Patient Safety & Systems-Based Practice
Just culture: distinguishing human error, at-risk, reckless
— Human error — inadvertent slip, lapse, or mistake. Console the individual; redesign the system.
— At-risk behavior — drifting from safe practice because the unsafe shortcut feels justified or routine ("everyone does it"). Coach the individual; remove incentives for drift.
— Reckless behavior — conscious disregard of substantial and unjustifiable risk. Discipline (punitive action up to termination/licensure referral).
— Any sentinel event, serious safety event, or near-miss reported through incident reporting.
— Medication errors, wrong-site surgery, retained foreign object, patient falls with harm, HAI clusters.
— Disruptive provider behavior, repeated protocol bypass, or staff "workarounds" that have become normalized.

— "An experienced nurse, working a normal shift, intended to give metoprolol but pulled metoclopramide from an adjacent Pyxis bin with similar packaging."
— "A resident transposed two digits when entering a heparin dose into a new EHR after a recent system migration."
— Keywords: inadvertent, intended to, meant to, slipped, transcription, look-alike, sound-alike, first time using.
— "The nurse routinely scans the medication after administration rather than before because the scanner is slow; this is common on the unit."
— "A surgeon performs the time-out informally while gowning rather than as a full team pause — standard practice in this OR for years."
— Keywords: routinely, usually, everyone on the unit, shortcut, workaround, habit, didn't think it was a big deal, faster.
— "A physician documents a physical exam he did not perform."
— "A nurse takes a verbal order for a high-risk medication while intoxicated."
— "A surgeon proceeds despite an unresolved incorrect count, telling the team to 'just chart it as correct.'"
— Keywords: knew the policy, was warned, falsified, ignored, refused to, intoxicated, intentional.

— Ask: "Would three to five peers of similar training, in the same circumstances, likely have done the same thing?"
— If yes → human error or at-risk behavior; the system is the dominant driver.
— If no → individual accountability rises; lean toward reckless or willful violation.
— Example: Three other ICU nurses confirm they also scan after administration because of scanner lag → at-risk behavioral drift at the unit level, not an individual problem.
— First-time human error after years of safe practice → console, not discipline.
— Repeated at-risk behavior despite coaching → escalates managerial response (formal counseling, performance improvement plan), but does not automatically convert the behavior into reckless.
— Reckless act → discipline regardless of prior record.
— Multiple staff exhibit the same workaround.
— Policy exists on paper but is not enforced or is impractical.
— Production pressure, understaffing, or equipment failure created the shortcut.
— Reporting of near-misses is rare → suggests punitive culture suppressing data.

— Stabilize the patient; mitigate harm.
— Sequester involved equipment, medication vials, and packaging (chain of custody).
— Preserve the EHR audit trail; do not alter documentation.
— File internal incident report within institutional timeframe (typically 24 hours).
— Notify risk management and patient safety officer.
— Determine if event meets Joint Commission sentinel event criteria (unexpected death, permanent harm, or severe temporary harm requiring intervention to sustain life).
— External reporting: state DOH for reportable events, FDA MedWatch for device/drug, CDC NHSN for HAIs.
— CMS and Joint Commission require disclosure of unanticipated outcomes.
— Use a trained disclosure team; include what happened, what is being done, and a sincere apology ("I'm sorry this happened to you" — protected as apology in most states' apology laws).
— Do NOT speculate about causation before investigation completes.
— Apply Just Culture algorithm: human error vs at-risk vs reckless.
— Document rationale, including substitution test result.

— Retrospective, performed after the event.
— Multidisciplinary team including frontline staff, not just management.
— Focuses on systems and processes, not individuals — even when an individual clearly erred.
— Uses techniques like the "5 Whys," fishbone (Ishikawa) diagrams, and process mapping.
— Joint Commission requires RCA within 45 days of a sentinel event, with an action plan and measurable outcomes.
— Prospective, performed before an event, on a high-risk process (e.g., new chemotherapy protocol, ECMO program launch).
— Identifies potential failure modes, scores them on severity × occurrence × detectability (Risk Priority Number), and prioritizes mitigation.
— RCA = retrospective (after harm) — "Why did this happen?"
— FMEA = prospective (before harm) — "How could this fail?"
— Step 3 loves this pairing; mixing them up is the classic distractor.

