Care Home Food Safety: The Complete CQC and EHO Dual Compliance Guide
22 min read
Care home kitchens face two separate regulators with different powers and different expectations. This is the complete guide to satisfying both CQC and EHO inspectors — simultaneously, and with one evidence pack.
In this guide
- The dual regulation reality: two inspectors, two frameworks, one kitchen
- CQC's 'Safe' domain: what inspectors are actually looking for
- EHO inspection in care settings: a higher duty of care
- The overnight monitoring gap: the highest-risk window in any care home
- Temperature abuse scenarios specific to care settings
- Documentation that satisfies both CQC and EHO simultaneously
- How continuous monitoring closes the overnight gap
- Building the dual-compliance evidence pack: one system, two regulators satisfied
A kitchen that passes an EHO inspection on Tuesday can still fail a CQC inspection on Wednesday.
Not because anything changed overnight. Not because the temperature logs were wrong, the fridges were dirty, or the food hygiene certificates had lapsed. It can fail because the two regulators are fundamentally looking for different things — and care home managers who treat them as the same inspection are routinely caught out.
This matters more in care homes than in any other food setting in the UK. Your residents are among the most vulnerable people in the country. A foodborne illness that would leave a healthy adult bedridden for three days can hospitalise a frail elderly resident — and Listeria, in immunocompromised or elderly people, can be fatal. The stakes are not abstract.
This guide is written for care home managers, facilities directors, catering managers, and operations leads at care home groups. It is deliberately specific: what CQC inspectors are actually looking for, what EHOs actually check, where the gaps between the two create the highest risk, and how to build one compliance system that satisfies both regulators simultaneously.
The dual regulation reality: two inspectors, two frameworks, one kitchen
No other food business in the UK faces this situation. A care home is one of the very few settings where two entirely independent regulatory bodies — with different legal powers, different inspection triggers, and different enforcement routes — can both inspect the same kitchen and each reach their own independent conclusions.
The Care Quality Commission (CQC), operating under the Health and Social Care Act 2008, regulates registered care homes as providers of regulated activities. Its inspection framework is built around five domains: Safe, Effective, Caring, Responsive, and Well-Led. The 'Safe' domain explicitly includes safe storage and preparation of food. CQC can issue warning notices, impose conditions on your registration, suspend your registration, or prosecute — independently of anything the EHO does.
The Local Authority Environmental Health Officer (EHO), operating under the Food Safety Act 1990 and the Food Safety and Hygiene (England) Regulations 2013, inspects your premises for food hygiene compliance and generates a Food Hygiene Rating Scheme (FHRS) score that is publicly visible on the FSA website. They can issue improvement notices, prohibition notices, or emergency prohibition orders. Their powers and CQC's powers run entirely in parallel.
The critical implication: being compliant with one regulator does not protect you from the other. A care home that achieves a 5-star FHRS rating is not automatically compliant with CQC's 'Safe' domain. A care home that scores 'Good' in CQC's 'Safe' domain is not automatically protected from EHO enforcement action. Understanding exactly what each regulator is looking for — and where their expectations overlap versus diverge — is the foundation of any serious dual-compliance strategy.
Implementation checklist
- Map every regulatory contact your care home has received in the past two years: which regulator, what was found, what was required, and whether the finding would have been identified by the other regulator.
- Confirm your registered manager understands that CQC and EHO enforcement powers are entirely separate — a good FHRS score does not reduce CQC enforcement risk.
- Identify one named senior person with accountability for dual compliance — food safety cannot be siloed to the catering manager when two regulators with different scopes are both active.
CQC's 'Safe' domain: what inspectors are actually looking for
CQC inspectors use Key Lines of Enquiry (KLOEs) to structure their assessments. Within the 'Safe' domain, they are assessing whether your organisation has robust systems to keep residents safe — not running a food hygiene inspection. That distinction changes what they look at. CQC inspectors will commonly review care records to see whether residents with swallowing difficulties, allergies, or special dietary requirements have those needs recorded and consistently met; ask nursing staff — not kitchen staff — whether they can explain how a resident's dietary requirement is communicated from care plan to kitchen; check whether medication fridges are stored separately from food with records for both; ask about out-of-hours food provision; and look at whether any residents have experienced weight loss or malnutrition and whether that has been escalated.
