Sanctions Screening for Healthcare & Social Care Companies — UK

Regulatory guidance recommends initial screening before appointment and ongoing screening at minimum quarterly, with additional screening triggered by specific events such as significant shareholding changes, new PSC registrations, or regulatory alerts. Given the sector's rapid growth with 131,166 companies formed since 2020, many lack established screening cadences. Our data reveals that companies with average director and PSC risk scores of 1.8 and 14.5 respectively require at least quarterly screening to maintain compliant status. For high-risk profiles—such as PSCs in secrecy jurisdictions or individuals with political exposure—monthly screening is prudent. Healthcare organisations should document their screening frequency and rationale to demonstrate to regulators (CQC, NHS England) that appropriate due diligence has been maintained throughout the company's operational lifecycle.

Immediate action is required: cease all dealings with the matched individual, document the match and all responsive actions, notify your compliance officer and board, and conduct a full adverse media review to confirm the match legitimacy. In most cases, matches require manual review to eliminate false positives from shared names. If a genuine match is confirmed, report the finding to relevant authorities (National Crime Agency, Financial Conduct Authority) as required by Money Laundering Regulations. For directors or PSCs, the company must remove them from their position and notify Companies House immediately. For NHS-contracted organisations, notification to NHS England is mandatory. Do not discuss the potential sanction publicly to avoid prejudicing investigations. Consult regulatory specialists—failure to handle this correctly can result in accusations of complicity or obstruction.

PSCs represent beneficial ownership—the individuals actually controlling a company—whereas directors are formal office holders who may or may not be the true beneficial owners. Higher risk scores on PSC records reflect that beneficial ownership is more frequently obscured, layered through multiple entities, or held by individuals with limited public profiles. In the Healthcare & Social Care sector specifically, PSC structures are often more complex because companies may have institutional investors, private equity backers, or multi-shareholder family arrangements. The 14.5 average score indicates that PSC screening typically requires enhanced due diligence beyond standard sanctions list matching—including corporate structure analysis, beneficial owner identification through layers of ownership, and assessment of ultimate control. This complexity makes PSC screening significantly more challenging than director screening and requires more sophisticated tools and expertise.

Financial sanctions lists (OFAC, EU, UK, UN) are essential but insufficient for healthcare. You must additionally screen against professional regulatory bodies including the General Medical Council (GMC), Nursing and Midwifery Council (NMC), Health and Care Professions Council (HCPC), and General Dental Council (GDC) to identify professionals struck off, suspended, or barred from practice. The Care Quality Commission (CQC) maintains disqualification registers for individuals prohibited from holding roles in social care. Additionally, screen against NHS Counter Fraud Authority and local authority safeguarding registers. Many healthcare organisations have been damaged by appointing or retaining professionals with disciplinary records that rendered them unsuitable. These professional regulatory checks are as critical as financial sanctions screening—a nurse struck off for patient safety violations poses equivalent risk to a sanctioned individual and must trigger removal from the organisation.

Regulators (CQC, NHS England, local authorities, ICB commissioners) expect documented evidence including: (1) Screening policy documenting your screening frequency, data sources, and escalation procedures; (2) Contemporaneous screening records for each director and PSC showing name screened, date screened, lists checked, and results obtained—maintained for minimum 5 years; (3) Board minutes or compliance committee records approving director/PSC appointments, with evidence that screening was completed before appointment; (4) Documented procedures for handling matches, including investigation records and resolution; (5) Regular management information reports to board/governance showing screening status and any outstanding screenings required; (6) Signed attestations from company officers confirming to best of knowledge no individual is subject to sanctions; (7) Audit trail demonstrating screening of any PSC changes within required timeframes. During regulatory inspections, inspectors will request this documentation. Failure to maintain adequate records—even where no actual sanctions violations occurred—constitutes a serious compliance failure and can result in regulatory action, fines, or contract termination.