Safety Norms: Internal and Hospital Medicine

1Purpose, Scope, and Safety Principles

These norms aim to prevent avoidable harm to adults during diagnosis, treatment, and transitions of care. Internal medicine focuses on non-surgical diagnosis and management of conditions such as heart failure, pneumonia, diabetes, kidney injury, and sepsis. Hospital medicine applies that expertise to acute inpatient care, often delivered by teams that rotate across shifts and services. The norms are a starting point for locally approved procedures and must be adapted to the setting, patient population, and available resources.

Four principles guide every norm: put the patient first, prevent harm before it occurs, communicate openly with patients and families, and never act beyond documented competence. Mandatory items are rules the organization expects staff to follow without exception. Recommendations describe good practice that teams should adopt unless a documented clinical reason justifies another approach.

• Laws, licensing rules, accreditation standards, drug labeling, and privacy requirements vary by jurisdiction. Verify current versions with the licensing board, health authority, accreditation body, and privacy officer.

2Roles, Competence, and Accountability

Accountability is shared but never diffuse. The attending or supervising physician owns the overall diagnostic and treatment plan, supervises trainees, and ensures each task is performed by someone authorized to do it. Hospitalists and ward teams review every patient daily, including problem lists, pending results, and discharge readiness. Nurses, pharmacists, respiratory therapists, dietitians, case managers, and unlicensed assistants each work within the scope set by their license, certification, and employer.

Competence is verified, not assumed. Privileges are granted by the credentialing body after review of training and experience. Trainees operate under a supervision level defined by their program, and the team knows that level. Patients have the right to information, to decline care, and to name a surrogate decision maker when they lack capacity. Capacity assessment is a clinical task performed by a clinician who understands the decision at hand.

• Mandatory: practice only within privileges and supervision levels documented by the institution.
• Mandatory: only a licensed prescriber enters or changes medication orders. Verbal orders are limited to emergencies and require read-back and signature per local policy.
• Mandatory: the attending of record is named in the chart and reachable at all times.
• Mandatory: unlicensed staff do not interpret results, make diagnoses, or change treatment plans.

3Hazards and Risk Assessment

Typical activities include admission assessment, medication ordering and administration, intravenous access, central venous and urinary catheter management, transfusion, sedation for bedside procedures, oxygen and noninvasive ventilation support, laboratory and imaging orders, handoffs, and discharge. People exposed include patients with multiple comorbidities, older adults, patients with renal or hepatic impairment, staff, students, and visitors. Environments range from emergency department boarding areas and telemetry units to general wards and infusion clinics.

Principal hazards include medication errors with high-alert drugs such as anticoagulants, insulin, opioids, and concentrated potassium; missed deterioration; delayed recognition of sepsis or acute coronary syndrome; healthcare-associated infection; falls and pressure injury; transfusion reactions; contrast-associated kidney injury; diagnostic anchoring; handoff errors; sharps injuries; workplace violence; and privacy breaches. Rate each hazard for likelihood and severity using the local risk matrix, and apply the strongest controls to the highest-rated items.

• Mandatory: complete a documented risk assessment before any new high-risk procedure and when a patient's early warning score crosses the escalation threshold.
• Mandatory: review renally cleared drugs for dose adjustment before the first dose in any patient with reduced kidney function.
• Recommendation: reassess risk at each handoff and after new hypotension, reduced urine output, altered mental status, or bleeding.

4Preventive Controls and Safe Work Practice

Identity and medication safety form the foundation. Mandatory: confirm two identifiers, such as full name and medical record number, against the wristband and the record before every medication, specimen, blood product, or procedure. At admission, complete a best possible medication history and reconcile it against orders within the period set by policy. Repeat reconciliation at discharge and document each discrepancy and its resolution.

Evidence-based protocols reduce variation. Use approved order sets and pathways for sepsis, heart failure, pneumonia, venous thromboembolism prophylaxis, diabetes management, and electrolyte replacement. Mandatory: document the clinical reason whenever a patient is managed outside a protocol. Clinicians should verify guideline content and dosing against the institution's formulary and current drug labeling rather than relying on memory.

Informed consent is required before non-emergency procedures and treatments with significant risk. The clinician who will perform the intervention explains the diagnosis, proposed care, material risks, benefits, reasonable alternatives, and the option to decline. The patient has time to ask questions, and the discussion is documented. Emergency exceptions and surrogate consent follow local law, so confirm the rules with the risk manager.

Structured handoffs at shift change and transfers use a standard tool covering illness severity, patient summary, action list, contingency plans, and receiver read-back. Mandatory: every pending result has a named clinician responsible for follow-up. Procedures such as lumbar puncture, thoracentesis, paracentesis, and central line insertion are performed only by credentialed clinicians after a documented time-out, and sedation is monitored by staff trained for that level of sedation.

