For an older person and their family, the distinction between a care center and a nursing home may appear less important than whether support is safe, competent and respectful. For regulators, providers and professionals, however, the distinction can determine which legislation applies, which authority has oversight and what requirements the service must meet. As Malaysia's long-term care sector grows, these boundaries matter increasingly.
Malaysia does not currently operate one comprehensive older-person long-term care statute covering every form of support. Different elements of formal provision sit within different legal and administrative frameworks. The Malaysia Aging, Long-Term Care & Community Support Knowledge Hub examines this wider landscape of family care, community support, formal services, health care and emerging care-economy reform. Regulation is one of the mechanisms that must increasingly connect these parts without assuming that every service performs the same function.
The timing is significant. Malaysia Care Strategic Framework and Action Plan 2026–2030 sets out an ambition for stronger legislation and governance, greater coordination between ministries, more consistent standards and the development of a National Care Regulatory Body. These are reform directions rather than evidence that a unified regulator already governs the entire sector. The central policy challenge is therefore transitional: strengthening protection and accountability within today's arrangements while designing a regulatory architecture capable of supporting tomorrow's larger and more diverse care economy.
Malaysia starts from a divided regulatory landscape
Malaysia already regulates important parts of formal care. The issue is not an absence of regulation but the way responsibilities are distributed.
Under the Care Centres Act 1993 (Act 506), a care center falling within the statutory definition is required to register. The Department of Social Welfare, Jabatan Kebajikan Masyarakat (JKM), administers this framework alongside the Care Centres Regulations 1994. Current JKM guidance applies to individuals, non-governmental organizations and businesses or companies operating care centers and states that registration should be obtained before a center operates.
The Ministry of Health (MOH), meanwhile, administers the Private Healthcare Facilities and Services Act 1998 (Act 586). Its Medical Practice Division implements and enforces that legislation across specified private healthcare facilities, including private nursing homes and private psychiatric nursing homes. This is a healthcare regulatory framework, not simply another route for registering an ordinary social care center.
The distinction reflects the different nature of services. A facility providing healthcare and nursing services carries different professional and clinical responsibilities from a center primarily providing accommodation, personal assistance and social support. Yet older people's needs do not always respect institutional boundaries. Someone may require assistance with washing and eating alongside medication support, rehabilitation, dementia care or management of multiple long-term conditions.
As dependency increases, regulatory categories therefore have to remain clear enough for accountability without creating gaps at their edges. This is one reason why regulatory compliance and enforcement in long-term care cannot be understood solely as checking whether a provider possesses the correct certificate. The framework also has to establish what type of care an organization is competent and authorized to provide.
Registration is necessary, but it is only the beginning of assurance
JKM's registration framework establishes an important entry control. A care-center operator has responsibilities before opening, and registration provides government with a formal relationship to services that otherwise might remain difficult to identify or oversee.
Malaysia has also increasingly digitized this process. JKM's myKendiri system is both a registration and self-assessment mechanism. Care-center operators are required to undertake self-assessment every six months during the validity of their registration certificate to assess compliance with the Care Centres Act 1993, the Care Centres Regulations 1994 and other applicable law. Online care-center registration through myKendiri has operated since June 2024.
This creates more than an administrative convenience. Digitized registration can improve the visibility of the provider landscape, standardize information and create a foundation for more systematic oversight. Its regulatory value, however, depends on what happens to the information collected.
Self-assessment is strongest when it encourages genuine organizational scrutiny and connects with inspection, complaints, incidents and other intelligence. It becomes weaker if organizations experience it primarily as a periodic declaration detached from daily practice.
The same principle applies internationally. Audit, review and continuous improvement are most effective when assurance generates learning as well as compliance evidence. Regulators need confidence that minimum requirements are being met, while providers need enough feedback to understand recurring weaknesses and improve them.
Organizations examining their own readiness can use the Regulatory Readiness Gap Analyzer to structure internal questions about evidence, responsibilities and control gaps. It is not an interpretation of Malaysian law and does not establish compliance with Act 506, Act 586 or future National Care Standards. Its value is helping organizations test whether the operational evidence behind formal compliance is sufficiently robust.
Scenario: an older person's needs move across a regulatory boundary
An older woman in Selangor moves into a registered residential care center after her daughter can no longer provide continuous support at home. Initially she needs help with mobility, bathing, meals and everyday supervision. Over the following year, her health becomes more complex. She experiences recurrent infections, increasing frailty and medication changes following several hospital attendances.
