Symbolic representation of NHS accountability and medical governance with balanced scales and clinical documentation
Published on December 5, 2024

True accountability is not about blaming a single doctor; it is about methodically proving systemic failure within the NHS Trust itself.

  • Systemic issues like chronic staff shortages are governance failures, not just bad luck, and can be exposed through targeted information requests.
  • The hospital Trust, not just the individual clinician, often holds ultimate legal responsibility through a ‘non-delegable duty of care’.

Recommendation: Do not just complain; build a case. Use the NHS’s own procedural rules—such as the Freedom of Information Act and Subject Access Requests—as leverage to force transparency and action.

When treatment within the National Health Service goes wrong, the immediate aftermath for a patient or their family is one of confusion, distress, and a profound sense of powerlessness. The official response can feel like a wall of medical jargon, vague apologies, and bureaucratic inertia. You are often advised to ‘contact PALS’ or ‘make a formal complaint’, but this advice rarely prepares you for the institutional dynamics at play. You are led to believe that accountability is about finding a single person to blame—a ‘bad apple’ surgeon or a negligent nurse.

But what if this entire framework is misleading? As a clinical risk manager, my role is to view adverse events not as isolated incidents, but as data points indicating potential failures in a system. From this perspective, true accountability is not found by simply appealing to the system for justice, but by methodically using its own rules, procedures, and legal obligations to expose its failures. This is not about emotion; it is about procedure. It is about shifting your position from a passive victim to an empowered investigator who understands the levers of institutional responsibility.

This guide will provide you with a procedural toolkit to navigate the complex web of NHS accountability. We will dissect why systemic issues are more significant than individual errors, how to prepare for interactions with hospital representatives, who is legally and financially responsible for mistakes, and how to use documentation protocols to build an undeniable case. By understanding the system’s mechanics, you can begin to hold it accountable.

This article will guide you through the critical procedural steps and governance structures that determine where responsibility truly lies. Below is a summary of the key areas we will dissect to empower your search for accountability.

Why Staff Shortages Are a Governance Failure, Not Just Bad Luck?

When an error occurs, it is tempting for a Trust to attribute it to overworked staff or an unfortunate, isolated incident. This is a deflection. Persistent staff shortages are not ‘bad luck’; they are a predictable, manageable risk and therefore represent a failure of governance and strategic workforce planning. The Trust Board has a duty to ensure safe staffing levels. When it consistently fails to do so, opting instead for expensive temporary solutions, it is making a conscious financial and operational decision that increases patient risk.

The scale of this mismanagement is often staggering. For instance, internal NHS England figures project a spend of £8.3 billion on temporary staffing in 2024/25 alone. This is not the sign of a healthy system; it is evidence of a failure to invest in a sustainable, permanent workforce, which is a core tenet of good governance. Proving this requires moving beyond your individual case and investigating the Trust’s operational and financial decisions. The Freedom of Information Act 2000 is your most powerful tool here.

To demonstrate a link between your adverse event and a systemic governance failure, you can submit strategic Freedom of Information (FOI) requests to the Trust. This transforms your complaint from a single incident into evidence of a pattern.

  1. Request ‘Trust spending on agency staff versus budget allocated for permanent recruitment over the last three financial years’ to demonstrate misallocation of resources.
  2. Request ‘Minutes from Trust Board meetings where staffing levels and workforce planning were discussed in the last 24 months’ to identify whether the Board was adequately informed of risks.
  3. Request ‘All Risk Register entries related to staffing shortages, including escalation dates and mitigation strategies proposed’ to assess whether governance protocols were followed.
  4. Request ‘Copies of all reports submitted to the Trust’s Non-Executive Directors regarding safe staffing levels and compliance with CQC Well-Led framework in the last 18 months’ to determine if Non-Execs fulfilled their challenge function.
  5. Submit requests to your specific NHS Trust via their FOI email address, clearly stating each question and citing the Freedom of Information Act 2000.

By using these targeted questions, you force the Trust to provide evidence of its own decision-making processes, which can be crucial in establishing that the conditions for your poor outcome were created long before you entered the hospital.

