Every private clinic eventually gets a complaint that outgrows its own process: a refund dispute, a missed-diagnosis claim, a patient who simply does not trust the answer they got in-house. The NHS has the Parliamentary and Health Service Ombudsman for exactly this situation. Private and telehealth providers have no direct statutory equivalent, which is the gap ISCAS exists to fill, and one many operators only discover mid-complaint, when it is already too late to set up calmly.
What ISCAS actually is
ISCAS is an independent, not-for-profit adjudication service for the UK's independent healthcare sector: private hospitals, clinics, and increasingly online prescribing and telehealth providers. Organisations that join agree to run their complaints handling against the ISCAS Code of Practice, and to accept ISCAS as the final, independent stage once a complaint has already been through their own internal process.
It sits alongside, not instead of, the regulators you already deal with. The GPhC and CQC, see our guide to preparing for a GPhC inspection, look at registration, safety, and standards of practice; neither exists to adjudicate an individual patient's unresolved complaint. That gap, a statutory-style route for private and telehealth patients, is what ISCAS was set up to close, and it is a genuinely separate function from anything a superintendent pharmacist or registered manager already signs off on internally.
Voluntary membership, growing expectation
Joining ISCAS is not a legal obligation, and it is not tied to CQC registration or GPhC premises registration in the way those processes are. What CQC's fundamental standards do require is that a registered provider runs an effective system for receiving, investigating, and responding to complaints; ISCAS membership is one way of demonstrating that system holds up once a patient disputes the outcome. Nobody is going to stop you trading without it, and plenty of established private providers operate perfectly well outside it, so the decision comes down to how much weight you want an independent third party to carry when a complaint gets difficult.
Expectation has shifted faster than the rules. Scrutiny of the private healthcare market over the past decade pushed many private hospital groups toward independent adjudication, and standalone clinics and telehealth providers are increasingly asked by patients, partners, or their own insurers whether an equivalent route exists, even where full ISCAS membership is not yet standard practice. A commissioning partner doing due diligence on a white-label brand will often ask the same question before signing anything.
How the adjudication route actually works
The structure is two-stage by design. A patient raises a complaint with the provider first, and the provider investigates and responds through its own procedure: acknowledgement, investigation, a substantive written response. Only once that internal process is exhausted, and the patient remains dissatisfied, can the complaint go forward to ISCAS.
ISCAS then reviews whether the provider handled the complaint fairly and reasonably against its own procedure and the ISCAS Code, not whether a clinical decision was negligent. Clinical negligence has its own separate legal route; ISCAS adjudicates the complaints-handling process itself, which is a narrower and faster question. That narrower scope is deliberate: it keeps adjudication achievable in a reasonable timeframe instead of turning every dispute into a de facto tribunal.
The two-stage structure matters: ISCAS never overrides your own complaints process, it only steps in once that process has genuinely run its course and the patient is still unsatisfied with the outcome.
What the ISCAS Code of Practice expects operationally
Membership is an assessment against a written Code, not a one-off form. In practice, most of what it expects is the same discipline any well-run complaints process needs, documented and applied consistently rather than handled case by case. Our playbook for handling a UK telehealth patient complaint covers the operational side of this in more depth.
- A written, published complaints procedure that patients can actually find, not one buried in terms and conditions
- Defined timescales for acknowledgement and for a substantive response, applied consistently rather than case by case
- A named individual or team accountable for complaint outcomes, not a shared inbox nobody owns
- A clear, visible escalation path once the internal process concludes, including how to reach ISCAS
- Accessible formats and support for patients who need them, in line with Equality Act expectations
- Complaint records kept in a form that supports trend review, not just individual case closure
Why this matters more for remote and digital-first providers
Telehealth complaints tend to span more than one party: the brand or platform, the prescribing clinician, and the dispensing pharmacy can all sit in different organisations. A patient who is not sure who is actually accountable for their complaint escalates faster, often straight to the GPhC, the CQC, or a public review site, which is a worse outcome for everyone than a complaint handled cleanly and closed.
For white-label brands running clinics under a partner's registration, this needs an explicit answer, not an assumption. ISCAS membership generally sits with the CQC-registered clinical entity, not the underlying technology platform, so it is worth being clear in patient-facing terms about who owns that relationship, in the same way duty of candour obligations attach to the registered provider. Put that ownership in the partner agreement, not just the patient-facing terms, so nobody is left arguing about it mid-complaint.
A complaint that nobody in the chain clearly owns does not go away quietly. It goes to the regulator, or to a review site, instead.
What joining actually involves
The process is more assessment than paperwork exercise. Most of the work happens before you apply, tightening the internal procedure the Code will actually be measured against, so budget real time for that groundwork rather than treating the application form as the main event.
- Confirm your organisation falls within ISCAS's scope of independent healthcare provision
- Review your internal complaints procedure against the ISCAS Code and close any gaps
- Apply for membership and go through ISCAS's assessment of that procedure
- Train frontline and clinical staff on the escalation route and its timescales
- Publish the ISCAS route clearly wherever patients are told how to raise a complaint
Where PExpo fits
PExpo does not replace a clinic's own complaints and redress obligations, that responsibility sits with the CQC-registered provider, not the infrastructure underneath it. What a properly governed dispensing and clinical layer does provide is a cleaner audit trail, dispensing records, delivery tracking, consultation notes, to draw on when a complaint actually needs investigating, rather than reconstructing it from scattered systems under time pressure.
For brands building a multi-clinic or white-label operation, deciding who owns the ISCAS relationship, and documenting it, before the first serious complaint lands is far cheaper than retrofitting it afterwards. It is the same logic behind getting dispensing, delivery, and consultation records right from the first patient, not the thousandth.
ISCAS membership will not be right for every private telehealth provider on day one, but understanding the gap it fills, and building complaints handling that could pass its Code even before you join, is a cheap insurance policy against the complaint that outgrows your own process. If you are weighing that decision as part of a wider multi-clinic or white-label build, our brands page has more on how PExpo's infrastructure supports operators working through exactly this kind of operational groundwork.
Frequently asked questions
Is ISCAS membership a legal requirement for UK private telehealth providers?
No. ISCAS membership is voluntary. CQC registration requires an effective internal complaints system, but there is no statutory obligation to join ISCAS specifically, though patients and partners increasingly expect an independent route to exist.
What is the difference between ISCAS and the CQC complaints process?
CQC regulates registration, safety, and quality standards, and expects registered providers to run an effective internal complaints system, but it does not adjudicate individual patient complaints. ISCAS is a separate, independent body that reviews unresolved complaints once a provider's own process has concluded.
Does ISCAS cover NHS-funded telehealth services, or only private, self-pay care?
ISCAS is built for the independent healthcare sector, so it applies to private and self-pay care rather than NHS-commissioned services, which have their own route through the Parliamentary and Health Service Ombudsman. A telehealth provider offering both would need to be clear with patients about which route applies to which part of their care.