The family wants her to remain in familiar surroundings. The care center wants to support that preference. The regulatory question is not simply whether continuity is desirable, but whether the service has the workforce, professional oversight and lawful scope to meet her changing needs safely.
A mature response begins with reassessment rather than automatically retaining or transferring her. The provider clarifies which support it can safely deliver, what requires external health professionals and whether the woman's needs have moved beyond its service model. Primary care and hospital information need to travel with her, and the family needs a realistic explanation of available options.
For regulators, repeated cases of this kind reveal an important system issue. Population aging will create more people whose needs combine personal care and healthcare. If providers frequently encounter uncertainty at that interface, guidance and service pathways may need strengthening rather than leaving every organization to interpret the boundary independently.
The scenario illustrates why regulation needs to govern capability as well as premises. The relevant question is not merely where an older person lives, but what care is being delivered there, by whom, under whose oversight and with what escalation arrangements when needs change.
Minimum standards need to describe the quality people should experience
Malaysia's development of National Care Standards is potentially important because a more mature care economy requires shared expectations across a diverse provider landscape. KPWKM has described the standards as intended to establish minimum benchmarks so that care for older people and persons with disabilities is delivered safely, ethically and with dignity.
Minimum standards can reduce ambiguity. They can establish expectations around workforce competence, safeguarding, care planning, records, premises, hygiene, complaints, emergency arrangements and other core areas. They can also make regulatory decisions more consistent by giving providers and oversight bodies a clearer reference point.
But standards can become overly procedural if quality is defined mainly through documents. A service may have a policy on dignity while routinely waking residents according to staff convenience. It may record activities while offering people little meaningful choice. Training may be complete while staff practice remains weak.
Effective standards therefore need to connect inputs, processes and outcomes. Some controls must be explicit because they protect safety. Others should examine what those controls achieve for people.
For an older person, meaningful quality includes whether support preserves autonomy, whether communication is understandable, whether personal preferences influence daily routines, whether family involvement reflects the person's wishes and whether concerns can be raised safely. Regulation that sees only organizational processes risks overlooking these outcomes.
This is where quality, safety and safeguarding in aging services need to be considered together. Safety without autonomy can become unnecessarily restrictive; autonomy without competent risk management can expose people to avoidable harm. Good standards help services navigate that tension rather than resolving it through blanket rules.
Inspection should test whether systems work in practice
Inspection provides an independent opportunity to look beyond provider declarations. Its value lies not simply in discovering whether required documents exist, but in testing whether organizational systems function.
That requires proportionate evidence. Inspectors may need to examine records, staffing arrangements, environmental conditions, incidents and complaints, but they also need to understand the experience of residents and families. Observation can reveal differences between written procedures and everyday routines. Conversations with staff can show whether escalation processes are understood rather than merely documented.
As Malaysia develops its future regulatory architecture, consistency will matter. Providers should be able to understand the standards against which they are assessed, while inspectors need enough professional judgment to respond to different service types and levels of risk.
A small community-based center and a complex nursing facility should not necessarily carry identical regulatory burdens. Proportionate regulation differentiates according to what the service does, whom it supports and the consequences if controls fail.
Risk-based oversight can also help regulators concentrate limited inspection capacity. Previous compliance, complaints, significant incidents, rapid organizational growth, changes of ownership or management and unusual workforce patterns can all contribute to regulatory intelligence. Such indicators should prompt inquiry rather than automatically prove poor quality.
The goal is an assurance system capable of asking not only, “Has this requirement been completed?” but also, “Does the evidence demonstrate that people are receiving the intended protection and quality?”
Complaints and incidents should inform the regulatory picture
Families often see dimensions of care that formal monitoring misses. They notice unexplained changes in routines, communication difficulties, staff turnover or deterioration in personal care. Workers may identify different concerns: unsafe staffing, poor supervision, pressure not to report incidents or practices that have gradually become normalized.
A regulatory framework therefore needs accessible routes for concerns and a way to distinguish isolated dissatisfaction from evidence of systemic risk. The Ministry of Health's Medical Practice Division already includes complaint handling within its responsibilities for private healthcare facilities regulated under Act 586, while JKM provides routes for inquiries and complaints relating to its care-center oversight.