How to Prepare for a Meeting with the Hospital PALS Team?

The Patient Advice and Liaison Service (PALS) is often presented as a neutral and helpful friend to the patient. While individual PALS officers may be well-intentioned, it is critical to understand their structural role: they are employees of the Trust. Their primary function is to resolve issues at a low level to prevent them from escalating into formal complaints, which have legal and financial implications for the hospital. Your meeting with PALS is not an informal chat; it is the first point of formal contact with the institution’s risk management process. You must treat it as such.

Your objective in this meeting is not to vent your frustrations, but to establish a formal, auditable record of your concerns and the Trust’s initial response. Every verbal promise or assurance is meaningless unless it is documented. You must take control of the documentation process from the very beginning. Before the meeting, prepare a written, chronological summary of events with dates, times, and names. During the meeting, take your own notes. Afterwards, send a follow-up email summarising the discussion and any agreed actions. This creates a paper trail that the Trust cannot easily dispute.

To ensure your concerns are taken seriously and not lost in informal “enquiries,” you must ask specific, procedural questions that trigger formal obligations. The following questions are designed to close common loopholes and force the PALS officer to engage with the formal NHS complaints and candour framework.

  1. ‘Can you confirm whether this concern is being logged as a formal complaint under the NHS Complaints Regulations 2009, or is it being recorded as an informal PALS enquiry?’ – This clarifies the legal status and audit trail.
  2. ‘What is the exact reference number for this case, and can I have written confirmation of that reference number today?’ – Ensures the issue is formally documented in the Trust’s system.
  3. ‘Under the statutory Duty of Candour (Regulation 20), has an internal incident investigation been initiated, and if so, when will I be notified of the findings?’ – Triggers a legal obligation for transparency.
  4. ‘Can you provide me with written confirmation of the key points we have discussed today, including any commitments made by the Trust and the agreed next steps, within 5 working days?’ – Creates an auditable record of promises.
  5. ‘If I am not satisfied with this process, what is the formal escalation pathway, and can you provide me with the contact details for the Trust’s Chief Executive and Medical Director?’ – Prepares for escalation.

By asking these questions, you shift the dynamic from a passive plea for help to an active assertion of your right to a transparent and formal process, laying the groundwork for all subsequent steps.

How to Check If Your Surgery Procedure Is Approved by British Standards?

Before any treatment begins, one of the most powerful steps you can take is to verify that the proposed procedure aligns with established national standards. In the UK, this means checking against guidelines published by the National Institute for Health and Care Excellence (NICE) and the relevant Royal College of Surgeons. A surgeon suggesting a novel or non-standard technique without a compelling, documented reason is a significant red flag. It is your right to understand not only the procedure itself but also its standing within the wider medical community.

Furthermore, the legal landscape of consent has shifted significantly. The 2015 Supreme Court ruling in Montgomery v Lanarkshire Health Board established a new standard. It is no longer sufficient for a doctor to warn of risks they deem significant; they have a legal duty to inform you of all “material risks” that a reasonable person in your position would want to know. This includes discussing all reasonable alternative treatments, even those they do not personally favour or offer. This principle of “Montgomery Consent” empowers you to make a fully informed choice, not just to consent to the surgeon’s preferred option.

To ensure you are receiving care that is both standardised and transparent, you must proactively audit the information provided by your surgeon. This pre-consultation audit is a critical step in managing your own clinical risk.

Your pre-consultation checklist for verifying surgical standards

  1. Check 1: Ask your surgeon: ‘Is this surgical approach outlined in a current NICE (National Institute for Health and Care Excellence) Technology Appraisal or Clinical Guideline? If so, which reference number?’ – This verifies national standard approval.
  2. Check 2: Request: ‘Can you provide me with a copy of the Royal College of Surgeons’ patient information guide for this specific procedure?’ – This confirms professional body endorsement and gives you independent patient-focused information.
  3. Check 3: Ask: ‘What are the published success rates and revision rates for this specific procedure at this hospital over the last three years?’ – This reveals hospital-specific performance data beyond general statistics.
  4. Check 4: Invoke Montgomery Consent by asking: ‘Under the legal principle of Montgomery Consent, can you outline all material risks associated with this procedure that a reasonable person in my position would want to know, and all reasonable alternative treatment options available to me?’ – This shifts the conversation from surgeon preference to patient-informed choice.
  5. Check 5: Request: ‘Can I have access to the hospital’s local clinical protocol for this procedure, which should detail how NICE guidelines are implemented in practice at this Trust?’ – This reveals any gaps between national standards and local implementation.

