The first hours after a device-related incident decide what can be known later. A device that is reset, repaired, cleaned, or shipped away cannot tell its story twice.
This guide sets out the practical steps that keep the device, its data, and its records in a condition that an independent engineer can examine. It is written from the engineering perspective, for the people who must act first.
Who this guide is for
- Legal counsel who must preserve evidence and plan an examination.
- Risk managers who coordinate the response inside a facility.
- Clinical engineering teams who hold the equipment and its records.
This guide is general technical information. It is not legal advice and does not replace your facility's policies, your reporting obligations, or the advice of counsel.
01Why the first hours matter
A medical device keeps its evidence in fragile places. Settings live in memory. Event and alarm logs may hold a limited number of entries and overwrite the oldest first. Disposables and accessories leave the room with the waste. The device itself goes back into service, back to the manufacturer, or onto a repair bench.
None of this needs bad intent. It is the normal routine of a busy facility. But each normal step can remove information that later becomes the center of a dispute: what the device was set to do, what it actually did, and whether a part failed or was used outside its limits.
Three principles guide every step that follows.
Patient care comes first. Preservation starts only when the immediate situation is safe.
Preserve before you explain. Record what you see. Leave the explanation to the examination.
Document every transfer. Each time the device or its data changes hands, write down who, when, where, and why.
A clear record made early is often worth more than a detailed test made late. Tests can be repeated. The original condition of the device cannot.
A typical sequence. Times are indicative; the reporting deadline is set by regulation and starts when the facility becomes aware of the event. WD = work days.
02Six preservation steps
The six steps below follow the order in which the evidence is most at risk. Assign an owner to each step and record the date it was completed.
Secure the device
Identify and secure the device and everything used with it: accessories, disposables, tubing, cables, power supplies, and the packaging if it is still available. Record the model, serial number, lot number, software version, and the Unique Device Identifier (UDI) from the label.
Store the items in a locked area with a written log. Note the storage conditions. If the device was connected to a patient, record how it was disconnected and by whom.
Record its condition
Photograph the device before anyone touches it: the whole setup, each connection, the display, the settings, and any visible damage. Include a scale and the label in some photos. Do not change the settings to read them; photograph them as they are.
Interview the people who saw the event while their memory is fresh. Write down what they observed and when. Keep observations separate from explanations: "the alarm sounded" is an observation; "the sensor failed" is an explanation.
Preserve device data
Many devices store event logs, alarm histories, and therapy data. Some keep this data only while powered, and some overwrite the oldest entries. Before anyone powers the device down, plugs it in, resets it, or updates its software, have a qualified person assess how the data is kept.
When data is extracted, keep the original export files unchanged and work only on copies. Record the extraction method, the tool and version used, the device clock, its offset from local time, the time zone, and any change the extraction caused.
Request manufacturer data
The manufacturer may hold data that the facility does not: service records, remote-monitoring and cloud logs, complaint files, and its own analysis of returned units. Through the appropriate contact, ask in writing for this data to be preserved.
Ask three questions: what data exists, how long it is kept, and in what format it can be exported. Record the answers and the date of each request.
A manufacturer may ask for the device to be returned for its own analysis. Before anything is shipped, agree in writing who will examine it, how, and in whose presence. A returned device may be opened, repaired, or tested to destruction.
Gather related records
Secure the records that place the device in context: - maintenance, service, and preventive-maintenance records; - alarm histories and nurse-call or central-station logs; - relevant clinical records and the incident report; - the instructions for use and any service manual in use at the time; - prior complaints, work orders, and recalls for the same unit or model. Match every record to the correct device, by serial number, and to the correct time period.
Plan the examination
Agree on a written protocol before any repair, return, disposal, or destructive work. The protocol should state what will be documented, how data will be collected, which tests will be run, who will attend, and how results will be shared.
Some steps change the evidence but cannot be avoided, such as decontamination of a device exposed to body fluids. Record what was done, why, and its likely effect on the evidence.
03Reporting runs on its own clock
Preservation and regulatory reporting are separate duties. Both start at the same time, and neither should wait for the other.
Under FDA's Medical Device Reporting rules (21 CFR Part 803), a device user facility, such as a hospital, must report a death that a device may have caused or contributed to, both to FDA and to the manufacturer. It must report a serious injury to the manufacturer, or to FDA if the manufacturer is not known. These reports are due within ten work days after the facility becomes aware of the event. Facilities also submit an annual summary of their reports.
Manufacturers and importers have their own, separate reporting duties. Voluntary reports can also be made through FDA's MedWatch program.
Involve the facility's MDR reporting lead promptly, and keep the reporting file with the incident record.
04Common mistakes
Most lost evidence is lost by routine. These are the steps we see most often between the event and the first independent examination.
Resetting or updating the device
A reset, a battery change, or a software update can clear logs and settings.
Returning it to service
Another patient's use writes over the history of the event.
Discarding disposables
Circuits, sets, filters, and cassettes are often where the failure is.
Shipping it without a protocol
Once a unit is opened or repaired, its condition cannot be restored.
Photographing only the screen
Connections, accessories, and the surroundings are part of the evidence.
Mixing clocks and time zones
Device, network, and clinical clocks seldom agree. Record each offset.
Writing conclusions early
An incident report that names a cause before the examination can mislead everyone after it.
Each of these is avoidable only before it happens. The checklist at the end of this guide is the short form of this list, for the wall of the equipment room.
✓Preservation at a glance
- Device out of service and tagged
- Accessories, disposables, and packaging kept with it
- Model, serial, lot, software version, and UDI recorded
- Setup, display, settings, and damage photographed
- Witness observations written down with times
- Data retention assessed before any power change
- Original data exports kept; copies used for work
- Manufacturer asked in writing to preserve its data
- Maintenance, alarm, and clinical records secured
- Reporting lead informed; MDR assessment started
- Chain-of-custody log opened and kept current
- Examination protocol agreed before any change
§Sources and further reading
A–ZTerms used in this guide
- Chain of custody
- The written record of who held an item, when, and for what purpose, from the event to the examination. One line per transfer.
- Clinical engineering
- The hospital department that maintains, repairs, and manages medical equipment. Usually the first holder of a failed device.
- Data retention
- How long a device keeps its logs and trends before power loss or overwriting removes them. Differs by device and by setting.
- Exemplar
- A second device of the same model, version, and configuration, used for comparison and for tests too risky to run first on the evidence.
- MDR
- Medical device report under 21 CFR Part 803. Manufacturers report deaths, serious injuries, and reportable malfunctions to FDA; user facilities report deaths to FDA and the manufacturer, and serious injuries to the manufacturer.
- Preservation
- Keeping the device, its accessories, its data, and its surroundings in the state they were in at the event, until an agreed examination.
- Protocol
- A written, agreed sequence of examination steps, with the record each step produces and the points at which the parties pause and consent.
- UDI
- Unique device identifier: the code on the label that identifies the model and, where present, the lot, serial number, or expiration date of the unit.