ISO 45001 by industry
ISO 45001 for healthcare: protecting the people who deliver care in hospitals, clinics and laboratories
Clause by clause: ISO 45001:2018 requirements: every clause explained →
What changes when the workplace is a hospital or clinic: why boards and groups adopt it, what belongs in a scope of clinical services and outsourced crews, where auditors look at patient handling, sharps, violence, fatigue and hazardous drugs, and how the system sits beside health regulation and patient-safety systems.
Key points
- ISO 45001 in a hospital or clinic protects the people who work there, from nurses and porters to agency staff and contracted cleaners; patient safety sits in other systems.
- The hazards that carry the weight are patient handling, sharps and biological exposure, violence from patients and visitors, shift fatigue, psychosocial strain and hazardous drugs.
- Outsourced housekeeping, security, catering, laundry and maintenance staff working in your wards are workers under your control and belong inside the scope.
- The auditor tours wards, theatres, laboratories and plant rooms while care is being delivered, so controls must be visible in the work, not only in policy.
Why hospitals, clinics and laboratories adopt ISO 45001
The push rarely comes from patients. It comes from boards and group owners that want one safety standard across a network of hospitals, clinics and diagnostic centres; from staff injury, absence and turnover figures that hurt rosters; and from management teams that already run ISO 9001 and want staff safety brought into the same discipline.
Clinical governance, infection prevention and hospital accreditation are built around the patient. ISO 45001 requires the same questions about the nurse lifting that patient and the security officer at the emergency entrance. For the general case, see Do you need ISO 45001? A decision guide for contractors, plants and boards.
Scope for a hospital or clinic network
A healthcare scope names each facility and describes its services in the regulator's terms: inpatient and outpatient care, emergency, surgery, imaging, clinical laboratory, pharmacy, rehabilitation. Support functions sit inside too: sterile services, estates and engineering, biomedical equipment, kitchens, laundry and waste handling.
Every person working under your control is a worker under the standard, whether employed, supplied by a nursing agency or engaged through a service contract. The commonest scope mistake is leaving out outsourced housekeeping, security and maintenance crews, who handle clinical waste and face aggressive visitors. Another is treating a hospital group as identical sites. Accreditation rules for OH&S audits say sampling is not appropriate where sites do not share the same activities, processes and OH&S risks, so a tertiary hospital, a day-surgery centre and a laboratory are planned separately. The general rules are in ISO 45001 scope: sites, workers, contractors and the mistakes that cost you.
Where the requirements bite in a healthcare setting
| Requirement area | What it means on the wards | Evidence the auditor samples |
|---|---|---|
| Hazard identification and risk assessment | Assessments per department and task: patient handling, sharps, body fluids, infectious disease, radiation in imaging, hazardous drugs, lone night work, violence | Department hazard registers, patient handling and hazardous drug assessments, violence risk assessments for emergency and mental health areas, reviews after incidents |
| Eliminating hazards and reducing risks | The hierarchy of controls applied to clinical work: hoists and slide sheets before lifting technique, safety-engineered sharps before gloves, closed systems and cabinets for hazardous drug preparation, design and staffing of high-risk entrances | Hoist inspection records, sharps container audits, hazardous drug exposure records, panic-alarm tests, PPE supply records |
| Consultation and participation of workers | A real channel for nurses, doctors, allied health staff and contracted crews to raise hazards and shape rosters, equipment and procedures | Safety committee minutes with clinical and support-staff members, ward hazard reports, fatigue and workload feedback with actions taken |
| Contractors, procurement and management of change | Controlling outsourced service providers and building contractors working in live clinical areas, and assessing new equipment, services or ward conversions before they open | Service provider inductions, permits for work in occupied areas, safer-device specifications, change assessments for new units |
| Emergency preparedness and incident investigation | Plans for needlestick and splash exposure, violent incidents, fire in areas with patients who cannot evacuate themselves, and investigations that change the work | Post-exposure procedure and follow-up records, violent incident reports, fire and evacuation drill reports by shift, root cause analyses and revised risk assessments |
Building the assessments themselves is covered in ISO 45001 hazard identification and risk assessment, and service provider control in ISO 45001 contractor management: prequalification to permits.