The next step in regulatory maturity is to treat complaints as intelligence rather than merely cases to close. A single concern may require a local response. Similar concerns across several months, locations or providers may reveal something broader about workforce capability, communication, market pressure or implementation of standards.
The same applies to serious incidents. Regulators need enough information to identify recurring risks without creating a reporting environment so punitive that organizations become defensive. Providers should remain accountable for unsafe practice, but learning depends on understanding why events occurred as well as who was involved.
The wider discipline of treating complaints as quality signals is particularly valuable in long-term care because some people may have limited ability to advocate for themselves. Dementia, communication difficulties, dependency on staff or fear of losing a valued service can all affect whether concerns are voiced.
Regulatory systems consequently need multiple ways of hearing from people: formal complaints, family feedback, advocacy, inspection conversations, incident information and provider-level quality evidence. No single channel provides the whole picture.
Scenario: several minor complaints reveal one significant pattern
A registered care center in Kuala Lumpur receives several complaints over nine months. None initially appears severe. One family reports that staff take too long to answer calls for assistance at night. Another says their father has sometimes waited for help getting to the bathroom. A third describes rushed evening routines.
The center responds separately to each family and closes the complaints after apologizing. There are no reported serious injuries, and staffing numbers appear acceptable when reviewed at aggregate level.
During a wider quality review, management compares complaint timing with rosters and discovers that concerns cluster around particular evening and night shifts. Absence is being covered, but the replacement workforce often includes less experienced employees working together without the usual senior caregiver.
The organization changes its escalation arrangements for unplanned absence and introduces a minimum expectation for experienced shift leadership. It also begins reviewing complaint themes alongside workforce data rather than treating complaints as independent correspondence.
For a regulator, this type of evidence matters. The question is not whether every delay represents statutory non-compliance. It is whether a pattern indicates deteriorating quality or increasing risk and whether the provider can recognize and address that pattern itself.
Organizations seeking to turn findings into structured improvement can use the Quality Improvement Action Plan Builder to organize actions, ownership, evidence and follow-up. It does not replace any corrective process required by Malaysian authorities, but it illustrates an important assurance principle: identifying a problem is only the first stage; governance needs evidence that the response actually changed practice.
Workforce regulation and service regulation have to connect
Long-term care regulation often focuses on organizations, yet care is ultimately delivered by people. Malaysia's current care reforms recognize this through the Malaysia Care emphasis on competency and career pathways, development of caregiving training and the wider ambition to create a more skilled care workforce.
Service standards and workforce standards should reinforce one another. A provider cannot reliably meet expectations for safe mobility support, dementia care, medication assistance or safeguarding if workers lack the necessary competence. Equally, an individual training certificate does not guarantee quality if supervision and organizational culture are weak.
This creates several regulatory questions as Malaysia professionalizes care. Which tasks require specified competence? How should competence be demonstrated and refreshed? Which activities require healthcare professionals? What supervision is needed when people's needs become more complex? How should migrant and locally recruited workers be incorporated into consistent practice expectations?
These questions become more important as the boundaries between companionship, personal assistance and more complex support narrow. Regulation needs enough clarity to prevent role drift into unsafe practice without making ordinary support unnecessarily medicalized.
Malaysia already has mechanisms for developing occupational standards. JKM has been appointed an Industry Lead Body and has developed National Occupational Skills Standards for the care sector, while care-related certification and TVET development form part of the wider workforce agenda. The emerging regulatory opportunity is to connect these workforce initiatives more explicitly with service-quality expectations.
This makes staff competence and training assurance a governance issue rather than simply a human-resources activity. A regulator does not need to dictate every training session, but it does need confidence that organizations can demonstrate the competence required by the care they provide.
Rights need visibility within a stronger regulatory system
Malaysia's National Policy for Older Persons is grounded in principles that include dignity, independence, participation, access to quality basic needs and shared responsibility. Regulation gives practical expression to those principles when people become dependent on formal services.
Rights in long-term care are experienced through ordinary decisions. Can a resident choose when to get up? Is personal information protected? Are religious and cultural preferences respected? Can someone refuse an activity? Are restrictions imposed because they are genuinely necessary or because they make the service easier to manage? Does a person with cognitive impairment remain involved in decisions as far as possible?
