Organisational abuse is neglect and poor care practice within a care setting, such as a care home or hospital, or in care provided in someone’s own home, that comes from the way the service is run: its structure, policies, processes and everyday practices. It is one of the types of abuse listed in the statutory guidance to the Care Act 2014, and it can range from a one-off incident to ongoing ill-treatment. It is rarely one “bad apple”. It is what happens when routines, staffing, culture and leadership make poor care normal, which is why the staff inside a service can stop seeing it.
At a glance: Nexis CPD offers a £9 CPD-accredited online Safeguarding Adults (Advanced) Level 2 course — 100% online, with an instantly emailed, employer-verifiable certificate. Any three courses cost £18, and teams of 5 or more pay £6 a course place.
Organisational abuse is also called institutional abuse. For the basics, including who counts as an adult at risk, the six safeguarding principles and how local authority enquiries work, see our guide to safeguarding adults. This guide follows the law in England. General information, not legal advice — if someone is in immediate danger call 999.
What is the definition of organisational abuse?
The Care and Support Statutory Guidance to the Care Act 2014 lists organisational abuse at paragraph 14.17 among the types of abuse and neglect. Its description, in full:
“Including neglect and poor care practice within an institution or specific care setting such as a hospital or care home, for example, or in relation to care provided in one’s own home. This may range from one off incidents to on-going ill-treatment. It can be through neglect or poor professional practice as a result of the structure, policies, processes and practices within an organisation.”
So it is not limited to care homes and hospitals, a single incident can count, and the cause sits in the organisation rather than only in one person’s behaviour. Paragraph 14.18 adds that professionals should look beyond single incidents or individuals to identify patterns of harm, because “repeated instances of poor care may be an indication of more serious problems and of what we now describe as organisational abuse.”
For services registered with the Care Quality Commission (CQC) there is also a legal floor. Regulation 13 of the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 says service users must be protected from abuse and improper treatment. Care must not include control or restraint that is not necessary or proportionate to a risk of harm, must not be degrading, and must not be provided in a way that “significantly disregards the needs of the service user for care or treatment”. Nobody may be deprived of their liberty for care or treatment without lawful authority.
What are examples of organisational abuse?
Most of it looks like ordinary routine, which is exactly the problem. The Social Care Institute for Excellence (SCIE) list of types and indicators of abuse and CQC’s warning signs include:
- Rigid routines for staff convenience: everyone washed before the day shift arrives, one bedtime for a whole unit, meals at fixed times. SCIE calls this “authoritarian management or rigid regimes”.
- Blanket restrictions: rules applied to everyone regardless of need, such as a locked kitchen or set times for drinks.
- Lack of privacy and dignity: personal matters discussed in front of others, or doors left open during personal care.
- Inappropriate restraint: lap belts, bed rails or keeping someone in their room without an assessment, a lawful basis or review.
- Misuse of medication: sedating medicines used to manage behaviour. Regulation 13 counts restraint by “chemical means”.
- Chronic understaffing: call bells unanswered and people waiting for the toilet or for help to eat and drink.
- Discouraging visitors or complaints: restricted visiting, and complaints that are never answered.
- No choice: no say over clothes, food, activities or when to get up.
- Neglected essentials: missing glasses, dentures or hearing aids, and cultural or religious needs ignored.
- Poor record keeping: generic or missing care plans, and charts filled in from memory.
Some of these overlap with other categories: restraint also appears under physical abuse, and missed care is neglect. What makes it organisational is that the harm comes from how the service works, so it tends to affect more than one person and survives changes of staff. Financial abuse can be organisational too, for example a home with no proper system for residents’ cash; see our guide to financial abuse of adults at risk.
How common is organisational abuse?
It is recorded less often than neglect, physical or financial abuse, but the numbers are not small. The official statistics Safeguarding adults, England, 2024 to 2025, published by the Department of Health and Social Care, record organisational abuse as a type of risk in 11,295 of the 178,135 section 42 enquiries concluded in the year (Table 2a of the data tables): about 6%.
The accompanying data file breaks those 11,295 enquiries down further:
- a care home, nursing or residential, was a location of the risk in 5,745, about half
- the person’s own home was a location of the risk in 3,020, about a quarter
- a hospital, whether acute, community or mental health, was a location in 1,490
- a service provider, meaning anyone paid or contracted to provide care, was the source of risk in 7,765, more than two-thirds
An enquiry can record more than one type, location or source of risk, so these figures overlap, and they only count concerns that reached an enquiry. A closed culture, by its nature, produces fewer reports.
What is a closed culture in care?
