Human Error in Medical Device Production – Who Is Liable?

Introduction

Human error is one of the most common causes of quality issues in medical device production. A missed step on a line clearance, a misread work instruction, a calibration check that never happened, or a label applied to the wrong batch can all turn into a defective device in the market.

When that happens, the big question is simple: who is liable? In the UK, liability rarely sits with just one person. It can fall on the manufacturer, the legal manufacturer named on the label, the employer, senior management, suppliers, and in some cases individuals.

This guide explains how liability works when human error contributes to a medical device incident, what regulators and courts look for, and what practical steps reduce exposure.

What counts as “human error” in medical device production?

Human error isn’t just “someone made a mistake”. In device manufacturing it can include:

• Incorrect assembly, torque, or component fit
• Wrong material or component picked (mix-ups, kitting errors)
• Incomplete cleaning, sterilisation, or environmental controls
• Incorrect software/firmware loaded, or wrong configuration applied
• Failure to follow in-process checks or final inspection steps
• Documentation errors (Device History Record gaps, missing signatures)
• Labelling and IFU errors (wrong language, wrong UDI, wrong expiry)
• Poor handovers between shifts or teams

Importantly, investigators often treat “human error” as a symptom of a wider system issue: unclear procedures, weak training, unrealistic targets, poor supervision, or inadequate process design.

The UK legal and regulatory framework (high level)

Liability after an incident usually involves a mix of:

• Civil liability (claims for injury, loss, recall costs, business interruption)
• Regulatory action (MHRA investigations, enforcement, corrective actions)
• Criminal liability (in serious cases, offences under product safety and health & safety law)

Key areas that may come into play include:

• Product liability principles (including strict liability for defective products)
• Negligence (failure to take reasonable care)
• Contract law (supplier agreements, quality agreements, warranties)
• Health & safety law (for worker harm, unsafe systems of work)
• Medical device regulatory requirements (quality management, vigilance, post-market surveillance)

You don’t need to be a lawyer to understand the practical takeaway: if a defect reaches patients, regulators and claimants will look at the whole chain—design, validation, training, supervision, and controls.

Who can be liable when human error causes a defect?

1) The legal manufacturer (often the primary target)

In most cases, the organisation named as the manufacturer on the device labelling is the first place liability lands.

Why? Because the legal manufacturer is expected to:

• Design and maintain a safe product
• Operate an effective quality management system
• Validate and control production
• Ensure competent staff and adequate training
• Monitor performance post-market and act quickly when issues arise

Even if the immediate cause was an operator mistake, the manufacturer may still be liable if the system allowed that mistake to happen or go undetected.

2) The employer (vicarious liability)

If an employee makes an error “in the course of employment”, the employer can be responsible for the consequences. This is common in civil claims.

In practice, claimants often pursue the company rather than an individual, because:

• The company has deeper resources
• The company holds the policies and contracts
• The company controls the system of work

3) Senior management and directors (in certain circumstances)

Individuals can face personal exposure if there is evidence of:

• Consent, connivance, or neglect in relation to an offence
• Serious failures to manage safety-critical risks
• Ignoring known nonconformities or audit findings
• Pressuring teams to bypass controls

Most day-to-day mistakes do not end with individuals being sued personally, but leadership decisions can become central when there is a pattern of poor control.

4) Contract manufacturers and outsourced production partners

If you outsource production, the liability picture becomes shared.

• The legal manufacturer still carries primary responsibility for placing a compliant device on the market.
• The contract manufacturer may be liable under contract (and sometimes in negligence) if they failed to meet agreed specifications, training standards, or process controls.

This is where quality agreements matter. If responsibilities for training, line clearance, change control, and batch release are unclear, disputes are more likely.

5) Suppliers (components, sterilisation, packaging, software)

A “human error” event can be triggered by supplier issues:

• Mislabelled components
• Incorrect certificates or test results
• Poorly controlled sterilisation cycles
• Packaging mix-ups
• Software build errors

If a supplier’s failure contributed to a defect, the manufacturer may seek recovery through contractual indemnities or claims for breach.

6) Distributors and importers

Depending on the supply chain and what role each party played, other entities may be drawn in—especially if:

• They re-label or repackage
• They store product improperly
• They fail to pass on complaints or vigilance information

“Strict liability” vs negligence: why it matters

A key concept in product liability is that a claimant may not need to prove you were careless. They may only need to show:

• The product was defective (not as safe as people are generally entitled to expect)
• The defect caused damage

This matters because “human error” doesn’t automatically protect a manufacturer. If the device is defective and causes harm, the legal manufacturer can still face liability even if they had good intentions.

Negligence claims, on the other hand, focus on whether reasonable care was taken. That’s where evidence of training, supervision, validation, and CAPA becomes vital.

How regulators view human error

When MHRA or a notified body looks at an incident, they typically ask:

• Was the process validated and controlled?
• Were work instructions clear, current, and usable on the shop floor?
• Was training effective and documented?
• Were competence checks performed for critical tasks?
• Were there adequate in-process controls to detect errors?
• Was there a culture of reporting near misses and deviations?
• Did management review quality data and act on trends?