These questions matter because dependency changes the balance of power. A person may rely on the same organization for accommodation, meals, intimate care and social contact. Raising a concern can feel risky even when formal complaint routes exist.
Regulation therefore needs to examine institutional culture as well as physical safety. Rules against abuse and neglect are essential, but quality assurance should also detect subtler forms of depersonalization: routines that ignore preferences, communication that excludes the individual, unnecessary restriction or decisions made entirely around organizational convenience.
Rights, consent and decision-making should consequently remain visible as Malaysia's standards mature. Stronger regulation should not turn person-centered care into another compliance label. It should make providers more accountable for demonstrating how rights influence everyday practice.
A new regulatory body could reduce fragmentation, but institutional design matters
Malaysia Care 2026–2030 proposes the development and operationalization of a National Care Regulatory Body during the 2026–2028 period. The framework envisages responsibilities covering registration, licensing, accreditation and quality assurance of care providers. It also calls for inter-ministerial coordination intended to improve policy coherence, harmonize registration standards and streamline regulatory processes.
This is potentially a major structural development. It should nevertheless be described accurately: the strategic framework establishes a reform commitment and implementation pathway, not evidence that the proposed body already exercises those functions nationally.
The design choices will be important. Creating another institution without clarifying its relationship with JKM, MOH, the Ministry of Human Resources and other relevant bodies could add another regulatory layer rather than simplify the landscape. Conversely, clear statutory responsibilities, information-sharing arrangements and referral pathways could make oversight more coherent.
The strongest opportunity lies in designing around the care journey rather than only existing institutional boundaries. An older person's support may involve a family caregiver, community program, registered care center, private nursing home, primary care clinic and hospital at different points. Each organization does not need the same regulator, but the system needs to know where accountability transfers and how important information follows the person.
Organizations and system partners considering such questions can use the Governance Maturity Assessment to examine responsibility, assurance and escalation structures. Again, this is an organizational framework rather than a Malaysian regulatory instrument. The underlying question is nevertheless relevant: does every important risk have a clear owner, and can senior decision-makers see whether controls are working?
Scenario: one provider operates across increasingly blurred service categories
A Malaysian care business begins by operating a residential center offering accommodation, meals, personal assistance and social activities. As demand changes, families increasingly ask for support for relatives with advanced dementia, complex medication regimens and significant mobility limitations.
The operator recruits additional staff and introduces visiting clinical support. Commercially, this appears to be a logical extension of an established service. From a regulatory perspective, however, the organization needs to examine whether its actual service has moved beyond the assumptions on which its original model and registration were based.
Leadership maps the activities now being delivered, distinguishes personal support from nursing and other healthcare interventions, and seeks clarification where necessary about applicable requirements. It reviews staff competencies, escalation routes, clinical responsibilities and information-sharing with external health professionals.
The exercise reveals that the issue cannot be solved merely by adding a broad statement about “complex care” to marketing materials. The provider needs clear admission criteria and thresholds for when a person's needs require different professional input or a different setting.
At system level, growth in providers of this kind would be valuable regulatory intelligence. If many services are adapting to higher dependency because population need is changing, regulators need to determine whether existing categories, standards and guidance remain sufficiently clear.
This is why provider risk management and assurance should complement formal regulatory oversight. Providers remain responsible for understanding the services they actually deliver rather than relying on the historical label attached to the organization.
Regulatory data could become a national care asset
Registration, licensing, self-assessment, inspection, complaints and enforcement all generate information. Used separately, these datasets support individual regulatory functions. Connected intelligently, they can also help Malaysia understand the development of its care economy.
Government needs to know where services operate, what populations they support, how provider capacity changes, where compliance difficulties recur and whether some areas have limited formal provision. Workforce information can add another layer, particularly where service expansion is constrained by shortages of competent workers.
Data should not be collected simply because digital systems make collection easier. Each dataset needs a purpose, proportionate access and appropriate protection. Information about residents, families and employees can be sensitive, and regulatory modernization needs to incorporate privacy and information governance from the outset.
The value lies in combining enough information to identify patterns. If several providers in one region repeatedly struggle with the same workforce standard, the response may need to include training capacity rather than enforcement alone. If complaints rise following rapid market expansion, regulators may need to examine whether oversight capacity has kept pace.
A more integrated regulatory architecture could therefore turn administrative data into system intelligence while retaining clear limits on its use. That would support both oversight and longer-term planning.
