Lost in Compliance,Found in Defiance?
- macresearchandcons
- 9 hours ago
- 10 min read
THOUGHT LEADERSHIP
When following the rules stops you seeing the person — and when breaking them might be the most person-centred thing you ever do.
By Arlene Bunton | Mac Research and Consultancy Limited | April 2026
There is a care home somewhere in Scotland right now where a resident is sitting in a chair they did not choose, eating a meal they did not pick, at a time that suits the kitchen rather than their stomach, wearing clothes that were selected by whoever was quickest this morning, waiting for an activity they have no interest in, surrounded by people they did not ask to live with. Every single thing happening to this person is compliant.
The care plan is up to date. The medication is administered on time. The risk assessment is signed. The food safety records are perfect. The fire doors close. The training matrix is green. If the Care Inspectorate walked in this afternoon, the paperwork would pass.
And yet this person is miserable.
They are not living. They are being maintained. Stored. Processed through a system that was designed to meet regulatory standards and has, somewhere along the way, forgotten that the point of the standards was to make life better — not to make folders thicker.
This is what it looks like to be lost in compliance.
“We have created a care system that is exquisitely good at documenting what it does and catastrophically bad at asking whether what it does matters.”
The Compliance Trap
Let me be clear: I am not against regulation. I have spent twenty years working within Scottish and English regulatory frameworks. I am a consultant who helps services prepare for inspection. I believe in the Care Inspectorate. I believe in the Health and Social Care Standards. I believe that accountability, transparency, and scrutiny are essential to keeping vulnerable people safe.
But I also believe that we have built a culture — across the entire social care sector — in which compliance has become the goal rather than the means. Where the question has shifted from “is this person living well?” to “can we evidence that we followed the process?” Where managers spend more time writing about care than delivering it. Where frontline staff are so overwhelmed by recording requirements that they have no time left for the thing the recording is supposed to describe.
I call it the compliance trap. And I see it everywhere.
The Symptoms
• The care plan is beautiful. The care is average. Every outcome, every preference, every review date is documented immaculately. But the person it describes hasn’t been asked how they feel in six weeks. The plan describes a person. It has not consulted the person.
• The audit scores are high. The residents are quiet. Every audit domain returns green. Medication? Compliant. Infection control? Compliant. Fire safety? Compliant. But nobody has asked why Mrs Henderson doesn’t come out of her room any more. Compliance has mistaken silence for contentment.
• The training matrix is full. The practice hasn’t changed. Every staff member has completed their mandatory e-learning. Moving and handling. Safeguarding. Food hygiene. Fire awareness. And yet the same staff member still talks over the head of a resident with dementia, still rushes a transfer, still calls a seventy-eight-year-old woman “sweetheart.” The tick box is ticked. The behaviour is untouched.
• The complaints register is empty. But no one feels safe enough to complain. Management reports zero complaints with pride. But have they asked why? An empty complaints register is not a sign of quality. It is often a sign of a closed culture — a place where people have learned that raising a concern achieves nothing, or worse, provokes consequences.
• The risk assessment says no. The person says yes. The resident wants to go for a walk. The risk assessment says they are a falls risk. So they don’t go. They sit. They stare at a wall. They lose muscle tone, confidence, and the will to try. The risk assessment kept them safe. It also kept them captive.
What Defiance Looks Like
Now here is where this gets uncomfortable. Because what I am about to describe will make some managers nervous. It will make some compliance officers twitch. And it will make some regulators raise an eyebrow.
But I believe it is the truth.
Sometimes, the most person-centred thing you can do is break the rule.
Not recklessly. Not secretly. Not without thought. But deliberately, transparently, and in the documented best interests of the person in front of you.
What Principled Defiance Looks Like in Practice
Mr Campbell is eighty-four. He has lived in the care home for two years. Before he moved in, he walked to the newsagent every morning to buy a paper and a packet of mints. He has moderate dementia. His risk assessment says he is a falls risk and should not go out unaccompanied. His daughter agrees. The care plan says he should be encouraged to walk in the garden instead.
Mr Campbell does not want to walk in the garden. He wants to go to the newsagent. He has asked every day for six months. And every day, someone tells him it is not safe.
