Safety Norms: Community and Public Health Practice

1Purpose, Scope, and Safety Principles

These norms apply to everyone who delivers or supports community and public health activities, including staff, contracted clinicians, peer workers, supervised students, and trained volunteers. Covered activities include community outreach, vaccination and screening clinics, home visits, school-based programs, sexual health and harm reduction services, contact tracing, and health promotion events. Work may occur in clinics, homes, shelters, schools, workplaces, mobile units, and open public spaces.

Four principles guide every norm. The safety of people served comes before speed or convenience. No one acts outside their authorized scope. Risks are controlled before work starts. Every concern is reported and escalated rather than handled quietly. Where this document says must, the control is mandatory for the program. Where it says should, the control is recommended and may be adapted only after documented review.

2Roles, Competence, and Accountability

The program lead owns the safety plan for each activity, approves the written risk assessment, and confirms that workers are trained and authorized before work begins. The clinical lead or designated supervisor decides questions of clinical scope, protocol deviation, and referral. Each worker follows procedures, stops work when a control is missing, and reports hazards and incidents. Students and volunteers work only under direct supervision and only on tasks named in a written assignment.

Competence is confirmed, not assumed. Before independent work, a person must hold any license, certification, or written delegation that local law or employer policy requires for the task, such as vaccine administration or point-of-care testing. Verify credentials directly with the issuing body. Training, competency, and supervision records must be current when the activity takes place.

• Must: verify credentials and written delegation for every clinical task before the first session.
• Must: name one site lead per activity who can pause or stop the activity at any time.
• Should: pair new staff with an experienced worker for the first several sessions.

3Course-Specific Hazards and Risk Assessment

Community and public health work combines clinical, environmental, social, and data hazards. Workers often operate without colleagues nearby, without fixed equipment, and without the controls found in a hospital. Before each activity, the site lead completes a written risk assessment that names each hazard, who could be harmed, existing controls, residual risk, and the action owner. Rate risk as low, medium, or high using the program's approved matrix, and review that matrix against applicable local standards.

Re-assess whenever the venue, population, weather, staffing, or service changes. A risk assessment written for a different event is invalid and must not be reused.

• Bloodborne and respiratory exposure from sharps, body fluids, and crowded indoor clinics. Risk: high.
• Aggression or threats during home visits, unstable outreach settings, or conflict at events. Risk: high.
• Clinical harm from screening outside scope, missed red flags, or delayed referral. Risk: high.
• Vehicle collision, slips, falls, heat or cold stress during field travel and outdoor events. Risk: medium to high.
• Cold chain failure, meaning temperature loss between vaccine storage and administration, producing ineffective or unsafe products. Risk: medium.
• Privacy breach from paper lists, shared devices, or conversations overheard in waiting areas. Risk: medium.
• Allergic reaction, fainting, or low blood sugar during screening events. Risk: medium.

4Preventive Controls and Safe Practice

Controls follow a hierarchy: remove the hazard, substitute a safer method, isolate people from the hazard, apply engineering and administrative controls, and use personal protective equipment last. For example, a ventilated room with separate check-in and waiting areas is a stronger control than relying on masks alone. Protocols must be evidence-based, drawn from current guidance issued by recognized public health authorities, and adopted locally through a documented approval process.

Scope of practice is itself a safety control. Workers must refer any presentation outside their training to a licensed clinician, including chest pain, new neurological signs, suspected abuse, suicidal statements, or a child with high fever and lethargy. Document the referral and the handoff.

• Must: use only approved written protocols for screening, immunization, and referral. Staff must not improvise clinical steps.
• Must: check eligibility and contraindications against the protocol before each intervention, and record the check.
• Must: confirm two identifiers before any vaccine, test, result, or referral is given or shared.
• Must: confirm vehicles, route, and communication plan before travel, and carry a charged phone and emergency contact list.
• Must: store vaccines within the manufacturer's labeled temperature range, and check cold chain logs at the start and end of each session. Verify storage limits against current labeling.
• Should: use a stop-work trigger list so any worker can pause for a red-flag symptom, unsafe scene, or missing supplies.
• Must: never leave an unlocked vehicle or bag containing controlled medications or client records unattended.

5Infection Prevention and Environmental Hygiene

Standard precautions apply to all people and all body fluids, meaning every person is treated as potentially infectious. Hand hygiene with soap and water or an alcohol-based hand rub is required before and after each client contact, after glove removal, and after touching shared surfaces. Gloves are single use and never replace hand hygiene. Respiratory and droplet precautions depend on the local infection control plan and current public health guidance, which must be verified for each setting.

