A practical guide getting started as an independent Speech and Language Therapist, covering HCPC registration, insurance, safeguarding, clinical governance and more.
HCPC registration is a legal requirement. RCSLT membership is strongly recommended.
Professional indemnity and public liability are essential. Both included with RCSLT membership.
Enhanced DBS strongly recommended. Level 3 training. Know your local referral contacts.
Monthly supervision. CPD plan. Work within your scope of competence.
Terms and conditions, complaints procedure, safeguarding policy, lone working safety plan.
Register with the ICO. Have a privacy notice, secure storage, and a breach procedure.
Before you see a single client independently, you must ensure your professional registrations are in order. Some are legal requirements; others are strongly recommended.
Health and Care Professions Council (HCPC) registration is a legal requirement. It is a criminal offence to use the title 'Speech and Language Therapist' in the UK without being on the HCPC register. This applies equally whether you work in the NHS, in a school, or in independent practice.
Your HCPC registration confirms that you have met the standards of proficiency, conduct, and continuing professional development required to practise safely.
Royal College of Speech and Language Therapists (RCSLT) membership is not a legal requirement, but it is strongly recommended for independent practitioners. Membership provides:
Insurance is not optional when you practise independently. Even one uninsured claim could be financially devastating.
Covers claims of harm from your professional advice, assessment, or treatment. Included with RCSLT Practising membership (£10m cover). Non-members: arrange independently through Balens, Hiscox, or Howden.
Covers injury to third parties or property damage from your business activities. Included with RCSLT Practising membership (£10m cover). Essential if you see clients face-to-face. Many venues require proof before you can book.
Legally required (minimum £5m cover) if you employ anyone, even one person part-time. Does not apply to self-employed associates, but be cautious about the distinction.
Covers data breaches, ransomware attacks, or accidental loss of personal data. Increasingly important given GDPR fines. Some indemnity policies include partial cover.
Check your home insurance covers business use if you see clients at home or store clinical materials there. Many standard policies exclude business activities.
Pays a proportion of your income if you cannot work due to illness or injury. Particularly important with no employer sick pay. Premiums are tax-deductible.
As an independent practitioner, you do not have the institutional safeguarding infrastructure of the NHS or a school behind you. You are personally responsible for recognising and responding to safeguarding concerns.
An Enhanced DBS check (with a check of the barred lists) is not a blanket legal requirement for self-employed SLTs, but it is very strongly recommended and, in practice, almost always necessary. Most schools, nurseries, care homes, and commissioners will require you to hold a current Enhanced DBS before they will engage your services. Many parents of private clients will also ask about it. Without one, your ability to work will be significantly limited.
Since 21st January 2026, self-employed individuals can apply directly for Enhanced and Enhanced with Barred List(s) DBS checks for the first time. Previously, an employing organisation had to submit the application on your behalf.
To apply, you go through a registered DBS Umbrella Body. You can find one using the Home Office Umbrella Body directory - filter for organisations that process checks for self-employed individuals. Standard DBS fees apply, and the Umbrella Body may charge an additional administration fee.
The Update Service is an optional subscription (£16/year) that sits alongside your Enhanced DBS certificate. Here's when each one applies:
Without the Update Service, your certificate is a one-off snapshot. Each new organisation that wants to verify your status would need you to go through the full application process again. With it, you can simply share your certificate number and give consent for them to check online - saving time, cost, and hassle.
You must know how to make a safeguarding referral in every area where you work:
In an NHS or organisational setting, clinical governance structures are provided for you. In independent practice, you must create and maintain your own. This is a requirement of your HCPC registration and essential for client safety.
Every independent SLT should have regular clinical supervision - a space to reflect on clinical work, discuss complex cases, consider ethical dilemmas, and receive feedback.
The HCPC requires you to maintain and develop your knowledge and skills throughout your career. Your CPD should:
Clear, written policies protect both you and your clients. They set expectations, demonstrate professionalism, and provide a framework to fall back on if things go wrong.
The foundation document of your therapeutic relationship. It should cover:
The RCSLT expects independent SLTs to have a documented safeguarding policy. It should cover:
A good complaints procedure:
If you work alone - visiting clients' homes, in a room by yourself, or seeing clients in the evening - you should have a lone working safety plan covering:
As an independent SLT, you are a data controller under UK GDPR. You are personally responsible for how client data is collected, stored, used, and shared.
You must register with the Information Commissioner's Office (ICO) if you process personal data as part of your business. Almost every independent SLT will need to register.
You need a written privacy notice that tells clients who you are, what data you collect, why, who you may share it with, how long you keep records, and how they can access or correct their data. Write it in plain language, put it on your website, and give a copy to every client at the start of the therapeutic relationship.
Use encrypted, password-protected systems for electronic records. Lock away paper records. Use strong passwords with two-factor authentication. Avoid sending identifiable clinical information in unencrypted emails.
Keep adult records for 8 years after last contact. For children, keep records until the patient's 25th birthday (or 26th if aged 17 at conclusion of treatment), or 8 years after last contact, whichever is longer. When records reach the end of their retention period, destroy them securely.
If personal data is lost, stolen, or disclosed to the wrong person, assess the risk. If it could affect people's rights, report to the ICO within 72 hours. Keep a log of all breaches, even minor ones.
Get explicit consent before sharing client information with other professionals, share only what is necessary, and use secure methods. The exception is safeguarding concerns, where the duty to protect overrides confidentiality.
Items marked REQUIRED are legal requirements. Items marked RECOMMENDED are strongly advised. Unmarked items are optional but good practice.