A compliant service keeps him inside. A person-centred service asks a different question: what would it take to make this possible?
Could a staff member walk with him? Could the route be risk-assessed? Could the newsagent be contacted? Could the walk be shorter, slower, supported? Could a mobile phone and a tracking device give enough assurance? Could Mr Campbell’s right to take a risk be respected alongside the duty to manage it?
This is not negligence. This is not cowboys. This is what the Health and Social Care Standards were designed to protect. Standard 1.25: “I can choose to have an active life and participate in a range of recreational, social, creative, physical and learning activities every day, both indoors and outdoors.” Standard 2.4: “I am supported and encouraged to participate in a wide range of activities which suit my needs and interests.”
The standard does not say “unless the risk assessment says no.” It says the person’s right to live a meaningful life must be supported. The risk assessment is a tool to enable that, not a reason to prevent it.
“A risk assessment that says ‘no’ to everything is not a risk assessment. It is a containment strategy. And containment is not care.”
The False Binary: Compliance vs. Person-Centred Care
The sector has created a false choice. You are either compliant or you are person-centred. You either follow the procedures or you follow the person. You either pass the inspection or you make someone happy.
This is nonsense. And it is dangerous nonsense, because it gives managers permission to default to paperwork over people and call it professionalism.
The truth is that the best services in Scotland — the ones graded 5 and 6 by the Care Inspectorate, the ones that families fight to get into, the ones where staff retention is high and complaints are low — are both compliant and person-centred. They do not choose. They integrate.
They write care plans that reflect the person’s actual life, not a generic template. They complete audits that ask meaningful questions, not just tick-box confirmations. They conduct risk assessments that enable activity rather than prevent it. They train staff in values as well as procedures. And they record what matters, not just what is mandated.
Compliance and person-centred care are not opposites. They are the same thing, done well.
So Where Does It Go Wrong?
1. Fear of the Regulator
Many managers operate in a state of low-grade anxiety about inspection. They build their systems around what they think the inspector wants to see rather than what the person living in the home needs to experience. This creates a parallel universe in which the documented version of the service bears decreasing resemblance to the lived reality. The folder is immaculate. The lounge is empty.
The Care Inspectorate does not want to see a perfect folder. It wants to see a service where people are living well, where staff are supported, and where leadership is responsive. An inspector who finds a messy office but a vibrant, person-led, warm, and safe care environment will grade that service higher than one with pristine paperwork and disengaged residents. I have seen it happen. Repeatedly.
2. A Culture of Risk Aversion
Social care has become terrified of risk. And I understand why. When something goes wrong in a care home — a fall, an injury, a death — the scrutiny is intense. The media, the regulator, the family, the coroner. Nobody asks “was the person living a full life?” They ask “who signed the risk assessment?”
And so the rational response, for a manager trying to protect their registration, is to say no. No to the walk. No to the trip out. No to the glass of wine. No to the visit from the dog. No to the relationship. No to the risk. And with every no, the person’s life gets smaller.
The HSCS are explicit on this point. Standard 2.2: “I am supported to make choices and decisions about my life in a meaningful way.” Standard 2.4 talks about participation in a wide range of activities. Standard 2.11: “I am enabled to make full use of and enjoy the built and natural environment.” These standards do not say “where the risk assessment permits.” They say the person’s right to a meaningful life must be supported. Risk management exists to make that possible, not to make it impossible.
3. Recording as a Substitute for Relationship
There is a trend in social care that I find deeply troubling: the replacement of human relationship with documentation. Staff are told that if they didn’t write it down, it didn’t happen. And so they spend their shifts writing things down. The ten-minute chat with Mrs Henderson about her daughter’s wedding? Not recorded, therefore it didn’t happen. The twenty minutes spent holding Mr Campbell’s hand while he cried about his wife? Not on the care plan, therefore it is invisible.
Meanwhile, the things that are recorded — fluid intake, repositioning, bowel movements — become the definition of care. We have reduced the most intimate, human, relational act imaginable — caring for another person — to a series of data points. And then we wonder why staff feel like robots and residents feel like objects.
