What if a dental washer-disinfector fails a check?

Stop the cleaning route before the next load

The washer-disinfector completes a cycle, but the operator finds a failed process indicator or visible debris on instruments. The steriliser is working, and a clinician needs the instruments for the next patient. The immediate question is whether the instruments were adequately cleaned before sterilisation. Passing a later steriliser cycle cannot erase an uncertain cleaning stage. Hold the suspect load, stop using the washer-disinfector pending assessment and identify the last point at which its performance was reliably known.

NHS England HTM 01-05 describes automated cleaning as a preferred method because it can provide controlled, reproducible cleaning. It says the machine carries out cleaning and disinfection stages and that instruments must be inspected after cleaning before sterilisation. The same guidance emphasises manufacturer instructions for operation, water quality and detergents. CQC's equipment validation guidance expects decontamination equipment to be tested, maintained and serviced in accordance with manufacturer recommendations. A failed check is therefore a reason to ask what part of the process failed and which instruments may be affected.

This page owns the day-of-failure cleaning decision. The failed steriliser test draft starts at the later sterilisation stage. The dirty-to-clean crossing draft starts at a physical workflow breach. The repeated audit draft starts at recurring findings across audit cycles. A washer-disinfector problem may feed those reviews, but it needs a distinct immediate response because its load, test and technical causes differ.

Do not assume every instrument ever processed by the machine is unsafe, or that only the visible failed load matters. Establish a defensible time and load boundary. The more reliable the machine's records, routine checks and instrument trace, the narrower the decision may be. Where records are missing, record the uncertainty and seek competent clinical and technical advice.

Identify what actually failed

Capture the original alarm, printout, screen message, test result or observed soil before restarting the machine. Note the machine identity, cycle, date, time, operator and load contents. If the unit displays a fault code, preserve it. Do not clear the display, rerun the test and keep only the later pass. A second pass can help diagnose the fault, but it does not retrospectively validate the earlier load.

Different failures point to different questions. A visible-soil finding asks whether loading, detergent, spray, water supply or instrument design prevented cleaning. A temperature or time fault asks whether the disinfection stage met its validated process. A leak, blocked filter or dosing alarm may affect several stages. A missing daily check record may be an evidence failure or a missed control. The operator should not diagnose a technical fault beyond their training, but should provide the service engineer and decontamination lead with the exact observation.

HTM 01-05 section 3.17 warns that incorrect loading can make cleaning ineffective. It advises against overloading carriers or overlapping instruments and says hinged items should be opened and items requiring irrigation attached correctly. Section 3.18 calls for inspection of instruments after cleaning and before sterilisation. Those points make a visual check valuable, but a visibly clean exterior does not prove that an internal channel was treated as intended. Use the validated method for the actual instruments in the load.

Check whether the problem could be the test method. Was the correct indicator used? Was it placed and read under the local validated procedure? Was the operator trained? A test error is possible, but it must be established with evidence rather than assumed because the machine appears normal. If a repeat test is part of the manufacturer's procedure, document its result and the decision it supports. The practice should still consider the original affected load separately.

Keep the machine and load status unmistakable

Mark the washer-disinfector out of service or otherwise prevent unintended use while its status is reviewed. Tell clinical and decontamination staff what has been held. Segregate the failed load from clean stock and from items awaiting normal processing. A handwritten note on the machine may help, but it should be paired with a named owner and a controlled status record. If staff change shifts, the hold must survive the handover.

Do not move suspect instruments straight into sterilisation to meet demand. Cleaning removes contamination that sterilisation alone is not designed to remove from an inadequately prepared instrument. If the load was already sterilised and stored before the failure was recognised, identify it and seek competent advice on reprocessing and any patient trace. A sealed pack is not a substitute for confidence in the earlier cleaning stage.

Trace loads from the last reliable point

Find the last satisfactory routine check, maintenance or validation record relevant to the failure. Identify cycles since that point, the instrument sets in each load, subsequent sterilisation batches and any patient use. A fault that appears suddenly during one cycle may justify a narrow trace; a recurring detergent problem or missing checks may require a broader one. The machine record, cycle printouts, instrument labels and staff notes all matter. Do not select the narrowest period simply because it is easier to manage.

