Executive and non-executive directors; the Chief Executive normally assesses executive directors, with the Chair overseeing the overall process.

ICBs and NHS trusts also make annual FPPT submissions to the relevant NHS England Regional Director, and relevant matters can arise outside that annual cycle.

CQC Regulation 5: Fit and Proper Persons for directors

There is a related but distinct system for organisations providing regulated healthcare.

Regulation 5 of the Health and Social Care Act 2008 (Regulated Activities) Regulations requires providers to ensure people holding director-level responsibility are fit and proper.

This includes consideration of whether the person has been responsible for, contributed to or facilitated serious misconduct or serious mismanagement.

The important distinction is that CQC does not normally investigate an individual director and decide whether that person personally passes the test.

The provider is responsible for carrying out the assessment. CQC regulates whether the provider has appropriate systems and processes and can take regulatory action against the provider where those requirements are not being met.

Who investigates NHS maladministration and badly handled complaints?

Parliamentary and Health Service Ombudsman (PHSO)

The Parliamentary and Health Service Ombudsman is the major independent external route for unresolved complaints about the NHS in England.

Usually, you must first give the NHS organisation itself an opportunity to investigate and provide a final response.

PHSO can investigate complaints involving:

• maladministration;
• poor service;
• unfair decision-making;
• failures to follow procedures;
• poor complaint handling;
• avoidable delay;
• failure to explain decisions;
• and failures that have caused injustice or hardship.

If it upholds a complaint, PHSO may recommend:

• an apology;
• an explanation;
• a financial remedy;
• reconsideration of a decision;
• staff training;
• an action plan;
• changes to processes;
• or work intended to prevent the same failure happening again.

But there are important limitations.

PHSO cannot strike a clinician off, fire an NHS executive or operate like a court awarding damages.

Its recommendations are not legally enforceable in the same way as a court order.

PHSO does, however, follow up its recommendations and can escalate serious non-compliance, including through Parliamentary reporting.

Best suited to: maladministration, unfair process, unresolved patient complaints, poor complaint handling and failures where an NHS organisation has not adequately put things right.

The NHS organisation's own complaints process

Before PHSO, there is usually an important internal stage.

NHS organisations are expected to investigate complaints under the NHS Complaint Standards and the relevant complaints regulations.

A proper investigation should do more than send a reassuring letter.

It should identify the issues, gather evidence, reach reasoned conclusions, identify learning and explain what will happen where something has gone wrong.

If the concern potentially identifies something that belongs in another process — such as disciplinary action, professional regulation or governance review — good complaint handling should not simply make that issue disappear.

Who investigates unsafe NHS care and patient-safety risks?

Care Quality Commission (CQC)

The Care Quality Commission is the independent regulator of health and adult social care services in England.

It regulates services including:

• hospitals;
• GP practices;
• ambulance services;
• mental-health services;
• clinics;
• care homes;
• and other regulated care providers.

CQC is concerned with whether services meet fundamental standards of quality and safety.

Its regulatory framework includes areas such as:

• person-centred care;
• consent;
• dignity and respect;
• safe care and treatment;
• safeguarding;
• good governance;
• staffing;
• and the statutory Duty of Candour.

Where serious failures are found, CQC has significant enforcement powers.

Depending on the circumstances, it can:

• require improvement;
• issue warning notices;
• place conditions on registration;
• restrict services;
• place providers into special measures;
• issue fines;
• and prosecute certain offences.

CQC is not an individual complaint-resolution service in the same way as PHSO. It generally will not investigate your complaint simply to obtain a personal remedy for you.

But information from patients can form regulatory intelligence and may contribute to inspection or enforcement activity.

Best suited to: unsafe services, repeated quality failures, regulatory breaches, poor provider governance and risks affecting groups of patients.

Health Services Safety Investigations Body (HSSIB)

HSSIB investigates patient-safety risks with wider learning implications.

Its purpose is different from a complaint investigation.

It looks at how healthcare systems, processes and conditions contribute to safety incidents and risks so that lessons can be learned across healthcare.

