6.5 Reprocessing Failure Investigation & Patient Notification
Key Takeaways
- On discovery of a reprocessing failure, the immediate actions are to stop the process, quarantine the equipment, and sequester every device processed since the last documented successful result.
- For a sterilizer failure the recall boundary extends back to the last negative biological indicator, and every load in that interval must be retrieved and reprocessed.
- The patient notification decision weighs the magnitude of risk, the ability to identify exposed patients, and whether testing or intervention exists, and it should be made with the health department rather than in isolation.
- Notified patients should be offered testing for bloodborne pathogens at no cost, along with counseling and a dedicated point of contact.
- Reprocessing failures are almost always latent system failures involving training, staffing, documentation, or instructions for use, so a root cause analysis rather than individual discipline is the appropriate response.
6.5 Reprocessing Failure Investigation & Patient Notification
Quick Answer: Stop, quarantine, sequester. Define the recall boundary — for a sterilizer, back to the last negative biological indicator. Assess risk by device classification, nature of the breach, and patient vulnerability. Decide on notification with the health department. Offer free testing and counseling to notified patients. Fix the system, not the individual.
The blueprint lists participate in incident investigation (e.g., suspected reprocessing failure) as a Domain 8 task. These events are high-stakes: they involve many patients at once, they are highly visible, and they are almost always preventable.
What Triggers an Investigation
| Trigger | Typical discovery |
|---|---|
| Positive biological indicator | Routine sterilizer monitoring |
| Failed Bowie-Dick test | Daily dynamic-air-removal testing |
| Chemical indicator failure | Load inspection or point of use |
| Wet packs / compromised packaging | Load inspection or point of use |
| Endoscope leak test failure | Reprocessing, indicating channel breach and possible internal contamination |
| Minimum effective concentration (MEC) below limit | HLD solution testing — the solution was ineffective for an unknown period |
| Skipped or incorrect step | Self-report, audit, or direct observation |
| Expired or improperly diluted chemistry | Audit |
| Bioburden found on "processed" instruments | Point of use — a sentinel event |
| Cluster of infections | Surveillance, linked to a device or procedure |
Immediate Containment
- Stop the process. Remove the sterilizer, automated endoscope reprocessor, or workflow from service.
- Quarantine the equipment — tag it out so it cannot be used inadvertently.
- Sequester devices processed since the last documented successful result, wherever they are: sterile storage, procedure carts, satellite clinics.
- Notify the sterile processing manager, infection prevention, the affected clinical departments, and risk management immediately.
- Preserve records and evidence — cycle printouts, indicator results, load records, chemistry logs, maintenance history, staffing records.
- Do not discard the implicated devices or indicators.
Defining the recall boundary
| Failure | Boundary |
|---|---|
| Positive biological indicator | Every load back to the last negative BI |
| Failed Bowie-Dick | Every load processed in that sterilizer since the last passing test |
| HLD solution below MEC | Every device processed in that solution since the last passing concentration test |
| Endoscope leak / channel breach | Every patient on whom that scope was used since the last passing leak test |
| Procedural step omitted | The full period during which the practice occurred — often established only by interview and audit |
When the boundary cannot be established from records, it must be drawn conservatively, which is precisely why documentation discipline matters: poor records convert a 12-load recall into a six-month look-back involving hundreds of patients.
Risk Assessment
| Factor | Higher risk | Lower risk |
|---|---|---|
| Device classification | Critical — entered sterile tissue or the bloodstream | Noncritical — intact skin only |
| Nature of the breach | No cleaning performed; sterilant absent; grossly soiled device | A single monitoring parameter out of range with cleaning verified |
| Evidence of contamination | Visible bioburden, positive cultures | Indicator anomaly only |
| Pathogen plausibility | Blood contact, lumened device, prior patient with bloodborne infection | No blood contact |
| Patient vulnerability | Immunocompromised, implanted device, prolonged procedure | Healthy, brief superficial contact |
| Time elapsed | Recent — intervention possible | Remote — beyond useful testing windows |
Most investigations conclude that actual transmission risk is very low, because cleaning alone removes the great majority of bioburden and multiple redundant steps must fail simultaneously. Low risk is not the same as no risk, and it does not by itself settle the notification question.
The Patient Notification Decision
This decision belongs to a multidisciplinary group: infection prevention, sterile processing, risk management, legal counsel, the relevant clinical chiefs, executive leadership, and — importantly — the state or local health department, which has usually handled similar events before and can provide precedent, template letters, and public messaging support.
The framework
- Magnitude of risk — is transmission plausible, and of what?
- Identifiability — can the exposed patients actually be named?
- Availability of intervention — is testing available? Is post-exposure prophylaxis or treatment possible or already too late?
- Ethical duty — would a reasonable patient want to know? Is there a duty of transparency independent of measurable risk?
- Likelihood of disclosure by other means — an event that becomes public without a facility-led notification is far more damaging to patients and to institutional trust.
Exam Tip: The defensible default in an ambiguous case is to notify. Facilities that have chosen silence and been exposed later have caused more harm — to patients and to themselves — than facilities that over-notified. Where risk is genuinely negligible and no intervention exists, a decision not to notify must be documented with its rationale and made with health department concurrence.
Executing notification
- Written letter in plain language, followed by telephone contact where feasible
- Clear statement of what happened, what the risk is, and what the facility is doing
- Free testing for relevant bloodborne pathogens — HIV, hepatitis B, hepatitis C — with follow-up serology at appropriate intervals
- Counseling and a named contact plus dedicated phone line
- Coordinated messaging to staff and, where warranted, the public, through the designated public information officer
- Documentation of every contact attempt and outcome
Staff need the same briefing before patients are contacted, because staff will be asked about it by patients and by their own families.
Corrective Action
Reprocessing failures are latent system failures. Common root causes:
| Root cause | Corrective action |
|---|---|
| Inadequate initial training or competency verification | Structured onboarding, documented competency, periodic re-verification |
| Production pressure and inadequate staffing | Staffing model matched to case volume; realistic turnaround expectations |
| Missing, outdated, or inaccessible IFUs | Current IFU library accessible at each workstation |
| Inadequate instrument inventory | Inventory analysis — the true fix for IUSS pressure and rushed processing |
| Poor documentation practice | Standardized load records, indicator logs, and audit |
| Device design that resists cleaning | Product review before purchase; escalation to the manufacturer and FDA |
| Insufficient physical space or workflow crossing clean and dirty | Facility redesign, workflow separation |
Conduct a formal RCA² with the sterile processing staff involved, not to them. Punitive responses to individuals reliably destroy the self-reporting that surfaces the next failure while it is still a near miss.
The corrective action plan should also feed FDA reporting where a device or its instructions contributed, and the findings should return to the Infection Prevention Committee with assigned owners and due dates. Certification of sterile processing personnel, routine competency observation, and periodic audits of documentation are the durable preventive controls.
A biological indicator from a steam sterilizer returns positive on Tuesday. The last negative biological indicator was Friday. What is the correct recall boundary?
An endoscope fails its leak test, indicating a channel breach that may have existed for an unknown period. Which factor most directly determines how many patients are involved?
A reprocessing breach is discovered with a very low estimated transmission risk. Leadership asks whether patients must be notified. What is the most appropriate approach?
Investigation of a sterile processing failure reveals that a technician skipped a cleaning step during a period of severe understaffing and high case volume. What is the most appropriate corrective response?