The 'Effective' domain extends CQC's remit on food to nutrition and hydration. Inspectors assess whether residents are assessed for nutritional risk on admission (using a validated tool such as MUST), whether at-risk residents have documented nutritional care plans, whether those plans are being followed with evidence, and whether there is a system for monitoring weight and escalating concerns. A care home with excellent food hygiene but poor nutritional documentation can still receive a 'Requires Improvement' or 'Inadequate' rating in the 'Effective' domain.
CQC enforcement consequences are not fixed-penalty notices. They can include a formal warning notice requiring improvement within a specified period, conditions imposed on your registration restricting admissions or requiring additional oversight, suspension of registration, or criminal prosecution of the registered provider. These consequences are separate from any EHO action and can run simultaneously.
Implementation checklist
- Brief kitchen staff that CQC inspectors will interview nursing and care staff about food safety — not just kitchen staff. Nursing staff must be able to explain the allergen communication process from care plan to kitchen.
- Confirm MUST assessments are conducted at admission and reviewed regularly, with documented nutritional care plans for any resident identified at risk.
- Verify that weight monitoring records are maintained and that there is a documented escalation process for residents showing weight loss.
EHO inspection in care settings: a higher duty of care
When an EHO inspects a care home kitchen, they apply the same legal framework as for a restaurant. But the context is not the same. EHOs assess food businesses using three components for the FHRS score: hygienic food handling, cleanliness and condition of facilities, and management of food safety. In a care home, each component carries heightened risk because of who is eating the food.
The Food Standards Agency and local authority guidance is explicit: when serving food to vulnerable populations — the elderly, immunocompromised individuals, those with complex medical conditions — the operator bears a higher effective duty of care. An EHO who finds temperature control failures in a restaurant may issue an improvement notice. The same failures in a care home kitchen may trigger a prohibition notice or emergency prohibition order, because the potential harm to residents is so much more severe. Listeria monocytogenes is the clearest example: for a frail elderly resident with compromised immunity, listeriosis can be fatal.
FHRS data indicates that care homes appear disproportionately in the lower-scoring segments compared to other food businesses. This is not primarily a reflection of dirty kitchens — it reflects two structural features of care home operations that EHOs consistently identify: staffing challenges (particularly the overnight gap) and inconsistent management systems. A kitchen managed by a dedicated catering manager who is present during service is significantly more likely to score well than one relying on agency catering staff with limited familiarity with the site's HACCP plan.
Implementation checklist
- Review your FHRS score and the most recent EHO inspection report — identify any findings related to temperature control, management systems, or record-keeping.
- Confirm your HACCP plan specifically addresses the care home context: vulnerable population considerations, out-of-hours food provision, and delivery receipt by non-kitchen staff.
- Ensure all agency and temporary kitchen staff are briefed on your site-specific HACCP procedures before their first shift — generic food hygiene training is insufficient.
The overnight monitoring gap: the highest-risk window in any care home
Care home kitchens are typically unstaffed for sixteen or more hours each day — usually from 21:00 to 08:00, a minimum of eleven hours, often longer. During that period, every piece of refrigeration equipment in that kitchen is operating without any human oversight. This is the single greatest food safety risk specific to care home operations.
In a 24-hour restaurant, staff can identify a malfunctioning fridge within minutes. In a care home, a fridge failure at 22:30 may not be noticed until the morning cook arrives at 07:30. By then, nine hours of food may have been at unsafe temperatures — food that may look and smell normal, and may be served to residents before anyone realises anything has happened. Listeria and other pathogens replicate rapidly between 5°C and 63°C. A fridge that drifts from 4°C to 9°C overnight, stays there for eight hours, and then returns to 4°C when the door is opened for morning service may show nothing unusual on a twice-daily manual temperature log — because the log captures 07:30 and 13:00, both of which might record compliant temperatures.
Manual temperature logs are a legal requirement under your HACCP plan. They are also fundamentally inadequate as evidence of overnight temperature control. A log that records 3.8°C at 08:00 and 4.1°C at 12:00 does not tell you what happened at 01:00. An EHO who asks 'how do you know your fridges were safe overnight?' cannot be satisfied by a manual log that records morning checks only. CQC inspectors probing food safety within the 'Safe' domain will ask the same question: not just whether logs exist, but whether your systems are robust enough to actually protect residents. A system that relies on manual checks twice daily, with a sixteen-hour gap overnight, is not a robust system.
Implementation checklist
- Map your overnight monitoring gap: when does the kitchen close, when does it open, and what monitoring coverage exists during that window?
