A regulator has contacted me: what should I do first?

01

Read the notice before answering the allegation

The first correspondence usually identifies the regulator, the concern, the current stage, material being disclosed and a response date. Those details determine what response is useful. A request during screening or a GMC provisional enquiry may be narrower than formal allegations sent for a later decision. An interim-order notice may require a rapid risk-focused response. Reading only the complaint narrative can lead to a lengthy account that does not answer the decision the regulator is about to make.

Keep the complete communication, including attachments, delivery information and any secure-portal files. Create a simple issues list recording each allegation, the stated source, the requested action and the date by which it is required. The list is an organisational tool rather than a substitute for the original notice. If the papers are incomplete or a date is unclear, the relevant case contact can be asked to identify the operative material and timetable. Any extension remains a matter for the regulator unless confirmed.

• Save the notice and attachments in their original form
• Identify the decision-maker and question at the current stage
• Separate the regulator's deadline from dates in an employer process

02

Preserve records and build a neutral chronology

Original clinical records, messages, rotas, policies, audit trails and employer correspondence may later become relevant. Preserve them lawfully and do not alter, annotate or reconstruct an original record. A separate chronology can identify what happened, which source supports each event and where recollection is uncertain. Where access to patient or service-user information is controlled, normal confidentiality and information-governance rules continue to apply; a regulatory investigation is not permission to download or circulate material without authority.

Potential witnesses should not be coached or asked to align accounts. A personal note can record who may hold first-hand information and what document or event connects them to the issue. Parallel proceedings need particular care: an employer investigation, criminal inquiry, safeguarding process, inquest or civil claim may use overlapping facts but different tests. Statements made in one forum can be disclosed in another, so accuracy and consistency are more useful than speed or speculation.

• Keep later commentary separate from contemporaneous records
• Record uncertainty instead of filling gaps in memory
• Observe confidentiality when collecting or storing regulated information

03

Check immediate risk and notification issues

Not every investigation restricts work, but the notice may say that an interim order is being considered. That requires attention to hearing arrangements, current practice, workplace safeguards and possible conditions. Separately, an employer may take its own action. The professional should distinguish a regulator's formal restriction from an employer instruction, contractual limitation or voluntary arrangement so that the status of each is understood and accurately described. Those two sources of control should never be conflated.

Notification duties can arise from professional standards, employment terms, indemnity or insurance arrangements, performer-list rules, another registration, or an existing condition or undertaking. They are not identical across professions. The relevant documents should be checked before broad disclosure, particularly where allegations remain untested or include health information. A lead-generation service can explain the available support route, but it should not claim a solicitor-client relationship or promise confidentiality beyond its actual privacy arrangements.