NON-MEDICAL HOME CARE COMPLIANCE & REMEDIATION
Keep your non-medical home care agency compliant and audit-ready
HCPA helps non-medical home care agencies meet regulatory requirements related to caregivers, client records, systems,, policies and payer obligations and keep compliant as the business operates.

When urgent non-medical home care compliance support may help
Some issues can be corrected through normal compliance management. Others can affect the agency’s license, payer participation, finances, or ability to continue serving clients.
State inspection or investigation
A routine survey, complaint investigation, or other state review may identify concerns with client care, caregiver records, policies, or agency operations. The first priority is to understand the exact finding, evidence requested, and response deadline.
Failed non-medical home care audit
An audit may identify missing visit records, expired caregiver checks, incomplete training, or policies that are not being followed. The visible error may also point to a wider weakness in scheduling, supervision or record management.
Home care agency plan of correction
Where deficiencies have been identified, the agency should review the findings and follow the applicable response procedures and deadlines defined by the authority.
A plan of correction should explain how identified problems will be addressed, what caused them, who is responsible for corrective actions and how the agency will prevent recurrence, rather than simply fixing the individual record.
Key non-medical home care compliance requirements
Strong home care compliance connects workforce management, client services, records, and payer requirements rather than treating them as separate administrative tasks.
Keep caregiver screening and training current
Maintain the background checks, registry searches, health screening, orientation, competency, and ongoing training required for each caregiver’s role, with systems that flag upcoming renewals before they expire, as mandated by the state authority.
Track checks and training that must be completed before work begins, as well as any renewal, refresher training or reassessment requirements imposed by the state, payer or applicable programme.
Maintain complete client and service records
Client files should clearly show what support was agreed, who delivered it and what occurred during service, with assessments, service plans, caregiver assignments, visit records, and changes documented consistently.
Keep home care policies aligned with practice
Non-medical home care agency policies and procedures should reflect how the agency actually recruits caregivers, delivers services, manages complaints, responds to incidents, and handles records in line with federal and state requirements, rather than existing only as a compliance manual.
Manage incidents and escalation correctly
The agency should know which events require internal escalation or external reporting, reporting deadlines, who needs to be notified, the timeframe involved and what evidence must be retained.
Protect client information appropriately
Not every private-pay non-medical home care agency is automatically a HIPAA covered entity, but privacy obligations may still arise through state law, contracts or the way the business handles health information.
Health and Human Services (HHS) explains that HIPAA applies where an agency meets the definition of a covered entity or acts as a business associate of one.. Check whether your business is a HIPAA covered entity.
Non-medical home care audits and compliance readiness
A regulator, payer or accreditor may review whether the agency can demonstrate compliance through its normal records and operating systems.
That can include caregiver files, screening and training records, client assessments, service plans, visit documentation, incident records, policies, supervision, and EVV where applicable.
Washington’s In-Home Services Survey Program, for example, can include employee and client interviews alongside reviews of randomly selected personnel and client files.
If accreditation forms part of the agency’s model, it covers areas such as personal care, companion services, organisational processes and service delivery.
The useful question is not “Are the documents there?” It is “Can the agency demonstrate that the required process is being followed consistently?”
HCPA can review current systems, identify gaps and strengthen audit readiness before an external review begins.
What to do after receiving an audit finding or compliance notice
Understand the issue and deadline
Confirm who issued the notice, what is being reviewed, which requirement applies, what evidence has been requested and when the response is due.
Preserve and review the evidence
Secure the relevant client records, caregiver files, billing information, and communications, then establish what the evidence genuinely shows without altering or retrospectively creating records.
Correct the immediate problem
Take practical action where the issue creates an ongoing risk to clients, caregivers, documentation, billing or the agency's ability to operate.
Prevent the problem from recurring
Address the cause through stronger workflows, training, automated alerts, file reviews, or other controls rather than limiting the response to the individual deficiency.
Why choose HCPA for non-medical home care compliance?