Asking these questions does not imply distrust; it demonstrates that you are an engaged and informed partner in your own healthcare, a status that the law now fully supports and expects.

Surgeon vs Hospital Trust: Who Pays for Surgical Errors?

When a surgical error occurs, a common misconception is that the individual surgeon is solely responsible. While the surgeon has a professional and ethical duty of care, the legal and financial accountability structure is more complex. In the vast majority of cases within the NHS, it is the Hospital Trust that is held legally responsible for the actions of its employees, a principle known as “vicarious liability”. The NHS operates a clinical negligence scheme administered by NHS Resolution, which handles claims on behalf of all Trusts. The sheer scale of this is immense, with NHS Resolution’s annual report showing it spent £2.6 billion settling clinical negligence claims in 2023/24.

This institutional liability is rooted in a deeper legal concept: the “non-delegable duty of care”. A hospital has a direct duty to its patients to ensure that care is provided safely. It cannot delegate this fundamental duty to the individual doctors or nurses on its wards, even if they are temporary or agency staff. This means the hospital is responsible for the entire system of care—ensuring there are proper procedures, adequate supervision, safe equipment, and a competent workforce. When an error occurs, it is often a failure of this system, not just the mistake of one person.

Academic Insight: The ‘Non-Delegable Duty of Care’

Academic research published in the Journal of Professional Negligence explores systemic negligence claims against NHS Trusts. It highlights that the legal concept of a ‘non-delegable duty of care’ is crucial for holding hospitals accountable for the overall safety of care on their premises. This applies even when errors are made by independent contractors like locum surgeons. The research concludes that focusing only on individual clinician fault, without examining the systemic deficiencies that allowed the error to happen, fundamentally undermines patient safety and true accountability.

Understanding this is crucial for your strategy. Your complaint and any subsequent legal action should focus on the Trust’s failure to provide a safe system of care. This is a more robust and often easier-to-prove claim than trying to isolate the fault of a single clinician. It re-frames the incident from an individual mistake to an organisational failure.

This approach not only strengthens your position but also encourages the hospital to address the root causes of the problem, leading to genuine improvements in patient safety for everyone.

How to Report a Doctor Who Ignores Clinical Protocols?

Witnessing a doctor deviate from established clinical protocols or NICE guidelines can be alarming. It is essential to address this not as a personal disagreement, but as a formal governance and patient safety issue. A single doctor acting outside of agreed-upon standards can pose a risk to many patients. Reporting them is not about retribution; it is about upholding the standards of care for all. However, this must be done through the correct channels to be effective. A vague complaint is easily dismissed; a procedural one is not.

The key is to follow a structured, internal escalation ladder within the Trust before considering external bodies. This demonstrates that you have acted reasonably and given the organisation a chance to correct itself. It is also important to contextualise the situation. While never an excuse for poor care, systemic pressures can lead to corner-cutting. The 2024 NHS staff survey revealed that 42.19% of medical and dental staff experience work-related stress. Your report should focus on the objective deviation from protocol, but understanding the context can help frame why strong governance is essential to support staff and prevent such deviations.

At every stage of this process, documentation is your greatest asset. Keep copies of all correspondence, record dates and times of conversations, and always request written confirmation of any verbal commitments made by hospital managers. This creates an evidence base that cannot be ignored.