CQC defines a closed culture as “a poor culture that can lead to harm, including human rights breaches such as abuse”. In its guidance on how CQC identifies and responds to closed cultures, it says people in these services are more likely to be at risk of deliberate or unintentional harm, and that any service that delivers care can have one.
Closed culture is CQC’s name for the conditions; organisational abuse is the safeguarding category for the harm. A closed culture is where organisational abuse grows and stays hidden.
CQC says the risk is higher where people cannot leave of their own accord, in live-in services such as shared lives and supported living, and wherever one-to-one care is provided. It groups its warning signs under four indicators:
| CQC indicator | Examples of CQC’s warning signs |
|---|---|
| People may experience poor care, including unlawful restrictions | Staff not understanding or speaking warmly about the people they care for; staff belittling, excluding or taunting people; care plans that are not individualised; blanket restrictions; inappropriate use of medicines to restrain or control behaviour; poor application of the Mental Capacity Act |
| Weak leadership and management | Staff discouraged or afraid to speak out; a manager failing to address issues raised by staff, people or relatives; allegations of cover-ups or bullying; staff working excessively long hours; shift patterns where the same people always work together |
| Poor skills, training and supervision of staff | High use of poorly inducted agency staff or locums who do not know people’s needs; no regular supervision, debriefs or reflective practice; training that does not equip staff to meet people’s needs |
| Lack of external oversight | Few visitors; little monitoring by outside agencies; notifications or safeguarding referrals not submitted; families unaware of how their relative is being cared for |
CQC’s other risk factors include high staff turnover, consistent staff shortages, a service that sometimes runs without a manager, staff who are relatives or friends forming cliques, and an isolated location that family find hard to visit.
Why do care staff miss organisational abuse?
Because from the inside it rarely looks like abuse. It looks like “how we do things here”. Four forces are usually at work:
- Normalisation. New staff learn the routine from colleagues. If the night shift has always done early-morning washes, nobody questions it, and practice that would shock a visitor becomes invisible.
- Fear. CQC’s warning signs include staff who are discouraged and afraid to speak out, often because whistleblowing policies are ineffective.
- Loyalty. Raising a concern can feel like betraying hard-pressed colleagues, especially where the same people always work together.
- Exhaustion. Long shifts and short staffing shrink what anyone notices, and turn “we haven’t got time” into the standard.
The people receiving care, for example in dementia or learning disability services, may be less able to raise the alarm themselves. That is one reason paragraph 14.199 of the guidance says it is not for front-line staff to second-guess the outcome of an enquiry when deciding whether to share a concern.
What happened at Winterbourne View and Whorlton Hall?
CQC names both, alongside Mid Staffordshire Hospital, as examples of the damage a closed culture can do. Both were hospitals caring for people with a learning disability or autism, and in both it was BBC Panorama, not the systems meant to catch it, that exposed the abuse.
Winterbourne View, 2011. The Department of Health’s final review, published in December 2012, found that staff “routinely mistreated and abused” the people in their care and that the hospital’s management “allowed a culture of abuse to flourish”. All 11 people charged pleaded guilty, and six were jailed. On paper, the provider’s policies were impressive. In reality there was no registered manager for much of the time, little training other than in restraint, and very high staff turnover. Families were not allowed on the wards, which “enabled a closed and punitive culture to develop”. Between January 2008 and May 2011, 40 safeguarding alerts to the local council were treated as separate incidents, and a whistleblower’s concerns went unheeded.
Whorlton Hall, 2019. CQC’s statement after the broadcast described “sickening abuse of vulnerable people”. Its March 2018 inspection, prompted by whistleblowing, had found staff sometimes working 24-hour shifts, agency staff without appropriate training and not all staff receiving individual supervision, yet the patients inspectors spoke to said they felt safe. CQC said it had “missed what was really going on”.
The lesson: impressive policies, a recent inspection and people saying they are fine do not prove a culture is safe. Patterns, staffing and whether staff feel able to speak up tell you far more.
What are the warning signs of organisational abuse?
Use this as a checklist, whether you work in the service or visit it. It draws on SCIE’s signs and indicators and CQC’s warning signs:
- the same routine for everyone, with little flexibility or choice
- too few staff, or agency staff who do not know people
- people hungry, thirsty, unwashed or left in soiled clothes
- people’s own clothes and possessions missing, or used communally
- restrictions with no assessment or review, or people kept in one area
- staff talking about people dismissively, or discussing personal matters in public
- unnecessary exposure during bathing or toileting
- few visitors and few activities
- incidents or complaints that keep recurring, or are never recorded
- staff afraid to raise concerns, or a manager who is rarely seen
None of these proves abuse on its own. Several together, or the same thing happening again and again, is the pattern paragraph 14.18 describes.
What should a care worker do if they suspect organisational abuse?
