The Reliance

Friday 16 October 2026 UK Edition

Dental Practice Compliance: the complete UK guide

Compliance is the price of running a regulated healthcare business — and for a dental practice it is unusually broad, unusually specific, and never finished. This guide maps what “dental compliance” actually means for a UK practice: who regulates you, what each body expects, and how to hold it all together as a maintained system rather than an annual scramble. It is written for principals, practice owners and practice managers who want the whole map in one place.

What is dental compliance?

“Dental compliance” is the shorthand for everything a dental practice must do to meet its legal and regulatory obligations — and to be able to prove it has. It is not one rulebook. It is the overlap of several separate regimes that each govern a different part of the business: the professionals who work there, the premises and the service, the way patients’ information is handled, the safe use of equipment and materials, and the way the practice markets itself and handles complaints.

What makes dental compliance distinctive is that so many of these obligations are continuous and evidenced. It is rarely enough to do the right thing; you generally have to hold the policy, the training record, the audit, the risk assessment or the log that demonstrates you did. That evidence burden is why compliance behaves less like a task and more like a system — one that has to keep running whether or not anyone is inspecting this year.

The rest of this guide breaks that map into its parts. Most practices find it useful to think in terms of the bodies that regulate them, because each one owns a distinct slice of the obligation.

Who regulates a UK dental practice?

Two regulators sit at the centre of dental compliance, and they do different jobs — a distinction that trips up a surprising number of owners:

  • The General Dental Council (GDC) regulates the people. It registers dental professionals across the whole UK, sets the standards they must work to, and can take action against a registrant’s ability to practise.
  • The care regulator regulates the service and the premises. In England this is the Care Quality Commission (CQC); the other three nations have their own equivalents (see the four-nations note below).

Around those two sit a series of other regimes that apply to the practice as a business: data protection (overseen by the Information Commissioner’s Office), advertising rules (the ASA/CAP codes), health and safety and waste law, radiation regulations, employment law, and the NHS contract where the practice holds one. None of these is optional, and no single body checks all of them — which is exactly why compliance has to be owned internally rather than left to whoever inspects next.

WHO COVERS WHAT
Every regulator covers part of a dental practice. The only thing covering all of it is you.
Which body regulates which part of a UK dental practice, and why none of them covers all of itA coverage chart. Across the top, a practice’s obligations are divided into seven equal territory segments: the people; the service and premises; patient information; equipment and waste; marketing; employment; and NHS commitments. The segments are drawn equal width because they are categories, not measured quantities. Below, each regime is drawn as a bracket spanning only the territory it owns, so no bracket spans the full width. The General Dental Council covers the people — registration, indemnity, standards, CPD and scope of practice — and also holds a second, lighter bracket over marketing, tied back by a dashed line, because GDC expectations constrain how treatments and clinicians are presented. The care regulator covers the service and the premises: the CQC in England, with the other three nations having their own equivalents. The Information Commissioner’s Office covers patient information and data protection. Health and safety and waste law covers equipment and waste, including HTM 07-01 for clinical waste and the amalgam separator. Radiation regulations, IRR 2017 and IR(ME)R 2017, form a second regime over that same territory. The ASA and CAP codes cover marketing, overlapping with the GDC, which is why that column has two owners. Employment law covers employment, including contracts, working practices and the associate status question. An NHS contract covers NHS commitments where the practice holds one, being commissioner terms rather than a regulator’s rules. At the foot, marked in gold and the only mark spanning the entire width, is the owner: no single body checks all of it, so compliance has to be owned internally rather than left to whoever inspects next.Not one rulebook. Several separate regimes over one practice.Each bracket covers only the territory that regime owns.THE PEOPLESERVICE &PREMISESPATIENTDATAEQUIPMENT& WASTEMARKETINGEMPLOYMENTNHSCONTRACTGeneral Dental CouncilThe care regulator CQC in EnglandInformation Commissioner’s OfficeHealth and safety, and waste lawRadiation regulationsThe ASA and CAP codesEmployment lawYour NHS contract where you hold oneYou— the only span that covers the whole practice.
The seven territories are drawn equal width because they are categories, not measured quantities — the figure says nothing about which carries the greater burden. Every mapping shown is one this guide states. Two territories carry two regimes apiece: equipment and waste, and marketing, where the GDC and the advertising codes overlap.Source: compiled by The Reliance from the regimes set out in this guide. The care regulator differs by UK nation — the CQC covers England only.