  1. Level 1 (First Escalation): Report the protocol deviation in writing to the doctor’s Clinical Lead or Head of Department. Frame it as a safety concern: “I am writing to raise a concern regarding a deviation from [specific protocol/NICE guideline]… I believe this may represent a patient safety risk and request a formal review under the Trust’s clinical governance procedures.”
  2. Level 2 (If Unresponsive): Escalate to the Trust’s Medical Director, who has overarching responsibility for all medical staff. Use language that triggers statutory obligations: “As Medical Director, you have responsibility under CQC regulations for ensuring clinical standards. I request confirmation of what action will be taken.”
  3. Level 3 (Parallel Track for Data Issues): If the breach involves patient confidentiality, also report to the Trust’s Caldicott Guardian, who has specific legal responsibilities for information governance.
  4. Level 4 (GMC as Final Resort): Only escalate to the General Medical Council (GMC) if there is a pattern of serious misconduct demonstrating the doctor is unfit to practise. The GMC’s threshold is very high; single protocol deviations rarely meet it.

By following this methodical ladder, you ensure your concern is handled at the appropriate level of seniority and that you have a clear audit trail if the initial responses are inadequate.

The Documentation Error That Allows Hospitals to Hide Mistakes

In any investigation, information is power. Within a hospital setting, there is a fundamental information asymmetry: the Trust creates and holds all the official records. While you have a right to your medical records, this often only includes the final, sanitised clinical notes. The most crucial information about what went wrong is frequently held in separate systems—incident reports (like Datix), internal investigations, Root Cause Analysis (RCA) reports, and email correspondence between staff. Hospitals often rely on patients making a simple request for “my medical records,” which allows them to legally withhold this more sensitive and revealing documentation.

This is the most common documentation error made by patients and their families—not understanding the full scope of data they are entitled to. To overcome this, you must use a more sophisticated and specific approach to information requests. Under UK GDPR (Article 15) and the Data Protection Act 2018, you have the right to access all personal data an organisation holds about you, not just what they choose to define as your “medical record”.

As this image suggests, crucial information often lies buried beneath layers of official procedure. Your task is to use the correct legal tools to peel back these layers. An advanced Subject Access Request (SAR) is designed to do exactly that, forcing the Trust to search beyond the main clinical file. Furthermore, you must create your own contemporaneous paper trail to document conversations and agreements that might otherwise never be recorded.

  1. Step 1 (Advanced SAR): Submit a Subject Access Request, but use this exact wording: ‘I request all data pertaining to me, including but not limited to: all clinical records, all incident reports (e.g., Datix), all Root Cause Analysis (RCA) reports, all Serious Incident (SI) investigation files, and all internal correspondence (emails, memos) concerning my care.’
  2. Step 2 (Challenge Redactions): If the Trust refuses disclosure, challenge them by requesting under FOI their internal policy on SAR redactions and ask them to cite the specific legal exemption they are using.
  3. Step 3 (Create Your Own Trail): After every verbal conversation, send a follow-up email: ‘To confirm our discussion today… my understanding is that [summary]. Please confirm or correct this understanding within 48 hours.’ This forces documentation.
  4. Step 4 (Expose Missing Documents): If the Trust claims documents ‘do not exist’ (e.g., meeting minutes), submit an FOI request asking: ‘Does the Trust have a policy requiring minutes to be taken at clinical governance meetings? If so, please provide it.’

By employing this multi-pronged documentation strategy, you challenge the hospital’s information monopoly and build a comprehensive evidence base that they cannot easily dismiss or conceal.

How to Check If Your Private Surgeon Follows GMC Guidelines?

When seeking treatment in the private sector, the accountability landscape changes. While you may not be dealing with a large NHS Trust, a complex ecosystem of regulation still governs the quality and safety of your care. It is a mistake to assume that a high price tag or a prestigious address on Harley Street guarantees compliance. As a patient, you must conduct your own due diligence on both the individual surgeon and the facility where the treatment will be performed.

The system is designed with several layers of oversight. The General Medical Council (GMC) regulates individual doctors, ensuring their fitness to practise. The Care Quality Commission (CQC) inspects and rates the hospitals and clinics themselves. The Independent Sector Complaints Adjudication Service (ISCAS) acts as an ombudsman if a complaint is not resolved. Finally, the private hospital has its own internal governance for granting “practising privileges” to surgeons. Your safety depends on understanding how these pieces fit together.

The table below breaks down this accountability ecosystem, providing you with a clear map of who regulates what and how you can verify compliance before committing to a procedure. It is your primary tool for auditing a private healthcare provider.

