What to do when a dental steriliser test fails

When a dental autoclave fails a test, treat it as a control point rather than a repair ticket. Stop releasing instruments from the suspect process, trace the affected loads, decide whether care can continue, assess any instruments already used and demonstrate a defensible return to service. This guide covers primary dental care in England, where services are regulated by CQC.

Treat the failed result as a control point

A failed daily automatic control test, an unexpected cycle printout, a failed steam-penetration check and a technician’s unsuccessful validation all require action. They do not all have the same cause or affected period. The first useful question is what the result means for instruments that could be in the clean store or already in a treatment room. A working display, warm chamber or completed cycle is not evidence that a failed test can be ignored.

The NHS England Health Technical Memorandum 01-05 is the principal dental decontamination guidance. Its logbook examples identify daily and weekly test results, cycle measurements, faults and certification that equipment is fit for use. CQC’s validation guidance for dental practices links maintenance, servicing, testing and records to safe care and equipment duties. A failed result is therefore a clinical workflow event as well as an engineering job. NHS England: HTM 01-05 decontamination in primary care dental practices; CQC: dental mythbuster 12, validation of decontamination equipment.

Stop releasing instruments from the suspect process while the designated dental lead and competent technical person determine the scope. Mark the steriliser out of use in a way that the next shift will see. Prevent another person from resetting a fault and treating the next successful cycle as proof that everything processed earlier is safe. Where there is an alternative validated steriliser, confirm that its capacity, instrument compatibility, cycle type and own checks support the planned workload before diverting instruments to it. Do not assume that a different machine or longer cycle compensates for a failed process.

Identify the test, machine and time window

Start with an exact record: site, steriliser asset identifier, chamber or model, test type, cycle number, time, operator, result, displayed parameters and any error code. Keep the original printout or electronic record. Identify whether the failure arose during a daily check before clinical processing, a weekly check, a routine load, an annual validation visit, a repair, or a staff observation that the instrument pack was wet or damaged. The source of the finding changes which loads may need to be held.

Check the manufacturer’s instructions and the practice’s validated process. CQC says decontamination equipment should be validated, tested, maintained and serviced as recommended by the manufacturer. Where instructions are absent, HTM 01-05 gives relevant periodic tests and schedules. Avoid copying a generic online timetable into a machine record without checking the equipment and cycle type. A vacuum steriliser’s steam-penetration question is not interchangeable with a non-vacuum machine’s control test. A test can also be performed incorrectly, so keep the failed result visible while a competent person investigates rather than deleting it after a repeat.

Reconstruct the last verified satisfactory state. Find the most recent successful relevant test and review intervening cycle records, alarms, maintenance, water quality concerns, loading practice, packaging and staff reports. A single failed test today does not prove that every earlier instrument was unsafe. Equally, an annual service certificate from months ago does not prove yesterday’s loads were effective. The dental lead, decontamination adviser and engineer should decide a defensible affected window using the evidence available. If records are incomplete, state the uncertainty and use a cautious boundary.

Create a simple timeline with three columns: what happened, what evidence exists, and what remains uncertain. For example, Monday morning’s daily check passed, twenty-three cycles ran over two days with complete printouts, Wednesday’s steam-penetration test failed, and three packs from Tuesday have already been used. The assessment should ask whether the failed test could indicate a problem that developed before Wednesday and whether the routine cycle parameters show a warning. Do not equate a full printout with proof of sterility. It is evidence for a qualified assessment.

Quarantine stock before tracing patients

Identify instruments awaiting use that might have passed through the affected steriliser. Separate them physically from released stock. Label the container and tell clinicians, nurses, reception and any out-of-hours team what is restricted. The label should give the asset, affected period, owner and next decision. A note in an incident system alone cannot stop someone using a pack already laid out for a morning procedure.

Check the whole path from decontamination room to surgery. A tray may have been packed, stored, transferred to another room or sent to a satellite site. If there are several sterilisers, distinguish packs by machine and cycle. If packs cannot be linked to a cycle, the uncertainty should widen the stock review. Avoid silently changing the status of older packs based only on their expiry or wrapper appearance. Packaging integrity matters, but it does not resolve whether the cycle was effective.

Hold suspect stock until the competent clinical and decontamination team decide whether it can be reprocessed or must be discarded. Reprocessing itself requires a suitable validated route, correct cleaning before sterilisation, instrument compatibility and traceability of the new cycle. Do not treat running the same suspect packs through a machine once more as an automatic fix. A damaged, wet or otherwise compromised instrument may require a separate decision. Check manufacturer instructions for specialist devices, including hollow instruments and those with complex cleaning requirements.