Health regulators, occupational safety law and other systems
Hospitals answer to the health regulator that licenses the facility, national occupational safety and health law and, where imaging runs, radiation protection licensing. Recorded in one legal register by facility and jurisdiction, with owners and a compliance evaluation, those duties stop living in separate files; see ISO 45001 legal register and evaluation of compliance. The certificate does not replace any licence or inspection.
Patient safety and quality of care belong to the quality system, for which see the ISO 9001 hub. Shift work, emotional demand and aggression make psychosocial risk heavier here than in most sectors, and ISO 45003 gives guidance on managing it within ISO 45001. Clinical waste, chemicals and energy use sit naturally in ISO 14001, and one integrated system serves all three; see ISO 45001 in an integrated management system with ISO 9001 and ISO 14001.
What a healthcare engagement looks like
Duration depends on the number of facilities and services, the range of clinical and support hazards, the state of existing assessments and incident reporting, the share of outsourced and agency staff, and how long it takes to produce drill, inspection and exposure records across every shift. Nursing and medical leadership, infection prevention, estates, pharmacy, human resources and service provider supervisors all take part. With Design™, Sterling guides your safety team to build and own the system; with Drive™, Sterling carries more of the documentation, ward inspections, internal audit and readiness work so clinical teams stay with patients.
How Sterling works with hospitals and clinics
A staff safety system that works on a night shift, not only in the policy manual.
Our expert and experienced consultants build the system around your patient handling, sharps, violence, hazardous drug and service provider controls, then test it with an internal audit across departments and shifts before the certification body arrives. Records live in Effivity, included with the engagement, at no additional cost. Sterling does not certify; an independent, accredited certification body audits and decides. We ensure successful certification for our clients.
Book a free discovery callISO 45001 for healthcare: questions hospitals ask
Do we need ISO 45001 if our hospital is already accredited?
Hospital accreditation and ISO 45001 answer different questions. Accreditation centres on patient care; ISO 45001 certifies the system protecting everyone who works in the facility, and the two can share evidence without replacing each other.
Are agency nurses and contracted cleaners covered by our ISO 45001 system?
Yes, where their work is under your control. The standard defines a worker by control of the work, not by employment contract, so their hazards, induction, competence and consultation fall inside your system.
How does ISO 45001 deal with violence against healthcare staff?
It treats violence as a hazard like any other. It is identified by department, assessed, and controlled through design, staffing, alarms, training and post-incident support, with incidents investigated to the cause; ISO 45003 adds guidance on the psychological side.
Will the ISO 45001 auditor enter clinical areas?
Yes. Accreditation rules for OH&S audits require the system to be evaluated during operational activities, including a tour of the workplaces, so the auditor visits wards, theatres and laboratories under your infection prevention rules.
ISO 45001 by industry
Every guide in the ISO 45001 series is written for one question and links back to the hub for the whole picture.
- ISO 45001 for construction and engineering
- ISO 45001 for facilities management and security services
- ISO 45001 gap analysis
- ISO 45001 hazard identification and risk assessment
- ISO 45001 for healthcare
- ISO 45001 implementation plan
- ISO 45001 certification in India
- ISO 45001 integrated management system
- ISO 45001 for logistics and warehousing
- ISO 45001 for manufacturing
- ISO 45001 for oil and gas and energy
- ISO 45001 for professional services and offices
Keep exploring
Explore more about ISO 45001
Watch a video on how to implement ISO 45001 here.
Watch a video on ISO 45001 requirements here.
ISO 45001 resources
Services for ISO 45001
Talk to a consultant
Plan an ISO 45001 system that protects every shift.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice