Safety Norms: Transplant and Surgical Oncology

1Purpose, Scope, and Safety Principles

This document provides practical safety norms for teams involved in transplant and surgical oncology. Transplant surgery replaces a failing organ such as the liver, kidney, heart, lung, or pancreas. Surgical oncology removes cancers and may reconstruct tissue afterward. Many patients receive both surgery and immunosuppressive or anticancer therapy, so their risks overlap and must be managed together.

Scope covers operating theaters, organ procurement and transport, inpatient wards, intensive care units, clinics, pathology and tissue handling, and the information systems that connect them. It applies to surgeons, anesthesia staff, nurses, perfusionists, pharmacists, pathologists, transplant coordinators, and support staff. Local policy may add requirements but may not lower the mandatory norms below.

• Mandatory: No procedure, specimen collection, or drug administration proceeds without verified patient identity and documented consent.
• Mandatory: Every clinician works only within a defined scope of practice for the task at hand.
• Recommended: Treat any unexpected change in a patient, organ, or specimen as a safety signal requiring prompt escalation.
• Jurisdiction-dependent: Laws on organ donation, transplant allocation, and surgical consent differ and must be verified locally.

2Roles, Competence, and Accountability

Each program must name a responsible surgical lead, a transplant medical director, a nurse manager, a pharmacy lead, and a patient safety officer. Accountability is written into role descriptions and program governance documents rather than assumed. The named lead owns the risk register for the program and signs off changes to local procedures.

Competence is defined by credentialing and privileging for each procedure, device, and organ type. A trainee acts only under documented supervision, and the level of supervision required for each task is set by local policy. Staff who are not privileged for a task must not perform it, even under time pressure.

• Mandatory: Verify licensure, credentials, and privileges before assigning any procedure, device, or organ handling task.
• Mandatory: Staff must not perform organ retrieval, perfusion, or tumor resection steps outside their authorized scope.
• Mandatory: Any staff member who believes a colleague is working beyond competence must raise the concern with the shift lead at once.
• Recommended: Maintain a competency matrix that is reviewed at least annually by the program director.

3Course-Specific Hazards and Risk Assessment

Hazards in this field fall into clinical, biological, chemical, physical, and informational categories. Clinical hazards include graft failure, primary nonfunction, bleeding, anastomotic leak, and misidentification of an organ or tumor specimen. Immunosuppression increases the risk of serious and opportunistic infection, and donor-derived infection or malignancy is a recognized concern that requires donor screening review. Some anticancer agents and preservation solutions are hazardous to handle.

Risk should be rated by likelihood and severity using a local risk matrix. Each high-rated hazard needs a named control owner, a written control, and a review date set by the program. Risk ratings are a starting point; they must be updated after incidents, new devices, or changes in donor or patient mix.

• Organ allocation and donor-recipient mismatch: high; requires two independent checks recorded in the allocation record.
• Donor-derived disease transmission: high; donor screening results must be reviewed by a physician before implantation.
• Tumor specimen or organ mislabeling: high; two-identifier labeling at the bedside and in pathology.
• Cytotoxic drug exposure: moderate to high; handled only with approved containment and protective equipment.
• Surgical site infection and sepsis: high; assessed at defined intervals with escalation criteria written in the chart.
• Sharps and blood exposure: high; safety devices and immediate exposure reporting are mandatory.
• Prolonged cold ischemia time: high; organ transport timelines are tracked and reported to the surgical team.

4Consent, Identification, and Clinical Verification

Consent must be informed and specific to the procedure, organ, tissue, and any research or tissue banking use. It is documented before sedation or premedication. For deceased donation, consent or authorization follows the law of the jurisdiction and the donor's documented wishes, and the transplant coordinator confirms these before retrieval begins. Clinicians explain the risks of graft failure, rejection, lifelong immunosuppression, infection, and oncologic recurrence in plain language, and they arrange an interpreter when the patient needs one.

Verification is repeated at every handoff rather than relied on once. A time-out before incision confirms the patient, procedure, operative site, laterality, organ side, allergies, antibiotic timing, and availability of blood products. Recommended practice is to use a standardized handoff tool that records immunosuppression status, tumor stage, and anticoagulation.

• Mandatory: Two-identifier verification at every handoff for procedures, specimen collection, drug administration, and blood product issue.
• Mandatory: Mark the operative site and confirm laterality and organ side at the time-out before incision.
• Mandatory: Verbal changes to consent must be documented by the consenting clinician before the change is acted on.
• Mandatory: Any procedure outside the approved list or beyond a clinician's privileges requires escalation to the program lead.
• Recommended: Use a standardized handoff tool that includes immunosuppression status and allergies.

5Infection Prevention and Safe Operating Practices

Transplant recipients and patients receiving cancer therapy are vulnerable to infection. Hand hygiene, personal protective equipment, sterile technique, environmental cleaning, and surveillance are the core controls. These are applied according to local infection prevention policy and current guidance from recognized professional bodies. Guidance changes over time, so current versions must be verified with competent authorities or qualified professionals before use.

