Responsibility for GP practice policies should be shared through clear, agreed roles. The Practice Manager can coordinate the library and review schedule, while named policy owners oversee particular subjects and appropriately authorised people approve changes. Staff then need to understand and apply the policies relevant to their work.
Delegating policy administration does not transfer the registered provider’s regulatory responsibilities. In England, the registered manager also shares legal responsibility for meeting the relevant regulations. The precise arrangements depend on the practice’s legal structure and registration. See CQC’s registration guidance.
That distinction matters when a Practice Manager inherits a library with their predecessor’s name on almost every document. Being responsible for keeping reviews moving is different from having the expertise and authority to approve every clinical, employment or information governance decision.
-
In England, the registered provider is responsible for meeting the regulations governing its regulated activities, alongside the registered manager where one is appointed. For a registered partnership, CQC explains that responsibility rests with the partnership as a whole and each individual partner. Allocating policies to individual leads helps organise the work without removing those responsibilities. See CQC’s explanation of provider and registered manager responsibilities.
The Practice Manager and registered manager may be different people. Practices should make that distinction explicit, especially during recruitment, succession planning or a change in partnership.
Regulation 17 requires effective systems for monitoring quality, managing risks and maintaining appropriate records. It does not prescribe a particular policy ownership chart or require every document to carry every partner’s signature. See CQC’s Regulation 17 guidance.
A practical arrangement is for the partners or governing body to agree how policies are allocated, approved and monitored. They should receive enough information to act on unresolved risks, overdue work and decisions requiring resources.
CQC references in this article apply to England. The management principles are useful across the UK, but practices should check their own national regulatory and contractual arrangements.
-
The Practice Manager is well placed to coordinate GP practice policy management, provided the role comes with time, authority and support. This usually means maintaining the register, organising reviews, controlling versions and escalating gaps. It should not mean becoming the default expert on every subject.
The distinction is practical. A manager can identify that the medicines policy is overdue, arrange its review and publish the approved version. Assessing its clinical content calls for someone with appropriate expertise.
Day-to-day coordination might include:
Recording each policy’s owner, approver and next review date.
Prompting reviews and tracking outstanding actions.
Checking that templates have been personalised.
Arranging staff briefings and recording their completion.
Removing superseded versions from the working library.
Reporting unresolved issues to the appropriate senior lead.
Some of this work can sit with an operations manager, governance lead or administrator. The allocation should reflect the practice’s size and staffing.
A review reminder also needs an escalation route. If a policy owner repeatedly cannot complete the work, the coordinator needs someone who can resolve the competing priorities. Responsibility without that support leaves the manager chasing deadlines they cannot control.
-
A policy owner should oversee the accuracy, relevance and implementation of a particular policy. They do not have to write every word themselves, but they should know when specialist advice is needed and arrange it. The role should be understood and accepted by the person named.
A workable division of tasks looks like this:
Policy coordinator - Maintains the library, timetable and review records
Policy owner - Oversees the policy’s content, review and implementation.
Reviewer or adviser - Checks particular clinical, legal, technical or operational details.
Approver - Authorises adoption within the practice’s agreed arrangements.
Team leader and staff - Put the policy into use, complete relevant learning and raise problems.
This is a suggested management model, rather than a prescribed regulatory structure. In a small practice, one person may perform several roles. Specialist input and the scope of approval should still be clear.
Give owners a short description of what is expected: monitor relevant changes, consult colleagues, arrange reviews and follow through on agreed actions. Record both the role and its current holder so that a staff departure prompts a handover.
Ownership also needs a deputy or cover arrangement. A policy should not become unmanageable because its lead is on leave.
-
Specialist policies should receive input from people with relevant knowledge and experience. Approval should sit with someone authorised to make the decisions involved, including commitments about staffing, resources or clinical practice. The right arrangement will vary by subject.
For clinical policies, involve an appropriate clinical lead and the staff who use the process. Administrative colleagues can identify where instructions do not fit appointment systems, workflows or absence cover.
