What to do when critical healthcare ventilation fails verification

A critical ventilation system has been handed over for annual performance verification and the inspector finds it cannot achieve the required standard. The immediate decision is about the clinical area the system serves, not merely a maintenance ticket. Restrict the affected area, prevent unapproved return to service, tell the named people, agree the interim service plan, fix the actual cause, obtain the right verification or validation, and document an explicit release into use.

NHS England’s HTM 03-01 Part B, paragraph 4.34 says that a critical system unable to achieve the standard should not be returned to service. The duty manager who signed it over for verification should be told immediately. The report explaining the non-compliance should reach the head of the user department, the nominated infection prevention and control person and the healthcare provider’s authorised person for ventilation as soon as practicable.

That is a specific instruction for a critical system under the memorandum. It is not a universal instruction that every imperfect ventilation reading closes an entire hospital. The team must first confirm which system was tested, what it serves, why it is classified as critical and what the failed result means for the care being delivered. The technical and clinical decision-makers then determine which activities cannot safely continue in the affected area and where they can be moved. A facilities dashboard cannot make that clinical decision by itself.

The working sequence is simple to state and demanding to execute. Identify the affected system and rooms, prevent unapproved return to service, share the failure report with the named decision-makers, agree the clinical consequence and interim service plan, fix the actual cause, obtain the right verification or validation, and document an explicit release into use. Keep the system state and clinical-area state separate. A fan may be running while the room remains unsuitable for its intended procedure. Conversely, a clinical service may continue elsewhere while the failed system remains out of service.

Check that this is the right guidance and the right system

NHS England’s HTM 03-01 publication page says the memorandum addresses specialised ventilation for healthcare premises providing acute care. For other types of healthcare, the people responsible for the facility should assess treatment, patient condition and intensity of use to determine the guidance’s applicability. A private hospital, clinic or specialist provider should record that assessment rather than copying an acute trust’s plant schedule without thought. Local contracts, clinical standards and regulator requirements may add duties.

Part B identifies critical healthcare ventilation by the consequence of loss of service. Its examples include operating and interventional suites, airborne isolation facilities, critical care and neonatal units, invasive treatment rooms, endoscopy, pharmacy aseptic suites and particular sterile-services spaces. It also includes some laboratory, imaging and local exhaust ventilation applications. The list has a functional catch-all for a system whose loss would seriously degrade optimal healthcare. Where classification is uncertain, Part B directs consultation with the ventilation safety group about patient safety and business continuity. HTM 03-01 Part B, paragraph 4.7.

Do not use room labels alone. A room called a theatre might share an air handling unit with adjoining spaces. A procedure room’s function may have changed since commissioning. A critical care area may depend on both supply and extract plant, pressure relationships, filtration and the surrounding building fabric. Retrieve the system identifier, served-area plan, design or accepted baseline, change history and current use before describing the extent of failure. If historical design records are missing, Part B calls for an appropriate performance baseline based on the installation’s purpose and age to be recorded in the system log.

The annual report should be interpreted against the correct reference for that system. An old system is not automatically judged against every design parameter for a new installation. Equally, age does not make unsafe performance acceptable. NHS England distinguishes Part A design and validation requirements for new installations and major refurbishments from Part B operational management of existing systems. The inspector and authorised person must explain which standard or agreed baseline applies, what failed and how significant the gap is for the service.

Contain the exposure and agree the clinical service plan

Start with a visible status that operations, estates and the user department can understand. Record the time the failure became known, the system identifier, rooms served, current operating state, the failed measurements or conditions, and who has been notified. Preserve the inspector’s actual report. A short verbal summary may guide immediate action, but it is not a substitute for the measurements and reasoning behind a failed verification.

The duty manager and head of the user department need a shared picture of what care is scheduled. Are patients present? Are procedures under way? Are vulnerable patients exposed to an isolation-room pressure failure? Is a pharmacy area preparing products? The response should be proportional to the clinical consequence and informed by the specialist leads. It may involve pausing new cases, moving work to a verified room, closing a specific area, changing patient flow or invoking local continuity arrangements. The precise choice belongs to the provider’s clinical governance and infection prevention processes. This article cannot prescribe a safe alternative room or a universal waiting time.

Avoid treating a temporary workaround as an engineering fix. Portable air-cleaning devices have their own selection, installation, testing and governance requirements. NHS England’s HEPA air-cleaning bulletin is an addendum to HTM 03-01, not a permission to substitute an unassessed unit for a failed critical ventilation system. A change to room use or patient placement must also consider airflow paths, neighbouring spaces, staff exposure, fire arrangements and infection control.

Put a named owner on the service restriction. The maintenance team may own isolation of the plant, while the clinical department owns whether its procedures can take place. A senior duty manager needs to coordinate decisions across both. Record which rooms and activities are restricted, the start time, the communication route to staff and any booking or patient-transfer consequence. When shifts change, the status must survive handover. An unresolved failure cannot disappear when a work order is marked attended.

