HIQA inspection readiness: a practical guide for Irish care providers (2026)

For nursing homes and other designated centres in Ireland, a HIQA inspection is a fact of life — and it can arrive announced or entirely unannounced. The providers who come through them calmly are not the ones who work miracles in the week beforehand; they are the ones for whom the inspection is simply a snapshot of how they already run every day. This guide sets out what the Health Information and Quality Authority (HIQA) is actually assessing, the evidence inspectors expect to see, where findings most often arise, and how to build the kind of continuous readiness that turns an inspection from a dreaded event into a routine confirmation of good practice.

Who HIQA regulates, and under what law

HIQA is the independent authority responsible for driving improvement in Ireland's health and social care services. In the residential care space it registers and inspects designated centres — most familiarly nursing homes for older people, and residential centres for people with disabilities — under the Health Act 2007 and the regulations and national standards made under it. For older people's services, the key instruments are the Health Act 2007 (Care and Welfare of Residents in Designated Centres for Older People) Regulations and the National Standards for Residential Care Settings for Older People. A centre cannot operate lawfully unless it is registered with HIQA, and registration carries conditions the provider must meet continuously.

The two things HIQA is really assessing

HIQA inspects against the regulations and the national standards, and it is useful to understand that inspectors group what they look at into two broad dimensions. The first is capacity and capability: is the centre well governed, properly resourced and competently managed? This covers the governance and management structure, the fitness of the registered provider and the person in charge, staffing levels and skill mix, training and development, and the systems of oversight and audit that tell management whether care is actually safe. The second is quality and safety: are residents safe, and is their care effective, person-centred and respectful? This covers safeguarding, medicines management, healthcare, nutrition, residents' rights and consent, the premises, fire precautions and risk management.

A centre can have warm, kind frontline care and still fail an inspection on the capacity-and-capability side because governance is weak — and the reverse is equally true. Inspectors look at both, and the strongest providers treat them as inseparable.

Governance is half the picture — and half the findings

It is a mistake to treat a HIQA inspection as purely about frontline care. A very large share of adverse findings relate to governance and management: unclear lines of accountability, a person in charge stretched across too much, audits that are either not being carried out or not being acted upon, and a general lack of oversight that means problems are not spotted until an inspector finds them. The regulations require effective management systems to ensure the service is safe, appropriate, consistent and effectively monitored. In practice that means a clear structure showing who is responsible for what, a programme of audits — of medicines, of care plans, of infection prevention, of restraint, of complaints — and, critically, evidence that the actions arising from those audits are logged and closed out. An audit with open actions from a year ago tells exactly the wrong story; a cycle of audit, action and review tells the right one.

The evidence inspectors expect to see

Inspectors work from evidence, not intentions or good will. Expect them to want to see, and to test against reality:

A current statement of purpose that accurately describes the service, its facilities and the needs it is registered to meet — and a service that actually matches it.

A clear governance and management structure, with a fit person in charge who has the required experience and qualifications and is engaged in the day-to-day running of the centre.

Complete staff files: Garda vetting in place before staff start, professional registration current where required (NMBI for nurses, CORU for health and social care professionals), references, and the checks the regulations require under the "fitness" provisions.

A mandatory training matrix that is genuinely up to date — safeguarding, moving and handling, fire safety, and other required training all in date, with a clear view of who is due what and when.

Medicines management records: safe ordering, storage, administration and disposal, controlled-drug records, and audit of the whole system.

Care plans that are person-centred, based on assessment, reviewed at the required intervals, and reflecting the resident's actual needs and wishes.

Safeguarding arrangements: policies, staff who understand them, and records of any concerns raised and how they were handled, in line with national safeguarding policy.

Every safety certificate current — fire safety, servicing of equipment, legionella and water safety, and the premises maintained to the required standard.

A record of notifications to HIQA: providers must notify HIQA of certain events and incidents within set timeframes, and inspectors check that this has happened.

The findings that come up again and again

Across the sector, certain findings recur so often that any provider preparing for inspection should treat them as a checklist of vulnerabilities. Governance and oversight gaps top the list — audits not done or not acted on, unclear management structures. Out-of-date mandatory training is close behind, precisely because it slips quietly as staff come and go. Incomplete staff files — a missing vetting disclosure, a lapsed registration — are common and serious, because they go to whether the people caring for residents were properly checked. Medicines management issues recur. Premises and fire-safety shortcomings appear regularly, from fire doors to evacuation arrangements. And restraint and safeguarding practices are scrutinised closely. None of these is exotic; all of them are avoidable with steady systems.

Announced or unannounced — why readiness must be continuous

Many inspections of designated centres are unannounced, and even announced ones give little time to fix anything real. This is the single most important thing to internalise: you cannot prepare for a HIQA inspection in the week before, because you do not get the week. Readiness is a state, not an event. The centres that dread inspections are usually the ones whose evidence is scattered across folders, spreadsheets, individual managers' memories and email threads, so that answering "is everyone's mandatory training up to date?" or "when was the last medicines audit and what came of it?" takes days. The centres that are relaxed have that evidence in one place, reviewed on a schedule, so the answer takes seconds and is the same answer whether or not an inspector is standing there.

What happens after an inspection

After an inspection HIQA produces a report, published on its website, and where it identifies non-compliance the provider must submit a compliance plan setting out what will be done, by whom and by when to come into compliance. That plan is itself scrutinised, and follow-up inspections check that the actions were delivered. Serious or persistent non-compliance can affect a centre's registration — including conditions, and in the most serious cases, action against the registration itself. The reputational dimension matters too: reports are public, and families read them. All of which is another reason that continuous compliance, rather than reactive fixing, is the only sustainable approach.

Building continuous readiness in practice

What does continuous readiness actually look like day to day? It looks like a live register of every staff member's vetting, registration and mandatory training, with reminders well before anything expires, so a lapse is prevented rather than discovered. It looks like a schedule of audits — medicines, care plans, infection control, restraint, complaints — each with its findings and its actions tracked to closure. It looks like every fire, legionella and equipment certificate monitored for expiry rather than checked manually once a year. It looks like notifications to HIQA logged as they happen. And it looks like a governance structure where the person in charge can see, at a glance, where the centre stands against the regulations and standards.

This is precisely what Complys is built to give Irish care providers. It scores your readiness against HIQA standards, tracks staff registration and mandatory training with reminders, monitors every safety certificate for expiry, and records audits with their actions logged and closed — so whenever the inspector arrives, announced or not, the evidence is already in order and the conversation is about a well-run centre rather than a list of gaps.

The bottom line

A HIQA inspection is a snapshot of how you already operate. Providers who invest in steady systems — clear governance, complete and current records, audits that lead to action, and evidence held in one place — find inspections calm because there is nothing to scramble for. Providers who rely on a pre-inspection push find them stressful and risky, because the one thing you cannot manufacture in a hurry is a year of good records. Readiness is continuous, governance is half the picture, and the evidence is everything.