- Identify every piece of refrigeration equipment that is in use overnight and confirm whether it has any continuous or automated temperature monitoring.
- Test your current response capability: if a fridge failed at 23:00 tonight, how quickly would the right person know, and what is the documented procedure for what happens next?
Temperature abuse scenarios specific to care settings
Care home kitchens have several temperature risk scenarios that do not exist in standard commercial catering, each creating dual compliance exposure. Medication fridge co-location is the most acute: many care homes store medications in or adjacent to the kitchen. CQC requires evidence that medications are stored safely at the correct temperature as part of medicines management within the 'Safe' domain. EHO requires that food safety is not compromised by non-food items in food storage areas. If a medication fridge is used to store both medications and food — even in separate areas of the same fridge — this creates compliance failures with both regulators simultaneously. The solution is clear physical separation with documented temperature monitoring for each unit.
Texture-modified foods (pureed, minced, or soft diets for residents with dysphagia) are particularly high-risk: they have large surface areas, are made in batches, and require careful storage and reheating. CQC will look for evidence that residents with swallowing difficulties have appropriate care plans and that the kitchen is meeting those plans. EHO will look for whether batch cooking, cooling, and storage of these foods complies with temperature control requirements. Improper cooling of batch-cooked pureed food — a tray left on a counter to cool before being refrigerated — creates a window of rapid bacterial growth in a product that will be served to residents who are among the most vulnerable in the care home.
Out-of-hours delivery receipt is a further risk: some care homes receive food deliveries before kitchen staff arrive or after close. When deliveries are accepted by care workers, a receptionist, or an overnight supervisor — without standard delivery receipt checks (temperature of chilled goods, date coding, condition of packaging) — you have a compliance failure with both regulators arising from a single operational gap.
Implementation checklist
- Physically inspect every medication fridge in or adjacent to the kitchen and confirm it contains no food products — any co-location creates dual compliance exposure.
- Review your texture-modified food batch cooking procedure for a documented cooling record: does the record prove the product reached 8°C within the required window?
- Implement a delivery receipt procedure for out-of-hours deliveries that non-kitchen staff can follow — including a simple form for recording delivery temperature and condition.
Documentation that satisfies both CQC and EHO simultaneously
With thoughtful design, a single documentation system can satisfy both regulators. The EHO wants to see that your HACCP plan is technically sound, that monitoring is carried out correctly, and that corrective actions are taken and recorded when deviations occur — the EHO is examining the system. CQC wants to see that your organisation is managing risk effectively on behalf of residents — CQC is examining the culture and governance that sits around the system.
For EHO: a current, site-specific HACCP plan (not a generic template); temperature monitoring logs for all refrigeration and hot-holding equipment including overnight records; delivery receipt records with temperatures and batch codes; cleaning schedules with completion signatures; pest control contractor reports; staff food hygiene training certificates; and corrective action logs showing what happened when a temperature was out of range. For CQC: evidence of allergen and dietary requirement communication from care plan to kitchen; MUST assessment records and nutritional care plans; weight monitoring records and escalation documentation; medicines management records showing medication fridge separation and temperature monitoring; training records showing staff understand individual resident needs (not just generic food hygiene); management review records showing food safety data is reviewed at governance level; and evidence of out-of-hours food provision and how resident needs are met overnight.
The overlap between these two lists is where your single system earns its value. Temperature monitoring records — particularly continuous, timestamped records covering the overnight period — appear in both lists. An overnight temperature log is EHO evidence. It is also CQC evidence that your systems are robust enough to protect residents when staff are not present.
Implementation checklist
- Cross-reference your EHO evidence pack against the CQC evidence list — identify every document that serves both regulators and every gap where you have evidence for one but not the other.
- Confirm that your overnight temperature records are part of your standard evidence pack, not something that needs to be generated specially when a regulator asks.
- Brief your registered manager on the dual use of temperature monitoring data: it satisfies HACCP evidence requirements for EHO and 'Safe' domain evidence requirements for CQC.
How continuous monitoring closes the overnight gap
The overnight monitoring gap is a structural problem in care home operations. The practical solution is continuous temperature monitoring: sensors installed in every refrigeration and cold storage unit that record temperature readings automatically at regular intervals — typically every 5 to 15 minutes — and alert designated staff immediately if a temperature exceeds a defined threshold.
