"Policies and procedures" are so often said in the same breath that it's easy to treat them as one thing. They aren't — and in a regulated care setting, understanding the difference is more than a matter of terminology. Policies and procedures do different jobs, are written differently, and fail in different ways. When either is unclear, out of date, or unknown to the staff on shift, the gap tends to surface at the worst possible moment: during an incident, a complaint, or an inspection.
This guide explains what each one is, how they work together, and how care providers — including children's homes, supported accommodation and family assessment centres — can keep both genuinely embedded in daily practice.
What is a policy?
A policy is a formal statement of your organisation's position, principles and intentions on a particular topic. It answers the questions what we do and why we do it. A safeguarding policy, for example, sets out your organisation's commitment to protecting the people in your care, the legal and regulatory framework it operates within, and the principles staff are expected to uphold.
Policies are deliberately broad. They give staff a consistent frame of reference, help manage risk, and demonstrate to regulators, commissioners and families that the organisation has thought seriously about its responsibilities. Because they express values and principles rather than step-by-step detail, policies tend to remain stable over time, changing mainly when legislation, statutory guidance or the organisation's own position changes.
What is a procedure?
A procedure, by contrast, is a set of specific, step-by-step instructions for carrying out a task or responding to a situation. It answers the questions who does what, when, and how. Where the safeguarding policy states that all concerns will be reported and acted upon, the accompanying procedure tells a support worker at 2am exactly what to do: who to inform, in what order, within what timescale, what to record, and where.
Procedures translate the policy's principles into action. Done well, they let staff handle situations confidently and consistently without needing to seek direction each time — which matters enormously in settings where the right response can't wait for the next management meeting.
Policy vs procedure at a glance
The clearest way to hold the distinction in mind:
- Purpose: a policy provides guidance and direction; a procedure provides the actionable steps that implement it.
- Scope: policies are broad and general; procedures are detailed and situation-specific.
- Question answered: policies address "what and why"; procedures address "who, how and when".
- Flexibility: policies allow for professional judgement within a framework; procedures are more prescriptive by design.
- Rate of change: policies change when principles or regulations change; procedures change whenever the practical process improves.
- Use: policies guide decision-making; procedures direct action.
A simple test: if a new member of staff could read the document and know exactly what to do in a given situation, it's a procedure. If it tells them what the organisation believes and expects but not the precise steps, it's a policy.
Where protocols and guidelines fit in
Two related terms often appear alongside policies and procedures, and it's worth being precise about them too:
- Protocols are agreed, often multi-agency procedures for defined situations, setting out roles, responsibilities and actions explicitly — for example, a joint protocol with the local authority and police for responding to a child missing from care.
- Guidelines offer recommendations based on evidence and expert opinion. They support consistent decision-making where a rigid procedure would be inappropriate, leaving room for professional judgement.
Key policy and procedure areas in care settings
Every regulated care provider will maintain a suite of policies with matching procedures. The areas that carry the most weight — operationally and at inspection — include:
- Safeguarding and child protection: protecting the people in your care from abuse, harm or exploitation, with clear routes for identifying, reporting and escalating concerns.
- Confidentiality and data protection: how sensitive personal information is handled, stored and shared, in line with UK GDPR and the Data Protection Act 2018.
- Health and safety: risk assessment, incident reporting, fire safety, medication handling and maintaining a safe environment for the people you support and your staff.
- Behaviour support and physical intervention: in children's settings especially, how staff support positive behaviour and the strict conditions under which restraint may ever be used and recorded.
- Missing from care: the immediate steps when a young person is absent or missing, including notifications and return interviews.
- Complaints: transparent routes for children, families and professionals to raise concerns, and how those concerns drive improvement.
- Whistleblowing: enabling staff to report poor practice or wrongdoing without fear of reprisal.
For children's homes in England, many of these are not optional: the Children's Homes (England) Regulations 2015 and the Quality Standards require specific policies to be in place, kept under review, and — crucially — reflected in day-to-day practice.
The gap inspectors actually find
Here is the point most articles on this topic miss. Providers rarely get into difficulty because a policy doesn't exist — template policies are easy to obtain. The findings that come up at inspection are almost always about the gap between the written document and daily practice:
- Policies that are past their review date, or exist in several conflicting versions across different homes.
- Staff who cannot say what a policy requires of them, or have never read the current version.
- Procedures that describe a process nobody actually follows on shift.
- No evidence of who has read and understood key policies — so the provider cannot demonstrate that expectations were communicated.
- Records of an incident that don't match what the procedure says should have happened, with no explanation of the difference.
Inspectors triangulate: they read the policy, speak to staff, and check the records. If the three don't tell the same story, the policy folder — however polished — works against you rather than for you.
The practical test: pick any key policy and ask a member of staff on today's shift what it requires them to do. If the answer doesn't match the document, the priority isn't rewriting the policy — it's how policies reach, and stay with, your team.
Keeping policies and procedures working in practice
A few habits separate providers whose policies genuinely shape practice from those with an impressive but dormant folder:
- One current version, one place. Every policy and procedure should have a single authoritative copy that staff can reach quickly — including at night and across sites. Duplicates on shared drives and printed copies in office drawers are where version drift starts.
- A visible review cycle. Each document should carry an owner, a version number, a last-reviewed date and a next-review date, with reminders before anything lapses.
- Read-and-understood tracking. When a policy is introduced or updated, record who has read and acknowledged it — and follow up with those who haven't. This is also your evidence at inspection that expectations were communicated.
- Link policies to induction, supervision and training. Key policies should appear in induction checklists and be revisited in supervision, not just issued once.
- Update procedures when practice changes. After an incident review or a change in guidance, the procedure should be updated promptly — and the change communicated, not silently filed.
How OVcare helps
OVcare is a care management platform built for UK regulated care providers, and policy and procedure management is built into it. All of your policies and procedures live in one secure, central library, so staff in every home are always working from the current version. Staff acknowledgement is tracked, giving managers a clear view of who has read and signed off each document — and clear evidence of it for inspections and internal audits.
Because policies sit alongside your daily records, incidents and audits in the same platform, it's also far easier to check that what's written matches what's recorded. And with OVinsights, staff can ask a policy question in plain language — on WhatsApp, mid-shift — and get guidance linked back to your own policies and procedures, so the answer reflects your organisation's expectations rather than a generic one.
None of this replaces professional judgement, and no software can close the gap between policy and practice on its own. What it can do is remove the administrative reasons the gap opens up: scattered versions, lapsed reviews, and no record of who has read what.
See how it works with your own policies in mind. Book a free demo and we'll show you how OVcare keeps policies, procedures and staff sign-off organised and inspection-ready. Book a free demo.
This guide is provided for general information for care providers and does not constitute legal or regulatory advice. Always refer to current legislation, statutory guidance and regulatory requirements for your setting, and take professional advice on your own circumstances.