Open disclosure Ireland: the 7-day HIQA reporting rule

Why open disclosure is no longer optional for Irish private consultants

On 26 September 2024, the statutory framework for open disclosure ireland changed from a voluntary ethical guideline into a strict legal mandate. The commencement of the Patient Safety (Notifiable Incidents and Open Disclosure) Act 2023 means that private consultants operating in Ireland must comply with rigid disclosure and reporting protocols when a defined patient safety incident occurs. Previously, open disclosure was guided primarily by professional ethics. Now, under Section 5(1) of the 2023 Act, a health services provider that is satisfied a notifiable incident has occurred must hold a formal disclosure meeting. Under Section 77(1) of the Act, failing to comply with this obligation without a reasonable excuse is a criminal offence that carries a class A fine on summary conviction. This legal obligation is mirrored in professional regulation. The Medical Council’s Guide to Professional Conduct and Ethics (9th Edition, effective 1 January 2024) states in paragraph 4.2 that doctors must practise, promote and support a culture of open disclosure, and paragraph 4.3 explicitly requires compliance with the 2023 Act. For a private consultant running busy theatre lists across multiple sites—such as the Beacon, Mater Private, or Blackrock Clinic—ensuring your administrative processes meet these statutory standards is as critical as understanding how your clinic manages clinical data hosting and compliance under modern data regulations.

What counts as a notifiable incident under Schedule 1?

The Act does not require a formal statutory disclosure meeting for every minor surgical complication or expected side effect. Instead, the mandate is triggered strictly by "notifiable incidents" as defined in Schedule 1 of the Act or added by subsequent regulations. For private surgical specialists, such as urologists managing complex pelvic surgeries, prostatectomies, or stone procedures, the relevant incidents are primarily those involving unintended and unanticipated outcomes. The table below outlines the statutory distinctions under Schedule 1 of the 2023 Act:

Category of Incident	Statutory Examples (Schedule 1)	Administrative Action Required
Surgical & Procedural Errors	Surgery on the wrong patient or wrong site; wrong procedure performed; unintended retention of a foreign object.	Mandatory disclosure meeting + 7-day HIQA notification.
Elective Outcomes	Unintended and unanticipated death of an otherwise healthy patient undergoing elective surgery.	Mandatory disclosure meeting + 7-day HIQA notification.
System & Care Failures	ABO-incompatible blood transfusion; medication errors resulting in death; patient suicide while under care.	Mandatory disclosure meeting + 7-day HIQA notification.
Maternal & Neonatal	Maternal death; stillbirth or perinatal death; baby requiring (or considered for) therapeutic hypothermia.	Mandatory disclosure meeting + 7-day HIQA notification.

Under Section 3 of the Act, the definition of a "health services provider" includes private practitioners who provide services independently, as well as those operating under practising privileges granted by a private hospital. If you hold practising privileges at a private facility, both you as an individual open disclosure consultant and the hospital administration share a duty to ensure these incidents are identified and processed correctly.

How to conduct a compliant notifiable incident disclosure meeting

When a private consultant identifies that a notifiable incident has occurred, Section 5(1) requires that a formal notifiable incident disclosure meeting be held with the patient, a relevant person (such as a family member), or both. The administrative and communication steps for this meeting must follow a precise sequence: 1. Do Not Wait for Complete Information: Under Section 5(2), the meeting must be held even if not all long-term consequences have developed, and even if full information regarding the root cause of the incident is not yet available. 2. Deliver the Essential Disclosures: The clinician must provide a clear, factual account of the incident, the consequences known at the time of the meeting, and the steps being taken to manage those consequences. 3. Provide the Apology: A sincere apology should be offered during the meeting. The Act explicitly protects this expression of regret (see below). 4. Document and Verify: A written record of the meeting, including the date, the names of those present, the information disclosed, and any apology offered, must be prepared. This record must be shared with the patient and filed securely in the patient's chart. In a busy private practice, documenting these highly sensitive sessions accurately is vital. To maintain administrative accuracy, consultants often dictate their post-meeting summaries immediately. Ensuring these records are handled securely is essential; practices must adhere to strict guidelines on protecting patient records under Paragraph 25.4 of the Medical Council Guide to prevent unauthorized access or data loss.

Reporting to HIQA: the strict seven-day NIMS deadline

Holding the disclosure meeting with the patient is only the first part of your statutory duty. The second part is formal regulatory notification. The Health Information and Quality Authority (HIQA) mandates that when a notifiable incident occurs, the health services provider must notify HIQA as soon as possible, and strictly within seven days of the incident being identified. This reporting is completed electronically through the State Claims Agency’s National Incident Management System (NIMS). This reporting requirement applies equally to public and private health services providers, including standalone private clinics, day-case units, and consultant rooms. When aligning with the open disclosure ireland framework, private clinics must establish clear internal protocols so that the seven-day reporting window is never missed due to administrative delays, annual leave, or communication gaps between the consultant's rooms and the hospital’s risk management department.

Does an apology affect your clinical indemnity insurance?

One of the most common anxieties for any open disclosure consultant is whether delivering a formal apology to a patient will invalidate their clinical indemnity cover or be treated as a legal admission of negligence. The Patient Safety Act 2023 directly addresses and resolves this concern. Under Section 10 of the Act, any information provided, and any apology made, during a formal notifiable incident disclosure meeting: * Does not invalidate or affect any clinical indemnity insurance cover. * Does not constitute an express or implied admission of fault, liability, or negligence. * Is not admissible as evidence of fault or liability in any subsequent civil or administrative proceedings.

"Open disclosure of notifiable incident: information and apology not to invalidate insurance; constitute admission of liability or fault; or not to be admissible in proceedings" — Section 10, Patient Safety Act 2023

This statutory protection is designed to remove the legal friction that historically prevented open communication. It allows consultants to speak honestly with patients immediately after an adverse event, ensuring that clinical empathy and statutory compliance can coexist without compromising the clinician’s legal defence in the rare event of litigation.

Practical steps to align your private clinic with the 2023 Act

To ensure your private rooms are fully aligned with the requirements of the 2023 Act, you should implement a structured administrative workflow today. Relying on ad-hoc arrangements when an incident occurs increases the risk of missing the strict seven-day HIQA reporting window. Use this implementation checklist to review your practice's readiness: * [ ] Establish a Practice Protocol: Define who in your rooms is responsible for flagging a potential Schedule 1 incident (e.g., a retained object or an unexpected post-operative transfer) to you immediately. * [ ] Map the Reporting Channels: If you operate under practising privileges, clarify the exact workflow with each hospital's risk management team. Determine who will submit the NIMS notification to HIQA within the seven-day limit—your rooms or the hospital administration. * [ ] Secure Your Dictation and Record-Keeping: Ensure that your post-incident notes, patient consent forms, and disclosure records are compiled securely. Clinicians must maintain absolute confidentiality, ensuring that any external transcription or record-keeping tools align with the Medical Council's instructions on protecting patient information from improper access. * [ ] Staff Training: Ensure your medical secretary and clinic staff understand that while standard administrative tasks can be automated or delegated, statutory disclosures and notifications require direct clinician control and review. Modern clinical software can support these administrative workflows. For example, the clinical system Brigid allows consultants to dictate highly sensitive post-consultation and post-disclosure notes directly into the patient record. This ensures that the exact wording of disclosures and apologies is captured immediately for clinical review, editing, and signing, providing an immutable, secure record of statutory compliance.

Ask Brigid is onboarding a small number of founding consultant practices. Request early access and we will reply with current availability and the next step.