A GP practice policy library should give staff a clear route to the current, approved instructions they need. Organise documents into a small number of recognisable subjects, maintain a central register and separate published policies from drafts and superseded versions. Each active policy should have an owner, approval details and a review date.
The starting point is often less orderly. Practice Managers can inherit documents spread across shared drives, staff portals, email attachments and paper folders. Some may be duplicates; others may contain local instructions that never reached the main library.
A useful library makes the correct document easy to find and its status easy to recognise. Achieving that requires decisions about content and responsibility as well as folders. Moving everything into a new system will not resolve conflicting instructions or unclear ownership.
-
Start by establishing what exists, where it is stored and which documents staff actually use. Create an inventory before deleting, merging or replacing files. Give priority to areas where conflicting or missing instructions could affect safety or essential operations.
Include shared drives, staff portals, induction packs, reception folders and local quick-reference sheets. Ask team leads about documents held outside the main system. The published policy and the instructions used at a workstation may have developed separately.
For each document, record its title, location, apparent version, owner and status. Useful initial categories are:
Approved and current.
Awaiting review or confirmation.
Draft or unapproved template.
Superseded or potentially duplicated.
Do not assume the most recently modified file is authoritative. Its timestamp may reflect a formatting change or migration between systems.
Where two documents cover the same subject, ask an appropriate owner to compare them. One may contain necessary local detail; another may apply to a different service or site. Confirm which instructions should remain before removing either from routine use.
Keep staff informed during the reorganisation. Moving folders without updating familiar links can temporarily make an otherwise useful policy harder to find.
-
Use a small number of subject categories that staff recognise from their work. Keep the structure shallow enough to browse easily, and provide search or an alphabetical index alongside it. There is no CQC-prescribed folder structure.
The following is a suggested starting point, not a list of mandatory documents:
Clinical care and medicines - Results handling, clinical correspondence, prescribing and medicines management.
Safeguarding and consent - Safeguarding arrangements, consent and mental capacity guidance.
Patient services and experience - Access, communication, complaints and reasonable adjustments.
Infection prevention and premises - Infection control, cleaning, waste, equipment and premises safety.
People and employment - Recruitment, induction, absence, conduct and staff support.
Information governance - Confidentiality, information sharing, records management and security.
Governance and service continuity - Risk management, incidents, policy management and business continuity.
Adapt the categories to the practice’s services. Avoid creating numerous almost-empty folders or a large “Miscellaneous” section.
A document can be relevant to several subjects without needing several copies. Keep one approved version and use links or search tags to make it discoverable elsewhere. This reduces the risk of one copy being updated while another remains unchanged.
An additional link to relevant CQC guidance can help governance staff, but assessment headings need not dictate the everyday filing structure. Staff are more likely to search by task or subject.
-
The policy register should act as the library’s index and management record. It should link to each approved document and identify its owner, version, approval status and next review date. Clear titles help staff find information without knowing an internal reference number.
Use plain descriptions such as “Managing test results and clinical correspondence”. Add a stable identifier if it helps administration, but keep the subject prominent.
For each active document, the register should normally include:
Title, identifier and link to the approved version.
Document type: policy, procedure, protocol, form or guidance.
Scope, including relevant sites or services.
Owner and approver.
Version, approval date and effective date.
Last completed review and next review due.
Links to associated procedures, forms or local appendices.
This is a practical recommendation for the wider library. For data protection and information governance documents, the ICO’s audit framework specifically describes document control information including ownership, version numbers, review dates and change history.
Keep the register and the document itself consistent. Avoid ambiguous filenames such as “final updated latest”. Staff should not have to compare several files to decide which one applies.
-
Separate documents being developed from those approved for use, and keep superseded material outside the routine working library. Make the status visible within the document as well as in its storage location. Local variations should have clear scope and ownership.
A practical arrangement has three areas: published documents for staff, a restricted editing area and a controlled archive. Limit editing rights to those who need them, while making approved instructions available to relevant users.