Look for evidence that the fault existed earlier. Were instruments coming out damp or visibly soiled? Did staff report unusual noise or poor spray? Were detergent containers empty sooner or later than expected? Did the water supply or chemical product change? Was a recent service visit followed by new alarms? These clues help a competent person define the likely period and mechanism. Record observations separately from conclusions so that later technical findings can update the trace.

If the practice cannot link loads to individual instrument sets, state the limitation. The clinical lead and decontamination specialist should decide whether any instruments need reprocessing or whether patient assessment is required. A universal recall rule is not justified from the word “failure” alone. Risk depends on what failed, whether instruments were used, the type of instrument and the quality of the trace. Preserve the reasoning and professional advice.

Work with staff in the surgery as well as the decontamination room. Instruments may have moved to multiple rooms or been mixed with spare stock. Ask which sets are still in cupboards, which are in current use and which were sent to an external service. If another provider processed or received instruments, coordinate the trace with them. A clear handover prevents a held set being used because its local label was not updated.

Decide how care continues without this machine

The practice may have a second validated washer-disinfector, enough sterile stock for a short period or a safe alternative cleaning method under HTM 01-05 and local policy. Do not invent a manual cleaning method on the day of failure. HTM 01-05 contains requirements for manual cleaning where used, including a written protocol. Staff need training, suitable facilities, instruments compatible with the method and a subsequent validated reprocessing route. The clinical lead should decide whether the planned treatment can continue with verified instruments.

Check demand honestly. How many sets are needed for the remaining appointments? Can work be shifted to another room or provider? Are any instruments single-use or unavailable under the alternative process? A contingency plan that says “use manual cleaning” may be ineffective if staff have never been assessed on it or the correct sink and equipment are not available. In that situation, reduce or rearrange treatment rather than quietly substitute an unvalidated process.

If a second machine is used, make sure it is suitable for the instruments and does not become overloaded. One failed machine can create a new risk in the alternative machine if staff try to push all loads through it too quickly. Follow loading instructions and inspect cleaned instruments. Record where each held set went and what processing it received. Avoid mixing reprocessed failed-load items with routine loads before status is clear.

Communicate the service impact to reception and clinicians. They need to know which instruments and treatments are available, not the machine's entire technical history. A patient whose appointment must change should receive an accurate explanation through the practice's normal communication route. Do not claim that all care is safe while instrument supply is uncertain. Equally, do not imply patient exposure where the review has not established it.

Escalate possible patient use separately

If affected instruments may have been used, involve the clinical lead, IPC lead and appropriate specialist adviser promptly. Determine which patients, treatments and instrument types are relevant. Preserve the original device records and any clinical notes. Decisions about patient communication, testing, follow-up or external reporting are case specific. The practice should document who made them and on what basis. This page cannot turn a failed test result into an automatic patient recall or CQC notification instruction.

Staff may need reassurance and clear instructions while the trace is underway. Tell them not to alter or complete records retrospectively to make the incident look tidy. Accurate uncertainty is safer than a falsely complete log. A later technical report may narrow or widen the affected period; the clinical assessment should be updated when new evidence arrives.

Investigate the technical and human causes

Ask a competent service provider to assess the machine under manufacturer instructions. Provide the original fault evidence, load information, detergent details and recent maintenance history. The cause might be a blocked spray arm, incorrect loading, water-quality change, dosing problem, failed component or wrong chemical. A machine may have more than one issue. Do not treat a cleared alarm as evidence that the underlying process is restored.

HTM 01-05 section 3.15 says operational aspects of washer-disinfector use, including water quality and recommended detergents, should follow manufacturer instructions. Section 3.16 says staff should be trained in correct operation, daily tests and housekeeping, with training records maintained. A technical repair may be necessary, but so may a change in loading, chemical purchasing or shift handover. The investigation should test both equipment performance and the way it is used.

Review instrument compatibility. An item with a lumen or joint may need a specific connection or position. If the load was too dense, the machine can appear to complete a cycle while spray cannot reach all surfaces. If the practice recently added new instruments, check their instructions for cleaning and whether the machine and carrier are suitable. Do not assume a process validated for one instrument set covers every new device.

Check the environment and supply. Was there a water interruption, pressure change or treatment alteration? Were detergent and rinse-aid containers connected correctly? Was the machine serviced or moved? Are filters and strainers maintained? The service provider should test the actual failure mode. A generic annual service certificate does not answer why this check failed today. Keep their findings and the actions performed with the incident record.