A continuous monitoring system provides: unbroken temperature records covering every hour of every day, including the 21:00–08:00 window; automatic alerts when temperatures deviate — enabling a response at 02:00 rather than at 08:30; a tamper-resistant audit trail where readings are recorded automatically rather than manually; calibration records that can be presented to either regulator; and exception reports showing what corrective action was taken when an alert was triggered. For EHO purposes, this provides the HACCP monitoring records with a completeness and granularity that a manual log cannot match. For CQC purposes, this provides evidence that your organisation has invested in robust systems to protect residents around the clock.
The alert function is particularly significant from a CQC perspective. A care home that has an automated alert system, and can show documented responses to overnight alerts — 'alert received at 02:14, night manager checked fridge, door seal found faulty, food quarantined, maintenance called at 06:00' — is demonstrating exactly the kind of governance and management oversight that CQC's 'Well-Led' domain rewards. When the CQC inspector asks 'how do you know your residents were safe overnight?' — you have an answer.
Implementation checklist
- Deploy continuous monitoring sensors in every refrigerator, freezer, and chilled storage unit used for resident food — including any units used overnight.
- Configure alerts to reach a named night-shift contact who has a documented procedure for what to do when they receive a temperature alert.
- Ensure alert response records document: time of alert, time of staff response, what was found, what action was taken, and what verification confirmed the situation was resolved.
- Present your overnight monitoring data to your registered manager and confirm it is included in the management review of food safety at governance level.
Building the dual-compliance evidence pack: one system, two regulators satisfied
The goal is not to run two separate compliance systems. That approach doubles administrative burden, creates inconsistencies, and is ultimately unsustainable. The goal is a single, well-designed system that generates evidence relevant to both regulators as a natural by-product of good daily operations.
The architecture of a dual-compliance system has four layers. Layer 1: infrastructure and equipment — functioning refrigeration with continuous temperature monitoring, clearly segregated storage areas (food from non-food, raw from ready-to-eat, medications from food), adequate handwashing and cleaning infrastructure. This satisfies EHO's 'condition of facilities' component and provides the physical foundation for everything else. Layer 2: documented procedures — a site-specific HACCP plan; written procedures for delivery receipt, cooking, cooling, storage, reheating, and service; written procedures for out-of-hours food handling; and allergen management procedures that link to individual resident care plans. Layer 3: monitoring and records — continuous temperature monitoring records; delivery records; cleaning records; corrective action logs; nutritional assessment records; weight monitoring records; training records for all relevant staff. Layer 4: governance and oversight — regular management review of food safety data; board or leadership visibility of food safety performance; named accountability at senior level; and evidence that trends are escalated and addressed.
When either regulator calls — and both can arrive unannounced — the team should be able to produce without significant preparation: the current HACCP plan; temperature monitoring records for the preceding 90 days including overnight readings; the most recent corrective action log entries; staff training records for kitchen and care staff; allergen and dietary requirement records for each current resident; nutritional assessment records; and medication fridge temperature records with evidence of physical separation. This is not a large document pack if the system is well-designed. It is a set of records generated by daily operations.
Implementation checklist
- Conduct a quarterly dual-compliance evidence pack audit: can you produce all required documents for both regulators within 30 minutes, without advance preparation?
- Confirm Layer 4 governance is operational: food safety data should be reviewed at management level at a defined frequency, with written records of what was reviewed and any actions taken.
- Brief all staff — kitchen, nursing, care, and night staff — on their role in the dual-compliance system and what they would do if contacted by either regulator.
- Test out-of-hours readiness: can a designated night-shift contact access temperature monitoring alerts and respond to an out-of-hours regulator visit without contacting the catering manager?
Common mistakes
- Treating CQC and EHO as the same inspection and preparing only one evidence pack — CQC's focus on resident welfare, nutrition documentation, and staff understanding of individual needs is entirely separate from EHO's HACCP and temperature control focus.
- Relying on twice-daily manual temperature logs that leave a 16-hour overnight gap — this simultaneously creates an EHO compliance gap and a CQC 'Safe' domain evidence gap.
- Siloing food safety training to the kitchen team when CQC inspectors routinely ask nursing and care staff about allergen communication, out-of-hours food provision, and what they would do if a fridge was malfunctioning.
- Co-locating medication fridges and food storage, which creates simultaneous compliance failures with both CQC (medicines management within 'Safe') and EHO (non-food in food storage areas).