Send the report to the people named by HTM 03-01

The mandatory handoff in this workflow is unusually specific. Part B, paragraph 4.34, names the duty manager who signed the system over for annual verification for immediate notice. Copies of the verification report giving the reasons for non-compliance should go to the user department head, nominated infection prevention and control person and authorised person for ventilation as soon as practicable. Capture the recipients, times and acknowledgements. If the nominated people are unavailable, use the organisation’s substitute appointments and escalation policy.

The report should distinguish measured failure from interpretation. Include the system identifier, location, test date, method, reference standard or baseline, measured results, environmental conditions that matter, limitations, defects found and an explicit conclusion about fitness for purpose. A report that says only “failed” is hard to act on. A report that gives readings without a conclusion can leave the duty manager guessing. Ask the verifier to identify the precise non-conformities and whether they are linked or independent.

The HTM 03-01 Part B describes a multidisciplinary ventilation safety group with estates, infection prevention and control, clinical and technical expertise. Complex failures can require that group’s input, particularly when several services share a plant, the available alternative capacity is limited or a proposed interim measure changes risk. The group should have a defined route for urgent advice rather than waiting for its next scheduled meeting. The authorised person can coordinate technical evidence while the clinical leads own the use decision.

Escalation should be proportionate but traceable. A local incident record may be appropriate if patients or staff were exposed, clinical work was disrupted, or an unsafe condition persisted unnoticed. Do not assume that every failed reading is a reportable patient safety incident or a RIDDOR event. The provider should apply its actual incident, notification and regulator rules to the facts. Retain a link between the verification failure, service decision and any incident review without copying sensitive patient details into a general estates file.

Investigate the cause rather than resetting the alert

A failed annual verification can reveal a new component fault, a drift in controls, a blocked filter, damaged ductwork, leakage, changed room fabric, altered equipment, an unrecorded modification or a mismatch between current use and the original design. It can also expose an unreliable baseline. The investigation should compare current results with earlier verification and maintenance history, examine trends in alarms and pressure readings, and confirm what changed before the failure. Do not accept the first visible defect as the complete explanation without checking whether it accounts for all failed parameters.

Walk the whole system path with competent people. The air handling unit, filters, fans, dampers, controls, ductwork, terminal devices, room pressure relationships and building envelope can all affect performance. A room door that no longer seals or a new penetration through a wall may matter as much as a fan setting. If a contractor recently changed an asset, obtain the work scope, commissioning record and hand-back evidence. If a room has been repurposed, check whether the ventilation still suits its new clinical function. The Part B annual verification section explicitly considers system condition, fire containment, room fabric and application-specific performance.

Assign each cause hypothesis a test. For example, if a pressure cascade has collapsed, identify whether supply volume, extract volume, door leakage or control response is responsible. If measured air volume is low, distinguish a dirty filter from a changed fan speed, blocked path or measurement error. If a reading varies between runs, check operational mode and whether the room was tested under its intended in-use condition. Avoid changing several settings at once without a record. Otherwise a passing retest may not reveal which correction worked or whether it created a new problem elsewhere.

Record the corrective plan with responsible person, permitted access, isolation and infection control requirements, target date, affected clinical operations and acceptance criteria. Major works in an occupied healthcare area need a separate infection-risk and handover plan. A companion guide on occupied healthcare maintenance addresses dust, work-area separation and clinical reopening after contractor activity. This page owns the failed ventilation verification and technical release decision. The two workflows meet when remedial work itself changes infection risk.

Choose the right evidence for return to use

A repaired part and a cleared work order are insufficient if the critical system still fails its required performance. Define the acceptance tests before work begins. The verifier, authorised person and relevant clinical or infection prevention lead should agree what measurements, inspections and records will demonstrate that the original failure has been resolved and that the system is fit for its intended use. Retain the failed report, repair record, new measurements, exception decisions and final acceptance as one auditable chain.

Part B draws a distinction between ordinary correction and refurbishment. Paragraph 4.35 says that when a critical system is refurbished to bring it to a suitable standard, it is subject to the full validation procedure in Part A chapter 12, or other application-specific guidance as appropriate, before being taken back into use. A small component repair may call for targeted verification under the authorised person’s judgement. A substantial change may require much more. Do not label a major redesign as a routine filter replacement to avoid validation. Conversely, do not claim every minor defect automatically triggers full new-installation validation. Document the technical basis for the chosen scope.

The release should state two things separately. First, a competent technical reviewer confirms the ventilation system meets the applicable acceptance criteria and may be returned to its intended operating mode. Second, the user department and infection prevention leads accept that the clinical space can resume its intended activity, taking account of the completed work, cleaning, environmental controls and any remaining limits. The precise signatories follow local governance, but the evidence should identify who made each decision and when. A dashboard status should reflect those decisions rather than create them.

If full performance cannot be restored promptly, the provider needs a managed exception and continuity decision, not an invisible temporary pass. The critical system remains under the Part B failure instruction. The team may need to change where care is delivered, revise the service plan or commission engineering work. Set a review time and record the consequences of delay. An indefinite workaround can become normal through repetition unless someone owns the unresolved risk and the capital or maintenance decision.