— Empathetic conversation; emphasize this could happen to anyone.
— No formal discipline, no record in personnel file.
— System fix is mandatory: barcode scanning, separate look-alike storage, EHR forcing functions, dose-range alerts, standardized order sets.
— Reporting the individual to the state board is inappropriate and a frequent wrong answer.
— Conversational coaching about why the shortcut increases risk.
— Identify and eliminate the reason for the drift (fix the slow scanner, improve staffing, simplify the policy).
— Address unit-wide drift through team huddles, audits, and leadership rounding.
— Repeated at-risk behavior after coaching → progressive discipline (verbal warning → written → PIP), but the first response is still coaching.
— Suspension pending investigation, formal discipline, possible termination.
— Mandatory reporting to state licensing board if behavior involves impairment, falsification, or patient endangerment.
— Peer-review committee referral for credentialed providers.

— Non-punitive event reporting system — anonymous or confidential; protected from disciplinary use for human error/at-risk behavior.
— Just Culture algorithm/decision tree — standardized tool managers use to classify behavior consistently (reduces bias).
— Safety huddles — daily brief multidisciplinary check-ins to surface near-misses prospectively.
— Good Catch programs — recognize and sometimes reward staff for reporting near-misses; reinforces psychological safety.
— Patient Safety Organizations (PSOs) under the federal Patient Safety and Quality Improvement Act (PSQIA, 2005) — provide federal privilege and confidentiality protection for Patient Safety Work Product, encouraging candid reporting across institutions.
— Peer review committees — protected under state statutes; handle credentialed-provider behavior issues.
— Disclosure and resolution programs (CANDOR model) — Communication AND Optimal Resolution; early disclosure + apology + offer of compensation when appropriate. Reduces litigation versus the traditional "deny and defend" approach.
— Second victim support programs (e.g., RISE, forYOU) — clinicians involved in adverse events are at high risk for burnout, PTSD, suicide.
— Leadership safety rounds, TeamSTEPPS communication training, simulation-based team training.

— Convene attending, risk management, and (when appropriate) patient safety officer.
— Establish known facts; do not speculate about cause.
— Choose a senior, trained physician — typically the attending — as primary communicator.
— Private setting, adequate time, family present per patient preference.
— State what happened in plain language.
— Express empathy and apology — "I am so sorry this happened to you." Most states have apology laws protecting expressions of sympathy from being used as admissions of liability.
— Describe immediate clinical response and ongoing care plan.
— Commit to investigation and follow-up communication with findings.
— Address billing — many institutions waive charges related to preventable harm.
— RCA proceeds.
— Follow-up meeting with patient/family to share findings and corrective actions.
— If preventable harm identified → offer of compensation through institutional resolution program, separate from litigation.
— Continued emotional support; offer patient advocate liaison.

— Supervised practice changes the substitution test denominator — peers are other residents at similar PGY level, not attendings.
— Errors often expose supervision gaps (latent system failure), making attending-level accountability part of the analysis.
— Discipline channels include program director, GME office, and ACGME for systemic concerns; remediation plans are the standard response for human error and at-risk behavior.
— Reporting a resident to the state medical board for a first-time human error is almost always inappropriate — the GME remediation pathway is the answer.
— Managed through nursing leadership and HR; state boards of nursing handle reckless behavior, impairment, or diversion.
— Many states mandate reporting of nurses to the board for drug diversion, practicing while impaired, or patient abuse — these are reckless-category triggers.
— Errors in compounding, dispensing, or verification routed through pharmacy leadership; state board of pharmacy involvement for reckless behavior.
— Hospital peer review and Medical Executive Committee evaluate credentialing impact.
— National Practitioner Data Bank (NPDB) reporting required for adverse credentialing actions ≥30 days, malpractice payments, and certain licensure actions.
— Physician Health Programs (PHPs) and equivalent nursing/pharmacy programs offer confidential evaluation and monitored return-to-practice — often preferred over immediate licensure action when safety allows.