Regulation must reach beyond major urban markets
Malaysia's geography complicates regulatory design. Service markets, workforce availability and access to professional support differ between major urban areas, smaller towns and parts of Sabah and Sarawak. A standard may be nationally appropriate while being more difficult to implement in locations where qualified workers, specialist services or transport are less readily available.
This does not mean accepting lower protection for older people outside major cities. It means distinguishing the outcome that should be consistent from the operational mechanism used to achieve it.
For example, a workforce standard may require access to appropriate professional advice. In an urban setting, that support may be available on site or nearby. In a remote community, safe implementation might depend partly on telehealth, visiting professionals and carefully designed escalation arrangements. The standard of protection can remain consistent while delivery differs.
Inspection models also need geographic resilience. If oversight relies heavily on physical visits from a limited regulatory workforce, distance can create unequal regulatory visibility. Digital self-assessment and remote evidence can supplement oversight, but they should not be assumed to replace direct observation entirely.
This is where the regulatory agenda intersects with rural and underserved communities. Geographic variation should be visible in national quality intelligence so that persistent implementation difficulties can inform workforce policy, service development and infrastructure investment.
Regulatory consistency does not require pretending that every part of Malaysia has identical resources. It requires transparency about variation and a credible response where geography affects people's access to safe care.
Scenario: digital assurance supports oversight but cannot see everything
A registered care center in a less densely populated part of Sabah completes its required digital self-assessment and maintains organized electronic records. Training evidence, staffing information and key policies are readily available. From a documentary perspective, the service appears well controlled.
A subsequent direct review identifies an issue that the records did not reveal clearly. Several residents have limited meaningful activity and spend long periods without interaction. Staff are kind and basic physical care is being delivered, but workforce routines have gradually become task-focused.
The provider had not intentionally concealed the issue. Its internal measures concentrated on easily recorded controls: staffing, meals, medication processes, incidents and training. Social participation and residents' experience received less attention.
Management responds by speaking directly with residents and families, reviewing daily routines and introducing a small number of meaningful experience measures. Rather than adding extensive paperwork, the service changes what supervisors observe and discuss.
For the oversight system, the lesson is broader. Digital assurance can increase reach, consistency and efficiency, especially across a geographically dispersed country. It cannot fully capture relational quality. Some dimensions of care remain visible only through conversation, observation and understanding how people spend their day.
Organizations developing more balanced oversight can use the Quality Dashboard Builder to consider how quantitative and qualitative evidence can sit together. The objective is not more measurement; it is better visibility of what matters.
Enforcement needs credibility, proportionality and a route back to improvement
Regulation cannot depend entirely on voluntary improvement. Where providers operate without required authorization, expose people to serious risk or repeatedly fail to correct significant deficiencies, authorities need credible enforcement powers.
JKM's current registration guidance recognizes circumstances in which a care-center registration certificate can be cancelled, including breaches or non-compliance with requirements and specified offences. MOH's framework under Act 586 likewise provides statutory regulatory and enforcement mechanisms for the private healthcare facilities within its scope.
Effective enforcement nevertheless needs proportionality. Not every deficiency represents the same level of risk. Some issues can be corrected quickly through clear actions and follow-up. Others indicate persistent governance failure or immediate danger.
A mature system therefore benefits from an escalation continuum: advice or required improvement for lower-level concerns; structured corrective action and closer monitoring where deficiencies persist; and stronger statutory intervention where risk, repeated non-compliance or unlawful operation warrants it.
Proportionality protects regulatory credibility in both directions. A system that responds severely to every minor error can encourage defensive compliance and concealment. A system that rarely escalates despite repeated serious concerns weakens public confidence and may leave vulnerable people exposed.
Regulators also need evidence that corrective actions work. Closing an action because a new policy has been written is weaker than verifying that staff understand it and practice has changed. Corrective action and remediation should therefore connect identified deficiencies to implementation, review and sustained improvement.
Public transparency can strengthen informed choice without oversimplifying quality
Families purchasing long-term care privately need reliable information. Registration status is a fundamental starting point, but future regulatory development creates an opportunity to consider what additional information should be publicly visible.
Transparency can support accountability by making it easier to verify whether a service is appropriately registered or licensed and understand the type of provision it is authorized to deliver. Over time, carefully designed publication of quality or inspection information could also support informed choice.