Keep unpersonalised supplier templates in the editing area until their content, local details and approval have been checked. A template’s publication date does not show that the practice has adopted it.
For PCN or multi-site documents, distinguish shared content from local arrangements. A controlled local appendix can record contacts or workflows where appropriate. Give it an owner and review arrangements, and check it whenever the main document changes.
Link policies to associated procedures and blank forms. Store completed forms containing patient, staff or incident information in their appropriate records systems, with suitable access controls.
Archive superseded policies with their version history and approval records. Apply the relevant retention schedule and check for legal, inquiry or other reasons to preserve records before disposal. NHS England’s Records Management Code provides guidance on retention and the assessment required before destruction; it does not support indiscriminate deletion during a tidy-up.
-
Give staff one clearly signposted starting point, supported by recognisable titles, useful search terms and links to frequently needed documents. Test access from the accounts and devices people actually use. Availability to the Practice Manager does not establish availability to the whole team.
A short “Start here” page can point new starters towards essential guidance and explain how to report a broken link or unclear instruction. Role-based reading lists can then identify what needs particular attention without asking everyone to work indiscriminately through the whole library.
Ask reception, nursing and clinical colleagues to find documents relevant to their roles. Include a locum or recent starter where possible. Watch where they hesitate: the difficulty may be terminology, permissions or navigation.
The ICO’s information governance guidance asks whether staff can find relevant policies and understand their responsibilities. The same questions are useful when testing the wider library. See the ICO’s policy accessibility guidance.
Plan access to essential instructions during an IT outage. Where controlled paper or offline copies are needed, record their locations and who replaces them after updates. A footer saying “uncontrolled when printed” does not, by itself, prevent an old copy being used.
-
Assign someone to coordinate the library and named owners to oversee individual documents. Use a consistent process for review, approval, publication and communication. Software can support that process, but it cannot confirm whether instructions reflect the practice’s work.
A shared folder and register may be sufficient for a smaller library. More complex arrangements may benefit from automated reminders, version history and approval controls. Whichever approach is used, check backup arrangements, access management and the ability to retrieve documents if the service changes.
When publishing an update, check its linked procedures, remove superseded working copies and tell affected staff what has changed. Maintain review and approval records alongside any relevant briefing or training evidence.
In England, Regulation 17 requires effective governance systems and appropriate management records. CQC’s guidance does not prescribe a particular policy platform.
Library management may also support evidence under the published Governance, management and sustainability quality statement, which addresses clear responsibilities and accountability. Its value depends on staff understanding and implementation, as well as document control.
These CQC references apply to England. Practices elsewhere in the UK should check their own national arrangements.
-
Check whether staff can identify the approved document, whether someone maintains it and whether related instructions agree. Sample the library from a staff member’s perspective as well as reviewing the register. A tidy folder structure can still contain inaccurate or inaccessible content.
Entry point: is it clear where staff should begin?
Coverage: have documents outside the main library been identified?
Status: can users distinguish approved policies from drafts and old versions?
Ownership: does each active document have an owner who knows their role?
Consistency: do policy headers, register entries and linked procedures agree?
Local detail: are contacts, systems and site arrangements accurate?
Access: can relevant staff, including temporary colleagues, open what they need?
History: can previous versions and approval decisions be retrieved appropriately?
Common problems include storing separate copies for each team, keeping the only editable version in someone’s personal account, and importing an entire supplier library without checking relevance.
Another is overcomplicating the structure. If users repeatedly need help locating routine guidance, simplify the route and test it again.
-
Begin with one area of the library and make it work from end to end. Establish the approved documents, their owners and the route staff will use to find them before extending the approach.
Inventory one priority category and identify duplicates or uncertain versions.
Agree the authoritative documents and record them in the register.
Separate drafts and superseded material, preserving the necessary history.
Ask staff to find and use the published guidance, then resolve the difficulties they encounter.
A well-organised library gives the practice confidence about which instructions apply—and gives staff a dependable place to find them.