Recognise it, record it, report it, and keep going until someone acts. The Skills for Care Code of Conduct for adult social care workers in England says you must report any actions or omissions by yourself or colleagues that you feel may compromise people’s safety or care.
- If anyone is in immediate danger, call 999. Make the person safe and meet their immediate needs first.
- Write down what you saw the same day: dates, times, who was on shift, what happened and what people said. Describe the practice, such as “five residents were in bed by 6.30pm”, rather than using labels.
- Report it to your manager, the nurse in charge or your safeguarding lead straight away. Paragraph 14.200 of the guidance says it is imperative that poor or neglectful care is brought to the immediate attention of managers and responded to swiftly.
- Do not investigate or confront colleagues, photograph people or remove records. It can put people at risk and damage a later enquiry.
- Escalate if your manager is involved or nothing happens. Paragraph 14.199 says there should be well-publicised ways of escalating concerns where line managers do not act. Use your whistleblowing policy, and contact your local council’s adult social care team directly.
- Tell CQC. CQC wants to hear from staff who have concerns about the care their employer provides, and you can raise a concern anonymously.
- Involve the police if a crime may have happened, such as an assault, theft, or ill-treatment or wilful neglect.
Spotting these patterns early, and knowing how to record and refer them, is what our Safeguarding Adults (Advanced) Level 2 course is for, including the ten categories and signs of abuse and making effective referrals to adult social care.
Who do you report organisational abuse to?
More than one route can apply at once. In most services your manager or safeguarding lead makes the external referrals, unless they are part of the problem.
| Concern | Who to tell |
|---|---|
| Someone in immediate danger, or a crime happening now | Police on 999 |
| Poor care or abuse you have seen at work | Your manager, nurse in charge or safeguarding lead, the same day |
| Your manager is involved, or nothing has been done | Your employer’s whistleblowing route (a senior manager, director or nominated person) and the local authority |
| An adult with care and support needs at risk of abuse or neglect | Local authority adult social care (a safeguarding concern) |
| Poor care in a CQC-registered service | The Care Quality Commission, online, on 03000 616161 or at enquiries@cqc.org.uk; you can stay anonymous |
| Assault, theft, ill-treatment or wilful neglect that has already happened | Police on 101 |
| Abuse or an allegation of abuse in a registered service | The registered person must notify CQC without delay |
| A relative worried about a family member’s care | The manager first, then the local authority or CQC if concerns continue |
Are you protected if you report poor care at work?
Usually, yes. Under section 43B of the Employment Rights Act 1996, a disclosure qualifies for protection if you reasonably believe it is in the public interest and tends to show, among other things, a criminal offence, a failure to comply with a legal obligation, or that someone’s health or safety has been or is likely to be endangered. Poor care that puts people at risk will often fit.
Raising a concern with your employer is the simplest protected route. CQC is on the government’s list of prescribed people and bodies for adult social care in England, so reporting to it can also be protected if you reasonably believe the information is substantially true. One limit: CQC says it has no powers to protect you from action by your employer, though having told CQC may help in a later unfair dismissal claim. Our guide to whistleblowing law explains the tests for each route.
What must care managers and providers do to prevent organisational abuse?
Prevention is a legal duty, not an extra. Regulation 13 requires systems and processes, established and operated effectively, to prevent abuse and to investigate any allegation or evidence of abuse immediately. Regulation 18 requires sufficient numbers of suitably qualified, competent, skilled and experienced staff, who must receive the support, training, supervision and appraisal their duties need. Under regulation 18 of the Care Quality Commission (Registration) Regulations 2009, the registered person must notify CQC without delay of any abuse or allegation of abuse.
Paragraph 14.231 of the statutory guidance says providers should give staff internal guidelines covering, among other things, referral routes within and beyond the agency, whistleblowing responsibilities, assurances of protection for whistleblowers, and best practice on control and restraint and medication.
The criminal law reaches organisations too. Under section 21 of the Criminal Justice and Courts Act 2015, a care provider commits an offence where ill-treatment or wilful neglect happens, its activities are managed or organised in a way that amounts to a gross breach of a relevant duty of care, and without that breach the harm would not have happened or would have been less likely. Section 20 covers individual care workers, including managers and directors.
Day to day, culture is built from small, repeated actions:
- be visible on the floor at different times, including nights and weekends
- give every worker regular supervision, with time for debriefs and reflection
- vary shift patterns so the same small group does not always work together
- induct agency staff properly
- review every restriction, restraint and “as required” sedating medicine
- welcome visitors, and act on what families and people themselves tell you
- thank people who raise concerns, and show them what changed
- read incidents and complaints as a pattern, not one at a time
These are good practice, not legal rules; see also our guide to care home manager training requirements.