Home care compliance sits across workforce management, client service, state regulation and, for some agencies, payer requirements such as Medicaid.
HCPA looks at how those systems work together rather than treating the policy manual as the end result.
We can help identify compliance gaps before an audit, understand the cause of an existing finding and put practical controls in place to support the agency going forward.
Frequently asked questions about non-medical home care compliance
What policies and procedures should a non-medical home care agency have in place?
Requirements vary by state and business model, but common areas include service delivery, client rights, caregiver recruitment and supervision, screening, training, complaints, incidents, abuse and neglect, emergency procedures, privacy, recordkeeping, and quality management.
The important point is not how many policies the agency has. The policies need to match the way the agency actually operates and be supported by the people, forms, and systems required to follow them.
How can a non-medical home care provider monitor and maintain ongoing regulatory compliance?
Turn recurring requirements into repeatable workflows.
For example, caregiver systems can flag expiring background checks and training, scheduling controls can prevent ineligible workers being assigned and client-management systems can identify overdue reviews.
The goal is to know that the requirement is being followed rather than discovering a gap during an audit.
What should I do if my agency fails a non-medical home care audit?
Start with the actual finding rather than trying to correct everything at once.
Confirm what has been identified, preserve the relevant evidence and determine whether the issue is isolated or points to a wider failure in staffing, supervision, documentation or another process.
The response should fix the immediate problem and leave a control in place that reduces the chance of it happening again.
What should a home care agency plan of correction include?
The exact requirements vary depending on the state and depend on the authority involved.
A strong plan normally identifies each deficiency, how the deficiency was corrected, why it occurred, what will prevent recurrence, who is responsible and when the action will be completed, and ongoing monitoring.
What caregiver records should a home care agency maintain?
The personnel file should demonstrate that each caregiver continues to meet the screening, qualification, training and competency requirements that apply to their role.
Depending on the state, that may include background checks, registry searches, health screening, orientation, continuing training, driving information and competency evidence.
Do not assume one commercial background check satisfies every state requirement.
Is accreditation required for non-medical home care?
Not universally.
Accreditation may be voluntary or required under particular state, payer or contractual arrangements.
Accreditation organisations offer accreditation for different service categories, including personal care and companion services.
Whether accreditation is required, commercially useful or voluntary depends on the agency’s state, payer relationships and business model, it should not be confused with the state license required to operate.
Agencies should confirm which approvals, enrolments and accreditation requirements apply to their services.
Does HIPAA apply to every non-medical home care agency?
No.
HIPAA applies to covered entities and business associates as defined under federal law.
HHS limits direct HIPAA coverage to health plans, health care clearinghouses and health care providers that conduct specified electronic transactions. Review the HHS covered entities and business assosiate Fast Facts.
A private-pay non-medical agency may not automatically meet that definition, although other privacy, contractual and state requirements can still apply. Therefore, agencies outside HIPAA’s scope must still assess applicable state privacy, data security, breach notification and contractual requirements.
What incidents may need to be reported?
The answer depends on the state and payer, but incidents can include suspected abuse or neglect, exploitation, serious injury, caregiver misconduct, major service failures or privacy breaches.
The agency should know three things before an incident occurs: who must be notified, how quickly, and what documentation needs to be retained.
How should we prevent the same compliance problem happening again?
Correct the system, not only the record.
If a caregiver’s screening expired, renewing that individual check fixes the immediate problem.
An automated expiry alert, recurring personnel-file review or scheduling control is what reduces the likelihood of the same failure happening again.
What happens after a compliance issue has been corrected?
Monitor whether the corrective action is actually working.
A regulator or payer may require evidence of implementation, and the agency should also test whether the same weakness exists elsewhere.
Successful remediation should leave the operating system stronger than it was before the finding.
Related non-medical home care resources
Start a non-medical home care business
Grow your non-medical home care business
Looking to attract more clients and increase care hours?
Strengthen private-pay acquisition, referral relationships and caregiver capacity so demand can turn into reliable, profitable service hours.
Start growingWhat Our Clients Say