Build a failure record that can survive staff turnover

A practical record starts with the system inventory. HTM 03-01 Part B asks for a unique system reference and a log containing purpose, installed equipment, design parameters, validation, annual inspection, verification and maintenance records. Link that record to the rooms served and the clinical service. Then record the failed event as a sequence, not as one document attachment. A useful failure record has these fields:

• System identifier, served rooms, criticality classification and clinical use on the failure date.
• Verification date, verifier, applicable standard or accepted baseline, failed values and report location.
• Immediate plant status, clinical-area restriction, time of decision and people informed.
• The report recipients named in Part B, with delivery and acknowledgement times.
• Cause investigation, related maintenance or building changes, agreed corrective tasks and owners.
• Interim service arrangements, patient and staff risk controls, and the next review point.
• Repair and recommissioning evidence, retest method, results and any limitations.
• Technical return-to-service decision and separate clinical-area reuse decision.
• Lessons for inspection interval, asset replacement, training or response procedure.

Keep the record proportional. An electronic register can point to controlled technical reports and clinical decisions without copying confidential patient information into every maintenance attachment. Access should match the information’s sensitivity. Date stamps and version history matter when the first report, corrective work and final validation occur weeks apart. A future verifier should be able to see which baseline was accepted and why, not infer it from a green traffic light.

Part B says critical healthcare ventilation should have quarterly inspections and annual performance verification, with more frequent verification possible in some circumstances. It also says routine maintenance frequency should reflect system function, location, condition and consequence of failure. After an unexpected failure, ask whether the existing inspection and maintenance plan would have detected drift earlier. Repeated defects may warrant trend review, replacement planning or changes to monitoring, and the ventilation safety group must translate that learning loop into the specialist plant programme.

Worked examples

A procedure suite that fails pressure verification

A procedure suite is released for annual verification. The report finds that the intended pressure relationship between the procedure room and adjoining space is not maintained in the in-use operating mode. The inspector confirms the failure against the accepted baseline and records the readings, method and environmental conditions. The duty manager is told at once. The critical system is not returned to service. The user department head, nominated infection prevention person and authorised ventilation person receive the failed report.

The clinical team pauses new procedures in the affected suite and checks whether a verified alternative room is available. Estates confirms the system identifier and all rooms it serves. The ventilation safety group or urgent delegated members review whether the pressure fault also affects adjoining spaces. The team does not assume that a portable filter would restore the required pressure relationship. It documents patient scheduling and staff communication without placing patient names in the plant log.

Investigation finds that recent work altered a door closer and left an opening in the room envelope. The ventilation contractor also finds a control setting that had drifted. Each issue is corrected under an agreed work and infection-control plan. The authorised person determines the necessary testing scope with the verifier and infection prevention lead. New measurements in the intended operating mode demonstrate that the accepted criteria are met. The system release and clinical reopening are signed off separately. The failure record links the original report, work evidence, new readings and decision times. This example is illustrative. Real pressure, airflow and room suitability limits are application-specific and must come from the relevant technical design or accepted baseline.

An older system with missing design records

An older specialised ventilation system fails annual verification, but its original commissioning report cannot be found. The team must not declare it compliant simply because it ran for many years, nor impose a new-build specification without assessing how Part A and Part B apply. The provider assembles the system log, previous test results, equipment information, present clinical use and room condition. The authorised person and ventilation safety group establish an appropriate performance baseline for the existing system, drawing on Part B’s approach to installations with missing design information. They record both the evidence and any uncertainty.

Until the failure is resolved, the critical-system return-to-service instruction still applies. A room may need to remain unavailable while the technical and clinical risks are assessed. The group considers whether a repair can restore suitable performance, whether refurbishment and full validation are needed, or whether the current clinical use is no longer supportable by the plant. Capital constraints do not change what a failed result means. They affect the continuity and replacement plan that managers must make visible. The final record distinguishes historical uncertainty from the new verified state, stating what standard the system has now met, which activities that supports and what further work remains.

Questions teams should answer before closing the event

Has the actual critical ventilation system been identified, along with every room it serves? Is the failed report explicit about the standard, measurements and reason for failure? Was the duty manager informed immediately, and were copies sent to the user department head, nominated infection prevention person and authorised ventilation person? Are affected clinical activities restricted in a way staff can see? Has a competent person explained the cause and whether the correction changes the required validation scope?

Has the system met its applicable acceptance criteria under the intended operating conditions? Has the technical return-to-service decision been recorded? Has the user department separately accepted the room for its intended activity? Are residual restrictions and future monitoring assigned to an owner? If any answer is unknown, keep the event open and escalate it through the provider’s ventilation governance. A due date being met or a contractor invoice being paid is not proof of safe return to use.

FAQs

Sources

• NHS England: HTM 03-01 specialised ventilation publication
• NHS England: HTM 03-01 Part B
• NHS England: HEPA air-cleaning devices bulletin
• CQC: Regulation 15 premises and equipment

Related: Complys for hospitals, permit to work software, and more compliance guides.