— Just Culture extends upward: executives and managers are accountable for system design and culture, not for being free of frontline errors.
— Repeated unit-level events often reflect leadership failure to address known latent risks (chronic understaffing, broken equipment, unenforced policies).
— Board of directors and C-suite increasingly held accountable for patient safety metrics tied to compensation.
— Clinicians involved in serious adverse events experience guilt, shame, anxiety, depression, PTSD, and increased suicide risk.
— Recognize the second victim phenomenon as a predictable response — not weakness.
— Institutional response: peer support programs (RISE at Johns Hopkins, forYOU at Missouri), employee assistance programs, time off from clinical duties when needed, protection from premature questioning.
— Avoid "name, blame, shame" responses — they worsen second-victim morbidity and suppress future reporting.
— Steep authority gradients (in some specialties, training cultures, or international medical graduate experiences) suppress speaking up about safety concerns.
— TeamSTEPPS, CUS language (I'm Concerned, Uncomfortable, this is a Safety issue), and two-challenge rule flatten hierarchy and empower escalation.
— Just Culture explicitly protects staff who raise safety concerns from retaliation; retaliation against good-faith reporters is itself a reckless violation.
— Patient and Family Advisory Councils participate in event review and policy design.
— Family-activated rapid response (e.g., Condition H/Help) empowers families to escalate concerns directly.

— Suppressed reporting → leadership lacks data → recurrent harm.
— Workarounds proliferate underground.
— Staff burnout, turnover, increased second-victim morbidity.
— Litigation rises because patients/families learn the truth through discovery, not disclosure.
— Reckless behavior tolerated; "good people doing bad things" excuse misapplied.
— Erodes trust among compliant staff who follow rules at personal cost.
— Regulatory exposure (Joint Commission, CMS Conditions of Participation) when patterns of unaddressed harm emerge.
— Inconsistent classification across managers → perceived favoritism, especially along race/gender/role lines.
— Algorithm used as cover for predetermined discipline.
— Disclosure delayed pending investigation → erodes patient trust, increases litigation.
— Underreporting — single biggest threat to safety; correlates with serious harm rates.
— Normalization of deviance — at-risk behavior becomes invisible to the unit (Challenger/Columbia parallel).
— Production-pressure–driven harm — pressure to discharge, turn over OR rooms, or shorten ED dwell time outpaces safety capacity.
— Diagnostic error — now recognized as a leading harm category (~10% of patient deaths); Just Culture frameworks increasingly applied to cognitive errors and system contributors (handoffs, missed follow-up of incidental findings).

— Immediate harm → attending, charge nurse, rapid response if clinical deterioration.
— Notify risk management and patient safety officer for any reportable event.
— Department chair and chief medical officer for sentinel events.
— Unexpected death, permanent harm, or severe temporary harm requiring life-sustaining intervention.
— Specific reviewable events: wrong-site/wrong-patient/wrong-procedure surgery, suicide of inpatient (or within 72 hours of discharge), infant abduction/discharge to wrong family, hemolytic transfusion reaction from ABO incompatibility, retained foreign object, severe neonatal hyperbilirubinemia.
— Require RCA + action plan within 45 days.
— State Department of Health — state-specific reportable events list.
— CMS — never events affect reimbursement; certain HACs are non-reimbursable.
— FDA MedWatch — adverse drug events and device malfunctions.
— CDC NHSN — healthcare-associated infections.
— State licensing boards — impaired or reckless practitioners (per state law).
— National Practitioner Data Bank — adverse credentialing actions ≥30 days, malpractice payments.
— Adult/child protective services — suspected abuse or neglect (clinician mandatory reporters).
— Communicable disease reporting — per state list (TB, syphilis, measles, etc.).
— Federal (False Claims Act qui tam, OSHA) and state laws protect employees who report safety violations in good faith.
— Retaliation is independently actionable and itself a reckless act.

— Five principles: preoccupation with failure, reluctance to simplify, sensitivity to operations, commitment to resilience, deference to expertise.
— Modeled on aviation, nuclear power, naval carriers.
— Just Culture is a prerequisite for HRO — you can't be preoccupied with failure if reporting failures gets people fired.
— Adverse events occur when holes in multiple layers of defense align.
— Distinguishes active failures (frontline errors) from latent conditions (organizational design flaws).
— Reinforces systems thinking — the same lens Just Culture uses to evaluate context.
— Design systems to accommodate predictable human limitations (vision, memory, fatigue, distraction).
— Forcing functions, standardization, simplification, redundancy, constraints.
— Provides the system fixes prescribed for human error and at-risk behavior.
— Process-improvement methodologies focused on waste reduction (Lean) and variation reduction (Six Sigma).
— Operationalize the system redesign component of Just Culture responses.
— Communication, leadership, situational awareness, mutual support training.
— Addresses the team behaviors that contribute to errors.