If the answer is “yes”, an isolated error may be treated as a deviation with corrective action.

If the answer is “no”, the incident can be seen as evidence of a systemic failure.

Common scenarios and where liability tends to land

Scenario A: Wrong component fitted due to picking error

If the bill of materials is correct but the wrong part was picked, investigators will look at:

• Kitting and segregation controls
• Barcode scanning or verification steps
• Similar-looking parts and human factors
• Line clearance and reconciliation

Liability often sits with the manufacturer unless robust controls were in place and bypassed.

Scenario B: Sterilisation load error or missed parameter

This can be high severity. Questions include:

• Was the cycle validated and locked down?
• Were alarms and interlocks effective?
• Were release checks independent?
• Was there adequate oversight of the sterilisation provider?

If outsourced, both parties may be involved, but the legal manufacturer is still expected to control the supplier.

Scenario C: Labelling mix-up (UDI/expiry/IFU)

Labelling errors can trigger recalls even without patient harm. Liability may involve:

• Packaging line controls
• Vision systems and verification
• Reconciliation of printed labels
• Change control for artwork

Because labelling is a regulated requirement, this often escalates quickly.

Scenario D: Documentation gaps (missing signatures, incomplete DHR)

A missing signature might not harm a patient directly, but it can:

• Undermine batch traceability
• Make defence harder in a claim
• Trigger regulatory findings

Courts and regulators often treat “if it isn’t documented, it didn’t happen” as a practical reality.

What evidence helps defend a “human error” claim?

If an incident becomes a claim or enforcement matter, the strongest defence is usually evidence that you ran a controlled system and acted responsibly.

Useful evidence includes:

• Training records, competence assessments, and refresher schedules
• Clear, version-controlled work instructions
• Process validation and revalidation records
• In-process inspection data and acceptance criteria
• Deviation reports, root cause analysis, and CAPA effectiveness checks
• Internal audit results and management review minutes
• Supplier qualification and monitoring records
• Complaint handling and vigilance documentation
• Recall decision-making records and communications

The goal is to show that the organisation took reasonable steps to prevent foreseeable errors and to detect issues before release.

Reducing liability: practical controls that work

Human error can’t be eliminated, but it can be designed out or caught early.

Build error-proofing into the process

• Use physical guides, fixtures, and poka-yoke features
• Reduce reliance on memory (checklists, prompts)
• Use scanning/verification for parts and labels
• Separate look-alike components and apply clear visual controls

Strengthen training and competence

• Train for critical tasks with observed sign-off
• Refresh training after changes, deviations, or time away
• Keep instructions short, visual, and shop-floor friendly

Improve supervision and independent checks

• Use second-person verification for high-risk steps
• Ensure batch release is independent and documented
• Monitor overtime, fatigue, and staffing levels

Tighten change control

Many “human errors” happen right after a change.

• Control document updates and ensure old versions are removed
• Validate changes where needed
• Communicate changes clearly across shifts and sites

Treat near misses as gold

Near misses are early warnings.

• Make reporting easy and non-punitive
• Trend deviations and complaints
• Act on patterns before they become incidents

Insurance: what policies may respond?

For medical device manufacturers and related businesses, insurance is often the difference between a painful event and an existential one.

Depending on the situation, relevant covers may include:

• Product Liability (injury or property damage caused by a defective product)
• Product Recall (costs to withdraw product, communications, logistics)
• Professional Indemnity (design advice, services, specification errors)
• Cyber (if software, data, or connected device issues are involved)
• Directors & Officers (D&O) (management decisions and governance risks)
• Employers’ Liability (if staff are harmed)

Coverage depends heavily on wording, exclusions, and how quickly incidents are notified. Early advice and prompt notification are usually critical.

Quick FAQ

Can an individual operator be personally liable?

It’s uncommon in civil claims, but not impossible. Most often, the employer/manufacturer is pursued. Personal exposure is more likely where there is gross misconduct or where law allows individual accountability.

If we outsourced manufacturing, are we still responsible?

If you are the legal manufacturer placing the device on the market, you usually retain primary responsibility. You can still pursue the contract manufacturer for breach of contract or negligence if they failed to meet agreed controls.

Does “we followed ISO 13485” protect us?

Good compliance helps, but it’s not a shield by itself. What matters is whether controls were effective in practice and whether the product was safe.

What if the device didn’t injure anyone, but we had to recall it?

You can still face contractual claims, regulatory action, and significant costs. Recall cover and strong quality documentation become very important.

Conclusion

When human error causes a medical device defect, liability in the UK is rarely a simple “blame the operator” story. The legal manufacturer is usually the focal point, because they control the system: training, validation, supervision, and the checks that should catch mistakes.

The best protection is a combination of strong quality controls and the right insurance programme—especially product liability and recall cover—backed by clear supplier contracts.

If you manufacture, assemble, label, sterilise, or distribute medical devices in the UK and want to sanity-check your risk and insurance position, we can help you review your exposures and make sure your cover matches how you actually operate.