The immediate stock count should record the pack or tray identity, instrument type, last known location, steriliser and cycle if available, who placed it on hold, and final disposition. Keep this operational record proportionate. It should be detailed enough to account for stock without putting patient clinical details into an equipment inventory. Patient linkage belongs in the controlled clinical record and incident investigation.

Decide whether scheduled care can continue

The failure may remove the practice’s only reliable reprocessing route. The responsible clinician and practice manager should review the next appointments against available sterile stock and any validated alternative. A same-day filling may need a different instrument set; a surgical procedure may require postponement. The decision depends on the clinical treatment, patient urgency and safe equipment available. Complys does not make that decision.

Do not move suspect instruments into service to avoid a cancelled list. Do not assume that a neighbouring practice can simply sterilise them. Any external reprocessing arrangement needs an agreed transfer method, contamination handling, instrument compatibility, service assurance, traceability and return logistics. A supplier of pre-sterilised single-use instruments may be an option for some treatments, subject to the clinician’s assessment and stock controls. If treatment is delayed, patients need a clear and appropriate communication plan, especially where postponement creates a clinical risk.

If a validated second steriliser is available, check its current status and capacity. Confirm it is suitable for the instrument types and packaging in use. Assign responsibility for scheduling loads, separating clean and dirty flows, and retaining cycle records. Increased throughput can create loading errors or rushed cleaning. Staff should know where instruments will be released from and whether the change affects handover between shifts. A contingency plan is useful only if it works for the actual list of patients and instruments today.

Use the dental infection prevention and control code examples as a framework for the wider environment and the practice’s arrangements. That code says dental services should have effective decontamination arrangements and recognise HTM 01-05. Its examples are guidance for applying the code, not a replacement for the actual machine instructions or a clinical exposure decision. GOV.UK: Health and Social Care Act 2008 code of practice on infection prevention and control.

Assess instruments already used

If an instrument from the potentially affected period reached a patient, escalate promptly to the practice’s clinical lead and infection prevention adviser. The assessment needs to know which instruments, patients, procedures, dates and cycle records are involved, what the failed test indicates, and whether there were other barriers such as prior cleaning and packaging. An engineering fault description alone cannot establish the patient risk. A clinician also cannot establish machine performance without technical evidence.

Preserve the patient linkage securely. Dental notes, instrument tracking systems and appointment logs may each supply a different part of the picture. Check for false matches caused by shared tray labels or missing cycle identifiers. Mark the confidence level of each link. Where traceability is incomplete, record why the affected group is broader than the positively identified cycles. The team should avoid a blanket “all patients are fine” conclusion based on a later pass, and avoid telling every patient there was definite exposure when the evidence supports a narrower finding.

Decide who needs to be involved. Depending on the assessment, this may include a decontamination lead, microbiology or infection prevention specialist, clinical governance lead, provider management, insurer and relevant commissioner. They should determine whether patient review, advice, testing, notification or other action is needed. That is a clinical and regulatory decision based on the specific failure, not an automatic step for every failed daily test. Record the advice sought, person giving it, date, basis and agreed action.

Consider candour, incident reporting and CQC notification separately. A failed test is not automatically a notifiable safety incident. The legal duty of candour has its own threshold and the CQC notification rules depend on the event. The team should assess those rules against the actual harm and incident facts, with specialist advice where needed. Do not wait for the engineering repair to finish before preserving information needed for these assessments. CQC: dental mythbuster 11, statutory notifications to CQC.

Repair the cause and demonstrate performance

The competent engineer should investigate the failed test in the context of the machine and validated cycle. Possible causes include a component fault, door seal problem, loading issue, air removal fault, water or steam supply problem, sensor error or test-method error. These possibilities are prompts for investigation, not remote diagnoses. The engineer should say what was found, what was changed, which tests were run afterward and whether the repair affects validation status. A service invoice that says “autoclave repaired” leaves too many questions unanswered.

The practice needs a release decision that combines technical fitness with the clinical workflow. Confirm the required post-repair tests and any revalidation in accordance with manufacturer instructions and HTM 01-05. Check whether the written scheme of examination and pressure-system inspection record are current where applicable. CQC’s dental validation guidance says sterilisers are pressure vessels, a suitable written scheme is needed, and examination follows that scheme. The pressure safety record and the sterilisation performance record answer different questions. One cannot substitute for the other.