For safeguarding, involve the relevant safeguarding lead. CQC’s guidance says each practice should have a designated lead for safeguarding children and young people, with a role in promoting good practice, supporting colleagues and ensuring suitable training. That supports their involvement in policy review; it does not mean safeguarding becomes their responsibility alone. See CQC’s safeguarding children guidance.
Information governance needs another distinction. A data protection officer advises and monitors compliance, but the controller or processor remains responsible for compliance with the UK GDPR. Avoid assigning the DPO operational decisions that conflict with their independent role. See the ICO’s DPO guidance.
Similarly, appointing a competent health and safety adviser does not remove the employer’s legal duty to manage health and safety. See HSE’s guidance on competent assistance.
For employment policies, the Practice Manager may coordinate drafting with suitable HR advice. Changes affecting contractual terms or employment rights deserve particular care before approval.
A simple approval schedule can distinguish routine corrections from substantive changes. Altering a contact number and changing who may perform a clinical task should not pass through an identical review process.
-
A PCN, federation or specialist supplier can help draft, review and maintain policies. The practice still needs to establish who checks local accuracy, authorises adoption and makes sure staff can follow them. Purchasing a policy library does not transfer the practice’s regulatory responsibilities to its supplier.
Shared services require particular care. CQC’s registration guidance looks at who directs and controls a regulated activity and who is responsible for delivering it. Responsibility cannot be settled simply by putting a PCN logo on the document. See CQC’s guidance for PCNs, federations and collaborative GP services.
For a shared policy, agree who maintains the common content, who approves local arrangements and who tells participating practices about changes. Check that the policy explains where responsibilities pass between organisations.
With an external supplier, confirm what the service includes. Providing updated templates, personalising documents and checking implementation are different tasks. Someone in the practice should review proposed changes against local services, staffing and systems before adoption.
The practical question is straightforward: when a revised document arrives, who decides what the practice needs to do about it?
-
Useful evidence connects named responsibilities with completed actions. A policy register shows who has been allocated a task; review records, approval decisions and follow-up checks show whether it happened. Staff understanding provides another part of the picture.
CQC’s published Governance, management and sustainability quality statement addresses clear roles, accountability and staff understanding of their responsibilities. Policy management can support evidence under this statement when the arrangements operate effectively. See CQC’s governance quality statement.
Keep a proportionate record of:
The owner, reviewer, approver and cover arrangements.
What was checked and what changed.
Approval and implementation dates.
Relevant briefings or training.
Outstanding actions and how they were resolved.
CQC’s GP governance guidance also describes considering staff accounts, meeting minutes and how decisions are communicated. These can help demonstrate that responsibilities are understood beyond the policy’s front page. See CQC’s guidance on effective GP governance.
A staff acknowledgement records receipt or reading. Where a change affects a significant task, a discussion, demonstration or focused audit may provide better assurance that people understand what to do. Include locums, temporary staff and shared staff where the policy affects their work.
-
Check whether every significant policy has an active owner, an appropriate approval route and someone responsible for putting changes into practice. Start with higher-risk areas and documents affected by recent staffing or service changes. Gaps here deserve attention before minor presentation issues.
Use this checklist:
Owner: is the named person still in post, aware of the role and able to fulfil it?
Expertise: has clinical or technical content received suitable review?
Authority: can the approver authorise the arrangements the policy describes?
Capacity: is time available, and can delayed work be escalated?
Cover: who acts when the owner is absent or leaves?
Implementation: who briefs affected staff and checks that changes work?
Shared arrangements: are practice, PCN and supplier tasks clear?
Access: can staff find the current approved version?
Common problems include naming the Practice Manager on every policy by default, retaining a departed partner as approver, or recording a committee as owner without identifying who will do the work.
Another weakness is treating publication as completion. A policy can be approved and uploaded while the team continues using the previous process. Make implementation part of ownership from the outset.
-
Begin with a small number of policies where unclear responsibility could affect patient safety or essential operations. Use them to establish an arrangement the practice can sustain.
Select five policies and confirm their current owners.
Agree who reviews, approves and implements changes to each.
Resolve gaps in expertise, authority or available time.
Record the arrangement and check progress at the next governance meeting.
A name on a document is useful only when the person knows what they are expected to do—and has the support to do it.