However, public reporting needs context. A single score can imply a precision that complex care does not possess. Providers supporting people with greater dependency may report more incidents because the underlying risk is higher or because their reporting culture is stronger. Complaint numbers can similarly be misleading without information about service size, themes and response.
Good transparency therefore explains rather than merely ranks. It can describe regulatory status, significant findings, required improvements and whether those actions were completed. People should also be able to understand what a regulatory judgment does and does not tell them.
For Malaysia, stronger public information could have another benefit: increasing awareness that formal care services should operate within appropriate regulatory frameworks. As the market grows, consumers themselves become part of the accountability environment when they know what evidence to ask for.
Future regulation should follow risk across the whole care ecosystem
Malaysia Care creates an opportunity to think beyond individual facilities. The future care economy will include residential services, home-based support, community organizations, family caregivers, technology platforms, training providers and health services. Not all should be regulated in the same way.
The challenge is to avoid both gaps and unnecessary regulatory expansion. Informal family caregiving should not be transformed into an institutional service merely because it involves substantial support. Conversely, a commercial service should not escape meaningful quality expectations simply because care is delivered in a person's home rather than a center.
A future regulatory framework can differentiate according to risk, organizational responsibility and the nature of the activity. Registration may be appropriate for one category, licensing for another, workforce certification for particular roles and general consumer or employment protections elsewhere.
Technology will complicate these boundaries further. Remote monitoring, digital care platforms and artificial intelligence may influence care without physically delivering it. Their governance will need to consider privacy, accuracy, responsibility and what happens when automated systems identify risk.
The strongest regulatory architecture will therefore be capable of evolving. It should establish durable principles around safety, rights, competence, accountability and evidence while allowing specific controls to adapt as service models change.
What other countries can learn from Malaysia's regulatory transition
Malaysia's regulatory development is shaped by its own institutional history, mixed provider landscape, strong family-care tradition and division between social welfare and healthcare regulation. Countries with comprehensive social insurance or a single established long-term care regulator operate under different conditions, so their structures cannot simply be transplanted.
Malaysia nevertheless illustrates a challenge shared internationally: long-term care often develops across institutional boundaries before regulation catches up with the way people actually experience services.
The transferable lesson lies less in whether one regulator or several regulators is preferable and more in whether the complete system is coherent. People need to know who is accountable. Providers need clear expectations. Regulators need information that can move across organizational boundaries. Workforce competence needs to correspond to the work actually being performed. Complaints and incidents need to generate learning as well as case resolution.
Malaysia's proposed National Care Regulatory Body also demonstrates the importance of sequencing. Structural reform is most valuable when responsibilities, standards, information flows and relationships with existing agencies are designed before organizational machinery becomes the focus.
There is an additional lesson in the country's combination of regulatory reform with workforce professionalization and National Care Standards. These agendas are interdependent. Raising standards without developing workforce capability can create requirements that services struggle to implement. Expanding the workforce without strengthening oversight can increase capacity without equivalent assurance.
Regulatory modernization works best when it is treated as part of care-system development rather than a separate compliance project.
Conclusion
Malaysia enters the next stage of long-term care development with important regulatory foundations already in place but without a single framework covering every form of older-person care. JKM's responsibilities under the Care Centres Act 1993, MOH's regulation of private nursing homes and other healthcare facilities under Act 586, professional requirements and wider legal protections each address parts of the landscape. The challenge is making those parts increasingly coherent as care needs and provider models evolve.
Malaysia Care 2026–2030 provides a significant direction of travel through stronger inter-ministerial coordination, National Care Standards and the proposed National Care Regulatory Body. Implementation will determine their value. Stronger regulation should make responsibilities clearer, connect workforce competence with service expectations, turn complaints and incidents into intelligence and preserve rights alongside safety. It should also remain proportionate enough for different service models and geographic realities.
For older people and families, successful regulatory reform should ultimately be experienced not as additional bureaucracy but as greater confidence: confidence about who is providing care, what standards apply, where concerns can be raised and who is accountable when quality falls short.
Malaysia's opportunity is therefore to build regulation around the realities of modern long-term care rather than simply adding controls to inherited institutional boundaries. If national reform, provider implementation and local oversight develop together, regulation can become infrastructure for a larger care economy: protecting people while supporting services capable of learning, adapting and improving.