HSSIB investigations deliberately do not determine:

• individual blame;
• civil liability;
• criminal liability;
• or whether a professional should face regulatory action.

This makes HSSIB potentially important where the issue is:

“There is a systemic healthcare risk here that could affect many patients.”

It is not the right organisation where the primary goal is:

“I want this particular individual disciplined.”

Who oversees NHS discrimination and equality duties?

Equality and Human Rights Commission (EHRC)

The Equality and Human Rights Commission is Britain's statutory equality regulator.

It has substantial powers under equality legislation.

Those powers include:

• formal investigations;
• unlawful-act notices;
• legally enforceable agreements;
• Public Sector Equality Duty assessments;
• compliance notices;
• court proceedings;
• judicial review;
• and intervention in important legal cases.

This can make the EHRC relevant where an NHS organisation appears to have created a systemic discriminatory policy or failed to comply with the Public Sector Equality Duty.

However, EHRC is not an ordinary individual complaints helpline.

It uses its regulatory and litigation powers strategically.

Equality Advisory and Support Service (EASS)

For an individual who believes they have experienced discrimination or a human-rights problem, the more appropriate first advice route is often the Equality Advisory and Support Service.

EASS can provide information and support about equality and human-rights issues and may assist people in trying to resolve disputes informally.

It does not replace a solicitor and does not provide legal representation.

Coming next: NHS Equality, Discrimination and the Public Sector Equality Duty.

Who investigates human-rights violations in NHS healthcare?

There is no single “NHS human-rights regulator”.

That is important.

Human-rights issues may appear within several different routes depending on what happened.

For example:

• PHSO may examine whether an NHS organisation acted unfairly or maladministratively;
• CQC may examine regulatory issues involving dignity, consent or safe care;
• EHRC can use strategic equality and human-rights enforcement powers;
• EASS can support individuals with equality and human-rights concerns;
• and courts can determine legal Human Rights Act claims.

Healthcare human-rights questions may involve rights including:

• life;
• protection from inhuman or degrading treatment;
• private and family life;
• bodily integrity and autonomy;
• and non-discrimination.

The NHS Constitution, common-law consent principles and cases such as Montgomery can also overlap with these issues.

Read next: Human Rights, Bodily Autonomy and the NHS Constitution.

Who investigates NHS Freedom of Information and data-rights failures?

Information Commissioner's Office (ICO)

The Information Commissioner's Office regulates information rights.

For NHS accountability, that can include:

• Freedom of Information Act requests;
• Environmental Information Regulations;
• data-protection concerns;
• personal-data handling;
• Subject Access Requests;
• and failures involving information rights.

If an NHS organisation refuses an FOI request, applies exemptions incorrectly, fails to respond within the statutory period or inadequately handles an Internal Review, the ICO can consider a complaint under the Freedom of Information Act.

It can issue formal decisions about whether the public authority complied with information law and can use enforcement powers where appropriate.

But there is a crucial limitation:

Read next: Using FOI and Transparency Law to Investigate NHS Decisions.

Who investigates individual doctors, nurses and other NHS professionals?

Professional regulators deal with a different question:

Is this particular registered professional fit to continue practising?

This is not the same as complaining about the NHS organisation that employs them.

General Medical Council (GMC)

The GMC regulates doctors, physician associates and anaesthesia associates.

It may investigate serious concerns where patient safety, professional standards or public confidence could be at risk.

Concerns can potentially involve:

• serious misconduct;
• dishonesty;
• serious or repeated clinical failures;
• professional-boundary issues;
• criminal conduct;
• or other behaviour that may affect fitness to practise.

Professional regulation is not intended simply to punish somebody for a past mistake. The central question is whether public protection or confidence in the profession requires regulatory action.

Nursing and Midwifery Council (NMC)

The NMC regulates:

• nurses;
• midwives;
• and nursing associates in England.

It can investigate fitness-to-practise concerns involving misconduct, lack of competence, convictions and other matters that may pose a continuing risk to patients, professional standards or public confidence.