— Civil legal framework: duty, breach, causation, damages.
— Concerned with negligence standard — what a reasonable clinician would do — and compensating injured patients.
— Just Culture's categorization is for internal accountability; it does not determine malpractice liability. A human error can still be negligent under tort law if it falls below standard of care.
— Key distinction: A clinician can be "consoled" internally under Just Culture and still face a malpractice suit — these are parallel, not exclusive, tracks.
— Administered by state boards; concerned with fitness to practice.
— Triggered by reckless behavior, impairment, criminal conduct, boundary violations.
— QI activities (PDSA cycles, RCAs) generally do not require IRB review.
— If results are intended to produce generalizable knowledge → research → IRB oversight and informed consent required.
— Step 3 distractor: confusing a QI project with research.
— Institutional function focused on minimizing legal/financial exposure.
— Overlaps with patient safety but with different primary aim. Modern programs integrate the two (Enterprise Risk Management).
— Regulatory adherence (HIPAA, Stark, anti-kickback, CMS Conditions of Participation).
— Compliance violations may overlap with reckless behavior (e.g., HIPAA snooping) — but are also independently sanctionable.
— Addresses value conflicts (autonomy, end-of-life, surrogate decisions) — not behavioral classification.
— Use ethics consult for what is the right thing to do; use Just Culture for how do we respond to a behavior that already occurred.

— Written Just Culture policy endorsed by senior leadership and medical staff bylaws.
— Standardized behavior-classification algorithm available to every manager.
— HR and peer-review policies aligned with the framework (so a manager's recommended response is not overridden inconsistently).
— Just Culture training for all managers, charge nurses, medical directors, residency program directors.
— Onboarding for all staff includes reporting culture expectations.
— Periodic refreshers tied to real (de-identified) case discussions.
— Track event-reporting rates (target: rising).
— Safety culture surveys (AHRQ Hospital Survey on Patient Safety Culture, SAQ) — measure perceptions of non-punitive response, teamwork, leadership.
— Track time-to-disclosure, time-to-RCA-completion, action-plan implementation rate.
— Outcome metrics: serious safety event rate (SSER), HAI rates, readmission, mortality, malpractice claims volume and severity.
— Share de-identified event reviews and corrective actions across the institution ("Safety Stories," grand rounds).
— Close the loop with reporters — staff who report should hear what happened with their report.
— Visible support for reporters; public acknowledgment of "good catches."
— Walk-rounds with frontline staff; ask "what's the next event going to be?"
— Discipline consistent with the algorithm — favoritism destroys culture overnight.

— Second disclosure meeting after RCA completes — share findings in plain language, describe corrective actions, reaffirm apology if preventable harm confirmed.
— Coordinate ongoing clinical care; assign a single point of contact (patient advocate or case manager).
— Address financial concerns (charge waiver, compensation offer if appropriate under CANDOR).
— Monitor for delayed effects (psychological harm, loss of trust); offer continued counseling.
— Check-in at 1 week, 1 month, 3 months — not just immediately.
— Peer support, EAP, psychiatric referral if warranted.
— Reasonable accommodations: temporary schedule changes, redeployment from triggering settings, deferral of high-stakes assignments.
— Avoid making the involved clinician retell the story repeatedly — coordinate investigators.
— Track implementation of each RCA corrective action with named owner and due date.
— Audit at 30/60/90 days that the new process is in use (compliance ≠ availability).
— Re-measure outcome metric after intervention; if no improvement, escalate to a stronger intervention.
— Debrief huddles after serious events normalize discussion and surface lingering concerns.
— Reinforce psychological safety for ongoing reporting.
— Disclosure encounters → medical record.
— Incident reports, RCA findings → QI/peer-review files (privileged).
— Disciplinary actions → personnel file per HR policy.
— Never reference incident reports in the medical record.