Verify the return to service

After repair or corrective action, agree which tests and checks are needed before use. CQC's mythbuster 12 says equipment should be validated, tested, maintained and serviced under manufacturer recommendations, with validation at installation and annually thereafter. A repair affecting process performance may require additional verification under the manufacturer or technical adviser's plan. Do not claim that one successful empty cycle is always enough.

The release evidence should identify the machine, fault, cause, work completed, tests run, results, any remaining restriction and the competent person who reviewed them. Recheck the normal loading and inspection process with staff. If the failure arose from loading, observe a representative load. If it arose from detergent dosing, verify the dosing system under the correct procedure. If the cause remains uncertain, seek further advice and keep the machine out of service. Pressure from the appointment list is not a technical release criterion.

Separate the machine release from held-load decisions. Repairing the washer-disinfector does not automatically validate instruments processed before the fault was found. Those instruments may still need reprocessing or clinical review. Conversely, a held load may be safely reprocessed through an alternative validated route while the machine remains under repair. Track the two statuses independently so staff do not assume that “equipment back in use” means “all instruments released.”

Once operating again, monitor the next period of routine checks and instrument inspection. Ask whether the original symptom recurs. Update the preventive maintenance, loading guide or stock control if the cause requires it. If previous audits had identified the same weakness, link this incident to the recurring audit owner and verify the corrective action at a later point. A service visit closes the technical repair, not necessarily the management learning.

Three failure patterns and their boundaries

Failed cleaning indicator with no visible soil. Preserve the indicator and machine record. Hold the load, check whether the test was carried out correctly and seek technical advice. A visually clean exterior cannot by itself override a valid failed process check, particularly for difficult-to-clean instruments. Trace other relevant loads if the mechanism may have existed earlier.

Visible debris after a completed cycle. Hold the load and inspect whether the instrument was loaded correctly, its hinge opened or irrigation connected. Check spray, filters, detergent and instrument compatibility with the service provider. If the failure appears specific to one item, do not assume the entire machine is faulty, but do not release the rest of the load without an evidence-based review. Record what was inspected and why the boundary was chosen.

Missing daily check records. Do not complete them from memory after the event. Find device data and contemporaneous evidence, speak to operators and decide whether the control was performed or its record failed. If confidence cannot be established, seek a competent decision about the affected period and loads. Fix the ownership and handover of the check, not only the location of the form.

These scenarios are not separate pages. They share the same core task: protect instruments, establish the last reliable point, restore the cleaning process and document a defensible release.

A decision checklist for the practice manager

• Is the washer-disinfector identified and prevented from further use pending assessment?
• Is the original failed result or observation preserved?
• Are suspect instruments separated from verified stock?
• Has the team identified the last reliable point and traced relevant loads?
• Has the clinical lead assessed any possible patient use with specialist advice?
• Is an alternative processing route validated, staffed and compatible with the instruments?
• Has a competent person examined the technical and operational cause?
• Are repair and verification tests linked to the actual failure mode?
• Are equipment release and held-load release recorded as separate decisions?
• Has the practice checked whether the problem recurs in normal work?

If any safety-critical answer is unknown, keep the relevant machine or instruments on hold and obtain competent advice. A later successful steriliser cycle does not establish that the cleaning stage was satisfactory.

What Complys may support, subject to product review

The live Complys dental page describes compliance evidence, tasks and oversight. A reviewed workflow might track the equipment hold, engineer visit, affected-load decision and return-to-service evidence. Public copy does not verify device data capture, instrument-level traceability, automatic test interpretation or clinical release. The product team must check those claims before any page uses them.

Complys should not be presented as the authority that validates a washer-disinfector or decides patient contact. The clinical, IPC and equipment professionals make those judgments using the machine and practice records. Keep patient-specific information in approved clinical systems and use only the minimum necessary reference in a general compliance action log.

Suggested CTA: Ask Complys to demonstrate current equipment task and evidence tracking for a dental practice. Let competent decontamination and clinical staff decide the processing and patient response.

Related tool opportunity: A machine-failure handover worksheet could record the original failed check, last good point, load trace, alternative processing, engineer action, verification and separate machine and instrument release. It needs technical and dental IPC review before release.