Depending on the case, sanctions can include:

• cautions;
• conditions of practice;
• suspension;
• or removal from the register.

Health and Care Professions Council (HCPC)

The HCPC regulates a large number of healthcare professions, including:

• paramedics;
• physiotherapists;
• occupational therapists;
• radiographers;
• dietitians;
• biomedical scientists;
• clinical scientists;
• speech and language therapists;
• and practitioner psychologists, among others.

It investigates fitness-to-practise concerns and can impose sanctions where public protection requires them.

Other professional regulators

Depending on the profession involved, the relevant regulator may instead be:

• General Dental Council (GDC) — dentists and dental-care professionals;
• General Pharmaceutical Council (GPhC) — pharmacists and pharmacy technicians in Great Britain;
• General Optical Council (GOC) — optometrists and dispensing opticians;
• General Chiropractic Council (GCC) — chiropractors;
• General Osteopathic Council (GOsC) — osteopaths;
• Social Work England — social workers in England.

Professional Standards Authority (PSA)

The Professional Standards Authority sits above the statutory health and care professional regulators.

It does not replace the GMC, NMC or other regulator as the first place to complain about a healthcare professional.

Instead, it oversees how the regulators themselves perform.

It reviews their performance against regulatory standards and also provides an important safety net for final fitness-to-practise panel decisions.

If the PSA considers that a final panel decision is legally flawed and insufficient to protect the public, it can refer the decision to court.

This means there are potentially two layers of professional accountability:

the regulator investigates the professional → the PSA oversees the regulator.

Who can publicly scrutinise local NHS policy and commissioning?

Local authority Health Overview and Scrutiny Committees

Local health scrutiny is one of the less well-known accountability routes.

Local authorities can scrutinise the planning, provision and operation of local health services.

This can include issues involving:

• local healthcare policy;
• access to services;
• service redesign;
• health inequalities;
• commissioning decisions;
• and concerns affecting local populations.

Relevant NHS bodies and providers can be required to attend health scrutiny and answer questions needed for the scrutiny process.

Committees can produce reports and recommendations, and where they formally require a response, relevant NHS bodies generally have a duty to respond in writing.

Health scrutiny does not operate like a court or professional regulator.

It cannot strike somebody off, award damages or simply order an ICB executive to be dismissed.

Its strength is different:

public democratic scrutiny, questions on the record, evidence gathering, recommendations and political visibility.

For important local policy issues, that can be extremely valuable.

What changed with Secretary of State referrals?

The old system under which local health scrutiny could formally refer certain service-reconfiguration disputes to the Secretary of State has changed.

The Secretary of State now has separate statutory call-in powers for NHS service reconfigurations.

Scrutiny committees and other interested parties may ask the Secretary of State to consider using those powers in appropriate cases, but this is intended for exceptional reconfiguration disputes rather than ordinary patient complaints.

What can Healthwatch do?

Healthwatch is not an enforcement regulator, but it is part of the NHS accountability landscape.

Local Healthwatch organisations collect people's experiences of health and social care and can:

• identify recurring problems;
• report concerns to commissioners and providers;
• make recommendations;
• feed concerns into Healthwatch England;
• and use statutory Enter and View powers in eligible health and care settings.

Healthwatch England can also raise concerns with bodies including CQC and NHS England.

Healthwatch is particularly useful where the objective is to show that a problem is affecting more than one patient and should become a wider service-improvement issue.

It cannot normally compel an NHS organisation to adopt your preferred outcome or award compensation.

Where can NHS staff raise serious concerns?

Freedom to Speak Up Guardians

NHS workers have additional routes that patients do not.

Freedom to Speak Up Guardians are intended to give staff a route for raising concerns where they do not feel able to use ordinary line-management or organisational channels.

Concerns might involve:

• patient safety;
• unsafe systems;
• bullying or retaliation;
• organisational culture;
• concealment of problems;
• or barriers preventing staff from speaking openly.