The GDC: regulating the professionals

The GDC’s remit is the registered individuals — dentists and the dental care professionals (dental nurses, hygienists, therapists, dental technicians, clinical dental technicians and orthodontic therapists), each with a defined scope of practice. For an owner, the GDC touches the practice in several concrete ways:

  • Registration and indemnity. Everyone providing dental care must be GDC-registered and must hold appropriate indemnity or insurance — a professional requirement, not merely a good idea.
  • Standards and CPD. The GDC sets the standards the whole team works to and requires registrants to keep up their continuing professional development. The practice is where much of that is evidenced. Our guide to GDC CPD requirements sets out the verifiable hours for each registrant title and the renewal deadlines that go with them.
  • Advertising and how you present the practice. GDC expectations constrain how treatments and clinicians can be marketed to the public — an area where the GDC and the advertising codes overlap, and where enforcement is real.

The GDC fitness-to-practise process

When a concern is raised about a registrant, the GDC runs a fitness-to-practise process to decide whether that person’s ability to practise is impaired. In broad terms it moves through an initial assessment and investigation, a decision on whether there is a case to answer, and — where the concern is serious enough — a hearing before a practice committee that can impose sanctions ranging from a warning up to removal from the register. Interim orders can restrict a registrant’s practice while a case is ongoing.

For a practice owner the practical takeaways are simple: keep good records, take complaints and concerns seriously and early, support registrants through any process fairly, and understand that the GDC’s job is public protection, not punishment for its own sake. We explain the process stage by stage in our guide to the GDC fitness-to-practise process, and set out what the outcomes actually are — of every 100 concerns, only 12 reach a hearing — in dental regulation by the numbers.

The CQC: registering and inspecting the practice (England)

In England, a dental practice providing regulated activities must be registered with the CQC before it operates, and it must continue to meet the CQC’s fundamental standards thereafter. Registration is not a one-off form; it establishes named accountable roles and an ongoing duty to run a safe, effective, caring, responsive and well-led service.

Registration and the accountable roles

CQC registration introduces roles that owners must get right from the outset: the registered provider (the legal entity), a registered manager for the regulated activity, and — where the provider is an organisation — a nominated individual. These are specific regulated roles with defined responsibilities, and they are distinct from your day-to-day practice manager, who may or may not be the same person. Getting the registration right when you open, buy, relocate or restructure a practice is one of the highest-stakes compliance tasks an owner faces, because operating a regulated activity without correct registration is a serious matter.

Preparing for a CQC inspection

The CQC assesses practices against its standards and can inspect. Owners tend to experience compliance most acutely around inspection, but the healthiest position is that an inspection changes nothing about how the practice already runs. Inspectors are, broadly, looking for evidence that the practice is safe and well-led: that risks are assessed and managed, that staff are recruited and trained properly, that infection control is maintained, that medicines and emergency provision are in order, that patient records and consent are sound, and that the practice learns from complaints and incidents. The evidence — policies, audits, training logs, risk assessments — is the point; being good in practice but unable to show it is a common and avoidable failing.

The CQC now assesses providers under its single assessment framework, which replaced the older key lines of enquiry. It keeps the same five key questions — is the service safe, effective, caring, responsive and well-led — but expresses expectations as a set of quality statements, a subset of which apply to dental practices, each judged as met or not met against the evidence. The framework’s language matters less than the underlying discipline: have the evidence, keep it current, and be able to show it. See our dedicated guide to CQC compliance for dental practices for registration, the assessment framework and a practical inspection checklist.

Infection prevention, decontamination and clinical waste

Infection prevention and control (IPC) is one of the most heavily specified areas of dental compliance, because it is where patient safety is most directly at stake. Two areas dominate:

  • Decontamination of instruments — the cleaning, disinfection, sterilisation and storage of reusable instruments, and the validation and record-keeping around the equipment that does it. In England this is set out in the dental decontamination memorandum HTM 01-05, “Decontamination in primary care dental practices”; the other nations have their own equivalent decontamination guidance, so confirm which applies where you practise.
  • Clinical and healthcare waste — the correct segregation, storage, documentation and disposal of clinical waste, sharps, and specific waste streams such as amalgam. Healthcare waste management is covered by HTM 07-01, “Safe management of healthcare waste”, and mercury-containing amalgam waste carries its own handling and separation requirements (including amalgam separators on the practice’s waste water).

Both are areas where routine, evidenced practice — logs, validation records, waste transfer documentation — is exactly what a care regulator expects to see. Our guide to HTM 07-01 and dental waste management covers the waste streams, segregation and consignment-note record-keeping in detail.

