Regulatory & Operational Due Diligence in Scotland

Acquiring, funding or investing in a regulated care or healthcare service requires more than reviewing financial performance, contracts and property.

The regulatory position of the service, the legal entity holding the registration, the quality of governance and the strength of operational controls may materially affect the transaction, the transition to new ownership and the service’s ability to operate as intended.

In Scotland, those issues must be considered against the regulatory framework applicable to the service. Care services and independent healthcare services do not sit within a single regulatory route.

Oxara provides independent regulatory and operational due diligence for purchasers, investors, lenders, owners and professional advisers who need to understand what sits behind the reported position of a service.

Looking beyond the reported position

A service may appear operationally stable while carrying regulatory, governance or management weaknesses that are not immediately evident from headline information.

Oxara examines the evidence supporting the organisation’s reported position and considers whether material risks are being recognised, controlled and accurately represented.

A review can consider:

• current registration and regulatory position
• inspection findings and regulatory correspondence
• governance and management oversight
• quality assurance, incidents, complaints and safeguarding
• staffing, workforce and operational resilience
• outstanding improvement activity and recurring concerns
• risks likely to affect transition, integration or future operation

The scope is determined by the service, transaction and information available.

Registration and change of provider

The regulatory consequences of a transaction depend partly on what is being acquired, the transaction structure and whether the legal entity providing the regulated service changes.

For Care Inspectorate-regulated services, a change in the legal entity providing the service may require the existing provider to cancel its registration and the incoming provider to obtain registration before it can operate the service. Care Inspectorate guidance specifically addresses changes of legal entity, including the sale of a service to another company or organisation.

The regulatory route should therefore be identified early in a transaction rather than treated as an administrative matter after completion.

Oxara can review the existing registration position, proposed ownership structure, regulatory dependencies and operational implications alongside the wider due diligence work.

Regulatory and operational risk

Due diligence should establish not only whether a service is currently operating, but whether its systems, governance and management arrangements are capable of supporting safe and sustainable operation after the transaction.

Oxara looks for patterns across the evidence rather than treating individual findings in isolation.

Inspection history, regulatory correspondence, unresolved actions, recurring incidents, workforce instability, weak assurance systems or inconsistent management information may point to broader operational risk.

The purpose is not to reproduce the regulator’s inspection process. It is to determine what the available evidence means for the purchaser, investor, lender or adviser considering the service.

Transaction and transition

Regulatory risk does not end when the transaction completes.

Changes in ownership, leadership, governance structures or operating models can expose weaknesses that were less visible under the previous arrangements.

Oxara can consider the implications for transition, including whether material actions need to be completed before or after acquisition, whether governance arrangements require strengthening and whether the proposed operating model is consistent with the regulatory position of the service.

Where appropriate, due diligence can be followed by independent post-acquisition review or management assurance once the new arrangements are in place.

Care services and independent healthcare

The regulatory basis of the review depends on the service.

For a Care Inspectorate-regulated service, the review is considered against the Scottish care-service framework, registration position and relevant Care Inspectorate evidence.

For an independent healthcare service, the review is considered against the Healthcare Improvement Scotland framework applicable to that service.

Oxara does not assume that regulatory terminology, registration requirements or expectations transfer between the two systems.

Care Inspectorate Regulatory Support in Scotland →

Independent Healthcare Regulatory Support in Scotland →

How Oxara works

The scope is defined by the transaction, service type, regulatory position and purpose of the instruction.

The work may involve review of regulatory and inspection records, management information, policies and governance evidence, discussions with senior personnel and on-site assessment where appropriate.

Findings are presented in a form appropriate to the instruction, identifying material regulatory and operational issues, areas requiring further enquiry and matters relevant to transaction or transition planning.

Our work remains director-led, with senior consultants and specialist expertise matched to the requirements of each instruction and regulatory framework.