Safe operating practices include structured instrument and sponge counts, controlled organ storage and transport, cytotoxic drug handling, and sharps management. Each organ container is labeled, temperature logged, and tracked through a documented chain of custody. Transport routes, timing, and receiving teams are confirmed in advance. Where a control cannot be met, the responsible lead must document the deviation and decide whether the procedure can proceed.

• Mandatory: Perform hand hygiene before and after patient contact and after glove removal.
• Mandatory: Use aseptic technique for central lines, drains, and graft handling, and document any breach.
• Mandatory: Count instruments, sponges, and needles at defined points; no body cavity is closed with an unresolved count.
• Mandatory: Handle cytotoxic agents only with trained staff using approved gowns, gloves, and closed system transfer devices.
• Mandatory: Staff with symptoms of respiratory or gastrointestinal infection must follow local exclusion rules.
• Recommended: Screen visitors for symptoms of infection and apply local restriction rules on wards housing immunosuppressed patients.
• Recommended: Review surgical site infection rates and surveillance results at least quarterly.

6Equipment, Environment, Information, and Privacy Safeguards

Perfusion machines, organ preservation devices, electrosurgical units, anesthesia equipment, and imaging systems may be used only after pre-use checks, maintenance verification, and training on the specific model. Follow manufacturer instructions and local biomedical engineering procedures. If a device behaves unexpectedly, stop using it, label it out of service, and call the designated engineer. Do not attempt internal repairs or bypass alarms.

Information systems hold transplant waitlist status, donor data, genetic results, pathology reports, and sensitive diagnoses. Access is limited to people with a treatment or operational need, and access is audited. Share information only as law and local policy allow, and verify applicable privacy rules with the privacy officer. Do not photograph patients or specimens on personal devices, and do not discuss identifiable cases in public areas.

• Mandatory: Each user has a unique login; shared accounts are prohibited.
• Mandatory: Changes to allocation records and donor data are logged with the user identity and time.
• Mandatory: Eye protection and fluid-resistant gowns are worn during aerosol-generating procedures and organ handling.
• Mandatory: Equipment that has failed a pre-use check is removed from service until cleared by the engineer.
• Recommended: Send pathology and genetic results only through encrypted channels approved by the information security team.
• Recommended: Monitor theater air, storage refrigerator temperature, and transport container temperature with alarm response assigned to a named person.

7Incident Reporting, Emergency Response, and Escalation

Report incidents, near misses, and unexpected outcomes within the timeframe set by local policy, using the institutional safety reporting system. Reports should be factual and blame-free where the system allows, and they should not be altered after submission. Reportable events include wrong patient, wrong organ or specimen, graft loss, unplanned return to theater, transfusion error, unrecognized sepsis, and privacy breach.

Emergencies such as major hemorrhage, air embolism, anaphylaxis, organ ischemia, or cardiac arrest follow established resuscitation and crisis protocols, and the emergency response team is called without delay. This document does not replace those protocols or emergency services. Escalate immediately to the attending surgeon or transplant physician when a patient deteriorates, when an organ or specimen may be compromised, or when consent is in doubt.

• Mandatory: Stop the procedure and call for help when identity, consent, or organ condition cannot be confirmed.
• Mandatory: Notify the attending clinician within the time set by local policy for any serious event.
• Mandatory: Disclose adverse events to the patient and family according to local disclosure policy.
• Mandatory: Preserve evidence, including device settings and specimen labels, after a serious event.
• Recommended: Hold a structured debrief within a defined period after any serious event or near miss.

8Records, Training, Inspection, and Review

Records include consent forms, time-out logs, implant and organ logs, count sheets, temperature records, pathology chain-of-custody forms, and training files. Retention periods and format requirements are set by law, accreditation standards, and institutional policy in each jurisdiction and must be verified locally.

Training is role-specific and includes simulation for rare events such as organ mismatch, massive hemorrhage, and device failure. Competence is reassessed after an incident or a change in technique. Monitoring uses outcome data, audit results, and staff feedback. This norm set should be reviewed at least annually and after any serious event, with changes approved by the governance committee.

• Mandatory: Complete documented training before independent practice on any new procedure, device, or organ type.
• Recommended: Audit time-out and consent documentation at least quarterly.
• Recommended: Track graft survival, infection, and oncologic margin outcomes against local benchmarks with risk adjustment.
• Recommended: Share anonymized lessons learned with all teams involved in the pathway.

Implementation checklist

• Verify two identifiers before every procedure, specimen, drug, or blood product.
• Confirm documented, procedure-specific consent before sedation or incision.
• Check that each clinician holds an active privilege for the task being performed.
• Complete a time-out covering patient, site, laterality, organ, allergies, and antibiotic timing.
• Maintain hand hygiene, aseptic technique, and documented instrument and sponge counts.
• Label, log, and temperature-check every organ, tissue, and specimen with a documented chain of custody.
• Handle cytotoxic drugs only with approved containment and protective equipment.
• Limit record access to treatment need and report any privacy concern immediately.
• Report near misses within the local deadline and escalate deterioration to the attending clinician at once.
• Verify current laws, standards, and device instructions with qualified authorities and professionals.