National Guardian's Office

At the time this guide was last reviewed, the National Guardian's Office supports the Freedom to Speak Up network and can conduct speaking-up reviews intended to identify learning and improve speaking-up culture.

It is not a general complaints service for patients and it does not function like the GMC or a court.

This area is also subject to ongoing NHS structural reform and should be checked before relying on the route.

What if NHS failures contributed to a death?

Coroners and Prevention of Future Deaths reports

Where somebody dies and an inquest reveals circumstances creating a risk that future deaths could occur, a coroner can issue a Regulation 28 Report to Prevent Future Deaths.

These reports can be sent to:

• NHS trusts;
• ICBs;
• NHS England;
• government departments;
• professional bodies;
• or other organisations capable of taking action.

The recipient is normally required to respond explaining what action has been taken or is proposed, or why no action is proposed.

This is a particularly powerful public-accountability mechanism where a death exposes systemic risk.

What if oversight bodies cannot provide the remedy you need?

Regulators and Ombudsmen do not replace the courts.

Depending on the circumstances, legal routes may include:

• judicial review of unlawful public decision-making;
• clinical-negligence claims;
• Equality Act claims;
• Human Rights Act claims;
• data-protection claims;
• and other public-law remedies.

Legal routes have their own tests and strict time limits, so a person should not assume that pursuing a complaint automatically pauses a legal deadline.

Read next: Legal Routes for Challenging NHS Decisions, Negligence and Unlawful Care.

Which NHS accountability bodies are commonly confused with each other?

Can the same NHS failure be reported to more than one body?

Potentially, yes.

But each referral should be framed around that body's actual jurisdiction.

For example, imagine an NHS policy is alleged to discriminate against women, has been badly documented, has caused patient harm and was approved under questionable governance.

Different questions could include:

• PHSO: Was there maladministration causing injustice?
• NHS England: Does this reveal poor ICB governance, commissioning or leadership capability?
• EHRC: Is there a systemic equality-law or Public Sector Equality Duty issue?
• CQC: Does a regulated provider's conduct raise quality, consent or safety concerns?
• ICO: Has the organisation unlawfully withheld the records needed to understand the decision?
• Professional regulator: Does a particular registrant's individual conduct raise fitness-to-practise concerns?
• Health Scrutiny: Does the local healthcare policy need public examination?
• Court: Is the decision or treatment unlawful and is a legal remedy required?

That is why simply forwarding the same long complaint to every organisation is usually less effective than identifying the precise question each organisation has the power to answer.

Other Fighting Back guides

• Escalation Routes — what to ask for and who to ask
• FOI & Transparency — how to obtain the records behind NHS decisions
• NHS Equality — discrimination, PSED and Equality Impact Assessments
• Human Rights & the NHS — bodily autonomy, consent and the NHS Constitution
• Advocacy & NGOs — reproductive-rights and patient-support organisations
• Legal Routes — judicial review, negligence, equality and human-rights claims

Official frameworks used for this guide

This page has been researched using current official material including:

• NHS England — NHS Oversight Framework 2026/27;
• NHS England — Fit and Proper Person Test Framework for Board Members;
• NHS England — Guidance for Chairs on the Fit and Proper Person Test;
• Parliamentary and Health Service Ombudsman — NHS Complaint Standards and Principles for Remedy;
• Care Quality Commission — Fundamental Standards and enforcement guidance;
• Care Quality Commission — Regulation 5: Fit and Proper Persons: Directors;
• Health Services Safety Investigations Body — investigation framework;
• Information Commissioner's Office — Freedom of Information complaint and enforcement guidance;
• Equality and Human Rights Commission — statutory enforcement powers and Public Sector Equality Duty guidance;
• Department of Health and Social Care — local authority health-scrutiny guidance;
• Professional Standards Authority — professional-regulator oversight and fitness-to-practise appeals;
• Healthwatch England — statutory functions and Enter and View powers;
• and Courts and Tribunals Judiciary — Prevention of Future Deaths reporting.