HIQA inspection readiness: a practical guide for Irish care providers (2026)

For nursing homes and other designated centres in Ireland, a HIQA inspection is a fact of life, and it can arrive announced or entirely unannounced. The providers who come through them calmly are not the ones who work miracles in the week beforehand; they are the ones for whom the inspection is simply a snapshot of how they already run every day. This guide sets out what the Health Information and Quality Authority (HIQA) is actually assessing, the evidence inspectors expect to see, where findings most often arise, and how to build the kind of continuous readiness that turns an inspection from a dreaded event into a routine confirmation of good practice.

Who HIQA regulates, and under what law

HIQA is the independent authority responsible for driving improvement in Ireland's health and social care services. In the residential care space it registers and inspects designated centres, most familiarly nursing homes for older people, and residential centres for people with disabilities, under the Health Act 2007 and the regulations and national standards made under it. For older people's services, the key instruments are the Health Act 2007 (Care and Welfare of Residents in Designated Centres for Older People) Regulations and the National Standards for Residential Care Settings for Older People. A centre cannot operate lawfully unless it is registered with HIQA, and registration carries conditions the provider must meet continuously.

The two things HIQA is really assessing

HIQA inspects against the regulations and the national standards, and it is useful to understand that inspectors group what they look at into two broad dimensions. The first is capacity and capability: is the centre well governed, properly resourced and competently managed? This covers the governance and management structure, the fitness of the registered provider and the person in charge, staffing levels and skill mix, training and development, and the systems of oversight and audit that tell management whether care is actually safe. The second is quality and safety: are residents safe, and is their care effective, person-centred and respectful? This covers safeguarding, medicines management, healthcare, nutrition, residents' rights and consent, the premises, fire precautions and risk management.

A centre can have warm, kind frontline care and still fail an inspection on the capacity-and-capability side because governance is weak, and the reverse is equally true. Inspectors look at both, and the strongest providers treat them as inseparable.

Governance is half the picture, and half the findings

It is a mistake to treat a HIQA inspection as purely about frontline care. A very large share of adverse findings relate to governance and management: unclear lines of accountability, a person in charge stretched across too much, audits that are either not being carried out or not being acted upon, and a general lack of oversight that means problems are not spotted until an inspector finds them. The regulations require effective management systems to ensure the service is safe, appropriate, consistent and effectively monitored. In practice that means a clear structure showing who is responsible for what, a programme of audits, of medicines, of care plans, of infection prevention, of restraint, of complaints, and, critically, evidence that the actions arising from those audits are logged and closed out. An audit with open actions from a year ago tells exactly the wrong story; a cycle of audit, action and review tells the right one.

The evidence inspectors expect to see

Inspectors work from evidence, not intentions or good will. Expect them to want to see, and to test against reality:

A current statement of purpose that accurately describes the service, its facilities and the needs it is registered to meet, and a service that actually matches it.

A clear governance and management structure, with a fit person in charge who has the required experience and qualifications and is engaged in the day-to-day running of the centre.

Complete staff files: Garda vetting in place before staff start, professional registration current where required (NMBI for nurses, CORU for health and social care professionals), references, and the checks the regulations require under the "fitness" provisions.

A mandatory training matrix that is genuinely up to date, safeguarding, moving and handling, fire safety, and other required training all in date, with a clear view of who is due what and when.

Medicines management records: safe ordering, storage, administration and disposal, controlled-drug records, and audit of the whole system.

Care plans that are person-centred, based on assessment, reviewed at the required intervals, and reflecting the resident's actual needs and wishes.

Safeguarding arrangements: policies, staff who understand them, and records of any concerns raised and how they were handled, in line with national safeguarding policy.

Every safety certificate current, fire safety, servicing of equipment, legionella and water safety, and the premises maintained to the required standard.

A record of notifications to HIQA: providers must notify HIQA of certain events and incidents within set timeframes, and inspectors check that this has happened.

The findings that come up again and again

Across the sector, certain findings recur so often that any provider preparing for inspection should treat them as a checklist of vulnerabilities. Governance and oversight gaps top the list, audits not done or not acted on, unclear management structures. Out-of-date mandatory training is close behind, precisely because it slips quietly as staff come and go. Incomplete staff files, a missing vetting disclosure, a lapsed registration, are common and serious, because they go to whether the people caring for residents were properly checked. Medicines management issues recur. Premises and fire-safety shortcomings appear regularly, from fire doors to evacuation arrangements. And restraint and safeguarding practices are scrutinised closely. None of these is exotic; all of them are avoidable with steady systems.

Announced or unannounced, why readiness must be continuous

Many inspections of designated centres are unannounced, and even announced ones give little time to fix anything real. This is the single most important thing to internalise: you cannot prepare for a HIQA inspection in the week before, because you do not get the week. Readiness is a state, not an event. The centres that dread inspections are usually the ones whose evidence is scattered across folders, spreadsheets, individual managers' memories and email threads, so that answering "is everyone's mandatory training up to date?" or "when was the last medicines audit and what came of it?" takes days. The centres that are relaxed have that evidence in one place, reviewed on a schedule, so the answer takes seconds and is the same answer whether or not an inspector is standing there.

What happens after an inspection

After an inspection HIQA produces a report, published on its website, and where it identifies non-compliance the provider must submit a compliance plan setting out what will be done, by whom and by when to come into compliance. That plan is itself scrutinised, and follow-up inspections check that the actions were delivered. Serious or persistent non-compliance can affect a centre's registration, including conditions, and in the most serious cases, action against the registration itself. The reputational dimension matters too: reports are public, and families read them. All of which is another reason that continuous compliance, rather than reactive fixing, is the only sustainable approach.

Building continuous readiness in practice

What does continuous readiness actually look like day to day? It looks like a live register of every staff member's vetting, registration and mandatory training, with reminders well before anything expires, so a lapse is prevented rather than discovered. It looks like a schedule of audits, medicines, care plans, infection control, restraint, complaints, each with its findings and its actions tracked to closure. It looks like every fire, legionella and equipment certificate monitored for expiry rather than checked manually once a year. It looks like notifications to HIQA logged as they happen. And it looks like a governance structure where the person in charge can see, at a glance, where the centre stands against the regulations and standards.

This is precisely what Complys is built to give Irish care providers. It scores your readiness against HIQA standards, tracks staff registration and mandatory training with reminders, monitors every safety certificate for expiry, and records audits with their actions logged and closed, so whenever the inspector arrives, announced or not, the evidence is already in order and the conversation is about a well-run centre rather than a list of gaps.

The regulations and standards in more detail

It helps to be clear about the two bodies of rules an inspector works from, because they do different jobs. The regulations, for older people's services, the Health Act 2007 (Care and Welfare of Residents in Designated Centres for Older People) Regulations, are legally binding requirements; a breach is a non-compliance the provider must correct. The national standards sit alongside them, describing what a good, person-centred service looks like in practice. An inspection report grades the centre against individual regulations and standards as compliant, substantially compliant, or not compliant, and the pattern across those judgements is what shapes the overall picture. Understanding this matters because providers sometimes fixate on the paperwork of a single regulation while missing that the standards ask a broader question: is this a place where residents are genuinely safe, respected and well cared for? The two are meant to reinforce each other, and inspectors read them together.

Medicines management: where good centres still slip

Medicines management deserves its own attention because it is both high-risk and one of the most common sources of findings. Inspectors look at the whole cycle: how medicines are prescribed, ordered, received, stored, administered and disposed of, and how the centre audits that cycle. Controlled drugs attract particular scrutiny, accurate registers, correct storage, and two-person checks where required. Common findings include gaps in administration records, medicines transcribed without proper authorisation, fridge temperatures not monitored or recorded, PRN (as-required) medicines without clear protocols, and audits that identify issues but are never followed through. The centres that do well here treat medicines as a governed system with a named clinical lead, regular audit, and a clear trail from the prescriber's order to the moment the resident receives the dose. It is precisely the kind of area where a scattered, paper-based approach fails and a single, current record succeeds.

Safeguarding, restraint and residents' rights

Safeguarding runs through everything HIQA examines. Inspectors expect a centre where staff can recognise and respond to a safeguarding concern, where there is a clear policy aligned to national safeguarding guidance, and where any concern raised is recorded, investigated and notified appropriately. Closely related is the use of restraint, including bedrails and, crucially, chemical restraint through medication, which must be a genuine last resort, assessed, least-restrictive, regularly reviewed and properly recorded, never a matter of routine or convenience. Alongside these, the standards weigh residents' rights and dignity heavily: consent, privacy, choice about daily life, access to advocacy, and a complaints process that residents and families can actually use and that demonstrably leads to change. A centre that manages medicines and buildings well but treats residents as tasks rather than people will still struggle against the rights-based standards, because person-centred care is not an optional extra in the framework, it is the point of it.

The person in charge and the provider's role

Two roles carry particular weight in the regulations. The registered provider is ultimately accountable for the centre and for resourcing it properly. The person in charge (PIC) must be suitably qualified and experienced and must be engaged in the actual day-to-day running of the centre, not a name on a form. Inspectors test this: they will look at whether the PIC genuinely knows the residents and the issues, whether governance meetings happen and lead to action, and whether the provider gives the centre the staffing and resources the statement of purpose promises. A recurring theme in poor inspections is a PIC spread too thinly or a provider disengaged from the reality on the floor, so that problems accumulate unseen. Strong centres have a visible, competent PIC and a provider who reviews the service's own audit data regularly and acts on it.

The day of the inspection itself

On the day, inspectors observe as much as they read. They walk the centre, watch how staff interact with residents, speak with residents and relatives, and sit with records to test whether what is written matches what is happening. They may use observation tools to gauge the quality of interactions for residents who cannot easily speak for themselves. Staff being able to explain, in their own words, how they would raise a safeguarding concern or manage an emergency carries real weight, it shows the systems are lived, not just filed. The most useful preparation is therefore not a frantic tidy-up but making sure the everyday reality stands up to being watched: that call bells are answered, that dignity is respected, that the fridge log really is filled in, and that any member of staff could show an inspector where to find what they need. That only happens when the systems are genuinely embedded, which is the whole argument for continuous readiness.

The bottom line

A HIQA inspection is a snapshot of how you already operate. Providers who invest in steady systems, clear governance, complete and current records, audits that lead to action, and evidence held in one place, find inspections calm because there is nothing to scramble for. Providers who rely on a pre-inspection push find them stressful and risky, because the one thing you cannot manufacture in a hurry is a year of good records. Readiness is continuous, governance is half the picture, and the evidence is everything.