- Not including governance-level food safety review in management records — CQC's 'Well-Led' domain specifically looks for evidence that food safety data is reviewed at leadership level, not just managed by the catering team.
- Failing to document out-of-hours food provision and how resident nutritional needs are met overnight — this is a specific CQC 'Effective' domain question that many care home managers are not prepared to answer.
FAQ
Does CQC inspect food safety in care homes?
Yes. CQC assesses food safety within the 'Safe' domain of its inspection framework, focusing on whether systems are robust enough to protect residents from harm — including harm from food. CQC inspectors review whether residents' dietary requirements and allergens are documented and consistently met, whether medication fridges are separate from food storage, whether out-of-hours food provision is adequate, and whether there is evidence of nutritional risk assessment and monitoring. CQC's focus is resident welfare, not food hygiene compliance — but a care home can fail the 'Safe' domain on food grounds even if its FHRS rating is high.
What is the difference between what CQC and an EHO look for in a care home kitchen?
EHOs assess food hygiene compliance: temperature control, HACCP documentation, cleaning and pest control, staff food hygiene training, and the physical condition of the kitchen. CQC assesses resident welfare: whether individual dietary requirements are met, whether nutritional risks are identified and managed, whether staff understand their role in meeting individual residents' food needs, and whether management governance of food safety is adequate. A care home can pass one inspection and fail the other on food-related grounds, because the two regulators are assessing different things.
How do I close the overnight temperature monitoring gap in a care home?
The practical solution is continuous automated temperature monitoring: sensors in every refrigerator and chilled storage unit that record readings at 5–15 minute intervals and send immediate alerts to a named contact when temperatures deviate. This provides unbroken records covering the 21:00–08:00 window, real-time alerts enabling a response during the event rather than the following morning, and a tamper-resistant audit trail that satisfies both EHO HACCP monitoring requirements and CQC 'Safe' domain evidence requirements. Manual twice-daily checks cannot address the overnight gap.
Can one documentation system satisfy both CQC and EHO?
Yes — with deliberate design. The key is understanding that the two regulators want to see different things from the same evidence. EHO wants to see HACCP compliance: monitoring records, corrective actions, cleaning records, training certificates. CQC wants to see governance and resident welfare evidence: nutritional assessments, dietary requirement communication, medicines management, and management oversight. Temperature monitoring records — particularly continuous overnight records — appear on both lists and satisfy both regulators from a single source. The governance layer (management review records, named accountability, escalation evidence) is primarily for CQC but also demonstrates to EHO that management is engaged.
What training do care home staff need for dual CQC and EHO compliance?
For EHO compliance: kitchen staff need Level 2 Food Hygiene (Level 3 for supervisors), HACCP-specific training on your site procedures, and allergen awareness training. For CQC compliance: all staff who handle or serve food — including nursing and care staff — need allergen and dietary requirement awareness, understanding of how individual resident needs are communicated from care plan to kitchen, dysphagia awareness and texture-modified food handling, and out-of-hours food safety awareness. CQC inspectors routinely interview care and nursing staff rather than kitchen staff about food safety — and those staff need to be able to answer confidently.
What are the enforcement powers of CQC and EHO in a care home?
CQC can issue formal warning notices requiring improvement within a specified period, impose conditions on your registration (restricting admissions or requiring additional oversight), suspend your registration, or prosecute the registered provider or responsible individual. EHO can issue improvement notices, hygiene improvement notices, prohibition notices that close specific equipment or processes, emergency prohibition orders that close the premises, and refer cases for criminal prosecution under the Food Safety Act. The two regulators' enforcement powers are entirely independent — CQC action does not protect you from EHO action and vice versa.
Keep exploring
- Care Home Night Shift Compliance Cart: Operator Playbook for CQC + EHO Surprise VisitsPillar hub
- EHO Inspection Checklist: Build the 30-Second Evidence Handoff
- Food Safety Temperature Monitoring: UK Legal Requirements and Best Practice
- SFBB: The Complete Guide to Safer Food Better Business Evidence Packs
Recommended tools
Sources
- Care Quality Commission — Key Lines of Enquiry and inspection framework
- Health and Social Care Act 2008 — CQC registration and enforcement
- Food Safety and Hygiene (England) Regulations 2013
- FSA Food Hygiene Rating Scheme guidance
- NHS England — Malnutrition Universal Screening Tool (MUST) guidance
- WRAP Food Surplus and Waste UK Key Facts (July 2025)