The lounge of a newly built care home at dusk, armchairs around a low table beside tall windows

Care providers

AI and care planning: what may be drafted, and what a person has to decide

A care plan records decisions made with a person about their own life, and CQC Regulation 9 requires the assessment behind it to be carried out collaboratively with them. The decision cannot be handed to a system. The bookkeeping that surrounds the plan can be watched by one, and usually is not watched by anybody.

Last checked 20 September 2026

What Regulation 9 actually says #

Regulation 9 of the Health and Social Care Act 2008 regulations covers person-centred care, and its wording does most of the work on this page. Three requirements carry the weight.

  • Assess with the person

    The provider must carry out, collaboratively with the relevant person, an assessment of the needs and preferences for care and treatment.

  • Write a plan the staff can see

    A clear care or treatment plan, including agreed goals, must be developed and made available to all the staff providing the care.

  • Support them to decide

    The person must be supported to make, or participate in making, decisions relating to their care to the maximum extent possible.

CQC's guidance adds that assessments should be reviewed regularly and whenever needed, and that plans should include an agreed review date.

Read that as a specification and the boundary draws itself. The words "collaboratively" and "participate in making" describe something that happens between people. They cannot be satisfied by a document that was produced quickly and shown to somebody afterwards.

Capacity makes the requirement stronger, not weaker #

The temptation runs the other way, which is why it is worth stating plainly. Where somebody cannot make a decision for themselves, the Mental Capacity Act 2005 framework applies, and the Code of Practice published by the Office of the Public Guardian on 22 July 2013 and last updated on 14 October 2020 sets out how. Professionals and paid workers acting for people who lack capacity have a legal duty to have regard to it.

A best interests decision is a structured judgement made by a named person who can be asked to account for it. The structure is the safeguard. Nothing that removes the named person from that process makes it safer, and a service that let an assessment be produced without one would have removed exactly the thing an inspector, a family or a coroner would later look for.

Where the law on automated decisions bites #

UK GDPR adds a restriction on top of the care regulations. Where a decision is based solely on automated processing and produces a legal or similarly significant effect on a person, it is restricted unless a narrow condition applies.

Where such processing happens, four things follow.

  • People must be told it is happening
  • They must be able to make representations
  • They must be able to obtain human intervention
  • They must be able to contest the decision

A decision about the care somebody receives at home, how often, from whom and with what support, is about as significant as decisions about a person get.

Care records are also special category data, so the underlying processing needs a lawful basis and an Article 9 condition before any of this is reached. The same line is drawn on visit notes and care records, and it does not move here.

What is actually left, which is more than people expect #

Almost everything that surrounds a plan is bookkeeping, and bookkeeping in a care office is both substantial and badly served.

43%

Rota scheduling

Florence, survey of 222 NHS and social care managers, 4 October 2023

30%

Documentation and record keeping

Florence, survey of 222 NHS and social care managers, 4 October 2023

Those were the two biggest consumers of managers' time in Florence's survey, published on 4 October 2023, with documentation second behind rota scheduling. It is supplier run research with a self selecting sample, so treat it as an indication rather than a measurement. The direction matches what services describe.

Candidates

  • A plan whose agreed review date has passed. Decided by a date.
  • A plan that has not reached the staff delivering the care. Decided by distribution records.
  • Two versions of a plan in circulation. Decided by version numbers.
  • A change noted in a visit record but never carried into the plan. Decided by comparing two records, and it goes to a person as a flag to check.
  • A capacity or consent record that was never completed. Decided by a missing field.
  • A risk assessment referenced by a plan that does not exist. Decided by a broken reference.

Not candidates

  • What the plan should say. Decided by the person, their family and the assessment.
  • Whether a change in need means a change in care. Professional judgement.

The candidates have something in common: not one of them requires reading what the plan says about a person. They are questions about whether a record exists, whether it is current and whether it reached the people who need it.

Regulation 17 requires providers to securely maintain accurate, complete and detailed records for each person using the service, and "complete" is a property you can check without interpreting a single sentence of care.

On drafting #

Services often ask whether a plan can at least be drafted and then edited. That question is less useful than it sounds, for two reasons worth naming.

The first is that a fluent draft exerts pressure: it is easier to approve well written text than to rewrite it, and the collaboration Regulation 9 asks for is the first casualty of that.

The second is that the record has to show how the decision was reached, not just what it concluded, and a document that reads well says nothing about whether anybody was consulted.

So this page does not tell you that drafting is forbidden, because that is your judgement and your registration.

What to look at first #

Count the plans currently past their agreed review date, then count how many of those have had any change at all since they were written.

A service with a long first list and a short second one has a noticing problem rather than a care problem, and noticing is the thing that CQC evidence gathering keeps rediscovering. The free tools will put hours against your own counts without asking you for anything.

Questions people ask

Can a care plan be generated automatically?
No, and the regulation says why rather than leaving it to opinion. CQC Regulation 9 requires the assessment of needs and preferences to be carried out collaboratively with the person, and requires the service to support them to make or participate in making decisions about their care to the maximum extent possible. A plan produced for somebody rather than with them does not meet that, however good the prose is.
What about people who lack capacity?
The requirement gets stronger, not weaker. The Mental Capacity Act 2005 Code of Practice, published by the Office of the Public Guardian on 22 July 2013 and last updated on 14 October 2020, applies to professionals and paid workers acting for people who cannot make a decision for themselves, and they have a duty to have regard to it. A best interests decision is a structured judgement made by a person, and it is recorded as one.
Does UK GDPR have anything to say about this?
Yes. Where a decision is based solely on automated processing and has a legal or similarly significant effect on someone, it is restricted. The ICO is explicit that solely means there is no meaningful human involvement. A decision about the care a person receives is about as significant as decisions get.
So what is left that is worth looking at?
Everything around the plan rather than in it. Reviews whose date has passed, plans that exist in two versions, plans that have not reached the staff who deliver the care, changes recorded in a note but never carried into the plan, and consent or capacity records that were never completed. All of those are checks on dates and states.

Where these numbers come from

  1. CQC, Regulation 9: Person-centred care , read 20 September 2026 . Requires collaborative assessment of needs and preferences, a clear plan with agreed goals available to staff, an agreed review date, and support to participate in decisions
  2. CQC, Regulation 17: Good governance , read 19 September 2026 . Requires accurate, complete and detailed records for each person using the service
  3. Office of the Public Guardian, Mental Capacity Act Code of Practice , read 20 September 2026 . Published 22 July 2013, last updated 14 October 2020. Professionals and paid workers acting for people who lack capacity have a duty to have regard to it
  4. ICO, Automated decision-making and profiling , read 20 September 2026 . Solely automated means no meaningful human involvement. Safeguards include information, representations, human intervention and the right to contest
  5. Florence, Lives lost as care services drown in an admin epidemic , read 19 September 2026 . Survey of 222 NHS and social care managers, published 4 October 2023. Documentation and record keeping named by 30 per cent as the biggest consumer of time, behind rota scheduling at 43 per cent. Supplier run, self selecting sample

Last checked 20 September 2026.

Our workings are on the methodology page .

Free audit

A free audit for care providers

One call, walking through a normal week. You get the tracker of every repeated job ranked by hours, a map of the top five, and the number of hours a month they could give back. Yours to keep either way.

Care providers

Rotas, visit notes, compliance records and the hours spent on returns.

All of care providers

Read next