The chief executive of the Care Quality Commission is to become the sole decision-maker on whether whistleblowers lose the legal anonymity currently guaranteed to them under safe space protections, a change that has drawn criticism from a former health minister who has described the arrangement as an inherent conflict of interest.
Safe space protections were established under the Health and Care Act 2022 to cover investigations carried out by the Health Services Safety Investigations Body. They prevent the disclosure of evidence, statements and other material gathered during an inquiry into a patient safety incident, with narrow exceptions where there is evidence of a criminal offence or an ongoing risk to the public. The purpose was to give NHS staff enough confidence to speak candidly about failures in care without fear that their words would resurface in a negligence claim, a disciplinary hearing or a coroner's court. Until now, the decision to lift that protection has rested with HSSIB's chief investigator, a role kept deliberately separate from any body with powers of enforcement.
That separation is what is changing. Under the government's 10 Year Health Plan for England, the National Guardian's Office is being abolished and elements of HSSIB's investigatory remit are being folded into the CQC. As part of that consolidation, authority over safe space disclosure will transfer to the CQC's chief executive. Critics argue that this creates a structural problem which the original legislation was designed to avoid. The CQC is not a neutral fact finder in the way HSSIB was built to be. It is the body responsible for inspecting providers, issuing ratings, prosecuting breaches of care standards and managing the public and political fallout when something goes badly wrong. Giving its most senior officer the power to strip anonymity from the same whistleblowers whose evidence may implicate providers under CQC's own oversight blurs a line that safe space was meant to keep firm.
The practical risk is straightforward. Staff who might otherwise come forward with sensitive information about unsafe practice may calculate that the person deciding whether their identity stays protected has an institutional interest in how that information is used, whether for enforcement, public reassurance or managing reputational exposure. Whistleblowing has been central to almost every major patient safety scandal of the past two decades, from Mid Staffordshire to the maternity failures at Nottingham, Blackpool and Leeds. Each of those episodes exposed how slow the system was to listen to internal warnings and how much depended on individuals being willing to speak despite the professional cost. A mechanism perceived to weaken that willingness, even by increments, carries consequences well beyond the immediate governance question.
The timing compounds the difficulty. Hartley was brought in to rebuild an organisation whose own inspection regime had been found wanting, following the Dash review's findings on failures in CQC's assessment processes. Adding a contested new power to an executive still working to restore confidence in the regulator's basic functions is unlikely to ease that task. It also lands amid a wider reorganisation of the arm's length body landscape, in which functions are being reallocated between DHSC, NHS England's successor arrangements and the CQC with limited public scrutiny of the trade-offs involved.
Ministers will need to explain why the safeguard built into HSSIB's design, keeping disclosure decisions away from any body with enforcement powers, does not apply once those investigatory functions move to the CQC. Without a clear answer, the change risks being read not as administrative tidying but as a quiet narrowing of protection for the very staff the NHS has spent years trying to persuade to speak up.