“If your staff are spending more time writing about care than delivering it, your system is broken. Not your staff. Your system.”
What Intelligent Compliance Looks Like
So what is the alternative? Not anarchy. Not a bonfire of the policies. But a fundamentally different approach to compliance that I call intelligent compliance — a way of working that meets every regulatory requirement while keeping the person at the centre of every decision.
• Write care plans in the person’s voice. Not “John requires assistance with personal care.” But “I like to have a shower first thing in the morning. I can wash my face and hands myself. I need help with my lower body because of my arthritis. I like the water hot. I don’t like the blue towels.” Same information. Same compliance. Completely different culture.
• Risk-assess to enable, not to prevent. Instead of “John is a falls risk and should not go out unaccompanied”, write “John wishes to walk to the newsagent daily. His falls risk has been assessed as moderate. The following control measures enable this to happen safely: staff escort, flat shoes, rest at the bench halfway, GP review of medication contributing to dizziness. Reviewed monthly.” The risk is the same. The outcome is a life.
• Audit for impact, not just process. Your medication audit should not only ask “was the MAR chart signed?” It should ask “does this person understand what they are taking and why? Have they been given a choice about administration times? Is this medication still achieving what it was prescribed for?” A compliant audit confirms the process was followed. An intelligent audit asks whether the process served the person.
• Train for values, then procedures. Induction should start with the question “why did you choose care?” before it covers moving and handling. Staff who understand the ‘why’ will naturally seek the right ‘how.’ Staff who are taught the ‘how’ without the ‘why’ will follow procedures without thinking and miss the person entirely.
• Record what matters, not just what is mandated. If a resident had a wonderful afternoon in the garden with their grandchild, that goes in the daily notes. If a staff member noticed that Mr Campbell was quieter than usual and sat with him for twenty minutes, that is recorded. Not because it is a regulatory requirement, but because it is evidence of care. And it is the kind of evidence that inspectors, families, and future staff need to see.
• Challenge your own compliance reflexes. When you find yourself saying “we can’t do that because of the risk assessment” or “we need to do this for the audit,” stop and ask: who does this serve? Does it serve the person in front of me, or does it serve the system around them? If the answer is the system, something has gone wrong.
A Final Thought
Compliance without humanity is bureaucracy. Defiance without thought is recklessness. But somewhere between the two — in the space where a manager looks at a risk assessment, looks at the person, and decides that the person matters more than the form — that is where excellent care lives.
The Health and Social Care Standards do not ask you to choose between safety and freedom. They ask you to hold both. The Care Inspectorate does not reward the thickest folder. It rewards the best outcomes. And the best outcomes happen when someone, somewhere in the building, has the courage to ask: “Are we doing this for them, or for us?”
Get lost in compliance, and you will build a service that looks good on paper. Get found in defiance — principled, transparent, person-led defiance — and you will build a service that changes lives.
Arlene Bunton is Director of Mac Research and Consultancy Limited and a doctoral researcher in dementia and ageing at the University of Stirling. She can be contacted at arlene@macresearchandconsultancy.co.uk.
References and Further Reading
Scottish Government (2017). Health and Social Care Standards: My Support, My Life.
Care Inspectorate (2022/2025). Quality Framework for Care Homes for Adults and Older People.
Care Inspectorate (2023). How we use requirements and recommendations. Policy statement.
Towers, A.M. et al. (2021). MiCareHQ: Care home residents’ quality of life and its association with CQC ratings and workforce issues. NIHR.
SCIE (2022). Co-production: What it is and how to do it. Social Care Institute for Excellence.
CQC (2023). Single Assessment Framework.
CQC (2025). State of Care Report 2024/25. Focus on Deprivation of Liberty Safeguards.
Health and Care (Staffing) (Scotland) Act 2019.
Adults with Incapacity (Scotland) Act 2000.
Mental Capacity Act 2005 (England and Wales).
PMC (2025). How Have Quality Improvement Strategies Been Adopted in Care Homes? Systematic Review.
Bamford, S.M. (2011). The Last Taboo. ILC UK.
Arlene Bunton | Mac Research and Consultancy Limited
Expertise. Integrity. Impact.
Comments