How can a care manager check for a closed culture?
Answer these questions honestly, or better still, ask someone from outside the service to go through them with you:
- When did a member of staff last raise a concern with me, and what happened next?
- Would an agency worker know how to raise a concern without going through their shift lead?
- Do any routines exist mainly because they suit the rota?
- Which blanket rules apply to everyone, and could any be removed?
- Is every restriction and sedating medicine assessed, lawful, recorded and reviewed?
- How often do I see the service at night and at weekends?
- Do the same staff always work together, and is there a group nobody challenges?
- Do families feel welcome to drop in?
- Do care plans sound like the person, or could they belong to anyone?
- Would I be comfortable if a relative watched the busiest hour of the day?
If several answers make you uneasy, act on it before an inspector, a family or a whistleblower has to.
How does organisational abuse link to dignity, person-centred care and the Mental Capacity Act?
CQC’s closed-culture guidance ties the harm directly to the regulations. Unnecessary restrictions on a person’s liberty link to Regulation 9 (person-centred care) and Regulation 13, while disproportionate intrusions on privacy, dignity and family life link to Regulation 10 (dignity and respect).
- Dignity: lack of privacy and rushed personal care are dignity failures; our guide to dignity in care sets out the eight dignity factors.
- Person-centred care: a rigid regime is the opposite of person-centred care, which plans support around the individual rather than the rota.
- Mental capacity: restrictions on someone who lacks capacity must be in their best interests, and a deprivation of liberty needs lawful authority, such as a DoLS authorisation. See our Mental Capacity Act guide.
- Duty of care: following a poor routine because “everyone does it” does not meet your duty of care.
What training helps prevent organisational abuse?
Regulation 18 requires staff to have the training their duties need; our guides to safeguarding training requirements and CPD requirements for care workers explain which levels apply. Three Nexis CPD courses fit organisational abuse closely:
- Safeguarding Adults (Advanced) Level 2: the law, the ten categories and signs of abuse, mental capacity and DoLS, and how to record and refer concerns; 1.5 CPD hours
- Dignity in Care: privacy, respect, choice and control day to day, and how to challenge poor care that undermines dignity; 2 CPD hours
- Person-Centred Care: core values, care plans built with the person, and capacity and consent; 2 CPD hours
Together they cost £18 rather than £27 under the pay-for-2-get-3 offer, and care providers training 5 or more staff pay £6 a course place on our team plan. These are awareness-level CPD courses: they do not make anyone a safeguarding lead, an investigator or an inspector, and they do not replace your employer’s own safeguarding training and procedures. If you take one, start with Safeguarding Adults (Advanced) Level 2: 15 questions, 80% to pass, and an instant certificate.
£9 per course. CPD accredited, 100% online, verifiable e-certificate. Pay for 2, get 3 — any 3 courses for £18.
Frequently asked questions
What is organisational abuse in simple terms?
It is neglect or poor care that comes from the way a care service is run, its routines, staffing, policies and culture, rather than from one person acting alone. It can happen in a care home, a hospital or in someone’s own home.
What is an example of organisational abuse in a care home?
Examples include fixed bedtimes to suit the rota, blanket restrictions such as a locked kitchen, sedating medicine used to manage behaviour, discouraging visitors, ignoring complaints, and chronic understaffing that leaves people waiting for help.
What is the difference between organisational abuse and neglect?
Neglect is failing to meet someone’s care needs. Organisational abuse is neglect or poor practice that results from how a service is structured and run, so it usually affects more than one person and continues whoever is on shift. The same situation can be recorded as both.
What is a closed culture in care?
The Care Quality Commission defines a closed culture as “a poor culture that can lead to harm, including human rights breaches such as abuse”. Warning signs include staff afraid to speak out, weak leadership, poorly inducted agency staff and few visitors.
Who do I report organisational abuse to?
Tell your manager or safeguarding lead the same day. If they are involved or nothing happens, use your employer’s whistleblowing policy and contact the local authority’s adult social care team or the CQC, which accepts concerns anonymously. Call 999 if anyone is in immediate danger.
Can organisational abuse happen in someone’s own home?
Yes. The Care Act statutory guidance includes care provided in a person’s own home. In England in 2024 to 2025, the person’s own home was a location of the risk in 3,020 of the concluded section 42 enquiries involving organisational abuse.
General information, not legal advice — if someone is in immediate danger call 999. This guide summarises the law and official guidance for England as checked on 21 October 2026; Wales, Scotland and Northern Ireland have their own safeguarding laws and regulators. Nexis CPD courses are CPD-accredited awareness training: they do not make anyone a safeguarding lead, investigator or inspector, and they do not replace employer safeguarding training or local procedures.