The UK’s Private Healthcare Accountability Ecosystem
Regulatory Body What They Regulate How to Check Compliance How to Raise Concerns
GMC (General Medical Council) Individual doctors’ fitness to practise, professional conduct, and adherence to GMC ethical guidelines Check the GMC register at gmc-uk.org for registration status, specialties, and any warnings, undertakings, or conditions attached to registration Report serious professional misconduct via GMC website; threshold is pattern of behavior demonstrating unfitness to practise
CQC (Care Quality Commission) Private hospitals, clinics, and facilities where treatment is provided; assesses safety, effectiveness, and leadership Check CQC inspection reports for the specific private hospital/clinic at cqc.org.uk; look for ratings on Safe, Effective, Caring, Responsive, and Well-Led Report concerns about facility standards, infection control, or inadequate equipment via CQC website
ISCAS (Independent Sector Complaints Adjudication Service) Acts as ombudsman for complaints about private healthcare providers; focuses on service quality and complaint handling Not applicable for proactive checking; used for complaint resolution after exhausting provider’s internal complaints process Submit complaint to ISCAS after completing the private hospital’s own complaints procedure; free and independent service
Private Hospital’s Own Governance Internal quality assurance, consultant credentialing, and practising privileges oversight Ask the hospital: ‘What credentialing process did you use to grant practising privileges to this surgeon? Can I see evidence of their indemnity insurance coverage?’ Use the hospital’s formal complaints procedure first; escalate to ISCAS if unresolved

Navigating this separate regulatory environment requires a specific approach. Take a moment to re-examine the accountability structure of private healthcare.

By proactively checking the GMC register for warnings, reading the CQC report for the facility, and asking direct questions about credentialing and fees, you move from being a consumer to a diligent auditor of your own care.

Key takeaways

  • Systemic failure, not just individual error, is the key to establishing accountability. Focus on the Trust’s governance, not just the clinician’s action.
  • The NHS Trust holds the ultimate legal responsibility through its ‘non-delegable duty of care’, making it the primary target for any formal complaint or claim.
  • Leverage procedural tools like Freedom of Information requests, advanced Subject Access Requests, and formal complaints procedures to create an undeniable evidence trail.

How Patient Feedback Actually Changes Hospital Policies?

After navigating the labyrinth of complaints, investigations, and legal principles, it is easy to become cynical and wonder if your efforts will make any difference. Does patient feedback actually lead to systemic change, or does it vanish into a bureaucratic void? The answer is that change is possible, but it is rarely the result of a single, emotional complaint. Real change happens when a well-documented, procedurally sound case exposes a clear failure in a hospital’s systems or processes.

The NHS has a formal structure for handling complaints for a reason. According to NHS complaints procedure standards, formal complaints must be acknowledged within 3 working days, and a full investigation must follow. The findings from these investigations, especially those linked to Serious Incidents (SIs) or “never events”, are fed into the Trust’s clinical governance committees. It is here that policies are reviewed, protocols are updated, and training is mandated. Your meticulously constructed case, built using the tools in this guide, becomes an undeniable data point that these committees cannot ignore.

Your feedback does not have to be adversarial to be effective. By framing your experience in the language of risk management and process improvement, you provide the hospital with a blueprint for how to prevent the same mistake from happening to someone else. You are highlighting a vulnerability in their system that, as a risk-conscious organisation, they are obligated to address. While your journey may have started with a personal tragedy, its conclusion can be a contribution to the safety of countless future patients.

Understanding these mechanisms is the first step. The next is to apply them. Begin by systematically documenting your case, preparing your first formal procedural inquiry, and transforming your experience into a catalyst for tangible, lasting change.

Written by Alistair Drummond, Alistair Drummond is an independent Healthcare Navigation Consultant and former NHS Clinical Commissioning Group (CCG) manager with 16 years of experience in healthcare funding and patient advocacy. He holds a Master's in Health Services Management from the University of Birmingham and is a certified member of the Institute of Healthcare Management. He now advises individuals and families on NHS entitlements, insurance claims, and optimising their care pathways across public and private systems.