Before releasing the machine, review the correct cycle programme, test printouts or electronic results, user checks, installation or repair report, training needs and any change in process. If a part was replaced or software changed, ask whether the equipment has to be revalidated. Check the first production loads according to the agreed plan. Agree who can sign the technical handover and who in the practice authorises use. A green light on the display is only one item of evidence.

Update the physical out-of-use label only after the release decision. Tell the clinical team exactly when normal processing can resume, which stock remains quarantined and whether any extra monitoring is required. A return to service should not erase the patient-impact review. The latter may remain open after the machine has passed tests. Conversely, investigation of older loads should not prevent a competent team from using a separately validated alternative machine.

Build an audit trail that can explain the event later

Keep the failed test, raw cycle data, investigation timeline, affected-stock register, clinical review, engineering report, post-repair test results and release approval together through a controlled incident reference. CQC’s dental validation guidance says every sterilisation cycle should have a record showing validated parameters such as time, temperature and pressure using the machine’s indicated measurements, and that these records need to be kept for at least two years. A practice may have other record retention obligations for clinical information, so do not flatten all evidence into one two-year rule. CQC: dental mythbuster 12, validation of decontamination equipment.

Name a lead for each open action. One person handles engineering, another oversees instrument tracing and a clinical lead decides any patient pathway. Record completion evidence rather than changing an action to “done” when a supplier has merely been contacted. The practice should know whether the machine is out of use, whether instruments are on hold, whether patient review is pending and whether appointments have been changed. These statuses should be visible to authorised staff without exposing sensitive patient data to the wider facilities team.

Review why the failure was detected when it was. Were checks performed and recorded as scheduled? Did staff know how to respond to a failed result? Were there previous marginal results, repeat cycles or faults that did not reach the clinical lead? Was a substitute machine assumed available without checking capacity? Did instruments carry an adequate load or cycle link? CQC’s dental audit guidance expects audit evidence to include data, an action plan and subsequent action. A corrective action should change the weak part of the system and later be checked for effectiveness. CQC: dental mythbuster 17, audit and improvement in primary dental services.

Use a short debrief across clinical, nursing, decontamination, management and engineering roles. A fault may be technical, but the impact can grow because a result was not communicated or stock moved without status labels. The debrief should distinguish human error from a poor process design. If the machine has recurring failures, consider service reliability, replacement planning and contingency capacity rather than treating each isolated repair as an unrelated ticket.

A worked response for a Wednesday morning failure

At 8:10 a dental nurse records a failed steam-penetration result on the vacuum steriliser. The display also shows that routine cycles completed on Tuesday. The practice has one smaller validated alternative machine, but it cannot handle every instrument type in the day’s surgery list. The nurse leaves the original failed result in the log, stops using the machine, labels it, and calls the decontamination lead. The practice manager identifies packs processed by that unit since the last relevant satisfactory result. Some are in the store and two are in a surgery.

The surgery packs are removed before the first appointment. The team traces the remaining packs by load and location. The decontamination lead reviews machine instructions, previous test records and the cycle history with the engineer. The clinical lead checks whether any potentially affected instruments were used on Tuesday and decides what specialist advice is needed. The practice changes the day’s treatment list where the alternative machine and existing released stock cannot safely meet demand. Reception receives a communication script approved by the clinical lead. It does not speculate about infection or tell patients that every treatment is unaffected.

The engineer later finds a fault and completes repair and required testing. The decontamination lead checks the results and signs a technical handover. The clinical lead agrees normal processing can resume on Thursday, subject to a specified monitoring period. The quarantine remains in force for older suspect packs until reprocessing or disposal is recorded. A separate clinical review remains open for two patients whose instruments cannot yet be conclusively matched to a specific load. This is a workable separation of machine status, stock status and patient-review status.

The example does not set a universal number of cycles to trace or a universal patient-contact threshold. Those choices depend on the failed test, records, instrument pathway and competent advice. Its lesson is that one “autoclave fault” ticket is too blunt to manage three different decisions: can the machine run, can the stock be used, and is patient action needed?

FAQs

Sources

• NHS England: HTM 01-05 decontamination in primary care dental practices
• CQC: dental mythbuster 12, validation of decontamination equipment
• CQC: dental mythbuster 17, audit and improvement
• GOV.UK: Health and Social Care Act 2008 code of practice on infection prevention and control, dental examples
• CQC: dental mythbuster 11, statutory notifications to CQC

Related: dental compliance software, dental emergency kit check failure, and more compliance guides.