Environmental hygiene follows a written cleaning plan. Ventilation, handwashing supplies, and cleaning products must be checked before a clinic opens. Workers with symptoms of a communicable illness must not provide direct client contact and should follow the employer's sick leave and return rules.

• Must: use a sharps container at the point of use. Never recap needles or pass sharps hand to hand.
• Must: dispose of waste under local regulated medical waste rules, verified with the local authority.
• Must: clean and disinfect shared equipment, such as blood pressure cuffs and glucose meters, between clients using an approved product and its labeled contact time.
• Should: set aside a separate space for clients with suspected infectious symptoms, with masks available.
• Must: keep a spill kit on site and train workers to use it.

6Consent, Privacy, and Information Security

Informed consent is required before screening, testing, vaccination, collection of data beyond routine intake, or sharing information with third parties, unless law permits otherwise. Consent must be voluntary, specific, and recorded. Minors, people with limited capacity, and people with limited language access need an approved method, such as a qualified interpreter or a verified guardian process. Consent rules vary by jurisdiction and must be confirmed locally.

Information security covers devices, paper, and conversations. Devices must be encrypted, locked, and managed through approved software. Shared login credentials are prohibited. Public networks must not be used for client records unless an approved secure connection is in place. Confirm obligations under applicable privacy and health information laws with the privacy officer.

• Must: explain purpose, benefits, risks, alternatives, and the right to decline in plain language, then record the outcome.
• Must: use approved consent forms and store signed copies separately from outreach lists.
• Must: collect only the data needed for the stated purpose.
• Must: never post client names, results, or photographs on social media or in informal group chats.
• Should: use unique codes instead of names on sign-in sheets and event rosters.
• Must: report lost devices, paper lists, or misdirected messages to the privacy officer immediately.

7Incidents, Emergencies, and Escalation

Report every incident, near miss, injury, exposure, complaint, and safeguarding concern as soon as it is safe to do so, and before the end of the shift at the latest. If anyone is in immediate danger, call local emergency services first. Workers must not place themselves at risk to rescue someone unless trained and authorized to do so.

Escalation runs from the on-site worker to the site lead, then to the program lead and the clinical director. Escalate when unsure. Using stop-work authority is never a failure. Serious events may require notice to regulators, insurers, or funders under contract terms, which the program lead must confirm.

• Must: follow the written emergency plan, including exits, assembly point, and first aid location.
• Must: report needle-stick or mucous membrane exposure immediately, then follow the post-exposure procedure set by occupational health, since timing may be critical.
• Must: escalate suspected abuse, neglect, or immediate self-harm risk to the designated clinician and to authorities as required by law.
• Must: report notifiable disease findings to the public health authority within the timeframe set by local rules.
• Should: hold a short debrief after serious events, focused on system causes rather than individual blame.

8Records, Training, Monitoring, and Review

Records are part of safety. Keep activity logs, risk assessments, consent records, cold chain logs, incident reports, training and competency records, and equipment inspection logs. Retention periods depend on local law and funding rules and must be confirmed with the records officer. Records must be accurate, timely, and free of unnecessary personal detail.

Training is required before first activity and refreshed under employer policy and role scope. Core modules include hand hygiene, sharps, emergency response, de-escalation, privacy, and each protocol used. Competency is observed and signed off, not self-reported. Monitor incident trends, consent and identification audits, cold chain logs, and client feedback. Review this document and local protocols on a schedule set by the program, and after any serious incident or change in guidance. Verify current standards and manufacturer instructions before relying on them, because they change.

Implementation checklist

• Confirm written approval, risk assessment, and a named site lead before the activity starts.
• Verify each worker's credentials and delegated tasks against the approved scope.
• Complete two-identifier checks before every vaccine, test, result, or referral.
• Perform hand hygiene before and after each client contact, and use sharps containers at point of use.
• Confirm informed consent is recorded on an approved form before any intervention.
• Check that cold chain logs are within labeled limits at the start and end of each session.
• Carry a charged phone, emergency contact list, and stop-work trigger list on every field visit.
• Store client information only in approved, encrypted systems, and never share it informally.
• Report every incident, near miss, and exposure immediately, and escalate whenever uncertain.
• Review logs, incidents, and protocols after each event, and update this plan accordingly.