Radiation, health and safety, and materials

A dental practice is also a workplace and a place where ionising radiation and hazardous substances are used, which brings a further layer of obligation that owners are personally responsible for:

  • Radiation. Dental radiography is regulated by two sets of rules working together: the Ionising Radiations Regulations 2017, which protect staff and the public, and the Ionising Radiation (Medical Exposure) Regulations 2017, which protect patients. Between them they require appointed advisers, written procedures, equipment quality assurance and staff training.
  • Health and safety. General health-and-safety law applies as it does to any employer — risk assessments, control of hazardous substances (COSHH), reporting of specified incidents, and safe systems of work.
  • Mercury and dental amalgam. This is a live, and genuinely divergent, four-nations issue. The EU banned dental amalgam from the start of 2025 under its revised mercury rules; Great Britain (England, Scotland and Wales) is not bound by that ban and amalgam remains permitted there for now. Northern Ireland, which follows EU mercury rules under the Windsor Framework, is different: since the start of 2025 its use has been restricted (broadly, to patients resident in the UK), with a full phase-out due by the end of 2034 under a ten-year derogation. Any practice using amalgam should confirm the current position for its nation, and all practices must handle amalgam waste under the mercury-waste rules regardless. We explain the full four-nations position in are amalgam fillings banned in the UK?

Information governance and data protection

Every patient record a practice holds is special-category personal data, which places dental practices squarely inside data-protection law. The obligations include registering with (and paying the data-protection fee to) the Information Commissioner’s Office, holding a lawful basis for processing, keeping records securely, retaining and disposing of them appropriately, honouring patients’ rights over their data, and being able to respond to a personal-data breach. Information governance is unglamorous and easy to defer, but it is inspected, it is enforceable, and — because it touches every record and every device in the building — it rewards being run as a maintained system with a named owner.

Handling complaints

Every practice must have a working complaints procedure, and handling complaints well is both a compliance requirement and one of the best sources of learning a practice has. The important structural point is that the route depends on how the patient was treated:

  • NHS complaints follow the statutory NHS complaints procedure, with an escalation route beyond the practice.
  • Private complaints that cannot be resolved at the practice can be taken to the Dental Complaints Service, which handles private dental complaints.

A practice that treats both NHS and private patients needs to handle both routes correctly. We cover getting complaints handling right — and why it protects the practice as much as the patient — in our guide to handling private dental complaints.

Advertising and how you present the practice

How a practice markets itself is a compliance matter, not just a marketing one. GDC standards and the ASA/CAP advertising codes together constrain what you can claim about treatments and clinicians, how you use terms and titles, and how you present before-and-after or promotional material. This is a live enforcement area, particularly around cosmetic and implant treatment claims. Our Regulation & Compliance section tracks changes and rulings as they happen, and our Marketing & Growth section covers how to promote a practice compliantly.

Your compliance calendar: making it a system

The single most useful shift an owner can make is to stop treating compliance as a series of events and start treating it as a calendar of recurring obligations with named owners. Much of dental compliance is cyclical — policies to review, audits to run (infection control, radiography, record-keeping), equipment to validate and service, training and CPD to keep current, risk assessments to refresh, registrations and fees to renew, and reviews of complaints and incidents. Written down as a schedule and assigned to people, the burden becomes predictable and inspection stops being a scramble. Our guide to the dental practice compliance calendar sets out the recurring obligations and sensible review intervals.

A note on the four UK nations

“UK dental compliance” is a slight fiction, and getting it wrong is a common and costly error. The GDC regulates professionals across the whole UK, but the care regulator differs by nation: the CQC covers England only, with Healthcare Improvement Scotland, Healthcare Inspectorate Wales and the RQIA in Northern Ireland performing analogous roles under their own rules. NHS arrangements, and some of the specific guidance underpinning areas like decontamination, also differ across the nations. Wherever this guide describes an obligation, confirm the specifics for the nation you practise in — the principle usually carries across, but the detail, the named body and the document often do not.

Where to start

If you are trying to get a grip on compliance — whether you are opening, buying, or simply tightening up an existing practice — do not try to boil the ocean. A sensible order for most owners:

  1. Get the registrations right. Confirm your care-regulator registration and accountable roles are correct and current for your situation, and that everyone clinical is GDC-registered and indemnified. These are the obligations with the highest stakes if they are wrong.
  2. Secure patient safety essentials. Infection control and decontamination, medical-emergency provision, radiation procedures, and safeguarding — the areas where a gap is a genuine risk to patients, not just a paperwork failing.
  3. Build the evidence layer. Make sure the policies, audits, training logs and risk assessments that demonstrate compliance actually exist and are kept up — being good but unable to prove it is a common failing.
  4. Turn it into a calendar. Convert the recurring obligations into a scheduled system with named owners, so compliance maintains itself instead of surging before an inspection.

We will link the individual guides and news pieces for each of these areas from this page as they are published, so it becomes a living map of dental practice compliance in the UK.

This guide is produced by The Reliance and reviewed by David Hinckley, a GDC-registered Clinical Dental Technician (GDC No. 150038). It is general information for those running dental practices, not legal, regulatory, financial or clinical advice; regulation differs across the four UK nations and changes over time, so confirm the specifics for your nation and circumstances and take professional advice where it matters. See our Editorial Standards.