• Mandatory: act on early warning scores at the frequency set by the vital sign policy.
• Mandatory: use closed-loop communication for verbal orders and critical results.
• Recommendation: include teach-back during discharge education for medications, follow-up, and warning signs.
• Recommendation: review anticoagulant and insulin orders during each daily round.

5Infection Prevention and Hygiene

Healthcare-associated infection is among the most preventable harms on medical units. Mandatory: perform hand hygiene with alcohol-based rub or soap and water at the moments defined by the institution, including before patient contact, before aseptic tasks, after body fluid exposure, and after patient contact. Standard precautions apply to all patients. Transmission-based precautions, such as contact, droplet, or airborne isolation, apply when a suspected or confirmed pathogen requires them, and the reason appears on room signage and in the care plan.

Device-associated infection is prevented through daily discipline. Mandatory: insert central venous catheters using the institution's maximal sterile barrier bundle, document the indication, and review every central and urinary catheter daily, removing it as soon as it is no longer needed. Do not recap needles. Use safety-engineered devices and dispose of sharps in puncture-resistant containers before they are overfilled.

• Mandatory: document the indication and intended duration for every antibiotic order, and reassess when culture results return.
• Recommendation: apply enhanced cleaning for organisms such as Clostridioides difficile according to the environmental services protocol.
• Mandatory: report sharps injuries and exposures immediately for occupational health follow-up.

6Information, Privacy, and Security

Clinical information is protected health information in many jurisdictions and may be accessed only for direct care, approved education, or authorized administrative work. Mandatory: access the minimum necessary information, never look up records of colleagues, relatives, or public figures without a clinical reason, and lock workstations when leaving them. Confirm applicable privacy requirements with the privacy officer, since they vary by jurisdiction.

Verify the identity and authority of anyone requesting information before disclosure. Share detailed results with the patient or an authorized surrogate. Use only approved channels for messages and images. Personal messaging applications and personal email are not approved for patient information unless the institution has authorized them in writing. Report lost devices, suspected phishing, and unexpected system access to the information security team immediately.

• Mandatory: do not print patient lists or results in public areas or leave printouts at shared printers.
• Mandatory: do not override allergy or drug interaction alerts without a documented clinical reason.
• Recommendation: confirm the patient's preferred contact method at admission and record it in the chart.

7Incident Reporting, Emergency Response, and Escalation

Report every adverse event, near miss, and unsafe condition through the institution's reporting system once immediate patient needs are addressed. Mandatory: report within the period set by policy, describe facts without assigning blame, and state the patient's condition, what happened, and what was done. Protections for reporters depend on local law and policy, so confirm them with the patient safety office.

Escalation is mandatory when a patient meets rapid response or early warning criteria. Any staff member may call for help, and the responding team must attend. If the concern is not resolved, escalate through the chain of command to the attending or designated senior clinician. Staff start only the basic first aid and monitoring within their training, do not attempt procedures beyond their competence, and call emergency teams immediately. Advanced resuscitation is performed only by staff trained and current in the institution's program. When harm occurs, the attending informs the patient and family promptly and honestly and documents the conversation. Serious events trigger formal review and any external reporting required by law, which is jurisdiction-dependent.

• Mandatory: escalate immediately for new chest pain, respiratory distress, new hypotension, bleeding, or altered mental status.
• Mandatory: notify the attending for any unexpected death, transfer to intensive care, or serious adverse drug event.
• Recommendation: hold a short debrief after every rapid response or resuscitation.

8Records, Training, Inspection, and Review

Documentation must be timely, accurate, legible, and signed with the author's identity. Record assessments, decisions, consent discussions, medication changes, and family communications. Late entries are labeled as late and state when they were written. Records support continuity of care and serve as evidence of the reasoning behind decisions.

Training is required before independent practice and repeated at intervals set by policy. Core topics include medication safety, sepsis recognition, deterioration escalation, hand hygiene and isolation, central line care, transfusion, consent, privacy, and incident reporting. Competence is shown through observation, simulation, or supervised practice, and the results are retained. Regular audits cover hand hygiene, medication reconciliation, consent documentation, catheter days, pending result follow-up, and incident trends. Use a plan, do, check, act cycle so each finding leads to a documented change with an owner and a re-audit date.

• Mandatory: review these norms after any serious event and when guidelines or regulations change.
• Recommendation: include interprofessional simulation for deterioration and handoff.

Implementation checklist

• Confirm two identifiers before every medication, specimen, transfusion, or procedure.
• Complete medication reconciliation at admission and again at discharge.
• Document informed consent for non-emergency procedures and significant-risk treatments.
• Practice only within credentialed privileges and documented supervision levels.
• Perform hand hygiene and follow isolation signage for every patient contact.
• Review every central and urinary catheter daily and remove it when no longer needed.
• Assign a named owner for every pending result before handoff or discharge.
• Access records only for direct care and lock screens when leaving a workstation.
• Escalate deterioration immediately using rapid response criteria without waiting for confirmation.
• Report incidents and near misses through the institutional system and verify local protections.