— AMA Code of Ethics Opinion 8.6: physicians have a duty to disclose harmful errors to patients.
— Beneficence, non-maleficence, and patient autonomy require honest information so patients can make informed decisions about future care.
— Risk management may advise on wording; risk management does not authorize non-disclosure.
— If a procedure complication occurred, the patient's informed consent for the next procedure must include disclosure of what happened previously.
— Surrogate decision-making: error disclosure goes to the surrogate when patient lacks capacity, then to the patient when capacity returns.
— Suspected child or elder abuse.
— Impaired colleague (state-specific reporting to licensing board or PHP).
— Communicable diseases per state list.
— Gunshot/stab wounds, certain injuries.
— Driving impairment in some states (epilepsy, dementia).
— Handoffs are the single highest-risk moment for safety failures.
— Use standardized tools (I-PASS, SBAR); document pending labs, follow-up of incidental findings, contingency plans.
— Failure to communicate a pending result at discharge that later reveals cancer → preventable diagnostic-error harm → triggers disclosure obligation.
— Retaliation against a good-faith safety reporter is itself a reckless violation and may carry independent legal liability (False Claims Act, OSHA, state laws).
— Patient Safety Work Product reported to a federally listed PSO is privileged under PSQIA.
— State peer-review statutes protect peer review proceedings from discovery.
— These protections are lost if QI data is improperly disclosed or used outside the privileged context.
— Most states protect expressions of sympathy ("I'm so sorry this happened") from being used as admissions; fewer states protect statements of fault.

— Strong: forcing functions, hard stops, removing hazard (e.g., remove floor-stock concentrated KCl).
— Intermediate: checklists, double checks, standardized communication.
— Weak: education, policy reminders, additional warnings.

— Experienced nurse pulls wrong vial from adjacent bin; patient harmed. Question: best initial managerial response? Answer: console nurse, file incident report, initiate system review (e.g., separate storage, barcode scanning). Wrong answers: terminate, report to nursing board, no action.
— Unit nurses routinely scan meds after administration because scanner is slow. Single error reaches a patient. Question: best response? Answer: address at-risk behavior with coaching AND fix the scanner / workflow (system-level). Wrong answer: discipline the individual nurse only.
— Resident charts an exam not performed; or surgeon overrides incorrect count. Question: best response? Answer: formal discipline, peer review / GME remediation, consider mandatory reporting. Wrong answer: coaching only.
— Hospital has rising harm rate but very few incident reports. Question: best intervention? Answer: leadership intervention to establish non-punitive reporting culture, AHRQ safety culture survey. Wrong answer: increase disciplinary action for unreported events.
— After error reaches patient, family asks what happened. Risk management says "wait." Question: best action? Answer: timely, factual, empathetic disclosure with apology; document. Wrong answer: defer all communication until investigation completes.
— Multiple system failures aligned to cause harm. Question: which model? Answer: Swiss Cheese (latent conditions + active failures).
— Hospital launching new high-risk service line. Question: which method to anticipate failures? Answer: FMEA.
— Clinician withdrawn, tearful after adverse event. Question: best response? Answer: peer support / EAP referral, ongoing follow-up. Wrong answer: immediate disciplinary review.

— Categorize by behavior, not outcome. A reckless act with no harm is still reckless; a human error with a dead patient is still human error. Match response (console / coach / discipline) to the choice, not the consequence.
— System over individual when the substitution test passes. If 3–5 peers would have done the same, the system is dominant — strong corrective actions (forcing functions, removing hazards) beat re-education every time.
— Disclosure is non-negotiable, timely, and empathetic. "I'm sorry this happened" plus the facts and an investigation commitment is the right answer; deferring disclosure pending risk-management strategy is wrong.
— RCA is retrospective (45 days for sentinel events), FMEA is prospective; both feed PDSA-cycle implementation. Pair the right method to the right question on the exam.
— Punitive cultures look "safe" because errors hide. High event-reporting volume + active disclosure + visible non-retaliation are the markers of a truly safe institution; low reports plus bad outcomes signals a culture problem requiring leadership-level repair.
— Reserve mandatory state-board and NPDB reporting for impairment, falsification, diversion, sexual misconduct, reckless harm, and adverse credentialing actions ≥30 days — not for first-time honest errors.

