Safety, candour, complaints and speaking up

Why this matters

The first hour after a serious concern has several purposes. Patients and staff may need immediate protection. Facts and records may need preservation. People affected may need honest communication and support. The organisation may need to decide which clinical, employment, safeguarding, complaints or speaking-up process applies. Acting quickly does not require reaching a premature verdict.

Leaders damage trust when they treat a concern mainly as a threat to reputation. They also create unfairness when every report is assumed to prove wrongdoing. A safe response protects people, separates processes, uses evidence and returns with learning.

The first hour has more than one purpose

Begin with immediate clinical or personal safety. Arrange care, senior review, staffing change, safeguarding action or temporary controls as required. Preserve relevant records and identify who will coordinate the response. Avoid altering documentation or asking people to produce a shared account before individual recollections are secured.

Support matters too. Patients, families and staff may need a named contact and an explanation of what is known. People directly involved may be distressed. Support should not depend on a conclusion about blame, and it should not interfere with a fair review.

Do not collapse different processes

An incident review asks what happened and how safety can improve. A complaint responds to a person's experience and concerns. Duty of candour has defined professional and organisational requirements. A conduct or capability process examines an individual's practice through a fair employment or regulatory route. Speaking-up arrangements provide channels and protection for concerns. These processes may interact but are not substitutes for one another.

At the outset, record which questions each route is expected to answer and who owns it. Sharing relevant information may be necessary, but a complaint response should not silently become a disciplinary finding, and an incident review should not be designed primarily to prove an individual's fault.

Candour is more than a carefully drafted letter

Candour requires timely, honest and compassionate communication when things go wrong. Explain what is known, apologise appropriately, describe what will happen next and provide a contact. Do not wait for every detail before acknowledging the person's experience, but distinguish confirmed facts from matters still being reviewed.

The patient is not an audience for organisational reassurance. Avoid defensive language, speculation or a promise that the same event can never recur. Return with the outcome and learning when available, within legal and confidentiality limits.

Fairness does not remove accountability

A fair response considers the event, individual actions, system conditions, expected standard, actual capability and foreseeability of harm. Human error, performance under poor conditions, reckless behaviour and deliberate misconduct are not the same. The evidence may remain incomplete, and the correct route may change as facts emerge.

Temporary restrictions can sometimes be necessary to protect safety, but they should be proportionate, reviewed and clearly distinguished from a final conclusion. People raising concerns need protection from detriment; people responding to allegations also need due process and support.

Different concerns need usable routes

A concern may be raised through clinical escalation, line management, incident reporting, safeguarding, educational supervision, HR, trade union or professional-body support, Freedom to Speak Up arrangements, or external routes. The appropriate route depends on urgency, subject, jurisdiction and local policy. Doctors should know the immediate safety route before a crisis occurs.

A route is credible only if people can use it. Consider access outside normal hours, confidentiality, language, disability, employment insecurity and the fear of losing ordinary opportunities. Publishing a policy is not enough if staff reasonably expect silence, delay or retaliation.

The receiver's first minute

Thank the person for raising the issue, check immediate safety, clarify what they have observed and avoid demanding proof that only an investigation could obtain. Explain your role and what you can do. Do not promise anonymity if it cannot be guaranteed, and do not ask the person to keep a material safety issue secret.

Separate mistaken, unsubstantiated and malicious concerns. A concern may be genuinely held yet not supported after review. That is different from deliberate fabrication. Leaders who use 'unsubstantiated' as evidence of bad faith make future reporting less safe.

Protection includes ordinary opportunity

Detriment may be obvious, such as threat or disciplinary misuse. It can also appear through ordinary decisions: exclusion from meetings, loss of development, poor references, rota disadvantage or a new reputation for being difficult. Leaders should monitor what happens after someone raises a concern, not only whether formal retaliation is reported.

Provide proportionate feedback. Confidentiality may limit details about another person's employment process, but it rarely prevents explaining whether the concern was considered, what general action or learning occurred and when the person can expect further contact.

Turn review into visible learning

A report is not the end of improvement. Actions need an owner, resource, deadline, measure and review. Examine whether the action changes work as it is actually done rather than adding a policy to work as imagined. Involve the staff and patients who understand the affected process.

Return later to test whether the change reduced risk and whether burden moved elsewhere. Communicate learning in a way that protects confidentiality but demonstrates that speaking, candour and review led somewhere.

• Immediate safety protected.
• Relevant processes and owners identified.
• Evidence and records preserved.
• People affected supported and informed.
• Action, measurement and feedback completed.